Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft
File:                     preJsy4W6d0vcFExGdx36mH_Hgk.mft (raw, json)
Hash identifier:          2sn/rpL3LV5sb31bgWCSYH3dhW0KWlSJ5iK8vgyxkoo=
Subject key identifier:   32:AE:98:90:FA:A1:14:8E:A7:49:77:AD:DF:D4:48:90:06:1F:5A:40
Authority key identifier: A6:B7:89:B3:2E:16:E9:DD:2F:70:51:31:19:DC:77:EA:61:FF:1E:09
Certificate issuer:       /CN=a6b789b32e16e9dd2f70513119dc77ea61ff1e09
Certificate serial:       0198462D9F243AA1432B69E11A062B4B091F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft
Manifest number:          1486
Signing time:             Sat 26 Jul 2025 10:00:51 +0000
Manifest this update:     Sat 26 Jul 2025 10:00:51 +0000
Manifest next update:     Sun 27 Jul 2025 10:00:51 +0000
Files and hashes:         1: 6R635Ptd67sQbUozDAHL15KwAZ8.roa (hash: FeJLdgD5f1a4PRbLvL4XZUcT1XCVqYv8DaI7m1HKYu4=)
                          2: BGlv0Nq1aORhjho_eomErpdENqs.roa (hash: tJlt0s+DB+Wx1B02lbAuTeaAFj/Rwy4EK+7+WopLHuY=)
                          3: EcvOEckBpGv8WcgKGLbyF5bYsw8.roa (hash: iM/JhqVxaPI3RLw6TbcIGYCT5pzlMW9q0BUKqfAvA2s=)
                          4: PHALUzcgKSrWpp9PLu5bWuqYals.roa (hash: ipz2KfdlfbDQbWsB2hP2+lgmuhx6HeNDSZnM+uKEXUI=)
                          5: k94_YS0wqPGUh9Li10sS34dlvmM.roa (hash: BUjj7NfQhPbheGokvO6j0wOKq8xKD5UoEM8obUQTSDg=)
                          6: preJsy4W6d0vcFExGdx36mH_Hgk.crl (hash: yIRPwQkCaB5zBOGUxB0AHfke8vSPTJ9PQMdVrYAAcrU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:2d:9f:24:3a:a1:43:2b:69:e1:1a:06:2b:4b:09:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b789b32e16e9dd2f70513119dc77ea61ff1e09
        Validity
            Not Before: Jul 26 10:00:51 2025 GMT
            Not After : Jul 27 10:00:51 2025 GMT
        Subject: CN=32ae9890faa1148ea74977addfd44890061f5a40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:02:04:f2:4d:dd:10:97:1a:5b:ff:9e:3a:3e:
                    89:68:98:a8:b8:a0:6e:15:e3:94:f2:0c:8b:85:5b:
                    a2:58:63:94:d9:e7:73:b5:6e:80:95:92:89:e0:a0:
                    ed:f2:1c:d0:52:b9:7a:76:75:24:41:ed:36:a3:3d:
                    6e:25:94:8c:c8:0f:3f:32:4f:01:d0:f1:0f:fa:fd:
                    d1:c6:08:8d:0e:ab:43:ba:30:38:75:a1:99:31:b0:
                    b3:1a:a1:09:b1:66:bc:a3:ec:fd:05:82:90:fb:c1:
                    b5:e0:ba:73:0a:69:11:c8:89:6e:ca:30:d2:cb:e9:
                    d7:cd:ba:63:79:a5:eb:3e:56:7c:32:3f:89:8b:ac:
                    a4:29:aa:ed:e7:85:96:e8:0a:d1:5e:b4:dc:0b:34:
                    b1:5d:65:b2:d1:fa:14:80:d8:66:67:23:f4:9a:dc:
                    7d:e7:34:11:58:c9:e2:c3:37:3d:5d:0b:e7:8a:e9:
                    8a:db:a0:5d:fb:25:53:a9:69:30:6b:18:93:ac:91:
                    42:1d:3e:75:3d:60:3c:77:7d:bb:fe:06:51:2e:19:
                    27:8b:f5:f4:46:23:c3:47:c6:94:3c:13:b5:9d:23:
                    c5:b3:38:97:db:51:d8:c3:49:11:3a:90:ed:e4:64:
                    ff:73:03:a1:1d:30:a6:11:75:58:2c:cb:13:64:a0:
                    f9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:AE:98:90:FA:A1:14:8E:A7:49:77:AD:DF:D4:48:90:06:1F:5A:40
            X509v3 Authority Key Identifier:
                keyid:A6:B7:89:B3:2E:16:E9:DD:2F:70:51:31:19:DC:77:EA:61:FF:1E:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:5d:55:f2:7d:26:14:94:c0:4c:ec:28:60:2a:a3:2c:48:59:
         97:f9:ae:69:c3:c0:8a:30:8d:66:76:ca:0d:71:fd:7c:45:c5:
         83:da:64:37:b2:f9:6f:4a:1a:3a:e7:5e:d6:3c:a3:24:6c:30:
         e7:f8:6e:61:3f:bc:e9:67:7b:77:e7:24:e8:c7:47:85:19:74:
         6d:47:f3:96:86:5e:58:1e:a1:76:99:56:44:2c:01:1c:16:36:
         a1:7f:2b:7b:bf:36:4e:f3:8d:d9:0c:fb:76:60:16:5d:d2:db:
         86:9a:ff:ca:75:2d:45:e0:75:cd:a4:11:c2:cf:a3:82:c2:2f:
         57:a9:4c:66:ae:63:68:1e:a6:ea:18:6e:5b:3d:13:56:64:6e:
         b3:b8:74:ec:30:fb:f7:33:b1:58:de:d0:c7:32:be:a7:e6:2c:
         b8:3b:49:7b:91:a7:cb:c0:73:47:37:9b:fa:96:88:be:9a:3e:
         f1:28:98:2a:77:2f:1b:76:1a:52:53:aa:32:f5:9b:99:12:c6:
         c8:ab:be:99:e0:15:2c:92:cb:2e:dd:4d:a1:34:9b:8d:2e:3b:
         9f:0c:be:4c:7e:11:a8:fd:95:b0:63:a0:ed:5e:f7:94:2d:a5:
         79:88:df:33:b9:88:cc:0a:79:42:6e:37:e0:e9:f4:88:72:16:
         4b:3f:7a:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhGLZ8kOqFDK2nhGgYrSwkfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2Yjc4OWIzMmUxNmU5ZGQyZjcwNTEzMTE5ZGM3N2VhNjFm
ZjFlMDkwHhcNMjUwNzI2MTAwMDUxWhcNMjUwNzI3MTAwMDUxWjAzMTEwLwYDVQQD
EygzMmFlOTg5MGZhYTExNDhlYTc0OTc3YWRkZmQ0NDg5MDA2MWY1YTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgIE8k3dEJcaW/+eOj6JaJiouKBu
FeOU8gyLhVuiWGOU2edztW6AlZKJ4KDt8hzQUrl6dnUkQe02oz1uJZSMyA8/Mk8B
0PEP+v3RxgiNDqtDujA4daGZMbCzGqEJsWa8o+z9BYKQ+8G14LpzCmkRyIluyjDS
y+nXzbpjeaXrPlZ8Mj+Ji6ykKart54WW6ArRXrTcCzSxXWWy0foUgNhmZyP0mtx9
5zQRWMniwzc9XQvniumK26Bd+yVTqWkwaxiTrJFCHT51PWA8d327/gZRLhkni/X0
RiPDR8aUPBO1nSPFsziX21HYw0kROpDt5GT/cwOhHTCmEXVYLMsTZKD5pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKumJD6oRSOp0l3rd/USJAGH1pAMB8GA1UdIwQY
MBaAFKa3ibMuFundL3BRMRncd+ph/x4JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHJlSnN5NFc2ZDB2Y0ZFeEdkeDM2bUhfSGdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lNzY4YmQtZjUxMi00YjhhLTkzNmEt
MDZjOTI5NmYwOGEyLzEvcHJlSnN5NFc2ZDB2Y0ZFeEdkeDM2bUhfSGdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9lNzY4YmQtZjUxMi00YjhhLTkzNmEtMDZjOTI5NmYwOGEy
LzEvcHJlSnN5NFc2ZDB2Y0ZFeEdkeDM2bUhfSGdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP11V8n0m
FJTATOwoYCqjLEhZl/muacPAijCNZnbKDXH9fEXFg9pkN7L5b0oaOude1jyjJGww
5/huYT+86Wd7d+ck6MdHhRl0bUfzloZeWB6hdplWRCwBHBY2oX8re782TvON2Qz7
dmAWXdLbhpr/ynUtReB1zaQRws+jgsIvV6lMZq5jaB6m6hhuWz0TVmRus7h07DD7
9zOxWN7QxzK+p+YsuDtJe5Gny8BzRzeb+paIvpo+8SiYKncvG3YaUlOqMvWbmRLG
yKu+meAVLJLLLt1NoTSbjS47nwy+TH4RqP2VsGOg7V73lC2leYjfM7mIzAp5Qm43
4On0iHIWSz96rA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:57:52 2025 by rpki-client