Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft
File:                     rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft (raw, json)
Hash identifier:          1QyTV9117Vg4J7pS7B+RNdm65CjqTgjWeWCzgplNorw=
Subject key identifier:   80:2B:F2:89:A5:B9:C0:F0:3E:1A:F8:05:29:C1:F3:FE:59:DF:11:6A
Authority key identifier: AE:D6:EF:17:E6:F9:51:81:89:0E:54:D0:00:A2:AC:8F:F2:D2:49:9B
Certificate issuer:       /CN=aed6ef17e6f95181890e54d000a2ac8ff2d2499b
Certificate serial:       019853441ACCE09E64A8924C385ABA1AB4AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft
Manifest number:          1606
Signing time:             Mon 28 Jul 2025 23:00:28 +0000
Manifest this update:     Mon 28 Jul 2025 23:00:28 +0000
Manifest next update:     Tue 29 Jul 2025 23:00:28 +0000
Files and hashes:         1: T4ejI0o1-ZTfFiV7QKtB9D7UcpE.roa (hash: GaQ0ytKrYJcgBIWcbLoASBPxVTSW9++rXI3zKEi5m5Q=)
                          2: rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl (hash: 07dHrLPQRcy859FhCZe9t6fEkyAjg2AEUAxVGHXebAE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:44:1a:cc:e0:9e:64:a8:92:4c:38:5a:ba:1a:b4:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aed6ef17e6f95181890e54d000a2ac8ff2d2499b
        Validity
            Not Before: Jul 28 23:00:28 2025 GMT
            Not After : Jul 29 23:00:28 2025 GMT
        Subject: CN=802bf289a5b9c0f03e1af80529c1f3fe59df116a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:5e:ab:ac:91:65:d8:b8:67:4d:f6:d2:b8:93:
                    28:75:9d:31:80:54:4b:47:56:c6:0b:5e:9e:24:1b:
                    9e:e9:5f:ca:57:73:42:ee:d6:37:f1:d7:79:4e:c8:
                    eb:5e:74:fe:6f:e3:08:71:bf:11:17:37:b7:38:b8:
                    7c:77:7b:e5:b3:a9:98:88:40:cb:e7:98:0a:15:a3:
                    5d:92:49:7b:4d:0e:11:df:37:0c:31:d1:64:97:ed:
                    30:5b:07:a8:1c:e1:b1:8b:4f:5c:f5:8a:66:b8:c1:
                    a8:24:3c:52:6a:04:38:20:43:fe:6e:9f:c6:8c:24:
                    03:53:3b:e6:e8:4b:f9:89:3c:19:55:cc:10:8b:bf:
                    80:b2:ee:8e:24:f3:b7:d0:10:50:9e:f5:24:37:fd:
                    da:35:c3:fd:2e:22:f4:86:9b:8d:77:c1:5e:3a:9e:
                    c9:aa:9f:67:8d:21:cf:b2:15:05:fb:a6:f6:a7:a6:
                    33:63:d7:74:4c:01:f7:06:1c:f7:88:a8:6a:5c:d2:
                    aa:5c:5b:8b:36:23:55:5a:a3:24:d7:b1:22:d2:50:
                    8d:b7:99:d7:10:0e:58:52:19:14:8e:08:eb:53:a8:
                    6b:87:53:95:b4:56:29:a4:d9:b8:42:23:59:98:e1:
                    3c:00:4d:40:2f:f4:d1:8d:5c:ca:a4:20:00:2a:f3:
                    ea:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2B:F2:89:A5:B9:C0:F0:3E:1A:F8:05:29:C1:F3:FE:59:DF:11:6A
            X509v3 Authority Key Identifier:
                keyid:AE:D6:EF:17:E6:F9:51:81:89:0E:54:D0:00:A2:AC:8F:F2:D2:49:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:59:d1:85:96:ee:44:cb:f2:9d:f1:03:8c:31:dc:9a:4a:93:
         eb:f8:ae:f6:79:a8:2a:8d:6e:7c:e1:ea:85:b5:6f:22:31:dd:
         84:0e:1c:db:16:41:0a:52:cf:d2:ac:1f:75:5e:f5:70:85:fb:
         86:7f:90:58:e4:3e:13:62:71:ce:51:71:12:af:df:17:e0:42:
         3a:cc:49:30:bd:b8:76:13:18:71:49:f8:53:b1:a2:4c:62:68:
         9b:21:c1:95:5e:d3:2a:6d:a2:3b:70:0c:af:48:5d:f7:8b:79:
         65:a6:7f:32:f6:63:46:d4:e5:7a:36:fe:c2:c6:c5:72:5a:b4:
         b0:92:56:7e:e2:27:d0:42:51:33:ce:d7:f0:d5:d4:90:19:31:
         e0:93:87:4e:5f:0a:09:c1:8e:e5:70:f2:f5:be:ff:dd:d3:6b:
         7f:bf:62:c4:33:2b:9c:25:d4:6d:12:dd:de:ac:f6:f6:46:5d:
         7c:f0:f6:0a:6a:52:aa:55:82:ea:f2:72:52:c8:e3:e3:a8:49:
         0c:0f:5d:7a:10:ce:f0:14:3b:cd:43:5a:7b:6f:d1:dc:15:92:
         7b:a6:4a:d4:b4:72:6c:f1:a7:2d:75:fe:fc:4c:60:e2:0b:69:
         44:d7:65:03:18:1e:3e:96:0a:e2:54:4a:a2:b9:42:c6:bf:03:
         c6:f1:da:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTRBrM4J5kqJJMOFq6GrSvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZDZlZjE3ZTZmOTUxODE4OTBlNTRkMDAwYTJhYzhmZjJk
MjQ5OWIwHhcNMjUwNzI4MjMwMDI4WhcNMjUwNzI5MjMwMDI4WjAzMTEwLwYDVQQD
Eyg4MDJiZjI4OWE1YjljMGYwM2UxYWY4MDUyOWMxZjNmZTU5ZGYxMTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7l6rrJFl2LhnTfbSuJModZ0xgFRL
R1bGC16eJBue6V/KV3NC7tY38dd5TsjrXnT+b+MIcb8RFze3OLh8d3vls6mYiEDL
55gKFaNdkkl7TQ4R3zcMMdFkl+0wWweoHOGxi09c9YpmuMGoJDxSagQ4IEP+bp/G
jCQDUzvm6Ev5iTwZVcwQi7+Asu6OJPO30BBQnvUkN/3aNcP9LiL0hpuNd8FeOp7J
qp9njSHPshUF+6b2p6YzY9d0TAH3Bhz3iKhqXNKqXFuLNiNVWqMk17Ei0lCNt5nX
EA5YUhkUjgjrU6hrh1OVtFYppNm4QiNZmOE8AE1AL/TRjVzKpCAAKvPq/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIAr8omlucDwPhr4BSnB8/5Z3xFqMB8GA1UdIwQY
MBaAFK7W7xfm+VGBiQ5U0ACirI/y0kmbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnRidkYtYjVVWUdKRGxUUUFLS3NqX0xTU1pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jN2VhMWYtYWEyNy00YWM4LThjYTct
MGFlMGYxYWNjZGE0LzEvcnRidkYtYjVVWUdKRGxUUUFLS3NqX0xTU1pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9jN2VhMWYtYWEyNy00YWM4LThjYTctMGFlMGYxYWNjZGE0
LzEvcnRidkYtYjVVWUdKRGxUUUFLS3NqX0xTU1pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIFnRhZbu
RMvynfEDjDHcmkqT6/iu9nmoKo1ufOHqhbVvIjHdhA4c2xZBClLP0qwfdV71cIX7
hn+QWOQ+E2JxzlFxEq/fF+BCOsxJML24dhMYcUn4U7GiTGJomyHBlV7TKm2iO3AM
r0hd94t5ZaZ/MvZjRtTlejb+wsbFclq0sJJWfuIn0EJRM87X8NXUkBkx4JOHTl8K
CcGO5XDy9b7/3dNrf79ixDMrnCXUbRLd3qz29kZdfPD2CmpSqlWC6vJyUsjj46hJ
DA9dehDO8BQ7zUNae2/R3BWSe6ZK1LRybPGnLXX+/Exg4gtpRNdlAxgePpYK4lRK
orlCxr8DxvHaZQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 07:28:57 2025 by rpki-client