Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
File:                     3B_QB9_6UI8wBj--TVOisuHoxN4.mft (raw, json)
Hash identifier:          Z+UTe1DbvBqRupGCalpRxtlno5zhqXAeC8d85g5fpLM=
Subject key identifier:   27:25:B7:9C:13:0F:2D:D9:73:BB:CA:81:5C:26:DC:DE:05:B9:49:A3
Authority key identifier: DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE
Certificate issuer:       /CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
Certificate serial:       01987DF7B5F587D0FD7C2B7E5BD467F8A235
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
Manifest number:          161E
Signing time:             Wed 06 Aug 2025 06:00:42 +0000
Manifest this update:     Wed 06 Aug 2025 06:00:42 +0000
Manifest next update:     Thu 07 Aug 2025 06:00:42 +0000
Files and hashes:         1: 3B_QB9_6UI8wBj--TVOisuHoxN4.crl (hash: Vhsfaj5OSFvv3fX+SKxZewfXlIvKCDW0NzmvLSjE0ZE=)
                          2: 7qgaiTo5W1muFdP6MpWa1opzbS0.roa (hash: oB/3LoyawIAIuZTlw98KM6WEQJoxwvB9mX5CJlG5Qkc=)
                          3: 85dcB4vHUu_Vy4eqlKOzrmW4Olg.roa (hash: d3YRcy8kGOgyIH2+yoyF6a5JQlRH1WTLZygkMizzc7U=)
                          4: 8ev_3ecaOE9Xy6P1NIXqcQLzweI.roa (hash: Zj+FSqlWF1bKg6ErvNytlDkNslmJzZbU8Tq384TdAl4=)
                          5: LRmAFx6q6erwroYFlG8E6BiVohg.roa (hash: bRtBOx3Fb0WsS33nQsn4XTP0KNTUlQXCLuBYDXQSf/k=)
                          6: onA5Qj1rH9MGyVQYHgNFggbjtjI.roa (hash: KWPiO4cF+XLCzdYsua/SReatJ6Kfy0LyhbM0N7V5zn8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 06:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:f7:b5:f5:87:d0:fd:7c:2b:7e:5b:d4:67:f8:a2:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
        Validity
            Not Before: Aug  6 06:00:42 2025 GMT
            Not After : Aug  7 06:00:42 2025 GMT
        Subject: CN=2725b79c130f2dd973bbca815c26dcde05b949a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ee:e3:b7:80:e2:5f:69:18:a7:10:bf:ff:ba:
                    12:0d:c9:ff:0c:44:bf:0d:aa:96:bf:a9:94:9b:d4:
                    4c:e0:2a:3b:4c:2c:05:21:a5:9a:c7:2b:d3:2d:b2:
                    40:ae:b6:da:3c:87:f2:37:ad:fd:aa:bd:64:93:a9:
                    be:a4:7a:6f:4b:2a:fe:0c:ee:99:8e:55:ac:16:3e:
                    48:4d:99:63:23:46:bb:00:3d:9f:92:ed:b2:62:a7:
                    3a:b5:a9:bf:d8:61:ca:45:90:f6:23:70:d3:4b:21:
                    73:a1:1e:af:75:0d:7a:86:ea:22:c8:05:31:b6:89:
                    53:2a:e6:18:ed:15:5b:34:9d:38:44:dd:9d:32:50:
                    7f:6d:0a:f7:ef:a3:24:37:f1:59:6c:59:7f:47:6e:
                    47:89:5b:13:90:f9:b6:49:06:72:92:83:d8:c3:a0:
                    eb:9d:27:1c:36:57:55:3e:a0:3f:a9:87:1d:b2:aa:
                    92:ab:0d:75:73:9b:b4:40:c2:8d:55:72:d2:b1:a0:
                    0d:55:66:c5:10:0b:84:4d:2c:08:bd:88:6a:88:45:
                    c9:b8:03:82:bf:12:b3:54:81:80:e6:08:46:c9:b0:
                    87:3a:28:c9:12:3b:b6:cb:0f:5a:45:de:fc:3b:56:
                    eb:e2:15:a0:d2:a1:dd:93:43:cb:52:05:54:4d:1b:
                    67:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:25:B7:9C:13:0F:2D:D9:73:BB:CA:81:5C:26:DC:DE:05:B9:49:A3
            X509v3 Authority Key Identifier:
                keyid:DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:04:61:51:c3:9b:50:f8:c8:30:84:f4:93:7a:7e:3f:4c:12:
         88:63:a4:5c:3e:b5:27:3b:e7:39:4b:6d:65:7d:e1:f1:fd:b6:
         7b:c4:80:f1:f4:12:e6:4d:9c:9f:51:58:0c:d9:f2:c9:e5:0c:
         71:56:bf:80:90:41:58:0b:01:5a:19:c9:92:13:23:bf:d8:05:
         ea:9e:f0:45:d7:00:d5:3e:21:e3:5a:df:72:74:66:28:d4:38:
         64:25:f3:65:55:3c:c2:25:1b:9d:2f:9b:b3:87:48:4b:9c:4b:
         b1:38:31:0a:40:69:dd:7a:84:6a:d3:d5:90:c4:9a:46:a4:57:
         f1:b8:ca:9c:ba:1c:64:5c:76:38:94:dc:0e:93:fb:5e:29:a4:
         54:ba:0f:b4:68:11:f3:33:68:5b:34:fd:ea:60:8e:35:8d:cf:
         69:7b:b1:1c:db:ec:9b:44:7e:e9:53:1c:ae:21:a5:cb:27:9f:
         f6:b6:b7:2b:7c:3b:7d:fe:45:87:0c:43:a9:11:70:60:65:af:
         be:73:3f:69:89:a3:67:83:39:ca:35:16:a6:77:61:f5:1b:d4:
         85:02:40:50:2b:ab:a3:67:f6:ea:49:8e:b7:01:0e:d3:2d:3c:
         65:03:fa:57:3a:46:c0:62:94:44:59:ff:b8:ff:44:e1:7d:d1:
         f7:d3:c4:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh997X1h9D9fCt+W9Rn+KI1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMWZkMDA3ZGZmYTUwOGYzMDA2M2ZiZTRkNTNhMmIyZTFl
OGM0ZGUwHhcNMjUwODA2MDYwMDQyWhcNMjUwODA3MDYwMDQyWjAzMTEwLwYDVQQD
EygyNzI1Yjc5YzEzMGYyZGQ5NzNiYmNhODE1YzI2ZGNkZTA1Yjk0OWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAku7jt4DiX2kYpxC//7oSDcn/DES/
DaqWv6mUm9RM4Co7TCwFIaWaxyvTLbJArrbaPIfyN639qr1kk6m+pHpvSyr+DO6Z
jlWsFj5ITZljI0a7AD2fku2yYqc6tam/2GHKRZD2I3DTSyFzoR6vdQ16huoiyAUx
tolTKuYY7RVbNJ04RN2dMlB/bQr376MkN/FZbFl/R25HiVsTkPm2SQZykoPYw6Dr
nSccNldVPqA/qYcdsqqSqw11c5u0QMKNVXLSsaANVWbFEAuETSwIvYhqiEXJuAOC
vxKzVIGA5ghGybCHOijJEju2yw9aRd78O1br4hWg0qHdk0PLUgVUTRtnBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCclt5wTDy3Zc7vKgVwm3N4FuUmjMB8GA1UdIwQY
MBaAFNwf0Aff+lCPMAY/vk1TorLh6MTeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0JfUUI5XzZVSTh3QmotLVRWT2lzdUhveE40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8wNzUzNzctZTQyNi00OTJmLWE1OWMt
YWU0Yzk1Yzk0MDA1LzEvM0JfUUI5XzZVSTh3QmotLVRWT2lzdUhveE40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8wNzUzNzctZTQyNi00OTJmLWE1OWMtYWU0Yzk1Yzk0MDA1
LzEvM0JfUUI5XzZVSTh3QmotLVRWT2lzdUhveE40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJwRhUcOb
UPjIMIT0k3p+P0wSiGOkXD61JzvnOUttZX3h8f22e8SA8fQS5k2cn1FYDNnyyeUM
cVa/gJBBWAsBWhnJkhMjv9gF6p7wRdcA1T4h41rfcnRmKNQ4ZCXzZVU8wiUbnS+b
s4dIS5xLsTgxCkBp3XqEatPVkMSaRqRX8bjKnLocZFx2OJTcDpP7XimkVLoPtGgR
8zNoWzT96mCONY3PaXuxHNvsm0R+6VMcriGlyyef9ra3K3w7ff5FhwxDqRFwYGWv
vnM/aYmjZ4M5yjUWpndh9RvUhQJAUCuro2f26kmOtwEO0y08ZQP6VzpGwGKURFn/
uP9E4X3R99PEIg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:06:21 2025 by rpki-client