Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft
File:                     rLVLzEkpGh8yt86tTylogtBTFJI.mft (raw, json)
Hash identifier:          9P6UqD432y2aoaFI2tRxiWjnbNrflxpmsXBV5nTd7TY=
Subject key identifier:   44:F1:F9:89:44:83:36:3A:5C:2E:94:A9:6B:92:19:15:EE:61:6E:B7
Authority key identifier: AC:B5:4B:CC:49:29:1A:1F:32:B7:CE:AD:4F:29:68:82:D0:53:14:92
Certificate issuer:       /CN=acb54bcc49291a1f32b7cead4f296882d0531492
Certificate serial:       019890352A4602FF48A0CC7E315FD966977D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft
Manifest number:          1625
Signing time:             Sat 09 Aug 2025 19:00:59 +0000
Manifest this update:     Sat 09 Aug 2025 19:00:59 +0000
Manifest next update:     Sun 10 Aug 2025 19:00:59 +0000
Files and hashes:         1: JhWEH1-OplFyfRpnGPaAH68zRx4.roa (hash: 58PwPKP/vJBtdtkIKyrehJCWwjagistWjkfUZr2AKRU=)
                          2: Kalap6T2m16JSwDjwLxjNXHdNyY.roa (hash: JVJj7fl4hbm6J8kNJ+/MRSc7T2RN3F+EXAgFNtKUtbU=)
                          3: PUwPc09p8c8_Sn1YM_ZYypexbaI.roa (hash: OH20qakQRBJhyXsGRRFFaEvlTNopBkE9EYzgH/uJXtA=)
                          4: Qa2_2S_PkTHxTJ-vKPqlybewfm4.roa (hash: drfKDlHg11rvWBFBJCgdefYg02WWSePfByGXqjFYb5E=)
                          5: rLVLzEkpGh8yt86tTylogtBTFJI.crl (hash: Q70rknboZ7KqaivUc3ts3Rcnr7aRkZ5Te5FZP30ZBaw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:90:35:2a:46:02:ff:48:a0:cc:7e:31:5f:d9:66:97:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acb54bcc49291a1f32b7cead4f296882d0531492
        Validity
            Not Before: Aug  9 19:00:59 2025 GMT
            Not After : Aug 10 19:00:59 2025 GMT
        Subject: CN=44f1f9894483363a5c2e94a96b921915ee616eb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:96:83:58:98:5c:b8:d4:d5:a2:82:6b:b8:6d:
                    c0:6e:bd:24:32:14:0e:03:7d:7d:5f:29:22:d2:42:
                    c9:02:3f:d9:23:59:d6:97:a6:a8:fa:e5:f2:9e:c0:
                    06:15:93:ca:de:46:5c:8f:46:f2:16:ec:b6:37:a0:
                    5d:16:ae:45:03:ff:af:71:95:2b:23:8a:1b:b4:de:
                    52:0b:59:82:47:81:e4:8f:fa:ec:ca:28:23:ba:6d:
                    1b:57:0b:f1:4a:76:47:53:06:0c:b3:ff:c7:bd:f5:
                    95:71:d7:fc:c6:9d:c1:4d:6e:31:3c:e8:17:46:b5:
                    bb:a4:24:1a:35:54:8e:58:2f:02:ce:4d:2b:9e:62:
                    f1:d7:c8:67:9b:b8:e9:ca:7a:d7:e0:fd:72:11:5a:
                    8e:87:00:ea:60:f5:1f:91:43:3c:bd:81:3a:3e:f6:
                    d6:60:8d:a4:26:bc:f0:e0:6c:1d:1b:4d:1a:21:e0:
                    b7:85:0f:0f:dc:31:14:ac:62:13:94:1d:0f:b1:8f:
                    81:58:f9:8a:4e:72:7c:6a:05:d3:d5:be:db:63:bf:
                    1a:d7:fa:8f:74:e5:11:40:2b:5c:3c:a8:1e:54:9f:
                    9b:a3:d8:5b:d7:bf:08:b4:b1:9e:3c:95:4b:b4:6e:
                    d8:11:d7:d1:3b:e5:77:0f:77:69:64:ea:01:0d:44:
                    68:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F1:F9:89:44:83:36:3A:5C:2E:94:A9:6B:92:19:15:EE:61:6E:B7
            X509v3 Authority Key Identifier:
                keyid:AC:B5:4B:CC:49:29:1A:1F:32:B7:CE:AD:4F:29:68:82:D0:53:14:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:e3:7e:96:8e:1b:86:85:4d:ac:3b:74:5e:8d:4b:96:51:09:
         d9:09:1a:8d:70:38:30:c0:09:1a:45:24:21:65:4d:3b:16:69:
         98:85:0d:a6:86:8d:0c:35:64:71:4d:cf:b5:66:c8:63:21:49:
         ba:03:88:fb:f3:6b:82:b7:e0:36:19:f3:b4:97:28:5f:46:5b:
         fa:aa:5f:ff:9e:cd:e8:db:e8:69:1e:b9:a6:f1:7d:44:77:6b:
         40:d4:c7:35:61:c6:88:15:43:cb:dc:0a:d5:b9:31:af:84:3d:
         c9:79:82:1c:76:1e:bf:2a:d8:00:76:65:5c:e9:9c:0b:16:70:
         42:cb:ce:2a:14:ac:b8:6b:3d:c0:f2:3e:92:75:23:7a:d8:19:
         10:86:e7:8f:6d:8a:88:38:cc:01:7b:4b:24:a2:36:59:4c:d6:
         23:4c:31:0d:68:4e:dd:d0:03:b0:d5:bc:39:b9:96:f9:6e:f8:
         e5:b1:94:34:91:f9:6e:c5:13:5a:ea:88:6e:18:e1:45:92:8a:
         b1:a7:a0:fe:b4:ae:ee:ee:1e:ca:a7:89:cb:88:a8:17:51:c4:
         40:be:01:6b:9f:d2:49:ff:16:18:58:8b:f3:f8:9d:af:98:fc:
         6f:72:2b:fe:8a:c5:d2:8e:ee:30:36:41:f9:3e:5c:69:4d:61:
         b9:1e:5c:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiQNSpGAv9IoMx+MV/ZZpd9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYjU0YmNjNDkyOTFhMWYzMmI3Y2VhZDRmMjk2ODgyZDA1
MzE0OTIwHhcNMjUwODA5MTkwMDU5WhcNMjUwODEwMTkwMDU5WjAzMTEwLwYDVQQD
Eyg0NGYxZjk4OTQ0ODMzNjNhNWMyZTk0YTk2YjkyMTkxNWVlNjE2ZWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5aDWJhcuNTVooJruG3Abr0kMhQO
A319Xyki0kLJAj/ZI1nWl6ao+uXynsAGFZPK3kZcj0byFuy2N6BdFq5FA/+vcZUr
I4obtN5SC1mCR4Hkj/rsyigjum0bVwvxSnZHUwYMs//HvfWVcdf8xp3BTW4xPOgX
RrW7pCQaNVSOWC8Czk0rnmLx18hnm7jpynrX4P1yEVqOhwDqYPUfkUM8vYE6PvbW
YI2kJrzw4GwdG00aIeC3hQ8P3DEUrGITlB0PsY+BWPmKTnJ8agXT1b7bY78a1/qP
dOURQCtcPKgeVJ+bo9hb178ItLGePJVLtG7YEdfRO+V3D3dpZOoBDURoWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETx+YlEgzY6XC6UqWuSGRXuYW63MB8GA1UdIwQY
MBaAFKy1S8xJKRofMrfOrU8paILQUxSSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckxWTHpFa3BHaDh5dDg2dFR5bG9ndEJURkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jZDJiZGQtZDNjNC00ZDYwLWIwOTYt
YWYzYTY4NWQ1NzlmLzEvckxWTHpFa3BHaDh5dDg2dFR5bG9ndEJURkpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9jZDJiZGQtZDNjNC00ZDYwLWIwOTYtYWYzYTY4NWQ1Nzlm
LzEvckxWTHpFa3BHaDh5dDg2dFR5bG9ndEJURkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOeN+lo4b
hoVNrDt0Xo1LllEJ2QkajXA4MMAJGkUkIWVNOxZpmIUNpoaNDDVkcU3PtWbIYyFJ
ugOI+/NrgrfgNhnztJcoX0Zb+qpf/57N6NvoaR65pvF9RHdrQNTHNWHGiBVDy9wK
1bkxr4Q9yXmCHHYevyrYAHZlXOmcCxZwQsvOKhSsuGs9wPI+knUjetgZEIbnj22K
iDjMAXtLJKI2WUzWI0wxDWhO3dADsNW8ObmW+W745bGUNJH5bsUTWuqIbhjhRZKK
saeg/rSu7u4eyqeJy4ioF1HEQL4Ba5/SSf8WGFiL8/idr5j8b3Ir/orF0o7uMDZB
+T5caU1huR5cPg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 20:35:30 2025 by rpki-client