Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft
File:                     96oDm4hrImV4vbakJ4G_WQRLsTg.mft (raw, json)
Hash identifier:          xtFLUi6XUFL5W7ewHKOQAXikkK70NQv14tD7Kz/Zhmo=
Subject key identifier:   8F:B2:DF:D8:FE:1C:F8:FE:41:A7:21:66:3B:2D:69:56:19:33:F4:E5
Authority key identifier: F7:AA:03:9B:88:6B:22:65:78:BD:B6:A4:27:81:BF:59:04:4B:B1:38
Certificate issuer:       /CN=f7aa039b886b226578bdb6a42781bf59044bb138
Certificate serial:       0199345B81161D623772AC64A6BB55615EB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft
Manifest number:          1680
Signing time:             Wed 10 Sep 2025 16:00:35 +0000
Manifest this update:     Wed 10 Sep 2025 16:00:35 +0000
Manifest next update:     Thu 11 Sep 2025 16:00:35 +0000
Files and hashes:         1: 5pSATMPZ0p7gsB8mMb7VRMdgILk.roa (hash: n6iETK+1U2jYxCvuN/hxrmzW6QRPJ6PVi/YnvpAOe54=)
                          2: 96oDm4hrImV4vbakJ4G_WQRLsTg.crl (hash: qKwi8T8odantxLBOS7IMsGE1gIjnZt8dTr0PWAiXUEo=)
                          3: HOzDSyhci1oqkFYg_HbCSVURV70.roa (hash: nhIbLdZhFO91+DXj7DSINlsbz0bS+HiCo4ktiLJuf1I=)
                          4: HTtaJI7F0HZATXXascx3TmNByxo.roa (hash: d5j76fTLUAV6ovcqXej2UO/z7lwi9LauG77wR6/wZRE=)
                          5: Zc3EPNVFRcdWBGFghDwIYYsiutk.roa (hash: m81UKM1wAmpf9BPJ2gZjuvXEWH2Fd1esmxulacEVZrY=)
                          6: jEK1d3vUN0cIlA-uXNamjthkOwI.roa (hash: 41tF5GEIsjhhQFzZ4Z9ebWeIwUkdNFTY9RSR2SItUCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 16:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:34:5b:81:16:1d:62:37:72:ac:64:a6:bb:55:61:5e:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7aa039b886b226578bdb6a42781bf59044bb138
        Validity
            Not Before: Sep 10 16:00:35 2025 GMT
            Not After : Sep 11 16:00:35 2025 GMT
        Subject: CN=8fb2dfd8fe1cf8fe41a721663b2d69561933f4e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bd:08:2c:8f:4a:ef:7d:9a:e8:c3:7c:d1:51:
                    49:2e:ca:01:7e:b4:3c:b8:24:5e:5d:d8:42:d9:d9:
                    3c:17:45:52:a5:8d:3d:48:96:57:7f:bd:9e:38:a3:
                    5d:8e:f5:c8:76:75:8c:09:37:55:f2:af:95:3d:69:
                    23:6a:d5:7e:92:1c:9d:51:38:b6:b0:59:0f:e9:27:
                    cd:2d:e2:e0:9d:5f:ae:e1:8e:db:fc:0a:d3:eb:b9:
                    60:2b:3c:b0:64:72:eb:80:15:ec:e3:4f:63:70:01:
                    b7:1a:43:ad:30:bd:74:73:0d:0a:9f:78:61:ab:ec:
                    2f:48:5d:67:97:62:c9:09:f5:18:e9:46:66:85:04:
                    2a:a8:02:f5:3c:80:98:5e:ef:39:82:18:0e:bf:dc:
                    fe:db:0c:37:61:b5:6d:80:a7:0e:a2:7d:a2:c0:20:
                    02:71:c0:85:4f:b1:91:ea:83:8b:3f:0c:6a:c9:e1:
                    81:ec:d8:23:a7:cf:9c:14:32:60:c3:2c:c3:98:20:
                    e9:3d:d9:df:7d:aa:73:a2:c1:3c:bc:02:11:e0:d4:
                    e5:b5:29:52:53:d3:3f:7b:a0:d1:60:31:36:0a:56:
                    cd:4d:ab:0b:d2:30:96:53:ce:dc:5a:3b:f6:28:e9:
                    b4:d1:44:b9:e4:d9:dc:16:db:29:95:3a:8d:eb:e7:
                    01:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B2:DF:D8:FE:1C:F8:FE:41:A7:21:66:3B:2D:69:56:19:33:F4:E5
            X509v3 Authority Key Identifier:
                keyid:F7:AA:03:9B:88:6B:22:65:78:BD:B6:A4:27:81:BF:59:04:4B:B1:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:a4:a3:98:25:4c:d8:1a:c2:6f:8b:ff:9a:1d:3e:67:8d:6b:
         32:ad:65:cb:81:39:8b:03:fe:a9:c7:86:87:04:0d:ba:4f:52:
         d1:bf:a8:bd:ee:b0:82:d9:14:57:4a:91:b9:f3:4d:33:66:89:
         f5:23:a8:a0:c0:0b:03:9b:a1:10:9a:d6:3f:94:e2:8b:d2:5d:
         ed:ad:ad:8b:0a:e2:be:89:d3:e0:c6:7d:f3:50:7c:9b:c0:cb:
         26:7e:e9:f5:bc:d2:ab:0d:4f:2e:2f:dd:6d:7d:e6:2b:5d:76:
         03:36:a4:95:1a:8b:04:66:76:5b:ea:91:44:6d:84:a1:31:ac:
         50:86:a2:cd:dc:bc:17:67:1d:d0:62:e3:b2:5f:22:a3:b7:3e:
         62:85:a0:63:c6:54:a5:c0:7f:91:2e:43:a5:3b:de:22:7b:b7:
         9c:e1:90:44:e2:07:98:d4:37:04:dd:ce:39:e0:66:48:e6:a4:
         35:4a:98:ca:ee:e4:c0:5d:51:e6:90:fe:79:cb:4b:d9:c2:7f:
         13:75:54:ba:8a:56:35:43:36:a4:ea:32:fd:c5:b0:07:08:75:
         c6:3e:3c:ce:54:b2:be:bd:fc:db:ac:35:8d:ae:3d:63:37:db:
         b0:09:14:c5:25:5d:aa:53:c7:30:76:ef:2c:a2:8a:0a:6f:e7:
         b4:ff:b9:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk0W4EWHWI3cqxkprtVYV62MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YWEwMzliODg2YjIyNjU3OGJkYjZhNDI3ODFiZjU5MDQ0
YmIxMzgwHhcNMjUwOTEwMTYwMDM1WhcNMjUwOTExMTYwMDM1WjAzMTEwLwYDVQQD
Eyg4ZmIyZGZkOGZlMWNmOGZlNDFhNzIxNjYzYjJkNjk1NjE5MzNmNGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0b0ILI9K732a6MN80VFJLsoBfrQ8
uCReXdhC2dk8F0VSpY09SJZXf72eOKNdjvXIdnWMCTdV8q+VPWkjatV+khydUTi2
sFkP6SfNLeLgnV+u4Y7b/ArT67lgKzywZHLrgBXs409jcAG3GkOtML10cw0Kn3hh
q+wvSF1nl2LJCfUY6UZmhQQqqAL1PICYXu85ghgOv9z+2ww3YbVtgKcOon2iwCAC
ccCFT7GR6oOLPwxqyeGB7Ngjp8+cFDJgwyzDmCDpPdnffapzosE8vAIR4NTltSlS
U9M/e6DRYDE2ClbNTasL0jCWU87cWjv2KOm00US55NncFtsplTqN6+cBRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+y39j+HPj+QachZjstaVYZM/TlMB8GA1UdIwQY
MBaAFPeqA5uIayJleL22pCeBv1kES7E4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTZvRG00aHJJbVY0dmJha0o0R19XUVJMc1RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS80YmJkNmMtOTFlZi00NDYxLTgyMWIt
NmY2MjFkNzM2YWZmLzEvOTZvRG00aHJJbVY0dmJha0o0R19XUVJMc1RnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS80YmJkNmMtOTFlZi00NDYxLTgyMWItNmY2MjFkNzM2YWZm
LzEvOTZvRG00aHJJbVY0dmJha0o0R19XUVJMc1RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABaSjmCVM
2BrCb4v/mh0+Z41rMq1ly4E5iwP+qceGhwQNuk9S0b+ove6wgtkUV0qRufNNM2aJ
9SOooMALA5uhEJrWP5Tii9Jd7a2tiwrivonT4MZ981B8m8DLJn7p9bzSqw1PLi/d
bX3mK112AzaklRqLBGZ2W+qRRG2EoTGsUIaizdy8F2cd0GLjsl8io7c+YoWgY8ZU
pcB/kS5DpTveInu3nOGQROIHmNQ3BN3OOeBmSOakNUqYyu7kwF1R5pD+ectL2cJ/
E3VUuopWNUM2pOoy/cWwBwh1xj48zlSyvr3826w1ja49YzfbsAkUxSVdqlPHMHbv
LKKKCm/ntP+5aA==
-----END CERTIFICATE-----
Generated at Wed Sep 10 22:41:21 2025 by rpki-client