Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.mft
File:                     vU5u3SbvGxbYSOmBMOb8RFCzJ1I.mft (raw, json)
Hash identifier:          ebj9QER1gUKeC3ahxzNRagF9nyLVp/GXoomlG5S9L1k=
Subject key identifier:   71:AE:23:8B:01:5A:89:93:CC:A8:5C:AE:35:F9:D6:DB:17:5A:09:AF
Authority key identifier: BD:4E:6E:DD:26:EF:1B:16:D8:48:E9:81:30:E6:FC:44:50:B3:27:52
Certificate issuer:       /CN=bd4e6edd26ef1b16d848e98130e6fc4450b32752
Certificate serial:       019939F02C67838B521D2094ADB02CDF57DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.mft
Manifest number:          1680
Signing time:             Thu 11 Sep 2025 18:01:05 +0000
Manifest this update:     Thu 11 Sep 2025 18:01:05 +0000
Manifest next update:     Fri 12 Sep 2025 18:01:05 +0000
Files and hashes:         1: 9VwiwUj_IGIUqg4ye8UxAOO6D9Y.roa (hash: NnxEfPp852isbiSy7sr8rgaQ1hDoY4s+bvfFdDqg9W8=)
                          2: S5K9sZSxJuICsnYh9DHsHhGYg9w.roa (hash: aaqMsXzi9m0Tt1MG99Oy7OnBJX3zKsmFv/eQfpWMk2I=)
                          3: v2m_c-UZBbM4tqAg4W1Obv9Rnn0.roa (hash: d3kQ/0S0OM1P8L+mkERLRrrDIpjPhVXyTCSgVSXYQO0=)
                          4: vU5u3SbvGxbYSOmBMOb8RFCzJ1I.crl (hash: SHfEpun78kKeC+Bl5KDe4O/+ne9NZ6rLBPBjhTu1CRA=)
                          5: vdFR4y9F44FSjYAGCMTNGAkn55s.roa (hash: kapPC5BZzOsMFj/r/PWqmKyQ2wL4stabpvweUd2gaq0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Sep 2025 14:16:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:39:f0:2c:67:83:8b:52:1d:20:94:ad:b0:2c:df:57:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd4e6edd26ef1b16d848e98130e6fc4450b32752
        Validity
            Not Before: Sep 11 18:01:05 2025 GMT
            Not After : Sep 12 18:01:05 2025 GMT
        Subject: CN=71ae238b015a8993cca85cae35f9d6db175a09af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:72:95:99:01:5c:14:ad:0a:f9:73:9d:48:0b:
                    a1:d0:1b:03:c5:12:39:48:bf:e5:73:47:f3:5a:69:
                    67:b9:0d:9c:3b:5e:7d:32:0b:b9:35:de:67:fe:c1:
                    5b:d3:c7:f9:4a:a1:68:4d:0c:17:06:90:43:41:4b:
                    bd:97:0f:1f:a5:6e:2f:88:e5:f7:ee:cb:ae:c1:bc:
                    f8:fa:56:85:2c:c1:af:e1:c5:af:f1:07:58:f2:8b:
                    d3:50:1e:47:b1:47:89:3f:f8:04:e3:87:a4:8e:2e:
                    78:01:0f:18:13:8d:b5:bd:33:16:52:e6:e3:d0:ef:
                    04:70:35:51:01:1d:24:6e:4d:27:33:7e:b7:13:9d:
                    26:b8:33:15:c4:7a:36:1a:7e:55:d2:ff:84:a6:0d:
                    88:09:ff:14:4c:93:f1:97:ee:4f:52:b5:3e:05:81:
                    eb:b8:d6:f7:b6:e9:24:94:73:33:9d:0b:2d:3f:25:
                    b0:8b:f7:33:6b:4e:cf:cf:52:72:79:fe:e9:ac:1b:
                    a5:d2:31:ba:a8:85:14:e3:b5:fd:60:da:06:5f:12:
                    6f:c1:01:af:36:8d:db:b5:2d:a9:09:2d:8c:3f:6f:
                    df:5a:f6:94:4a:d6:45:07:de:71:87:4b:50:c5:e0:
                    58:59:b8:03:72:13:b9:01:0a:f0:04:03:43:6a:01:
                    11:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AE:23:8B:01:5A:89:93:CC:A8:5C:AE:35:F9:D6:DB:17:5A:09:AF
            X509v3 Authority Key Identifier:
                keyid:BD:4E:6E:DD:26:EF:1B:16:D8:48:E9:81:30:E6:FC:44:50:B3:27:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:32:8e:61:d9:8b:54:51:cb:94:ca:27:95:40:40:78:a4:c3:
         a0:bf:73:ef:a4:a6:8f:07:2d:d8:f7:84:2c:58:d2:48:c1:05:
         be:f2:67:ec:10:20:0b:30:f8:b3:e2:a5:2f:c8:ad:c4:27:eb:
         36:a2:19:d7:37:52:38:2b:ce:c2:40:e9:63:c0:ec:a2:03:23:
         24:24:b1:07:3e:dd:fb:4a:c8:ce:67:a2:4d:53:b1:15:69:f2:
         2d:dd:30:7e:d4:7e:ba:9e:7a:44:fd:c6:3a:bf:48:07:48:43:
         5b:4f:56:30:7c:ad:c4:e5:d0:4e:6b:85:14:30:8f:b5:8a:f4:
         36:91:a8:5e:72:73:1d:1c:42:63:5e:a4:a2:c7:61:cb:04:76:
         1c:b5:0d:61:88:ca:5d:1d:0f:35:fc:6e:12:e4:d0:e3:73:d8:
         35:8e:f0:dc:fa:c2:32:aa:70:08:11:be:ab:7b:e3:c4:88:1e:
         90:1a:4e:79:9c:10:2c:b3:61:d1:15:04:58:6a:f9:31:30:e7:
         49:0b:72:6e:22:9c:7f:9a:91:3a:41:4a:e8:7e:8f:81:b7:77:
         34:00:b8:cb:3c:25:a3:f3:31:95:c3:1a:fb:63:52:3a:57:f9:
         e4:b7:ff:2c:49:45:77:93:2b:67:bf:dc:86:a8:53:f7:09:e2:
         bd:60:0b:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk58Cxng4tSHSCUrbAs31ffMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNGU2ZWRkMjZlZjFiMTZkODQ4ZTk4MTMwZTZmYzQ0NTBi
MzI3NTIwHhcNMjUwOTExMTgwMTA1WhcNMjUwOTEyMTgwMTA1WjAzMTEwLwYDVQQD
Eyg3MWFlMjM4YjAxNWE4OTkzY2NhODVjYWUzNWY5ZDZkYjE3NWEwOWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nKVmQFcFK0K+XOdSAuh0BsDxRI5
SL/lc0fzWmlnuQ2cO159Mgu5Nd5n/sFb08f5SqFoTQwXBpBDQUu9lw8fpW4viOX3
7suuwbz4+laFLMGv4cWv8QdY8ovTUB5HsUeJP/gE44ekji54AQ8YE421vTMWUubj
0O8EcDVRAR0kbk0nM363E50muDMVxHo2Gn5V0v+Epg2ICf8UTJPxl+5PUrU+BYHr
uNb3tukklHMznQstPyWwi/cza07Pz1Jyef7prBul0jG6qIUU47X9YNoGXxJvwQGv
No3btS2pCS2MP2/fWvaUStZFB95xh0tQxeBYWbgDchO5AQrwBANDagERgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGuI4sBWomTzKhcrjX51tsXWgmvMB8GA1UdIwQY
MBaAFL1Obt0m7xsW2EjpgTDm/ERQsydSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlU1dTNTYnZHeGJZU09tQk1PYjhSRkN6SjFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9hY2UzNzMtYjgxYi00MDBjLTg0NWMt
OTYyOGY1MjY2NTQyLzEvdlU1dTNTYnZHeGJZU09tQk1PYjhSRkN6SjFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9hY2UzNzMtYjgxYi00MDBjLTg0NWMtOTYyOGY1MjY2NTQy
LzEvdlU1dTNTYnZHeGJZU09tQk1PYjhSRkN6SjFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGjKOYdmL
VFHLlMonlUBAeKTDoL9z76Smjwct2PeELFjSSMEFvvJn7BAgCzD4s+KlL8itxCfr
NqIZ1zdSOCvOwkDpY8DsogMjJCSxBz7d+0rIzmeiTVOxFWnyLd0wftR+up56RP3G
Or9IB0hDW09WMHytxOXQTmuFFDCPtYr0NpGoXnJzHRxCY16kosdhywR2HLUNYYjK
XR0PNfxuEuTQ43PYNY7w3PrCMqpwCBG+q3vjxIgekBpOeZwQLLNh0RUEWGr5MTDn
SQtybiKcf5qROkFK6H6Pgbd3NAC4yzwlo/MxlcMa+2NSOlf55Lf/LElFd5MrZ7/c
hqhT9wnivWALMA==
-----END CERTIFICATE-----
Generated at Thu Sep 11 21:24:10 2025 by rpki-client