Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
File:                     fWReWE8e-aiB8fu8TSejQj3j3_E.mft (raw, json)
Hash identifier:          JfN0iSMh6H4Ci3p+0+6sRk9T4ekz1h3ipW0gaY0sHrI=
Subject key identifier:   01:25:95:D1:9A:1F:22:5B:BD:F8:17:54:18:D0:6F:BB:BC:4A:17:D8
Authority key identifier: 7D:64:5E:58:4F:1E:F9:A8:81:F1:FB:BC:4D:27:A3:42:3D:E3:DF:F1
Certificate issuer:       /CN=7d645e584f1ef9a881f1fbbc4d27a3423de3dff1
Certificate serial:       0198801DB7F8F01B4E4EC35290EA6F1EEBFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
Manifest number:          161F
Signing time:             Wed 06 Aug 2025 16:01:27 +0000
Manifest this update:     Wed 06 Aug 2025 16:01:27 +0000
Manifest next update:     Thu 07 Aug 2025 16:01:27 +0000
Files and hashes:         1: QHrCJn-3TWWMCJDQELy3q8dJt_4.roa (hash: DTg0RQCOqWT4OxprKyTz2OGsk5mW9uMRzOSYKDRAWp0=)
                          2: dvNIb3T0U0mU22w-yMo6gNRu98k.roa (hash: KB6r0yPVxOXp/PVpdxcqc3971j0F/zVlsLjdreh6UUk=)
                          3: fWReWE8e-aiB8fu8TSejQj3j3_E.crl (hash: BUc71DcYbHqzlDM6JXOD3lq5NqwOW4UyR9cCt5q13/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:1d:b7:f8:f0:1b:4e:4e:c3:52:90:ea:6f:1e:eb:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d645e584f1ef9a881f1fbbc4d27a3423de3dff1
        Validity
            Not Before: Aug  6 16:01:27 2025 GMT
            Not After : Aug  7 16:01:27 2025 GMT
        Subject: CN=012595d19a1f225bbdf8175418d06fbbbc4a17d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1f:cd:8f:d2:40:2b:0d:94:04:04:d0:bc:77:
                    ee:75:09:e7:03:7d:38:ec:f0:7f:ac:78:5a:0f:90:
                    5b:e8:9c:fe:e6:2f:5d:76:73:c2:86:93:f6:1c:e3:
                    04:54:e0:ea:03:4d:0b:a6:de:73:eb:03:cf:2f:ec:
                    7c:b6:36:c1:59:da:fe:60:78:b5:8a:21:e1:34:f9:
                    92:98:54:84:82:a8:44:38:a1:2b:a5:9a:dd:80:37:
                    86:00:97:77:66:b2:54:b3:9e:fa:8b:33:53:7d:5c:
                    28:39:9c:79:eb:bb:88:2f:bb:0d:ac:f9:34:94:05:
                    ec:34:2f:9d:39:57:ec:2d:d5:be:53:4f:c7:66:42:
                    c2:fc:d7:29:bb:17:a9:f2:b5:63:a6:f8:b3:bf:98:
                    4d:e6:1d:a0:81:df:1a:36:a3:e1:9a:55:60:e1:3f:
                    c8:54:9f:76:b8:b9:05:3d:7a:d4:88:63:26:ae:67:
                    5f:cb:d5:03:58:f5:33:f0:f1:86:21:c8:cd:55:e4:
                    e1:83:7d:ce:8c:40:af:78:03:5c:d9:91:e2:dc:90:
                    96:17:bd:89:cc:e1:45:83:66:c8:9d:da:35:c1:08:
                    2d:64:10:82:2f:5b:2c:4a:94:b4:c1:33:a4:5d:8f:
                    80:11:de:23:e1:59:61:f4:b2:d9:d2:9f:4a:06:15:
                    e4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:25:95:D1:9A:1F:22:5B:BD:F8:17:54:18:D0:6F:BB:BC:4A:17:D8
            X509v3 Authority Key Identifier:
                keyid:7D:64:5E:58:4F:1E:F9:A8:81:F1:FB:BC:4D:27:A3:42:3D:E3:DF:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:ec:5b:f4:84:43:a8:3f:26:dc:36:57:9b:7f:82:0e:3b:c8:
         49:69:f1:e0:4d:2d:ac:5c:bf:79:63:f7:09:3b:3d:e9:c6:d2:
         2d:53:47:71:1a:7a:93:dd:f5:73:48:b6:2b:18:91:06:77:d9:
         cc:4f:1b:34:93:00:66:b5:0a:c6:aa:99:19:22:36:7e:9a:36:
         07:35:40:b2:5d:a7:26:97:99:88:99:33:48:13:5f:8a:15:61:
         c1:50:c6:d5:05:21:89:e6:ed:37:a3:e5:a0:02:21:33:55:3d:
         8e:55:0f:63:d8:0b:d3:c7:02:ef:1a:bb:68:d7:c3:53:75:34:
         42:1c:69:12:d3:55:1d:4d:53:2c:d1:07:b5:ee:ca:c5:e6:67:
         0e:50:8c:b7:91:bc:fc:87:b3:71:e1:5b:44:7f:07:9c:1c:49:
         57:c3:83:af:eb:9c:ff:bf:a1:06:98:16:36:37:a4:e1:8c:38:
         00:f7:0d:d8:c5:cd:b7:07:30:c7:08:f0:5b:db:d9:e8:02:1c:
         48:6a:4d:08:bc:65:98:59:66:b9:a6:8c:59:0e:04:62:b9:15:
         32:8f:f5:63:78:0c:4e:cb:8b:45:0a:2e:bb:12:7c:7a:96:c9:
         4e:11:ab:0c:05:bf:93:58:c3:74:b6:5b:2a:45:81:a6:38:98:
         d2:76:88:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAHbf48BtOTsNSkOpvHuv7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNjQ1ZTU4NGYxZWY5YTg4MWYxZmJiYzRkMjdhMzQyM2Rl
M2RmZjEwHhcNMjUwODA2MTYwMTI3WhcNMjUwODA3MTYwMTI3WjAzMTEwLwYDVQQD
EygwMTI1OTVkMTlhMWYyMjViYmRmODE3NTQxOGQwNmZiYmJjNGExN2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx/Nj9JAKw2UBATQvHfudQnnA304
7PB/rHhaD5Bb6Jz+5i9ddnPChpP2HOMEVODqA00Lpt5z6wPPL+x8tjbBWdr+YHi1
iiHhNPmSmFSEgqhEOKErpZrdgDeGAJd3ZrJUs576izNTfVwoOZx567uIL7sNrPk0
lAXsNC+dOVfsLdW+U0/HZkLC/Ncpuxep8rVjpvizv5hN5h2ggd8aNqPhmlVg4T/I
VJ92uLkFPXrUiGMmrmdfy9UDWPUz8PGGIcjNVeThg33OjECveANc2ZHi3JCWF72J
zOFFg2bIndo1wQgtZBCCL1ssSpS0wTOkXY+AEd4j4Vlh9LLZ0p9KBhXkFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAElldGaHyJbvfgXVBjQb7u8ShfYMB8GA1UdIwQY
MBaAFH1kXlhPHvmogfH7vE0no0I949/xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZldSZVdFOGUtYWlCOGZ1OFRTZWpRajNqM19FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wZDFjMzMtOTExNy00YTExLWJiZmUt
ZGI4MWExOGUyNDJlLzEvZldSZVdFOGUtYWlCOGZ1OFRTZWpRajNqM19FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8wZDFjMzMtOTExNy00YTExLWJiZmUtZGI4MWExOGUyNDJl
LzEvZldSZVdFOGUtYWlCOGZ1OFRTZWpRajNqM19FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAOxb9IRD
qD8m3DZXm3+CDjvISWnx4E0trFy/eWP3CTs96cbSLVNHcRp6k931c0i2KxiRBnfZ
zE8bNJMAZrUKxqqZGSI2fpo2BzVAsl2nJpeZiJkzSBNfihVhwVDG1QUhiebtN6Pl
oAIhM1U9jlUPY9gL08cC7xq7aNfDU3U0QhxpEtNVHU1TLNEHte7KxeZnDlCMt5G8
/IezceFbRH8HnBxJV8ODr+uc/7+hBpgWNjek4Yw4APcN2MXNtwcwxwjwW9vZ6AIc
SGpNCLxlmFlmuaaMWQ4EYrkVMo/1Y3gMTsuLRQouuxJ8epbJThGrDAW/k1jDdLZb
KkWBpjiY0naIuA==
-----END CERTIFICATE-----
Generated at Thu Aug 7 00:26:31 2025 by rpki-client