Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
File:                     8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft (raw, json)
Hash identifier:          FuIU3NEiQVuIuqRzSJ7y/ZfxRYT8YdsjnBqw50MU0zA=
Subject key identifier:   53:25:21:A0:3C:92:16:C2:C4:99:74:B5:D6:45:2A:80:CC:96:69:21
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Certificate issuer:       /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial:       019917D188024022F9C8773016471ED1B8E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
Manifest number:          175C
Signing time:             Fri 05 Sep 2025 03:00:31 +0000
Manifest this update:     Fri 05 Sep 2025 03:00:31 +0000
Manifest next update:     Sat 06 Sep 2025 03:00:31 +0000
Files and hashes:         1: 1-pkoPKMCZ9qOJcUpbg4SD3YM82I.roa (hash: fr0BGqmmgkymb/Io2tWlqm6/TRfrQYD5zH4bv2liAY4=)
                          2: 60lT6E7Hw-SybLa6dCTef8Owqso.roa (hash: kxBaSXQQFFLnQ/jWfDvLC1N4uboGoYMJnKAExPscFWo=)
                          3: 8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl (hash: 7UlH7Q7cwIfDja68yELtR/DZOsPApRv8VDndaUzqtwI=)
                          4: AkeW0dNO6HwoGorE-RVkvkd5lYI.roa (hash: cFEnsrh1nsOvG/GU22O2yZ4HJtAwycOwC2PtRPjLqBI=)
                          5: B1142MZmoWC79cU7wc6SpTqGiyI.roa (hash: ho8/5G5V6c0C9LD1lAUutQeKnpgOVsvxXS6BHwKivQY=)
                          6: G9iD8U4QCioeA79cHr2xVSAWeEI.roa (hash: isof3/aO68rNSeHuTbxaBE/zI2rUwZRzXlA4N/t2RR8=)
                          7: H8YJLWnpWipMvgIr9ji5smf4Tfk.roa (hash: M3PeYVw02zCqgGsGWVEqY9NDqtJ4pOhlFV2aXiG2+JY=)
                          8: KbXum3tGxYpXO3QIbsz4v0Gc9YE.roa (hash: Xdbf5vp7RPXfCgiOaz1rHhCCOGhSA6vAYCYI/x90YU0=)
                          9: Mdp9Kv-Vu7KoI3CAPKr9JqJyQF0.roa (hash: SVNqMzugCbLVwMP8haqTfMrXYGbHl90Ct7rAkwp4GGU=)
                          10: Nx6plveuESXQK8zHN0saWCNgZtg.roa (hash: QL/uKZ/nr+28xsvZGhgIMqZgRaxPkWfGMmZV7z027VM=)
                          11: O9cN0ZR3uRs9JZLPjZ_apekO_1o.roa (hash: VyuL/Lcqim34ks+x+bFHqTVYiETL9VCXnibosD6RzqE=)
                          12: PXz0xECU6TjhYqxiIXtEO5Wt6wc.roa (hash: IQ6HG99adaSd4g8dYN9Tq5G654BtgGfHZKvbtQePiBg=)
                          13: QUqReStf6TEFnsU1tSixUGPYTuI.roa (hash: K60fCDp86LLBo6obO2VN9uWaTquDob132b4Q/cH5WYU=)
                          14: RRXv77ic8-YnL2L0BrEWnnilces.roa (hash: oObWYvqL50IXeyb91XFkxYV2GVpxyr296NJwG9LKFJk=)
                          15: S5aHdm30TryFtG2jDVy3wkSOz2Q.roa (hash: gGROgcge0wvbKabdkDSLw/YtICixKaiQd0Hk++1c5Is=)
                          16: TW2quqEtMmBMtjFETxrg2LVk9Oo.roa (hash: 63aKh4PjYXwflLNSYPKfmuOdFvd6LVwJFipNOxlRjJI=)
                          17: WZKLhLcb_14f65w-Gxi0P7Y4PGI.roa (hash: rd8mwsH5vvMfna/I2W08kC0v/oG9b9ll9tJk/Yl4I2o=)
                          18: XLs5m7yFpYbQixlyQEPtxV_7mOs.roa (hash: Fghw0ZM8qJSM1Rk38Og5x502OtV7xRwTHNOwSJX4CJo=)
                          19: YJCi9AWh99xuK45xoYGOeQ7CnmE.roa (hash: Ti9BtXIsKFet++HwcTL4uva9A9w4W22YtG5seAitsY8=)
                          20: ZasgQLj553uShFx9qygvcO1idVY.roa (hash: xV4yVjOGaxnmU8uKE6oE/eSTkUdEZQ/Ub4WuQWWJos0=)
                          21: _NcltatYeskVsJ2GmWYQEOtBuzU.roa (hash: EFUSsiFNwzbPc+B6nty0bVOEIqERfMB5igPoEOdQ1Ow=)
                          22: eB2hSV_Hdx6UpXi8AI7IynGR-nU.roa (hash: dc/doO6o1+KWXt12g3TR56aCxeeTLAIL3hhXaij4HvQ=)
                          23: eYe0ntoHsn5C9aoZKH_cB21Bfys.roa (hash: rbiYcU0iwzMDkl2hqOmLPRmcdqv8DqvFIgub7i+wD8o=)
                          24: f460IPqQlQEG9Ilmybk9LOnau4A.roa (hash: 1vIbZBuCjlKIeaULpU2EaovNh3t6eGRb6tKyHFFkmzQ=)
                          25: pAaBglS_ph_lomtz_pi-YWsNz74.roa (hash: +DNf/G42yq93h12+GOLlNd9IxjCcQ12CMJ+kjCCl/Cw=)
                          26: qq4fM1ObQGyaLMmavbeC_4huAhs.roa (hash: uj3kwNGwI3ye+3/FlFrfR0c/PIhlj04gSoV4ikzeXw8=)
                          27: sJ8MWzOJrRSDCEy5539zFEW54Fg.roa (hash: SrkAclwJ6pGZe3QnLXmTkQWct0fK9CqayvHKB5l708k=)
                          28: tIoiJqn_Zw4bkifEyWUceFVpDXE.roa (hash: +3bSV4N3AQ7/Wh4s2xd9vZBKmvEVCXYmroX/aifAP+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 01:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:17:d1:88:02:40:22:f9:c8:77:30:16:47:1e:d1:b8:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
        Validity
            Not Before: Sep  5 03:00:31 2025 GMT
            Not After : Sep  6 03:00:31 2025 GMT
        Subject: CN=532521a03c9216c2c49974b5d6452a80cc966921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:03:24:45:b9:df:78:b1:e8:a3:d1:cb:45:42:
                    ee:73:51:ac:e4:07:18:37:1f:af:09:94:0b:0e:fc:
                    7d:75:b2:ec:33:d2:bd:d3:08:1e:dc:39:7a:a5:1f:
                    e9:3c:52:91:93:10:34:9e:cd:72:80:46:aa:28:79:
                    3c:3e:cf:49:70:cc:42:97:86:30:a3:9e:75:1b:a8:
                    ea:b9:66:34:a2:ee:f5:55:cc:e3:cb:6b:ee:f2:ff:
                    ea:53:dd:31:52:c4:cd:92:25:eb:79:fb:48:b0:a1:
                    ed:e0:50:7c:69:53:eb:27:b3:4f:34:e0:be:fb:69:
                    f6:4e:6a:80:ce:36:95:44:aa:48:4f:ed:57:ab:cc:
                    a5:48:2d:0c:3e:55:35:10:24:f6:6d:17:c4:06:b0:
                    23:ce:f3:93:42:3e:a4:8b:0e:08:5a:95:f9:42:56:
                    32:60:36:00:cc:9d:07:12:11:37:65:62:db:09:a4:
                    ad:86:e1:55:97:b9:37:3b:28:fa:4f:d9:9e:79:3a:
                    f0:e8:ab:9b:e8:c3:ff:af:77:f4:79:44:ac:49:2d:
                    c0:c4:fd:89:bc:5f:48:7a:d2:c9:e7:26:9a:87:b8:
                    7a:34:7d:10:0e:56:ab:2e:01:4a:69:f4:b5:4b:5e:
                    61:2d:54:c8:0a:a3:9d:da:e3:ed:60:64:71:f3:83:
                    a4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:25:21:A0:3C:92:16:C2:C4:99:74:B5:D6:45:2A:80:CC:96:69:21
            X509v3 Authority Key Identifier:
                keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:54:6b:50:9b:98:2d:68:6b:20:c9:9c:e6:f2:7f:a7:bd:fe:
         a0:66:94:bc:ba:1a:7e:71:35:44:f9:58:4a:75:4b:82:a6:ef:
         71:fa:9c:cd:55:93:78:a9:b4:e5:b9:33:c1:38:f7:c6:69:7d:
         d8:5d:e1:5a:46:f3:f6:10:f2:9b:fe:de:75:b2:96:87:d2:f0:
         ec:7b:48:d3:bb:ec:d2:21:d4:65:51:89:aa:b9:06:2c:d4:70:
         2b:2d:dd:a4:3d:81:10:34:c2:0a:f5:d8:e9:e3:8f:53:8b:d7:
         26:73:7b:36:67:2d:c7:03:ff:3b:3c:5b:25:8b:23:a7:53:06:
         a9:44:9c:de:42:3b:f8:66:50:2a:78:57:a4:2c:14:92:b5:88:
         d7:18:12:7a:fc:63:47:53:58:21:e6:fa:ae:e3:22:a3:99:e9:
         43:5f:78:23:80:69:a2:3a:97:88:11:09:20:76:44:60:cd:33:
         95:a9:88:7d:5e:82:2e:7f:82:67:ef:f4:21:e5:db:86:35:e6:
         b2:b2:83:ef:d5:8a:e0:01:98:f6:3d:a0:e5:f4:d9:e7:06:7a:
         17:a4:c8:8c:42:0b:90:38:69:6a:e7:c2:fe:e1:6f:6b:2c:9a:
         ab:50:db:18:55:8c:8d:0a:53:3b:41:03:fe:6a:04:ae:74:7a:
         41:f2:f3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:37:31 2025 by rpki-client