Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft
File:                     E2a5YKbx8EQ58JGG-ez1ManOJkg.mft (raw, json)
Hash identifier:          5yxhUz1cP4RWTNByKRS98sEbxUeDuFP3+lSofcdIhvw=
Subject key identifier:   78:56:B5:91:0C:F7:50:A2:9C:9B:EA:30:84:48:99:23:67:FB:9B:21
Authority key identifier: 13:66:B9:60:A6:F1:F0:44:39:F0:91:86:F9:EC:F5:31:A9:CE:26:48
Certificate issuer:       /CN=1366b960a6f1f04439f09186f9ecf531a9ce2648
Certificate serial:       01991E0A81FFFD4BB01217B7AFFB16102DA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft
Manifest number:          1691
Signing time:             Sat 06 Sep 2025 08:00:29 +0000
Manifest this update:     Sat 06 Sep 2025 08:00:29 +0000
Manifest next update:     Sun 07 Sep 2025 08:00:29 +0000
Files and hashes:         1: 5KU69xpItYQY0WxFGzbCaR_xF-I.roa (hash: nALEvmxEmiAuf2P9EYLZypsp4ZL3LnUKyRUMkW+WsNM=)
                          2: E2a5YKbx8EQ58JGG-ez1ManOJkg.crl (hash: VAU5tE7jrUVnmJxRXcLnVC0n1LnGvpvF3ltVbfNZaEQ=)
                          3: iCZ5LkRRabrQM8eb0h1397FNbPc.roa (hash: /PXtPb3g/8dNDvzzTJMTXsHm+K21xBEsZZ9tlSPaX0E=)
                          4: rqssHEFaU9cBbAYq5h-Z5dZhD70.roa (hash: XPmsPoFUAhDePBRt0rX+aTeKt9kZS58GDddsgp5etNk=)
                          5: uQzwJOzoHcMdOvRujU6XA4cK0QI.roa (hash: Q/Bkx1wb4qbmw0UulF1TGpdw+xnEtQYgZbdCyTdbFoA=)
                          6: vB7EJPDt73t8p8TotPU_sHWROHY.roa (hash: 6l/6E0qhzeK96CRXHer3vPg535yUVFUT7RPrrAcfouQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Sep 2025 04:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:1e:0a:81:ff:fd:4b:b0:12:17:b7:af:fb:16:10:2d:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1366b960a6f1f04439f09186f9ecf531a9ce2648
        Validity
            Not Before: Sep  6 08:00:29 2025 GMT
            Not After : Sep  7 08:00:29 2025 GMT
        Subject: CN=7856b5910cf750a29c9bea308448992367fb9b21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9b:79:a2:76:dc:b2:5b:92:0f:f4:d1:1b:7d:
                    21:45:5a:95:c0:5d:f2:b3:13:8e:d4:bd:86:6d:9e:
                    16:df:79:0f:69:74:7f:98:ca:5c:7d:97:84:69:e0:
                    fb:40:b2:80:ab:e1:23:bb:37:df:6f:f7:fe:eb:8d:
                    8c:7f:e3:42:7d:49:82:82:70:25:2a:03:2d:c1:ed:
                    6d:d5:27:04:1b:06:29:0f:f9:83:f7:e4:8f:7b:a2:
                    17:50:f2:28:47:a3:dd:5e:eb:8c:f7:e6:64:3a:e3:
                    54:6e:80:fc:19:1d:58:bf:ca:bb:b6:ac:7e:2c:da:
                    a1:20:d7:d9:9d:7d:a0:58:ea:b2:40:41:53:ba:4d:
                    b9:c9:46:4c:44:3c:60:e7:a3:0a:91:c2:1e:2d:6e:
                    47:cf:67:da:88:4d:0e:a9:05:28:19:ae:fb:78:9b:
                    c4:ae:9d:4d:e0:6e:fe:76:78:b4:d5:c1:25:22:2e:
                    f6:81:4c:2e:91:ad:84:b4:9d:1e:2e:04:80:21:3b:
                    fe:f5:68:cd:9c:7a:95:30:48:c3:03:60:80:c1:d3:
                    08:b9:b2:11:d0:c5:b8:ab:99:2a:b0:af:7d:e2:d2:
                    eb:96:48:f4:f8:02:53:35:28:75:38:35:d6:84:cd:
                    0c:26:b6:0d:6e:1c:26:78:79:7a:9c:db:a1:0e:dc:
                    2e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:56:B5:91:0C:F7:50:A2:9C:9B:EA:30:84:48:99:23:67:FB:9B:21
            X509v3 Authority Key Identifier:
                keyid:13:66:B9:60:A6:F1:F0:44:39:F0:91:86:F9:EC:F5:31:A9:CE:26:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:c6:01:2d:8e:7d:05:19:64:18:3f:67:2a:bd:ce:7c:1e:0c:
         ac:15:e4:8b:0c:99:7b:e4:81:be:00:20:d3:04:9a:1b:51:f7:
         50:71:17:d9:a5:ad:26:f4:fd:e7:d2:cb:13:f7:b9:61:58:b3:
         b2:f5:fb:08:76:3a:c2:4a:00:4f:5e:b8:42:b9:24:8f:39:63:
         25:30:7c:46:f3:80:f2:c2:41:ce:20:74:2b:89:c8:bd:79:67:
         35:6e:63:a1:bb:b3:b7:5a:da:c7:a4:a0:db:29:88:3c:27:ba:
         10:37:ec:cb:1a:2a:62:14:18:56:f0:20:d8:8d:24:f8:ea:10:
         2c:47:f1:df:c9:b0:18:9e:81:fe:57:2a:2d:5a:da:c1:0d:a2:
         66:bb:39:f7:5e:c2:c0:90:fb:4c:96:49:fe:5c:d5:f0:41:f9:
         68:12:8b:6d:63:5b:f5:60:eb:3d:7e:8d:c6:35:b7:a6:f4:8f:
         c1:d1:45:04:83:4d:e2:87:38:3c:c3:f8:57:c8:56:08:82:4e:
         e9:94:eb:69:68:d6:f2:f3:a4:14:33:fc:05:c6:5f:f8:47:d6:
         57:f6:aa:80:e5:dd:ec:d3:1b:2a:e7:d1:59:01:51:59:a9:38:
         4a:a0:f2:00:c2:93:b2:57:c8:0a:56:7d:70:d9:7b:d5:a8:53:
         92:b7:a0:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkeCoH//UuwEhe3r/sWEC2hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNjZiOTYwYTZmMWYwNDQzOWYwOTE4NmY5ZWNmNTMxYTlj
ZTI2NDgwHhcNMjUwOTA2MDgwMDI5WhcNMjUwOTA3MDgwMDI5WjAzMTEwLwYDVQQD
Eyg3ODU2YjU5MTBjZjc1MGEyOWM5YmVhMzA4NDQ4OTkyMzY3ZmI5YjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pt5onbcsluSD/TRG30hRVqVwF3y
sxOO1L2GbZ4W33kPaXR/mMpcfZeEaeD7QLKAq+Ejuzffb/f+642Mf+NCfUmCgnAl
KgMtwe1t1ScEGwYpD/mD9+SPe6IXUPIoR6PdXuuM9+ZkOuNUboD8GR1Yv8q7tqx+
LNqhINfZnX2gWOqyQEFTuk25yUZMRDxg56MKkcIeLW5Hz2faiE0OqQUoGa77eJvE
rp1N4G7+dni01cElIi72gUwuka2EtJ0eLgSAITv+9WjNnHqVMEjDA2CAwdMIubIR
0MW4q5kqsK994tLrlkj0+AJTNSh1ODXWhM0MJrYNbhwmeHl6nNuhDtwuywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHhWtZEM91CinJvqMIRImSNn+5shMB8GA1UdIwQY
MBaAFBNmuWCm8fBEOfCRhvns9TGpziZIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTJhNVlLYng4RVE1OEpHRy1lejFNYW5PSmtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni80NDAyYjAtMmVjYS00ODM2LWJmMjIt
YTk2NzE1OWY4ODdkLzEvRTJhNVlLYng4RVE1OEpHRy1lejFNYW5PSmtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni80NDAyYjAtMmVjYS00ODM2LWJmMjItYTk2NzE1OWY4ODdk
LzEvRTJhNVlLYng4RVE1OEpHRy1lejFNYW5PSmtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy8YBLY59
BRlkGD9nKr3OfB4MrBXkiwyZe+SBvgAg0wSaG1H3UHEX2aWtJvT959LLE/e5YViz
svX7CHY6wkoAT164QrkkjzljJTB8RvOA8sJBziB0K4nIvXlnNW5jobuzt1rax6Sg
2ymIPCe6EDfsyxoqYhQYVvAg2I0k+OoQLEfx38mwGJ6B/lcqLVrawQ2iZrs5917C
wJD7TJZJ/lzV8EH5aBKLbWNb9WDrPX6NxjW3pvSPwdFFBINN4oc4PMP4V8hWCIJO
6ZTraWjW8vOkFDP8BcZf+EfWV/aqgOXd7NMbKufRWQFRWak4SqDyAMKTslfIClZ9
cNl71ahTkregCA==
-----END CERTIFICATE-----
Generated at Sat Sep 6 11:50:00 2025 by rpki-client