Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.mft
File:                     g_W9I77F0GOYM6kUGYXMV1OIbhY.mft (raw, json)
Hash identifier:          rOQix1oACIwUc6f+t90XGI3GN+s5fiS6Ya9jkVBj3pA=
Subject key identifier:   5E:94:31:3B:D2:30:D2:1D:64:0A:EA:BA:E9:B9:61:5D:D9:20:D4:33
Authority key identifier: 83:F5:BD:23:BE:C5:D0:63:98:33:A9:14:19:85:CC:57:53:88:6E:16
Certificate issuer:       /CN=83f5bd23bec5d0639833a9141985cc5753886e16
Certificate serial:       0198477811F46E8A758A1838C9CBC3AA5161
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g_W9I77F0GOYM6kUGYXMV1OIbhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.mft
Manifest number:          1601
Signing time:             Sat 26 Jul 2025 16:01:47 +0000
Manifest this update:     Sat 26 Jul 2025 16:01:47 +0000
Manifest next update:     Sun 27 Jul 2025 16:01:47 +0000
Files and hashes:         1: 1H2Y74rOLQCMhy2O3X9ouFiEkFY.roa (hash: fzT1x1Cd9KzjMSBAyqcBMyBoif3guu8C9asSN6fBGTo=)
                          2: g_W9I77F0GOYM6kUGYXMV1OIbhY.crl (hash: +lOXZq9gDO/islzagLn6eApQaJdpfDxgaWhUZLE951c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g_W9I77F0GOYM6kUGYXMV1OIbhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:78:11:f4:6e:8a:75:8a:18:38:c9:cb:c3:aa:51:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83f5bd23bec5d0639833a9141985cc5753886e16
        Validity
            Not Before: Jul 26 16:01:47 2025 GMT
            Not After : Jul 27 16:01:47 2025 GMT
        Subject: CN=5e94313bd230d21d640aeabae9b9615dd920d433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:40:36:8f:3d:19:4d:ce:fd:91:e1:a3:86:df:
                    75:d9:af:d1:75:13:f7:11:43:77:7a:4b:7c:5a:33:
                    bb:3c:dd:35:6b:26:10:0b:e1:d6:fe:1a:6b:ff:2b:
                    55:5e:0f:b0:04:af:e6:ef:61:22:8c:36:03:ab:41:
                    33:a0:ba:1f:58:4f:4d:b3:8c:c1:45:fb:3b:4f:76:
                    c9:6c:01:10:72:d2:f8:a5:5e:df:15:22:51:3e:95:
                    74:09:2f:77:9b:32:cb:da:fd:4c:1d:ba:43:1e:e6:
                    5e:e4:23:66:9d:e5:cd:cc:80:d0:b7:7c:e8:00:42:
                    8c:eb:57:ea:d5:50:99:b8:a5:d9:d7:09:91:f1:33:
                    d8:02:91:d8:35:c4:c8:f7:62:d6:c1:0f:a0:52:c3:
                    3c:30:21:ac:62:78:80:de:5e:71:e3:af:9d:e9:6c:
                    c5:ac:cb:3d:b4:ad:fb:46:fc:94:f0:91:66:27:21:
                    ee:58:b7:b5:78:b6:37:fc:b5:7a:78:15:a7:4d:b7:
                    81:1b:d2:57:cf:72:db:ff:93:87:fe:df:3f:fb:ed:
                    e3:93:71:b5:a3:59:ec:1c:17:7d:21:fa:01:0c:ae:
                    a7:6e:f9:05:cd:31:93:24:7f:8f:69:fa:f6:f4:9e:
                    4e:6e:bd:7b:23:d3:1f:63:e8:b3:c2:ba:81:e0:79:
                    42:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:94:31:3B:D2:30:D2:1D:64:0A:EA:BA:E9:B9:61:5D:D9:20:D4:33
            X509v3 Authority Key Identifier:
                keyid:83:F5:BD:23:BE:C5:D0:63:98:33:A9:14:19:85:CC:57:53:88:6E:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_W9I77F0GOYM6kUGYXMV1OIbhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:6f:3b:24:a4:2e:6f:6b:c6:4a:c4:b9:ae:02:33:7a:f4:ff:
         4c:69:6c:b2:8d:0e:de:e0:fd:ec:2a:a7:9b:53:d4:6d:6b:64:
         4e:18:7e:da:c7:d6:99:7a:89:42:3d:5c:48:00:06:84:08:22:
         b3:27:d1:97:45:74:b6:f3:60:a4:51:74:91:4a:3e:d3:95:40:
         52:56:c5:d8:d0:53:e0:a0:b3:18:69:14:61:fb:57:e1:70:9d:
         f8:38:53:6c:1d:73:34:09:8c:13:10:09:e1:8c:f8:48:0f:51:
         e5:a2:23:55:66:dc:58:60:6e:1a:d2:3c:34:ed:32:37:ac:af:
         98:2a:cd:05:6e:8a:2c:ce:40:03:2d:6d:ea:d2:2e:fc:cc:b0:
         02:65:56:53:5a:9d:39:44:1e:3d:69:61:71:be:d4:86:ff:12:
         17:6c:59:7f:57:eb:1c:3a:13:10:4b:a7:b6:11:b1:ad:63:19:
         7f:f2:c9:7a:e0:39:65:c4:68:b3:ff:d7:77:d6:ca:ff:69:3e:
         26:23:09:5f:35:9f:78:af:ac:d3:ad:48:43:6a:3c:60:25:bd:
         6a:41:02:d2:95:b7:e0:da:e5:66:0f:6a:5e:d6:e7:37:75:9e:
         a6:48:4d:13:60:05:9f:a1:01:ee:3b:1d:05:a1:33:13:26:13:
         bc:eb:3f:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHeBH0bop1ihg4ycvDqlFhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZjViZDIzYmVjNWQwNjM5ODMzYTkxNDE5ODVjYzU3NTM4
ODZlMTYwHhcNMjUwNzI2MTYwMTQ3WhcNMjUwNzI3MTYwMTQ3WjAzMTEwLwYDVQQD
Eyg1ZTk0MzEzYmQyMzBkMjFkNjQwYWVhYmFlOWI5NjE1ZGQ5MjBkNDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEA2jz0ZTc79keGjht912a/RdRP3
EUN3ekt8WjO7PN01ayYQC+HW/hpr/ytVXg+wBK/m72EijDYDq0EzoLofWE9Ns4zB
Rfs7T3bJbAEQctL4pV7fFSJRPpV0CS93mzLL2v1MHbpDHuZe5CNmneXNzIDQt3zo
AEKM61fq1VCZuKXZ1wmR8TPYApHYNcTI92LWwQ+gUsM8MCGsYniA3l5x46+d6WzF
rMs9tK37RvyU8JFmJyHuWLe1eLY3/LV6eBWnTbeBG9JXz3Lb/5OH/t8/++3jk3G1
o1nsHBd9IfoBDK6nbvkFzTGTJH+Pafr29J5Obr17I9MfY+izwrqB4HlCqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6UMTvSMNIdZArquum5YV3ZINQzMB8GA1UdIwQY
MBaAFIP1vSO+xdBjmDOpFBmFzFdTiG4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ19XOUk3N0YwR09ZTTZrVUdZWE1WMU9JYmhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9iMjM5N2MtYjM2ZC00NmEzLWEyNDAt
MWQ5YTE5ZjEyOTViLzEvZ19XOUk3N0YwR09ZTTZrVUdZWE1WMU9JYmhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9iMjM5N2MtYjM2ZC00NmEzLWEyNDAtMWQ5YTE5ZjEyOTVi
LzEvZ19XOUk3N0YwR09ZTTZrVUdZWE1WMU9JYmhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWW87JKQu
b2vGSsS5rgIzevT/TGlsso0O3uD97Cqnm1PUbWtkThh+2sfWmXqJQj1cSAAGhAgi
syfRl0V0tvNgpFF0kUo+05VAUlbF2NBT4KCzGGkUYftX4XCd+DhTbB1zNAmMExAJ
4Yz4SA9R5aIjVWbcWGBuGtI8NO0yN6yvmCrNBW6KLM5AAy1t6tIu/MywAmVWU1qd
OUQePWlhcb7Uhv8SF2xZf1frHDoTEEunthGxrWMZf/LJeuA5ZcRos//Xd9bK/2k+
JiMJXzWfeK+s061IQ2o8YCW9akEC0pW34NrlZg9qXtbnN3WepkhNE2AFn6EB7jsd
BaEzEyYTvOs/AQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 00:54:52 2025 by rpki-client