Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
File:                     ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft (raw, json)
Hash identifier:          aM20Ds5X0DAt79txAaJ94y+/U/+o64gscTjmuEYKhNU=
Subject key identifier:   9A:57:EE:54:4C:0C:2B:34:B8:42:BF:CB:EC:97:8F:70:31:0B:A3:AE
Authority key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
Certificate issuer:       /CN=49c403d43b5f38fca2119cd1409a92763edefe71
Certificate serial:       019874876A0F1468DB70A10AB47287F9CE19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
Manifest number:          161C
Signing time:             Mon 04 Aug 2025 10:01:27 +0000
Manifest this update:     Mon 04 Aug 2025 10:01:27 +0000
Manifest next update:     Tue 05 Aug 2025 10:01:27 +0000
Files and hashes:         1: 6ZwG_Y60Ty5PTqTrDlKsyphblXQ.roa (hash: vR97+OeUXCCOXRpSdGW1/Y4Sp/FefDWwnMJQ9Jni4rk=)
                          2: BGdD8LDEAedO7LkZulNO0on6BtA.roa (hash: 5JKMac3WduBMBCnJzqk90kK6WJ4PSh8kMPbmsKHD+wc=)
                          3: Bs46C8G9Xvlaiic-U_vabhAJhco.roa (hash: 3sJguMlQk0GQr3vKdqIN2WvzrXMmi6x68HlsMnn5UuM=)
                          4: D5iZPHtIHYKSLlUoRqhHam3z4fw.roa (hash: iQxb5JVe2tNY+bNton8d20CXKpbqyN/eHLh+5EoqEaI=)
                          5: Rl9152Qvb_u7j8K6moXvloqlxuw.roa (hash: 7VxgCsm28hyqe3FM8bfzznGaU0K/XnvaJIfEnQlGvZI=)
                          6: ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl (hash: A+W+AL90SRiYCo3L+0T4wNqQIwpEWW5f76ME/bgrNBM=)
                          7: bkbeFY-foKd3saHxL2Ms4IvaWZI.roa (hash: Pb5Tubkcy9LxO6t4tf4Rf3p3iIfsYoVtUzwvSZ29zs0=)
                          8: h13V4d_ekYYA6uv0-jBvE7ljXgg.roa (hash: 64VEKJzZ2W6+uSgCoWExxMNGZCghiQUddh02slxkwlI=)
                          9: y4ffehEhJcuHU2W4RqSmsYxzQlg.roa (hash: stMeXk1cas0IbSmXY2+Qqlw++LVpL1MZDKLPTnxrrwY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 10:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:87:6a:0f:14:68:db:70:a1:0a:b4:72:87:f9:ce:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49c403d43b5f38fca2119cd1409a92763edefe71
        Validity
            Not Before: Aug  4 10:01:27 2025 GMT
            Not After : Aug  5 10:01:27 2025 GMT
        Subject: CN=9a57ee544c0c2b34b842bfcbec978f70310ba3ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1c:10:06:c8:d4:a8:fd:ca:05:24:cd:ba:ea:
                    6d:7c:f2:79:e5:ed:32:08:90:8d:e8:ad:91:28:23:
                    10:74:55:07:38:6f:54:bb:29:ea:08:07:82:de:ed:
                    9f:96:44:69:34:9e:a2:f7:76:4f:c9:5b:54:ff:5b:
                    96:3e:f4:6a:aa:ee:e6:ac:24:af:99:ae:3d:20:c2:
                    67:99:15:f0:26:fc:44:98:5c:45:36:24:c0:eb:2a:
                    b6:a4:ea:cb:70:9f:d2:1e:b8:83:79:f1:f7:b6:1c:
                    71:b3:f3:60:bd:07:a2:c3:43:a3:c4:6a:33:bb:8b:
                    5f:ad:e5:de:db:64:d5:c7:9e:a3:3c:25:23:1c:38:
                    b8:46:78:1e:92:42:11:68:d2:c1:a7:c3:0c:87:f0:
                    a5:ad:f1:21:ad:32:ab:37:cb:2c:39:e2:5f:97:26:
                    7b:0b:23:28:7f:d0:45:79:8f:29:ff:f2:b3:49:9c:
                    71:fd:b0:9b:92:0e:4a:bb:56:b9:aa:c0:cf:f2:4f:
                    24:e7:22:b5:f5:57:17:c1:19:69:19:3d:80:3d:24:
                    f5:5a:48:61:11:53:c7:17:fc:86:8c:25:50:97:81:
                    8f:70:55:a2:99:58:85:97:2f:22:58:32:eb:45:b5:
                    4c:0d:d3:ce:62:c0:9b:6b:01:96:6b:4b:51:98:ce:
                    1f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:57:EE:54:4C:0C:2B:34:B8:42:BF:CB:EC:97:8F:70:31:0B:A3:AE
            X509v3 Authority Key Identifier:
                keyid:49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:d3:c2:37:a1:34:66:21:8d:38:5b:14:d7:09:a1:06:26:96:
         3d:c5:10:df:8c:3a:37:4b:3c:c1:ab:a1:3c:38:ff:aa:a2:d6:
         4a:03:c8:dc:60:a7:15:01:f7:06:08:06:55:74:3f:95:8e:90:
         6c:67:f3:84:f5:17:b6:80:7a:cb:9c:8d:db:1c:0c:78:e0:74:
         37:75:78:be:e8:24:30:d9:32:f9:d9:ac:4d:ca:ed:7d:ee:16:
         b8:ee:04:49:2b:0e:eb:f9:41:eb:03:e2:a7:e5:b3:6f:f1:6e:
         c5:01:d0:c4:c0:77:33:00:16:cb:0a:a7:fd:4c:c6:e4:be:6e:
         31:52:08:be:13:30:c3:08:8a:4b:b1:fb:3e:d9:b5:49:e9:d0:
         f4:8d:70:46:43:63:22:8f:13:62:da:39:2b:57:e3:0e:20:27:
         08:a2:d5:25:78:3f:2a:a0:e7:5e:7f:98:b1:63:39:4f:04:74:
         8b:79:fd:58:5d:d5:08:5e:65:04:1f:49:53:99:71:2c:b7:5a:
         b2:af:8e:2e:5e:ac:e7:cd:1f:f7:f4:a0:5c:ef:f3:b8:90:f3:
         37:f9:75:dc:1e:16:87:b5:1c:fd:5c:8f:6c:54:20:02:72:a9:
         65:92:84:c3:24:b7:a0:94:be:81:f4:20:dd:88:4d:67:8f:a7:
         cd:18:ba:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0h2oPFGjbcKEKtHKH+c4ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5YzQwM2Q0M2I1ZjM4ZmNhMjExOWNkMTQwOWE5Mjc2M2Vk
ZWZlNzEwHhcNMjUwODA0MTAwMTI3WhcNMjUwODA1MTAwMTI3WjAzMTEwLwYDVQQD
Eyg5YTU3ZWU1NDRjMGMyYjM0Yjg0MmJmY2JlYzk3OGY3MDMxMGJhM2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhwQBsjUqP3KBSTNuuptfPJ55e0y
CJCN6K2RKCMQdFUHOG9UuynqCAeC3u2flkRpNJ6i93ZPyVtU/1uWPvRqqu7mrCSv
ma49IMJnmRXwJvxEmFxFNiTA6yq2pOrLcJ/SHriDefH3thxxs/NgvQeiw0OjxGoz
u4tfreXe22TVx56jPCUjHDi4RngekkIRaNLBp8MMh/ClrfEhrTKrN8ssOeJflyZ7
CyMof9BFeY8p//KzSZxx/bCbkg5Ku1a5qsDP8k8k5yK19VcXwRlpGT2APST1Wkhh
EVPHF/yGjCVQl4GPcFWimViFly8iWDLrRbVMDdPOYsCbawGWa0tRmM4f9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpX7lRMDCs0uEK/y+yXj3AxC6OuMB8GA1UdIwQY
MBaAFEnEA9Q7Xzj8ohGc0UCaknY+3v5xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQt
Zjg4OWNhMTYxYzAxLzEvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQtZjg4OWNhMTYxYzAx
LzEvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANtPCN6E0
ZiGNOFsU1wmhBiaWPcUQ34w6N0s8wauhPDj/qqLWSgPI3GCnFQH3BggGVXQ/lY6Q
bGfzhPUXtoB6y5yN2xwMeOB0N3V4vugkMNky+dmsTcrtfe4WuO4ESSsO6/lB6wPi
p+Wzb/FuxQHQxMB3MwAWywqn/UzG5L5uMVIIvhMwwwiKS7H7Ptm1SenQ9I1wRkNj
Io8TYto5K1fjDiAnCKLVJXg/KqDnXn+YsWM5TwR0i3n9WF3VCF5lBB9JU5lxLLda
sq+OLl6s580f9/SgXO/zuJDzN/l13B4Wh7Uc/VyPbFQgAnKpZZKEwyS3oJS+gfQg
3YhNZ4+nzRi60Q==
-----END CERTIFICATE-----
Generated at Mon Aug 4 19:00:29 2025 by rpki-client