Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
File:                     b8UNDUIGe3arGi6OUz_4SbZdVvU.mft (raw, json)
Hash identifier:          7bBcdBxW+nWPW0zfniiTu1phuYRMeuVtaekqBvSnY1E=
Subject key identifier:   35:30:FD:27:CD:48:58:5E:B7:08:EA:38:3C:31:0B:3D:69:D8:54:4B
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Certificate issuer:       /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial:       01983BA943224DA6BDFB6E8E45D81892053B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
Manifest number:          1622
Signing time:             Thu 24 Jul 2025 09:00:05 +0000
Manifest this update:     Thu 24 Jul 2025 09:00:05 +0000
Manifest next update:     Fri 25 Jul 2025 09:00:05 +0000
Files and hashes:         1: 0Abj6PSR4FyJUqM6LoN6KFa-26E.roa (hash: 3N4/akmiC/u7gL1HF+D/mYuikLJRGoPmYVruDqzajtA=)
                          2: 1-HYjW61poyKPMhvfx7U4CngkbXQ.roa (hash: FgaQ7pllPxrtYs+K7a4T0YujtsmGhQlX0nAW+eszuLQ=)
                          3: 1X78ozO3_5ULJTTX4ARholYkMtY.roa (hash: 1YfjPO55+mmSYnYEpQNn/8Y7Ymp0JTDMtIPTDKYWHh8=)
                          4: 3yeC5jM2ksuqKR2Zh5IvhgGT7kM.roa (hash: aly6yVEpJfsikwPOCEOA8sYqzyulJ58cobvGMlp3Pfc=)
                          5: ESsRo9MaF3o9GqzJvXZpu73We6Y.roa (hash: UaGHPYsyEVFFkrfNGoMdaOZN1uzCFEON6PTFyG+oUvY=)
                          6: H6AhUHbx8OlryRkBD15AK_97AFI.roa (hash: aVuSxMtEE3jtCIFUPkZzKs9s0u5aGihLcG9skQiW4iU=)
                          7: IE5Ot6kXSpSm_XTJaCWCEcClZ1E.roa (hash: ecVDNUR7HlsILjWVcvUtVx/095hxRc4P38CIzJWANj8=)
                          8: K8brr-FPsMEnGF0kbZo88qS6lTk.roa (hash: qW/T11RMV283PJtyNsGcccWeoOYrXus8SlIyII3hPJA=)
                          9: OQtVR-cBTyQL6VvIXAOtawOW2cA.roa (hash: Y4JxghrLsZ564AFIbmlJP5QHypmTlarb7NM9FNTmN7A=)
                          10: RzzP2UDDSAPrZWNFm6aBz91iMgQ.roa (hash: 1RDkfiEzt2ZEB4LXorNIAFk4fcDKeMEBcQ7w1edzRtU=)
                          11: UND6ykiM5N2Whk6faH2bgr5_Tp8.roa (hash: 5dH/g9DexAH0bhxx/mr0h3rPJ5N5miOI47JiKbqWBiU=)
                          12: XKHgN2jT3_6QMfOgHKrS1JlPtdM.roa (hash: 0/lku7LnO6lIZwW3HNYBW2LCc3aSui+jPA3GCkogDfQ=)
                          13: b8UNDUIGe3arGi6OUz_4SbZdVvU.crl (hash: pNDlqCnoEXseXFg3ltElNEg0uJQj5TIVIBmVikPvqE8=)
                          14: hz97jgo9bqt0uT-ArAt9KzOXsP4.roa (hash: bhze+d6pD3xd6tpzBiM9HUGCjaef6tJylvnHETr5GxE=)
                          15: iNYkqcS0PNGby4-GJu8UVMQggRY.roa (hash: nyGk+qZgZIHoVA2y4TNTNY21X6xYGa600Okb1SMJu44=)
                          16: wEFBReYub_TeCbtnkjQHEDS6zaQ.roa (hash: 5e2lfQsxA6BsgP6dDtPIK0Ql9foij6lPOeMn2Q1JhkI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 08:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3b:a9:43:22:4d:a6:bd:fb:6e:8e:45:d8:18:92:05:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
        Validity
            Not Before: Jul 24 09:00:05 2025 GMT
            Not After : Jul 25 09:00:05 2025 GMT
        Subject: CN=3530fd27cd48585eb708ea383c310b3d69d8544b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:af:de:4f:6e:9a:23:f5:3a:73:48:f3:8d:97:
                    21:b4:d8:6d:86:46:40:01:87:9e:0d:fa:93:23:67:
                    49:86:ba:70:f6:86:b4:9c:1f:44:0f:7e:de:7b:c1:
                    20:91:d4:b3:ad:93:46:5a:3b:65:be:6c:c6:eb:55:
                    7a:78:58:90:a9:7d:68:93:d1:70:39:38:b6:89:13:
                    72:3d:a6:1d:05:99:66:6a:25:63:05:16:25:8e:f9:
                    cf:16:0a:0b:5f:41:67:59:c9:b5:0b:04:7c:f1:5e:
                    f7:37:b9:a2:8f:97:5e:58:18:75:8d:22:7f:a0:01:
                    aa:5b:5f:fc:53:15:10:76:5a:21:00:7a:35:5d:f9:
                    9b:ab:e5:51:9b:5c:95:85:1a:77:cb:6d:58:46:1f:
                    9f:64:75:57:1c:3f:3b:ce:f4:a0:8e:8f:c8:d8:08:
                    86:c9:4a:a7:31:dc:b8:2f:73:1c:15:45:17:cd:5f:
                    de:8f:c1:c0:34:98:21:48:37:e9:3a:2a:5e:b1:7c:
                    60:df:b3:6e:65:04:fa:c7:4e:2f:29:c4:ee:43:1b:
                    d5:49:1b:86:61:91:59:8b:7f:1e:37:51:8c:83:99:
                    a9:15:d2:28:20:4f:15:d3:83:4a:c4:a1:d0:51:54:
                    69:6e:2d:38:ef:0f:5d:55:3a:f6:ac:00:ee:a3:71:
                    47:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:30:FD:27:CD:48:58:5E:B7:08:EA:38:3C:31:0B:3D:69:D8:54:4B
            X509v3 Authority Key Identifier:
                keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:02:c5:09:d0:e3:b7:74:e8:a3:94:63:43:cc:fb:c5:13:38:
         4c:00:a8:c5:63:1d:51:f1:fd:f6:0e:d0:39:e6:bc:a3:26:c8:
         f2:dd:3e:67:7f:69:c5:ad:84:75:4c:5d:3d:9b:2d:94:11:a8:
         12:50:00:ab:31:ac:20:08:6f:50:a7:bb:b3:02:c1:9e:de:20:
         c0:5a:ff:67:a9:15:7a:bd:61:3d:93:07:53:d6:60:a6:3b:ae:
         b2:58:3a:40:d9:a6:89:b7:3a:be:06:cb:bb:db:cf:5a:c1:2e:
         8e:01:af:df:6c:f8:51:0f:cb:64:be:fd:13:cc:3b:28:40:df:
         9f:d6:f2:70:13:a7:96:1b:e1:7e:7f:d7:6d:e2:8c:a9:31:3f:
         d8:34:fa:9c:17:b0:4e:12:02:00:19:92:b1:dc:82:92:a2:6b:
         d1:dd:30:fe:f4:98:ee:cf:11:ec:51:81:1d:0d:8d:e0:2d:45:
         38:0d:8a:b0:ce:6c:5b:e0:c7:2d:79:e5:94:0b:af:f5:69:80:
         5d:3f:1b:f1:03:5e:d1:31:04:02:78:a3:48:a6:43:b9:5c:96:
         9b:68:17:54:1c:21:06:d5:ff:45:02:50:18:12:83:12:bf:80:
         7d:5d:14:c2:5b:ee:df:34:9a:0c:8f:ac:c7:6d:1b:9e:24:72:
         22:d4:6e:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg7qUMiTaa9+26ORdgYkgU7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1
ZDU2ZjUwHhcNMjUwNzI0MDkwMDA1WhcNMjUwNzI1MDkwMDA1WjAzMTEwLwYDVQQD
EygzNTMwZmQyN2NkNDg1ODVlYjcwOGVhMzgzYzMxMGIzZDY5ZDg1NDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6/eT26aI/U6c0jzjZchtNhthkZA
AYeeDfqTI2dJhrpw9oa0nB9ED37ee8EgkdSzrZNGWjtlvmzG61V6eFiQqX1ok9Fw
OTi2iRNyPaYdBZlmaiVjBRYljvnPFgoLX0FnWcm1CwR88V73N7mij5deWBh1jSJ/
oAGqW1/8UxUQdlohAHo1Xfmbq+VRm1yVhRp3y21YRh+fZHVXHD87zvSgjo/I2AiG
yUqnMdy4L3McFUUXzV/ej8HANJghSDfpOipesXxg37NuZQT6x04vKcTuQxvVSRuG
YZFZi38eN1GMg5mpFdIoIE8V04NKxKHQUVRpbi047w9dVTr2rADuo3FHTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUw/SfNSFhetwjqODwxCz1p2FRLMB8GA1UdIwQY
MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt
M2MxNmZmODQxYWIyLzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy
LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlwLFCdDj
t3Too5RjQ8z7xRM4TACoxWMdUfH99g7QOea8oybI8t0+Z39pxa2EdUxdPZstlBGo
ElAAqzGsIAhvUKe7swLBnt4gwFr/Z6kVer1hPZMHU9Zgpjuuslg6QNmmibc6vgbL
u9vPWsEujgGv32z4UQ/LZL79E8w7KEDfn9bycBOnlhvhfn/XbeKMqTE/2DT6nBew
ThICABmSsdyCkqJr0d0w/vSY7s8R7FGBHQ2N4C1FOA2KsM5sW+DHLXnllAuv9WmA
XT8b8QNe0TEEAnijSKZDuVyWm2gXVBwhBtX/RQJQGBKDEr+AfV0Uwlvu3zSaDI+s
x20bniRyItRuHQ==
-----END CERTIFICATE-----
Generated at Thu Jul 24 11:54:37 2025 by rpki-client