Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
File:                     bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft (raw, json)
Hash identifier:          fImpt6po+Gw6byiuRWyNcNYyXMi9/Bfh8F6ZzqM4hSs=
Subject key identifier:   0C:E5:1D:46:F6:DB:6B:54:4B:BC:4E:17:E7:BA:F7:8D:12:EF:5C:84
Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
Certificate issuer:       /CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Certificate serial:       01983A60207B64C483E1567AE2625E00C0FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
Manifest number:          0900
Signing time:             Thu 24 Jul 2025 03:00:35 +0000
Manifest this update:     Thu 24 Jul 2025 03:00:35 +0000
Manifest next update:     Fri 25 Jul 2025 03:00:35 +0000
Files and hashes:         1: EEK5h733GgwCs0WLVpqLrGo9ZG0.roa (hash: N2crl3QJ7UnqksAKF6ONENjAw+MlaZ++wJWtHpcZCCo=)
                          2: EeRJfPRF7a3wwh-vbetINiCYobw.roa (hash: OhoqMaZazc1P2Azp0jTNViTiYycEgII0m+//TdrzOFM=)
                          3: FH5Q9q8W97sT8KI6dnVLsWRFSWI.roa (hash: cG5saZlMgIPtVR/sqZPiRHaKVKsi9yK/Kza4DxhSY5I=)
                          4: J8OV6sWb08R90TMyBueJQSzBQfs.roa (hash: kHoZa6hyYf5NS9P0kFkvBZ2kHqlOD6SQE3IhW/5skoU=)
                          5: L-zAQKQylAwMOWOD8KogBSnuStI.roa (hash: BIslxPlAV+Qa2N9u4A+l71nINfewXHqfB8ShkpyQ/fE=)
                          6: Tr2lFtVHl_6azdLf4MhlzHjBXeI.roa (hash: TNlarbzWV21tOljiHNGKSTQFIJSJA906zY/LVf//P2c=)
                          7: URtx2Qs2hmoNbexNjDCH87s_d7U.roa (hash: aGVY4s+OAba7NfmkmxPvmFp/W9HemkPnjycLftzsaqw=)
                          8: X2rACUC1DNfg5wWXCDcFu7ZLgEw.roa (hash: g7h8t2fvA2uFR3cdj4CAvCvbd9J1/DKm+OiMSTwzs84=)
                          9: aEYrq5OTszYCkrQCOg6UNIZ4ixg.roa (hash: NnX8w21s85sec40Tib0/WU4IMC7GCNy++WkrtuMHZBQ=)
                          10: b9VdPpDdBNcdj9AHIrIZzSw6ufI.roa (hash: CbCURFE9hdZB2JAB/+EmF2z3GhY68Qqk8qinRoqy/Rw=)
                          11: bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl (hash: jdejNtJv7I4KqouUk+Z9gAFkYwJbywhgHN4tEj0YFAI=)
                          12: iDTqLQGlZf0o0g616HIqRtwNiYs.roa (hash: TywFJSy0+ByfjWm+cngApzau6nnLlHrdsw/oJofNjeY=)
                          13: ppb7zwfGhsGHXV4qIGbEGzExlww.roa (hash: rrX4uS4Q47f8xCuszkUdxiXV8rHUapmYAN7FcML9vnU=)
                          14: q5jXlLRnj1O9XNEsXWJiZvFix4Q.roa (hash: fY9qxhHv3XqDW4QnA8I34U/oM+UJ7gy//X5if4F4mCk=)
                          15: rQMc8tlbD24MLedawDrFjbFwrbU.roa (hash: 96Ec+H4X1QQDrOAwkuHuDNv0NdIpnRkAMRD5A4fFZtA=)
                          16: tryiJsr_1C6Wl6lmV6_fRxv9JpU.roa (hash: p0acgkVQIk/SEvXPYgI9n2gjSFwqTpydiov8yUCFYeQ=)
                          17: yc556VZRN51TX5Opo32pMpmaqyc.roa (hash: JUEUgIf6cuFn4ydX3ZXU1bMUG5S/hNysKafNtqmmPcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 03:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3a:60:20:7b:64:c4:83:e1:56:7a:e2:62:5e:00:c0:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535
        Validity
            Not Before: Jul 24 03:00:35 2025 GMT
            Not After : Jul 25 03:00:35 2025 GMT
        Subject: CN=0ce51d46f6db6b544bbc4e17e7baf78d12ef5c84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fa:2e:9b:f8:54:6e:da:0c:9a:d3:c8:1a:6e:
                    2a:9e:d5:25:89:e1:b6:11:2e:47:53:87:20:d2:65:
                    9c:88:7c:2a:bf:e9:87:77:da:29:64:d7:70:e0:c4:
                    b0:73:88:9c:ab:19:d4:3c:ae:81:8d:d8:a0:a3:e5:
                    0b:91:12:10:58:e1:bb:04:48:03:fd:c2:f6:04:e5:
                    0c:10:ea:e6:1b:72:df:61:90:13:a9:88:e4:1c:81:
                    06:c4:f0:a4:45:c7:3f:a1:cc:2b:cf:6f:17:fc:03:
                    30:f5:ac:e1:83:92:41:4e:e1:0c:5d:60:ee:47:e4:
                    17:ff:ca:b6:d6:9e:7e:33:55:fa:4a:d3:de:95:67:
                    c3:36:0d:16:07:bf:0f:50:84:76:14:a6:06:f7:7a:
                    19:fb:90:74:52:7f:4a:7b:49:99:18:d4:eb:63:ab:
                    e1:dd:b8:fd:88:06:b8:5e:53:cd:89:ea:86:46:f0:
                    79:e7:04:b4:26:04:0b:83:19:84:a9:3c:fd:e8:e0:
                    6f:ab:fd:41:3e:69:77:a7:47:93:e3:99:ed:b2:52:
                    c1:d2:6b:6a:e3:81:3c:e6:ea:11:99:14:42:9a:b7:
                    11:f5:39:83:35:34:a3:d8:62:b8:69:d4:ce:b0:4f:
                    79:e0:03:22:0c:07:a8:b0:56:da:e8:47:35:e1:54:
                    08:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E5:1D:46:F6:DB:6B:54:4B:BC:4E:17:E7:BA:F7:8D:12:EF:5C:84
            X509v3 Authority Key Identifier:
                keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:c3:83:3f:0b:81:8c:2e:fd:d2:b6:97:f1:c2:9e:e6:01:61:
         5f:06:64:b5:be:7b:e6:6e:6e:15:f5:ac:96:e3:54:74:47:d2:
         e0:cf:5a:fe:eb:c9:f1:69:2a:58:9d:bf:37:b7:19:4b:32:8f:
         fa:38:f6:87:4d:7e:cc:c8:77:9d:7f:9b:18:df:6e:57:4c:36:
         28:95:cc:9a:36:df:d3:b1:b7:24:a9:cc:59:19:72:fc:1b:bb:
         b1:11:7d:96:4a:4f:39:ab:8f:b7:f7:c7:dd:88:b6:be:4f:66:
         da:f0:ef:ee:13:8b:fd:4f:7d:b9:61:5c:3d:03:c5:62:75:87:
         3d:fc:03:3e:00:6f:f5:94:a8:8f:c1:06:93:f5:60:b9:e6:ee:
         35:20:74:56:9d:29:e0:72:3b:cb:9a:c2:03:21:56:d9:71:ce:
         5e:78:53:24:46:a9:69:e5:3a:c5:30:c0:d8:ff:2a:d2:8d:98:
         d2:44:af:ec:87:01:c7:b7:4a:3b:84:75:29:64:94:b2:24:83:
         81:31:ec:05:a4:c3:8d:59:a4:45:8b:2f:56:d6:bb:1f:bc:27:
         77:13:6d:cd:fd:58:c5:a1:e0:ea:87:ee:09:cb:f2:5a:d1:0c:
         e2:9c:6c:f2:78:45:39:f3:62:29:45:36:38:96:e0:47:d3:a5:
         36:53:3b:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg6YCB7ZMSD4VZ64mJeAMD9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMDg4Y2VmMjhlMDJhZjdkMDBmMjk3ODE2YzU1ZjhlM2M0
M2Q1MzUwHhcNMjUwNzI0MDMwMDM1WhcNMjUwNzI1MDMwMDM1WjAzMTEwLwYDVQQD
EygwY2U1MWQ0NmY2ZGI2YjU0NGJiYzRlMTdlN2JhZjc4ZDEyZWY1Yzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfoum/hUbtoMmtPIGm4qntUlieG2
ES5HU4cg0mWciHwqv+mHd9opZNdw4MSwc4icqxnUPK6Bjdigo+ULkRIQWOG7BEgD
/cL2BOUMEOrmG3LfYZATqYjkHIEGxPCkRcc/ocwrz28X/AMw9azhg5JBTuEMXWDu
R+QX/8q21p5+M1X6StPelWfDNg0WB78PUIR2FKYG93oZ+5B0Un9Ke0mZGNTrY6vh
3bj9iAa4XlPNieqGRvB55wS0JgQLgxmEqTz96OBvq/1BPml3p0eT45ntslLB0mtq
44E85uoRmRRCmrcR9TmDNTSj2GK4adTOsE954AMiDAeosFba6Ec14VQIcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAzlHUb222tUS7xOF+e6940S71yEMB8GA1UdIwQY
MBaAFG0IjO8o4Cr30A8peBbFX448Q9U1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYt
ZmVlOGVhZjczYjBkLzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYtZmVlOGVhZjczYjBk
LzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAesODPwuB
jC790raX8cKe5gFhXwZktb575m5uFfWsluNUdEfS4M9a/uvJ8WkqWJ2/N7cZSzKP
+jj2h01+zMh3nX+bGN9uV0w2KJXMmjbf07G3JKnMWRly/Bu7sRF9lkpPOauPt/fH
3Yi2vk9m2vDv7hOL/U99uWFcPQPFYnWHPfwDPgBv9ZSoj8EGk/VguebuNSB0Vp0p
4HI7y5rCAyFW2XHOXnhTJEapaeU6xTDA2P8q0o2Y0kSv7IcBx7dKO4R1KWSUsiSD
gTHsBaTDjVmkRYsvVta7H7wndxNtzf1YxaHg6ofuCcvyWtEM4pxs8nhFOfNiKUU2
OJbgR9OlNlM7bg==
-----END CERTIFICATE-----
Generated at Thu Jul 24 11:54:46 2025 by rpki-client