Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
File:                     i9S8vzXbf-LvZjUipaOjl5pPH_g.mft (raw, json)
Hash identifier:          EcvDKGmb33AQiTithRNthxbDWCijKJ63bDllTX025Rg=
Subject key identifier:   0E:7C:B4:6D:DB:D0:0F:8B:09:5C:56:D6:FD:A4:BC:BB:38:0F:40:2E
Authority key identifier: 8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
Certificate issuer:       /CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Certificate serial:       019896374656B4B248923EE914FCFF7DE717
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
Manifest number:          13F5
Signing time:             Sun 10 Aug 2025 23:01:01 +0000
Manifest this update:     Sun 10 Aug 2025 23:01:01 +0000
Manifest next update:     Mon 11 Aug 2025 23:01:01 +0000
Files and hashes:         1: 1-_88t3hetlFBanVHA2DU4QOnOb4.roa (hash: latlaUAnjm2YfCy+iquDacPIbXwTYbtI55yE63hF5qU=)
                          2: 9bvrYkBqiqKMnn8_sup9wHDDvAw.roa (hash: OmLw4QBgjy48HSO5mm8k/HJy6DwFgzHoft0ePJqTlrs=)
                          3: i9S8vzXbf-LvZjUipaOjl5pPH_g.crl (hash: Bvm3KRFmnxI1yZVDzpmDg/lBdRyHpojt5dDpZdq8JdU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 23:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:96:37:46:56:b4:b2:48:92:3e:e9:14:fc:ff:7d:e7:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
        Validity
            Not Before: Aug 10 23:01:01 2025 GMT
            Not After : Aug 11 23:01:01 2025 GMT
        Subject: CN=0e7cb46ddbd00f8b095c56d6fda4bcbb380f402e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:13:28:4f:69:52:03:e4:0a:34:fc:ea:77:be:
                    df:e3:1d:f5:ff:17:32:91:fa:20:a3:d7:16:21:99:
                    36:43:c4:1f:9b:72:56:79:28:ae:1b:7e:4e:1c:94:
                    3e:6d:2f:6c:37:d9:a7:86:45:4f:78:b3:d1:f1:d1:
                    81:f6:0b:63:1c:37:2c:2a:0b:e3:cb:2f:60:ee:6d:
                    a8:a9:bf:52:fa:a0:a5:1e:07:80:27:cb:b6:90:91:
                    1f:a3:25:32:4f:cb:08:b7:9f:88:6c:2c:18:79:c5:
                    cb:4d:5e:d3:82:62:03:df:23:85:cc:82:86:1b:cf:
                    be:8a:84:a9:0b:4e:17:c7:1f:f4:f4:9a:bd:2c:e8:
                    09:1a:1c:d3:b4:2e:5d:89:57:14:5a:c4:73:73:cc:
                    b1:bc:e0:71:29:f4:59:3f:5b:7f:ac:09:1f:f8:4e:
                    02:a7:57:77:bb:b4:51:89:2f:b7:73:8c:1c:53:01:
                    38:75:2c:b2:2f:9c:e8:0a:b0:2d:36:a4:0e:2a:2c:
                    81:58:7d:10:17:15:13:4e:72:0b:e7:6f:de:fa:9a:
                    17:c4:91:3f:7c:0f:ca:80:ed:0d:df:57:98:25:f6:
                    f9:e2:4a:6e:82:bd:ff:fb:41:8c:63:50:c0:44:46:
                    e0:3a:28:59:73:8f:eb:c1:b0:6e:6d:6c:ac:9c:f8:
                    b8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:7C:B4:6D:DB:D0:0F:8B:09:5C:56:D6:FD:A4:BC:BB:38:0F:40:2E
            X509v3 Authority Key Identifier:
                keyid:8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:f6:91:d4:fe:a8:dd:b4:90:15:b7:ba:00:60:70:8a:09:99:
         37:11:12:10:66:f0:5f:21:54:e9:dc:bc:12:22:5f:6f:85:ce:
         e2:b1:68:18:07:a9:27:2b:19:5d:d4:e0:0a:e5:1e:84:84:87:
         54:4e:13:b7:2b:a2:44:23:40:20:0a:b4:92:6e:9e:79:ba:88:
         80:95:15:22:03:65:3b:3f:c8:33:bd:fb:bc:63:23:fc:25:a3:
         e4:12:29:b2:e8:03:4c:a3:b8:58:df:78:0d:5d:c7:b8:71:ba:
         eb:e5:3b:78:61:ef:64:90:7d:5c:29:1d:8c:06:3f:01:66:fa:
         9a:a8:4f:33:a0:37:85:0f:cf:82:35:b5:3e:e1:b9:53:14:10:
         8f:3a:cf:94:29:ee:19:39:55:5a:80:06:3b:69:b1:a7:79:de:
         03:84:d1:e3:f8:51:4d:91:0f:40:28:c8:7a:87:90:f9:31:55:
         46:10:3b:25:3e:fb:ac:a4:de:cc:48:3e:4e:d6:3d:66:9f:a2:
         a3:67:2d:cd:dc:14:0b:f3:02:55:6b:6b:09:d0:79:43:ce:17:
         f3:6b:e3:50:27:9e:5f:87:19:80:58:69:cd:45:ea:4e:8b:fe:
         96:0c:f2:58:5e:7f:6b:da:33:1d:44:57:a3:1c:12:37:91:4f:
         e9:0a:df:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWN0ZWtLJIkj7pFPz/fecXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZDRiY2JmMzVkYjdmZTJlZjY2MzUyMmE1YTNhMzk3OWE0
ZjFmZjgwHhcNMjUwODEwMjMwMTAxWhcNMjUwODExMjMwMTAxWjAzMTEwLwYDVQQD
EygwZTdjYjQ2ZGRiZDAwZjhiMDk1YzU2ZDZmZGE0YmNiYjM4MGY0MDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRMoT2lSA+QKNPzqd77f4x31/xcy
kfogo9cWIZk2Q8Qfm3JWeSiuG35OHJQ+bS9sN9mnhkVPeLPR8dGB9gtjHDcsKgvj
yy9g7m2oqb9S+qClHgeAJ8u2kJEfoyUyT8sIt5+IbCwYecXLTV7TgmID3yOFzIKG
G8++ioSpC04Xxx/09Jq9LOgJGhzTtC5diVcUWsRzc8yxvOBxKfRZP1t/rAkf+E4C
p1d3u7RRiS+3c4wcUwE4dSyyL5zoCrAtNqQOKiyBWH0QFxUTTnIL52/e+poXxJE/
fA/KgO0N31eYJfb54kpugr3/+0GMY1DAREbgOihZc4/rwbBubWysnPi4BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA58tG3b0A+LCVxW1v2kvLs4D0AuMB8GA1UdIwQY
MBaAFIvUvL8123/i72Y1IqWjo5eaTx/4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTlTOHZ6WGJmLUx2WmpVaXBhT2psNXBQSF9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9hMTQyNzItMjc5NC00ZjM4LTk2NDAt
NDc4ZWQ3ZjhkMDVlLzEvaTlTOHZ6WGJmLUx2WmpVaXBhT2psNXBQSF9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9hMTQyNzItMjc5NC00ZjM4LTk2NDAtNDc4ZWQ3ZjhkMDVl
LzEvaTlTOHZ6WGJmLUx2WmpVaXBhT2psNXBQSF9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg/aR1P6o
3bSQFbe6AGBwigmZNxESEGbwXyFU6dy8EiJfb4XO4rFoGAepJysZXdTgCuUehISH
VE4TtyuiRCNAIAq0km6eebqIgJUVIgNlOz/IM737vGMj/CWj5BIpsugDTKO4WN94
DV3HuHG66+U7eGHvZJB9XCkdjAY/AWb6mqhPM6A3hQ/PgjW1PuG5UxQQjzrPlCnu
GTlVWoAGO2mxp3neA4TR4/hRTZEPQCjIeoeQ+TFVRhA7JT77rKTezEg+TtY9Zp+i
o2ctzdwUC/MCVWtrCdB5Q84X82vjUCeeX4cZgFhpzUXqTov+lgzyWF5/a9ozHURX
oxwSN5FP6Qrf7w==
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:48:30 2025 by rpki-client