Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft
File:                     jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft (raw, json)
Hash identifier:          kasYae4CCyURthvmrN1T0jOW5tezLR0qhZDwgnj4iD0=
Subject key identifier:   DB:05:A5:B6:19:5B:A0:7D:E6:80:EF:DC:F8:8D:69:2F:98:C1:21:83
Authority key identifier: 8D:F5:1D:06:70:71:5E:B6:9E:FA:2F:BF:F1:99:8C:3B:DB:D8:A9:F5
Certificate issuer:       /CN=8df51d0670715eb69efa2fbff1998c3bdbd8a9f5
Certificate serial:       01984A0A13FEDF978687E05277E2156687FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft
Manifest number:          1601
Signing time:             Sun 27 Jul 2025 04:00:30 +0000
Manifest this update:     Sun 27 Jul 2025 04:00:30 +0000
Manifest next update:     Mon 28 Jul 2025 04:00:30 +0000
Files and hashes:         1: 1tlTabk8kx23vgEK55RHhqMUGAo.roa (hash: ZiPvgitC32adDyXcop28a7N8FTyvMG9u4rZhMBMC7pc=)
                          2: GJFvvd_DhSTge6litoTaxiewidk.roa (hash: RLpkP+iqljJeiJ6QCXluN39pRk9A6A/5JPgUBEpuWhk=)
                          3: HzBkiKhuiqff_TTVGmLjYBovMzQ.roa (hash: qKqhsRRVPhaKh0NQ1lXqtQkYrgEiWm0P2Q/f/i1BnBs=)
                          4: jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl (hash: NszoC2Z+DDARP9xxR4iiq59Z8qeta5gW61bSe7q2Ybc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 04:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:0a:13:fe:df:97:86:87:e0:52:77:e2:15:66:87:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8df51d0670715eb69efa2fbff1998c3bdbd8a9f5
        Validity
            Not Before: Jul 27 04:00:30 2025 GMT
            Not After : Jul 28 04:00:30 2025 GMT
        Subject: CN=db05a5b6195ba07de680efdcf88d692f98c12183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:cf:26:bd:93:d2:80:c1:df:4b:e3:10:f3:e9:
                    e7:bc:38:33:aa:27:13:cd:70:63:d6:c6:78:1c:ca:
                    26:e7:fe:fb:ea:e4:0f:05:15:5c:38:7c:9f:e4:f1:
                    16:7e:16:0d:c4:7e:4b:16:6a:a0:87:c2:d1:6a:77:
                    c7:6f:8a:27:02:81:1f:5a:dd:61:59:9c:2a:e8:2b:
                    7f:46:6e:47:78:f5:93:c9:e0:12:9b:e1:6b:33:09:
                    bd:46:64:c7:6f:77:73:ad:45:b1:60:0a:7a:b8:e4:
                    df:3f:d1:a8:b2:ce:8c:bd:80:12:35:ae:20:54:4d:
                    05:45:1d:8e:67:79:83:4f:58:37:af:09:10:ce:65:
                    04:8c:78:3c:39:1a:f3:09:ce:c1:12:d2:03:f2:df:
                    c8:66:06:35:12:63:63:1e:cc:77:a6:de:fa:e4:d4:
                    36:6a:d0:eb:25:cc:8a:82:7f:b7:2d:7a:fc:d8:fa:
                    fb:ff:b7:1e:29:d3:f6:c2:2d:c7:76:77:98:bb:f6:
                    ec:8d:f7:06:05:75:3b:62:1b:94:69:ac:d7:94:8a:
                    a2:e9:f3:f1:01:0d:90:68:74:9f:07:27:51:c3:85:
                    d8:a3:31:64:09:1b:71:a3:44:98:84:92:fd:4e:e8:
                    f2:97:30:66:2d:44:14:4e:e2:d3:7e:70:75:aa:e4:
                    fc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:05:A5:B6:19:5B:A0:7D:E6:80:EF:DC:F8:8D:69:2F:98:C1:21:83
            X509v3 Authority Key Identifier:
                keyid:8D:F5:1D:06:70:71:5E:B6:9E:FA:2F:BF:F1:99:8C:3B:DB:D8:A9:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:3f:e1:cb:df:a7:e0:11:93:13:3b:bb:4f:3a:a9:97:9a:28:
         dd:ad:62:9c:13:52:1d:27:a0:7a:4e:64:92:fe:3d:7c:6f:3b:
         48:aa:25:38:1e:c9:8f:b6:fc:8b:4d:34:43:9d:da:df:91:54:
         3c:e3:e8:fc:96:1f:08:62:32:bd:b8:54:f9:b8:5b:de:dc:82:
         54:72:83:e3:3d:43:56:58:10:2c:e1:8f:7f:38:ed:57:6b:2b:
         ed:04:56:c5:a7:c2:aa:6a:84:07:6a:5b:0a:bc:a8:c7:2e:79:
         a3:e1:f7:0b:d2:f9:92:7c:71:e5:52:75:8c:c9:8d:0b:eb:c5:
         30:7b:97:4d:7b:b2:91:2c:64:95:00:c5:01:b7:d8:8d:29:ff:
         a2:0d:3d:85:4a:d6:5d:62:07:34:98:9b:be:0d:9e:13:cf:85:
         e7:5d:d7:9c:2f:e5:d5:89:bd:58:65:30:f7:49:15:69:b7:f8:
         28:8c:b7:2e:ea:d0:b1:76:04:d9:4f:d4:f2:3b:46:d4:ad:c2:
         e3:62:c4:73:2f:fe:62:44:58:74:ef:65:75:1d:12:64:7b:15:
         3e:81:af:2c:cf:79:21:32:5d:35:da:6e:45:ce:c5:82:5f:aa:
         ab:26:42:40:b8:92:cd:11:28:63:bb:f5:6a:75:89:02:cb:ce:
         cc:fa:1d:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKChP+35eGh+BSd+IVZof/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkZjUxZDA2NzA3MTVlYjY5ZWZhMmZiZmYxOTk4YzNiZGJk
OGE5ZjUwHhcNMjUwNzI3MDQwMDMwWhcNMjUwNzI4MDQwMDMwWjAzMTEwLwYDVQQD
EyhkYjA1YTViNjE5NWJhMDdkZTY4MGVmZGNmODhkNjkyZjk4YzEyMTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7c8mvZPSgMHfS+MQ8+nnvDgzqicT
zXBj1sZ4HMom5/776uQPBRVcOHyf5PEWfhYNxH5LFmqgh8LRanfHb4onAoEfWt1h
WZwq6Ct/Rm5HePWTyeASm+FrMwm9RmTHb3dzrUWxYAp6uOTfP9Goss6MvYASNa4g
VE0FRR2OZ3mDT1g3rwkQzmUEjHg8ORrzCc7BEtID8t/IZgY1EmNjHsx3pt765NQ2
atDrJcyKgn+3LXr82Pr7/7ceKdP2wi3HdneYu/bsjfcGBXU7YhuUaazXlIqi6fPx
AQ2QaHSfBydRw4XYozFkCRtxo0SYhJL9TujylzBmLUQUTuLTfnB1quT8JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNsFpbYZW6B95oDv3PiNaS+YwSGDMB8GA1UdIwQY
MBaAFI31HQZwcV62nvovv/GZjDvb2Kn1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamZVZEJuQnhYcmFlLWktXzhabU1POXZZcWZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC83NDcxMTMtNTkxZC00ODA4LTkyZDkt
N2E3OTRkNWNlZDNkLzEvamZVZEJuQnhYcmFlLWktXzhabU1POXZZcWZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC83NDcxMTMtNTkxZC00ODA4LTkyZDktN2E3OTRkNWNlZDNk
LzEvamZVZEJuQnhYcmFlLWktXzhabU1POXZZcWZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIj/hy9+n
4BGTEzu7Tzqpl5oo3a1inBNSHSegek5kkv49fG87SKolOB7Jj7b8i000Q53a35FU
POPo/JYfCGIyvbhU+bhb3tyCVHKD4z1DVlgQLOGPfzjtV2sr7QRWxafCqmqEB2pb
Cryoxy55o+H3C9L5knxx5VJ1jMmNC+vFMHuXTXuykSxklQDFAbfYjSn/og09hUrW
XWIHNJibvg2eE8+F513XnC/l1Ym9WGUw90kVabf4KIy3LurQsXYE2U/U8jtG1K3C
42LEcy/+YkRYdO9ldR0SZHsVPoGvLM95ITJdNdpuRc7Fgl+qqyZCQLiSzREoY7v1
anWJAsvOzPodDQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 11:31:04 2025 by rpki-client