Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
File:                     RsmLLko-Bg3vRavGLA40X6qAtew.mft (raw, json)
Hash identifier:          +YH1QL3Mrcx3OVAZE+e0Q/ieUaQOOsFFv9JziXRl+Eo=
Subject key identifier:   9F:DD:31:0F:E2:19:F7:BE:90:3C:2E:E8:39:B6:C6:9B:D6:6C:63:EF
Authority key identifier: 46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC
Certificate issuer:       /CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
Certificate serial:       01992D47301E62A2DDF7911DEEB8D670F5D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
Manifest number:          1674
Signing time:             Tue 09 Sep 2025 07:01:04 +0000
Manifest this update:     Tue 09 Sep 2025 07:01:04 +0000
Manifest next update:     Wed 10 Sep 2025 07:01:04 +0000
Files and hashes:         1: L0dTKkQLJ3uzLHQGVfykgpUct-Y.roa (hash: 5V6u+yE0dUBJcNB/BjBYWG3G1jW8CFnCJRPOVXm/+Pc=)
                          2: MQbRmyMiZ7drfjUV2srkSRdezP4.roa (hash: gjEdlX/wGs/3ibPMlMpi8lsSgsJHw2rwLC0B8NaMJ5Y=)
                          3: QZzbQhQ_hTZIcpg_dJkoU6Xnnto.roa (hash: ldOsJ7e5BAcbKryAIK3bxjb3zV/1t/RqgjAXr4tG6fc=)
                          4: RkiK4rh0-E_-W_HqKwRMEYj0Jsc.roa (hash: gqhP/twOb4neptA72hsuXyc44XyhAEB7mRcgXtdjn0o=)
                          5: RsmLLko-Bg3vRavGLA40X6qAtew.crl (hash: Jm2sLM+tzaxbUd1MGjvmBCFXDP9K093GGbpC2jhUzYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 07:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2d:47:30:1e:62:a2:dd:f7:91:1d:ee:b8:d6:70:f5:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
        Validity
            Not Before: Sep  9 07:01:04 2025 GMT
            Not After : Sep 10 07:01:04 2025 GMT
        Subject: CN=9fdd310fe219f7be903c2ee839b6c69bd66c63ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:68:97:d1:26:c5:22:cd:2b:50:cd:5d:4a:a2:
                    b5:31:ab:5d:73:aa:a3:0c:b0:02:79:f7:4c:fb:ed:
                    13:35:3a:c4:e8:b7:6a:b0:1c:fe:a6:cf:9d:d4:4b:
                    8e:9d:ef:f6:39:e3:c0:b7:ed:d2:a9:0b:25:23:fc:
                    8e:68:59:fe:6a:d9:fc:9c:f3:55:30:ef:07:cb:bc:
                    9e:ba:83:ce:b1:1b:d1:2a:48:af:4b:6d:61:1f:6b:
                    a7:aa:8c:ac:f0:7f:76:b9:e1:da:80:05:e6:d2:f1:
                    5f:eb:43:e6:45:90:bf:6a:14:7c:87:91:23:72:f9:
                    57:6d:29:c2:ee:80:55:bc:d7:f3:a4:18:a7:71:10:
                    92:4f:19:c9:0d:8a:ba:8e:db:57:81:6c:c9:dc:4f:
                    af:24:21:1f:3c:01:9a:49:d4:f5:1f:6f:ba:5f:c3:
                    99:07:8e:ae:89:0c:77:16:f3:9e:d0:32:4a:10:e5:
                    f8:cf:a1:d5:8d:87:9a:a2:e2:ce:bd:a5:fb:2e:69:
                    77:2f:47:80:3f:b7:9a:a3:e5:28:d1:2f:81:16:f9:
                    af:98:9b:83:e1:fd:e3:b7:05:c7:48:52:63:18:89:
                    d3:0b:34:6e:78:d6:b6:4a:20:14:1a:59:f3:d4:12:
                    13:0b:1a:82:93:4d:4f:01:15:32:1d:36:4d:8e:1a:
                    21:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:DD:31:0F:E2:19:F7:BE:90:3C:2E:E8:39:B6:C6:9B:D6:6C:63:EF
            X509v3 Authority Key Identifier:
                keyid:46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:cd:71:2b:32:8e:ab:c4:8f:a6:8d:c4:c2:1e:3d:c1:40:3a:
         3e:36:ef:ad:c1:a3:da:8f:71:3b:85:54:8f:1c:6e:9c:20:a3:
         7b:32:33:b6:cf:d9:ba:58:8c:4b:3b:90:6f:f0:ed:f7:4e:93:
         75:bc:d9:2c:d4:b9:8c:c2:0e:24:66:9a:7f:a8:15:77:4f:7b:
         e6:5c:eb:d1:6f:a8:f0:8f:65:8b:ac:be:5e:e7:cf:05:ed:5c:
         d0:e4:b2:61:49:8d:63:51:e7:47:b3:68:72:17:2a:0c:ce:a5:
         82:8a:a4:4e:cc:4d:a0:08:75:8d:9a:d8:a3:64:6a:d1:20:36:
         a1:12:0e:fa:67:94:d3:f7:0b:bb:90:a7:55:a3:0a:1b:70:07:
         52:f8:22:c1:5b:16:cd:77:fb:d6:16:8c:9e:59:81:38:d3:03:
         2f:6a:02:02:bf:d8:ce:ef:43:61:de:fd:4a:06:09:a4:0d:9f:
         a2:1d:f3:08:57:74:ce:0b:38:8d:e3:37:ae:3a:66:4b:26:68:
         df:31:db:ed:6f:11:05:12:45:69:5d:a0:8d:c8:9b:ce:5f:78:
         b4:78:66:4c:b0:c5:45:19:3a:6a:40:37:af:e0:55:a8:bf:cc:
         e0:2d:44:05:99:37:6d:8f:43:4a:0d:dc:b2:40:2e:2a:6e:29:
         3f:d8:98:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZktRzAeYqLd95Ed7rjWcPXVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2Yzk4YjJlNGEzZTA2MGRlZjQ1YWJjNjJjMGUzNDVmYWE4
MGI1ZWMwHhcNMjUwOTA5MDcwMTA0WhcNMjUwOTEwMDcwMTA0WjAzMTEwLwYDVQQD
Eyg5ZmRkMzEwZmUyMTlmN2JlOTAzYzJlZTgzOWI2YzY5YmQ2NmM2M2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomiX0SbFIs0rUM1dSqK1Matdc6qj
DLACefdM++0TNTrE6LdqsBz+ps+d1EuOne/2OePAt+3SqQslI/yOaFn+atn8nPNV
MO8Hy7yeuoPOsRvRKkivS21hH2unqoys8H92ueHagAXm0vFf60PmRZC/ahR8h5Ej
cvlXbSnC7oBVvNfzpBincRCSTxnJDYq6jttXgWzJ3E+vJCEfPAGaSdT1H2+6X8OZ
B46uiQx3FvOe0DJKEOX4z6HVjYeaouLOvaX7Lml3L0eAP7eao+Uo0S+BFvmvmJuD
4f3jtwXHSFJjGInTCzRueNa2SiAUGlnz1BITCxqCk01PARUyHTZNjhohOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/dMQ/iGfe+kDwu6Dm2xpvWbGPvMB8GA1UdIwQY
MBaAFEbJiy5KPgYN70WrxiwONF+qgLXsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnNtTExrby1CZzN2UmF2R0xBNDBYNnFBdGV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yYWE4ZDEtY2I3MS00OTA0LWE1OTEt
MzQ0OTUyMjcxMGU3LzEvUnNtTExrby1CZzN2UmF2R0xBNDBYNnFBdGV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8yYWE4ZDEtY2I3MS00OTA0LWE1OTEtMzQ0OTUyMjcxMGU3
LzEvUnNtTExrby1CZzN2UmF2R0xBNDBYNnFBdGV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqc1xKzKO
q8SPpo3Ewh49wUA6PjbvrcGj2o9xO4VUjxxunCCjezIzts/ZuliMSzuQb/Dt906T
dbzZLNS5jMIOJGaaf6gVd0975lzr0W+o8I9li6y+XufPBe1c0OSyYUmNY1HnR7No
chcqDM6lgoqkTsxNoAh1jZrYo2Rq0SA2oRIO+meU0/cLu5CnVaMKG3AHUvgiwVsW
zXf71haMnlmBONMDL2oCAr/Yzu9DYd79SgYJpA2foh3zCFd0zgs4jeM3rjpmSyZo
3zHb7W8RBRJFaV2gjcibzl94tHhmTLDFRRk6akA3r+BVqL/M4C1EBZk3bY9DSg3c
skAuKm4pP9iYYw==
-----END CERTIFICATE-----
Generated at Tue Sep 9 09:29:15 2025 by rpki-client