Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
File:                     IbrXTn9sCUmic2pXR4SW19i0UOY.mft (raw, json)
Hash identifier:          9aNPzRpfIIqPsh9Tds99/aAO3Fp/tLe8gyFcRWE1hXc=
Subject key identifier:   6B:98:4E:6F:76:80:E7:43:D3:EB:22:B3:4A:A5:75:E9:26:82:25:3A
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Certificate issuer:       /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial:       01992E59E784A0C420128DA5CC148D7EDF97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
Manifest number:          169D
Signing time:             Tue 09 Sep 2025 12:01:07 +0000
Manifest this update:     Tue 09 Sep 2025 12:01:07 +0000
Manifest next update:     Wed 10 Sep 2025 12:01:07 +0000
Files and hashes:         1: 0PF2Op7lanUcUc4dVCdRpdsHc84.roa (hash: aSXvgQxfT8WK8M8rTK72F51UgR5bwPkfCFYHP3aKG1Y=)
                          2: 1Y7K4blWAZHGgkz6cGb5ZoPSCOM.roa (hash: XIDyWuMbZXIO1KkLIX18XoZbD/SowG9R10QeiAHlybg=)
                          3: 3TokWR4YD8bSZEEhB7xAs3QiTtE.roa (hash: RQJgzQDwW0ULI6tga86UlMO09rIAHDn5nerh47DR2BI=)
                          4: 45ZvyF7xANO7oU8k244Wf_nM3cg.roa (hash: QXWSX4rEhyOTrZv3SPfF8VWleNqYfWCc+6I7qGhfk1I=)
                          5: 6OvmO88KKOc8CtrkvPzsR6MSEKs.roa (hash: 4FgApVfY1F3xZe523Zz7vmTZbE2+lW1x15AArGZ6WOA=)
                          6: 9yUm_bz_RXGZH-mtJkHR8akzm_k.roa (hash: 2U2UR62KBxAi2LijKPUjfHnVCqBns/15mz9vTIs1eAg=)
                          7: BW-tMglcHAD8hq8_tMy9T1opQZ0.roa (hash: 4sNnGgRCRJjpN+EP586jNMgHdq80C+5wgfEN0wRG/RY=)
                          8: BoUvBrx0IDoCV7igXomSTVrwZ3Q.roa (hash: 5K8lWEVpRFDHKqwVNUy3zxyWI8cCApiqoJH/Oj4tZxc=)
                          9: Ci8c4lijM-itsGBnOoGvfjxFVD4.roa (hash: IwkrVAcoM8fcw5GSh/qj2juJAHVqPWudn41+HXh3nJA=)
                          10: Cpqn7LsS0bcJ2RaNQ1m7A6LeDTI.roa (hash: M0rYp/RCf1KwjUnXOEa9Bql0WWcUrXdf/3JYDVzWoPQ=)
                          11: DtF9x864qfz0h6T6-RLkkMbHSko.roa (hash: LTzdHB1bHl9gmWN6/zoB9cUBE8Lbwn21hSVQRSevA1U=)
                          12: IbrXTn9sCUmic2pXR4SW19i0UOY.crl (hash: 7M8Vg+xbp3SOt+l6vqYkpnku8awjYXNlXVv58tpNzF4=)
                          13: KbwQBsAYQORWx7Y_FShphGNRyLo.roa (hash: RzEqTMBjUlVmk4NBbUY8EOKmW3+zfmtaDUK21QbwlLg=)
                          14: MnnjVsrqBDG_8ftlohQU9XLrWu0.roa (hash: MnkHECc84Rp2h6SlxxWikch/bzusps5VLd5OSQFD3ZA=)
                          15: NcJMjN4nc_WU-RktQLq2mseG8B0.roa (hash: 9rXixbqxp9Dkq7Fn93hKRad4F8KX7mhhdlxPLt9S7oU=)
                          16: SKlifCETEAFXBdWkk-WfdsNy0YY.roa (hash: WZwGpczX8dcxXo/gVUG9Bptn8WUp9BPgohzMG0Hhmqo=)
                          17: T6nEcoCRS4zJvOoLpVBpYfJ5byE.roa (hash: OEoT731VBzYCZlj5T8oXOZFmDmzxrX9V75qQxiq4Sm4=)
                          18: W5GuTda0LPuZQbm6SVvfp_MJnb4.roa (hash: MxHlBOQsFSdIGJ8MSdXOgLL4iOOekt3UXJ2hsmc2gMw=)
                          19: WhKzVDUi8DcVQRZuEN6A_F-qR34.roa (hash: ZhsnSmI1l4ujTt7J/dvfHtZhoQUOvBLUqbxqn6FdNi4=)
                          20: Z8F8LaVAH1X1z0GrFD9zjtYBUHM.roa (hash: PjaS7pkJHF8AkVCk3qTrzlLnBSIPCF/w4lam5MBO7+M=)
                          21: fc85n9-kc-W5Cgqomk8JDto0ZeA.roa (hash: 0IptxCTFAzNODhcgWUQwVWQ1lyUf5mVW8te8c9wh2bQ=)
                          22: iyWADMcnmUX-0b3WwxYKzq-CLVU.roa (hash: 5JEUiaDW+cNxk4QBpPE38lig0s8F6dYI5WgEscns2AI=)
                          23: jH8Mi3TlwvD2IeH7uCn-uJ9q0w0.roa (hash: ahI8jMGv5DDAbZ9UFRdwdOTFkupqYU+mpHR0wJIw+rI=)
                          24: nQRl8_DxYdIOkvfPQm4OWVwwfFU.roa (hash: USCzcfwJiRWUroT/fskb2U0F+oCQ1ZJZVMvOptwO65Y=)
                          25: s-ub-KTv9kBJthUAx3CIvlPJdn4.roa (hash: z9QEo8+aPD+JH0fzOpwr2kgJnURem+BNpNnI45BF5AA=)
                          26: sfuqtbITGETwDyxObTV9tSdxUig.roa (hash: sn1NoVscQcjp8B7fAwnfrJhKtUJ3jL34Qx8apAv9XaA=)
                          27: tsgcp9nPa4ryX-lM9aA7jaetGuw.roa (hash: TqQY0JeOtPOj3kk/ofcVrEDuonPlDG78sdlZPSCcMgs=)
                          28: vpxZNIbKhAWHvZIcDU6_kLIATUM.roa (hash: ZaEkz95WVay/ZQCPxoWnxUvbR3MH6Iv2iCzXl4tWU2c=)
                          29: wAiYG69Hz1DYtkZJtFhqB5euCvs.roa (hash: 0rW78YPWF8/Ix9D/G22sK2jrzqc2KZ+zGeQnY4xrMiI=)
                          30: y_fBzhFDFpXYD5-P69yOnSESFA8.roa (hash: 66hQUv4u80sC++++GHLtVK9LyFJNEcqWA7bIT6IlRaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 12:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2e:59:e7:84:a0:c4:20:12:8d:a5:cc:14:8d:7e:df:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
        Validity
            Not Before: Sep  9 12:01:07 2025 GMT
            Not After : Sep 10 12:01:07 2025 GMT
        Subject: CN=6b984e6f7680e743d3eb22b34aa575e92682253a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:56:cd:6c:0e:e5:51:c2:8c:da:c0:6b:cc:35:
                    d3:a8:b1:2a:61:d1:80:11:78:2a:50:a6:5c:52:8c:
                    f8:54:7c:33:77:b1:75:8e:a3:06:6d:b3:cc:68:3d:
                    27:9a:d6:ea:6f:53:cb:b6:01:ed:6d:e8:a3:bf:72:
                    dd:47:a7:c5:de:48:71:31:80:4b:67:24:13:df:97:
                    36:b8:d1:6e:6f:c1:51:d3:0a:19:6b:c0:a1:3e:1f:
                    e1:62:47:f0:78:a2:7d:a1:2c:b4:f6:54:24:cb:72:
                    30:65:41:c3:24:b0:8a:e7:a7:40:f9:db:87:63:ef:
                    d7:7b:f4:f7:35:cc:39:6e:52:d8:d0:8b:48:90:7b:
                    2b:5e:16:e3:54:a3:91:c5:09:56:55:d4:62:18:09:
                    36:92:34:bf:89:a5:bc:b8:6e:96:af:ab:d7:57:af:
                    c7:d5:0c:07:9e:53:32:72:89:c5:fa:91:97:bd:ae:
                    be:21:b9:b6:f3:a7:60:e5:ec:c1:e6:4a:6a:a2:0f:
                    76:26:95:07:e6:64:9e:17:07:bc:28:8c:c9:75:16:
                    37:b2:2a:22:bd:06:ce:7c:c7:83:a6:cf:32:15:23:
                    5a:94:85:c4:2e:e3:40:e9:d3:24:71:c9:68:58:c4:
                    a0:df:30:51:25:d2:a5:04:3b:94:79:86:9d:8b:04:
                    77:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:98:4E:6F:76:80:E7:43:D3:EB:22:B3:4A:A5:75:E9:26:82:25:3A
            X509v3 Authority Key Identifier:
                keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:91:91:85:91:92:b4:fc:cc:47:99:29:6b:db:4b:07:c2:8f:
         a6:27:13:f7:13:e1:f9:cc:e8:c2:e9:df:26:ba:26:03:28:8d:
         24:86:9f:1c:cc:ef:b8:b0:27:a0:e7:ac:64:4e:61:be:1b:c1:
         b3:e7:cc:81:fb:ea:ae:96:fb:22:78:f0:8b:a0:8e:d1:6f:a7:
         a3:f5:e5:ac:11:6c:f7:cb:2f:69:75:d4:57:63:aa:7b:4c:a2:
         ec:ce:4e:41:64:5a:6a:49:01:44:a4:a2:99:e9:f6:7b:32:d3:
         e5:aa:66:36:4d:4a:c4:07:c4:e5:0c:1e:99:5b:f3:e1:68:c6:
         e2:2d:ea:c7:dd:21:35:bc:f8:bc:ea:c6:73:65:15:c4:b1:bf:
         34:6f:0e:3a:b1:65:87:5a:28:10:39:9a:5a:d6:bf:47:d1:0c:
         30:80:77:f8:9a:ba:e2:29:27:81:ba:b3:8e:cc:15:2f:ae:49:
         4f:ed:2b:9e:9a:56:3e:1f:48:73:66:81:9b:5e:bc:ff:03:18:
         29:0d:31:6b:3b:5e:18:ff:8f:54:3d:bf:7b:bb:47:84:b8:34:
         90:61:5a:75:07:79:7d:1d:9f:80:5e:de:f9:85:f1:8b:55:75:
         41:b7:50:f6:7d:d2:a0:80:5a:fb:35:36:e8:c9:70:e2:17:45:
         80:51:7e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 19:08:16 2025 by rpki-client