Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
File:                     vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft (raw, json)
Hash identifier:          T5k0fwM0hXoS+aQLGHXN4Ot3yuik/UrmVfo6dHpMFNo=
Subject key identifier:   CD:53:ED:EA:A9:7C:38:56:9C:1A:A7:AA:61:B2:72:62:3F:14:19:8F
Authority key identifier: BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B
Certificate issuer:       /CN=beb12ce6a91030e27d5abad146df27bc2880652b
Certificate serial:       0198530EEF55020BA433DB323B9735E3DC50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
Manifest number:          160C
Signing time:             Mon 28 Jul 2025 22:02:24 +0000
Manifest this update:     Mon 28 Jul 2025 22:02:24 +0000
Manifest next update:     Tue 29 Jul 2025 22:02:24 +0000
Files and hashes:         1: KDP9W_m_0hLGFtgf73aWlnZ_iQc.roa (hash: lcUH+LFQ+UVivSdKcSpqJQp9Eg8xuBIT9bPnxngbu68=)
                          2: KHg46KpwJnmv6hNomrXATVqpzV8.roa (hash: WJsuWbqQXojOAqeQ80N/VH6AOxmAzbUb+3keyWT7yfw=)
                          3: e7SUl4mSjdeGsAW__A2CvddXoNY.roa (hash: CZDiVjjgs0Krs+aiXIc/FeDFsKFYjTe8hPduuFN8E2k=)
                          4: vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl (hash: 5JPdi1Hxg7W6LkJ+2z6oO88Qx3CB5fjtf/okzWuwOOs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 22:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:0e:ef:55:02:0b:a4:33:db:32:3b:97:35:e3:dc:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beb12ce6a91030e27d5abad146df27bc2880652b
        Validity
            Not Before: Jul 28 22:02:24 2025 GMT
            Not After : Jul 29 22:02:24 2025 GMT
        Subject: CN=cd53edeaa97c38569c1aa7aa61b272623f14198f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9e:5d:e6:a5:dc:00:b2:f8:a4:3c:70:ac:9f:
                    dc:7b:43:b6:3e:8f:74:55:4d:f9:47:52:6b:55:de:
                    bf:94:3a:42:9d:f1:da:ee:a3:df:ed:9c:42:39:f2:
                    d8:1d:76:b1:08:d6:06:af:99:4c:81:17:bf:01:35:
                    e2:89:14:e4:5d:60:17:b7:e7:5c:61:d7:de:ba:88:
                    ff:e7:7a:42:db:d0:71:38:a7:3d:a5:15:a1:70:00:
                    33:bf:ca:52:52:8c:45:b7:76:d5:4d:0c:7b:57:18:
                    02:b5:01:d5:a0:f7:83:f8:4d:25:47:9e:12:74:fe:
                    c8:ea:4d:e9:87:d5:01:7b:06:31:b8:88:2a:77:d8:
                    fb:10:bc:13:29:2c:73:1d:f0:b8:28:5b:25:29:8b:
                    ef:0a:1f:36:ca:f8:8e:cb:e6:29:c7:17:44:a2:10:
                    47:5a:0b:d0:d1:57:bd:d7:ab:e4:9e:71:5d:08:45:
                    13:ca:6c:12:58:9d:b7:ce:29:57:35:7a:02:a8:0f:
                    22:1b:da:01:26:a0:2a:3c:1a:36:7f:c8:c5:87:a2:
                    7a:70:81:44:5d:95:71:1e:73:b9:4a:4c:d0:44:bf:
                    8b:49:da:4d:b5:d3:d1:8d:8b:73:70:c5:c3:d3:21:
                    0e:55:ee:65:f9:0d:4f:c8:0b:39:ae:18:62:a0:81:
                    de:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:53:ED:EA:A9:7C:38:56:9C:1A:A7:AA:61:B2:72:62:3F:14:19:8F
            X509v3 Authority Key Identifier:
                keyid:BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:49:f6:15:70:4e:7b:de:6f:a5:3e:e9:76:fc:ab:dc:d7:ab:
         97:ae:62:04:f6:21:14:42:50:0e:50:b9:2a:54:55:a3:1c:b8:
         e2:75:37:82:c7:97:d8:b0:6b:c1:9b:08:15:0d:37:fb:00:12:
         83:88:40:95:84:9d:11:fd:35:b5:c1:fb:f7:7a:91:3d:85:6d:
         45:81:cf:20:ef:07:e8:97:ec:e3:4f:f0:76:6f:fa:62:38:54:
         60:bb:9d:4d:54:0c:b5:d2:7c:ce:4a:c7:5c:13:85:7d:f0:cd:
         14:76:50:54:e5:90:a7:81:a6:f4:53:72:bc:f6:cd:19:21:81:
         c0:f6:96:62:71:3f:f7:bd:24:ad:b8:ca:9a:ca:f8:12:62:a9:
         4e:1e:70:af:6f:95:22:35:25:d4:4a:2a:e5:3a:3f:be:57:07:
         8b:2b:95:14:22:6b:e7:75:24:e2:92:29:38:35:a6:46:e9:13:
         df:a2:6f:c0:ee:dd:ff:fe:0f:32:e8:32:63:fd:af:a4:96:7e:
         80:74:47:a8:46:c4:fd:7e:95:9b:49:d6:dc:74:0d:90:b8:c8:
         49:cd:a5:51:80:47:38:71:63:35:10:f1:3d:9c:69:f4:5b:19:
         29:6e:b9:21:55:61:fb:b0:dc:d6:64:a0:f3:d8:32:90:f0:c8:
         9c:df:7b:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTDu9VAgukM9syO5c149xQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYjEyY2U2YTkxMDMwZTI3ZDVhYmFkMTQ2ZGYyN2JjMjg4
MDY1MmIwHhcNMjUwNzI4MjIwMjI0WhcNMjUwNzI5MjIwMjI0WjAzMTEwLwYDVQQD
EyhjZDUzZWRlYWE5N2MzODU2OWMxYWE3YWE2MWIyNzI2MjNmMTQxOThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZ5d5qXcALL4pDxwrJ/ce0O2Po90
VU35R1JrVd6/lDpCnfHa7qPf7ZxCOfLYHXaxCNYGr5lMgRe/ATXiiRTkXWAXt+dc
Ydfeuoj/53pC29BxOKc9pRWhcAAzv8pSUoxFt3bVTQx7VxgCtQHVoPeD+E0lR54S
dP7I6k3ph9UBewYxuIgqd9j7ELwTKSxzHfC4KFslKYvvCh82yviOy+YpxxdEohBH
WgvQ0Ve916vknnFdCEUTymwSWJ23zilXNXoCqA8iG9oBJqAqPBo2f8jFh6J6cIFE
XZVxHnO5SkzQRL+LSdpNtdPRjYtzcMXD0yEOVe5l+Q1PyAs5rhhioIHeiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1T7eqpfDhWnBqnqmGycmI/FBmPMB8GA1UdIwQY
MBaAFL6xLOapEDDifVq60UbfJ7wogGUrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnJFczVxa1FNT0o5V3JyUlJ0OG52Q2lBWlNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC83NDk0MGEtZDlmYS00NTUyLWJlNWMt
YTdhZGU0MzRkNDUxLzEvdnJFczVxa1FNT0o5V3JyUlJ0OG52Q2lBWlNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC83NDk0MGEtZDlmYS00NTUyLWJlNWMtYTdhZGU0MzRkNDUx
LzEvdnJFczVxa1FNT0o5V3JyUlJ0OG52Q2lBWlNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIkn2FXBO
e95vpT7pdvyr3Nerl65iBPYhFEJQDlC5KlRVoxy44nU3gseX2LBrwZsIFQ03+wAS
g4hAlYSdEf01tcH793qRPYVtRYHPIO8H6Jfs40/wdm/6YjhUYLudTVQMtdJ8zkrH
XBOFffDNFHZQVOWQp4Gm9FNyvPbNGSGBwPaWYnE/970krbjKmsr4EmKpTh5wr2+V
IjUl1Eoq5To/vlcHiyuVFCJr53Uk4pIpODWmRukT36JvwO7d//4PMugyY/2vpJZ+
gHRHqEbE/X6Vm0nW3HQNkLjISc2lUYBHOHFjNRDxPZxp9FsZKW65IVVh+7Dc1mSg
89gykPDInN975Q==
-----END CERTIFICATE-----
Generated at Tue Jul 29 03:57:12 2025 by rpki-client