Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
File:                     kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft (raw, json)
Hash identifier:          S5E4265K02LkVfAOxGRaWuUygVtyw8cR+uFSxF/ClL8=
Subject key identifier:   37:00:63:93:73:F9:51:B0:ED:79:1C:95:79:71:6D:7A:AE:10:7C:71
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Certificate issuer:       /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial:       0198323978238DB17228663E87271F3EEC75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
Manifest number:          1603
Signing time:             Tue 22 Jul 2025 13:01:23 +0000
Manifest this update:     Tue 22 Jul 2025 13:01:23 +0000
Manifest next update:     Wed 23 Jul 2025 13:01:23 +0000
Files and hashes:         1: 0qAbgoW4LJAElFdWt9cFuw-rgn8.roa (hash: L8maPhEmT2n7X8a6uusm8vsVOaPlCBJtXIkemnm/t10=)
                          2: 26WNO431X2DrhCSuMJxs-XhHdFw.roa (hash: NIeRGI1yKvtGj8sFMzxTqCRVywS0D7qHUOhHSF/o4Dg=)
                          3: FLQOSktOr1hKjG4R6lRrGTwu4Y4.roa (hash: HCxQYiPGo2KxnCSlrWXoWcHI4W9ZFCE3iBJWeLRX1o8=)
                          4: MTxciv5mcC6g5MkOWJ_PCLUtcGw.roa (hash: sgzh4uhlDpWhAHL+IAu4cgWAxT/K2/Pct3jSfOVM8NQ=)
                          5: W4Pp1uZLNY6O8zypTnIooV8OKUw.roa (hash: sz2YvKmGzTepzQeb00hlOadIcmBeFimSpx3Uqur21uI=)
                          6: Y1uBCw2ID0YyZ99v-Z_lyCH99eg.roa (hash: cjULbx6P7MvMK4WANKsBKAVbb7nETAlX3DivVasETiQ=)
                          7: bCiizil2Ey8Pvh56RnqDgTk8X7Q.roa (hash: phspsqh/4y98JzmGzw3HpShtGGUJNNv7gxCq93gvxKo=)
                          8: gyBoR0Pr1cH4RPdcxzglRlFRHBw.roa (hash: 3pblEbuyEQGeT8WjyqKPo8c9UE3z9FtuOT2bJKOYqhg=)
                          9: kj7kinsfLRhL_IoV619KJi8FFL8.roa (hash: PZmgxN8/Rtu6BsEbQsN7jkEXwA4RX6FBccLjt1dXYy4=)
                          10: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl (hash: 3NehXCjcoqY/DhCb5WjVrWLiPl8F8U6CY8SfBqpDs9k=)
                          11: ntJH0KRoZucW8VNuwTIHrnSnlKg.roa (hash: 09HbUbUgEiRqWzx65FOtxruuV31mRSjgz3dJWoNx5nA=)
                          12: pgkZmq53mdBn0axql3jHx0EQjb0.roa (hash: aQFrLEqXJ0R769ANrMlsyVSYn8plE/Z1heUQyyK64EM=)
                          13: rQI6zOSTMPr-5aSxylwS7FyovQ4.roa (hash: rfEafPW5O0SAZQwvAq0I4Fkx0LFGcfF/mHD1nsLYnQk=)
                          14: sjrvDPQwhWQPqwn6TmRlTLKuFYg.roa (hash: 1WK8IPxCTeSex8E0rLqfFDPE1ENBltlsB6VMf3gJcZY=)
                          15: u4G1_yF4TBBumrIYzOwiYZxivvM.roa (hash: KXapgrZ9J9YmS63vQiCaKhL0YwTkps2tWnrl3xdYLX4=)
                          16: uMHNQRmfBxlbvZLGtjT4gp4kg2M.roa (hash: F+fAKBuQq3PLDBu2sHTyZl1ELbNuh34xu5t/W6OjOpg=)
                          17: ywFfsakzP6gwg7h7Z-Y4enCkXVs.roa (hash: zQ4r7S3Ps9QMhK/S8Db/JFo0flSN41hhML8fbJu8SJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 13:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:32:39:78:23:8d:b1:72:28:66:3e:87:27:1f:3e:ec:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
        Validity
            Not Before: Jul 22 13:01:23 2025 GMT
            Not After : Jul 23 13:01:23 2025 GMT
        Subject: CN=3700639373f951b0ed791c9579716d7aae107c71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c1:69:98:6f:13:80:fc:1d:e9:88:f8:26:73:
                    0c:04:ad:98:43:8f:e8:b1:32:11:cb:b6:64:be:32:
                    ce:35:53:4b:2a:8a:91:c1:f4:f9:ec:9b:bd:da:9f:
                    06:94:35:26:50:39:6c:ce:79:ae:e9:f1:a6:63:93:
                    bc:dc:79:74:f5:5b:ac:01:cd:69:ea:38:bb:a5:4c:
                    95:0b:ef:8f:74:88:d3:19:17:c5:8e:1d:82:50:94:
                    d7:98:e2:58:91:4b:78:19:11:56:ba:77:b7:74:dd:
                    05:2d:e7:38:78:8b:7f:1c:90:76:35:e2:b4:2f:9f:
                    c6:77:3a:76:e5:08:cf:c9:9a:27:4e:23:c1:85:13:
                    3b:f6:5a:7a:af:21:39:0a:9a:f6:fd:55:16:14:c7:
                    ec:70:85:81:f3:39:e4:40:45:a0:de:45:8f:27:7b:
                    51:7a:6d:42:a9:83:59:d5:fb:8d:2b:f6:fa:30:cf:
                    0c:d3:f0:34:52:8d:f9:4c:d9:b0:c4:bf:8c:59:9e:
                    36:ff:79:c0:29:aa:c6:96:b1:fd:44:d9:b6:27:07:
                    8d:3d:f1:ac:bd:47:1c:e1:a6:f2:b7:5d:2d:f7:77:
                    e2:51:e3:e0:06:f6:04:38:ea:3c:f3:f0:1d:56:f2:
                    03:c9:ee:50:5e:d6:32:67:15:8d:85:45:98:77:3c:
                    43:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:00:63:93:73:F9:51:B0:ED:79:1C:95:79:71:6D:7A:AE:10:7C:71
            X509v3 Authority Key Identifier:
                keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:4c:0b:72:27:66:e5:04:04:9e:7a:67:3e:b2:21:e2:c2:e2:
         fd:1e:7a:05:f5:29:12:27:a5:9c:6b:18:eb:bb:2a:76:1e:e1:
         c6:93:a9:d2:ac:77:8a:10:9b:96:9f:6e:09:bb:43:aa:a9:cb:
         11:f0:4b:0f:1e:79:b3:c2:04:7d:d9:5c:5d:37:7a:c8:64:ff:
         e1:db:6f:fa:24:59:1f:47:7d:43:b3:55:5e:f5:52:c9:15:cc:
         c1:00:b3:c7:6d:21:09:c8:9b:2f:db:5c:dd:7b:ab:c6:b7:54:
         f9:14:9f:85:16:f0:1d:e8:09:f1:97:da:d3:21:7f:51:06:89:
         d9:c3:3a:f9:14:6f:73:fd:3a:23:81:07:5c:36:79:2c:b9:06:
         2f:53:c6:94:25:ea:5c:f0:71:5f:d8:f1:2b:0f:c5:b6:a5:7d:
         97:97:3a:e5:37:cd:0b:db:21:76:0d:20:c0:bc:c2:52:70:ea:
         fc:8b:6b:46:a7:db:3a:9f:be:2a:66:61:b7:34:95:05:f9:5a:
         e4:27:fb:b1:35:0b:c1:de:bc:55:ef:bd:fa:85:9b:aa:e0:2a:
         5f:fe:ac:05:ca:a1:a6:02:a1:52:95:ee:f2:3d:2c:22:be:72:
         1a:45:bd:ca:54:e4:2d:bf:7c:09:72:e2:ba:ac:90:0d:56:fe:
         38:6a:7b:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgyOXgjjbFyKGY+hycfPux1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYmY2NDY0Y2U2ZTE5YTRkY2Y4YTMyYjI3YTJmMWNiZTE1
NTEwNTUwHhcNMjUwNzIyMTMwMTIzWhcNMjUwNzIzMTMwMTIzWjAzMTEwLwYDVQQD
EygzNzAwNjM5MzczZjk1MWIwZWQ3OTFjOTU3OTcxNmQ3YWFlMTA3YzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8FpmG8TgPwd6Yj4JnMMBK2YQ4/o
sTIRy7ZkvjLONVNLKoqRwfT57Ju92p8GlDUmUDlsznmu6fGmY5O83Hl09VusAc1p
6ji7pUyVC++PdIjTGRfFjh2CUJTXmOJYkUt4GRFWune3dN0FLec4eIt/HJB2NeK0
L5/Gdzp25QjPyZonTiPBhRM79lp6ryE5Cpr2/VUWFMfscIWB8znkQEWg3kWPJ3tR
em1CqYNZ1fuNK/b6MM8M0/A0Uo35TNmwxL+MWZ42/3nAKarGlrH9RNm2JweNPfGs
vUcc4abyt10t93fiUePgBvYEOOo88/AdVvIDye5QXtYyZxWNhUWYdzxD0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDcAY5Nz+VGw7XkclXlxbXquEHxxMB8GA1UdIwQY
MBaAFJK/ZGTObhmk3PijKyei8cvhVRBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzct
YjUzZTMwZTE0MTJhLzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzctYjUzZTMwZTE0MTJh
LzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAEwLcidm
5QQEnnpnPrIh4sLi/R56BfUpEielnGsY67sqdh7hxpOp0qx3ihCblp9uCbtDqqnL
EfBLDx55s8IEfdlcXTd6yGT/4dtv+iRZH0d9Q7NVXvVSyRXMwQCzx20hCcibL9tc
3XurxrdU+RSfhRbwHegJ8Zfa0yF/UQaJ2cM6+RRvc/06I4EHXDZ5LLkGL1PGlCXq
XPBxX9jxKw/FtqV9l5c65TfNC9shdg0gwLzCUnDq/ItrRqfbOp++KmZhtzSVBfla
5Cf7sTULwd68Ve+9+oWbquAqX/6sBcqhpgKhUpXu8j0sIr5yGkW9ylTkLb98CXLi
uqyQDVb+OGp7kw==
-----END CERTIFICATE-----
Generated at Tue Jul 22 19:32:49 2025 by rpki-client