Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
File:                     I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft (raw, json)
Hash identifier:          /2iaXNyTmdrP6efCjZI9aM5oZ+P10pzk81kJTxtwPCc=
Subject key identifier:   81:FD:84:76:0A:15:BA:ED:C9:F5:01:CC:17:A7:DE:C6:19:F1:35:6A
Authority key identifier: 23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
Certificate issuer:       /CN=237c83447d17183380f489bc946c8b9e300ffb1d
Certificate serial:       01993794CBB338E3752027CB8A9C077B6EA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
Manifest number:          13B0
Signing time:             Thu 11 Sep 2025 07:02:02 +0000
Manifest this update:     Thu 11 Sep 2025 07:02:02 +0000
Manifest next update:     Fri 12 Sep 2025 07:02:02 +0000
Files and hashes:         1: 64IYMsHvI6_BFzjvT3Kh01Iaq3Y.roa (hash: glJ+p4zhJLvf17qxy3tcmrWJQjR4bQkS2fl4OyKN6VY=)
                          2: I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl (hash: 8ABLufSsm5OOiKd1hwoMlOWt00+dR8xTpfB91DXPD+U=)
                          3: dQiPhvfLmWkjHMDaDZ-gEA5vKsA.roa (hash: Apxi4HVF9cbEKfl01+GMULsLDvfabVWHAPxCuePrSkA=)
                          4: dkb5gZIob1tpW-aZ36OG6g6eqVg.roa (hash: 6qmzftK2St+wbMPcDJN5VBpBK/rYP12e7Qen5uHlL/g=)
                          5: mgi-sHB9BvG_JhGVaolwV53PdcI.roa (hash: Mp5ienel094fK7II/BeJb819aKnF3b9Sr1dy+H9Nl2U=)
                          6: vAX6cMjo8la6961Io6NKSibrpLs.roa (hash: QGc4CY1otQW+SDtxZLvjRsQAMwHLQ4AN0c1HPwQX50Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Sep 2025 05:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:37:94:cb:b3:38:e3:75:20:27:cb:8a:9c:07:7b:6e:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237c83447d17183380f489bc946c8b9e300ffb1d
        Validity
            Not Before: Sep 11 07:02:02 2025 GMT
            Not After : Sep 12 07:02:02 2025 GMT
        Subject: CN=81fd84760a15baedc9f501cc17a7dec619f1356a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:64:0e:78:9f:bf:92:d0:0a:4a:80:2c:52:d2:
                    82:eb:fe:6d:0f:31:a7:55:7f:92:02:31:a0:bb:3c:
                    ba:83:6f:f2:1c:6e:c4:ba:b5:2c:02:2c:96:bf:08:
                    0d:00:3f:1e:3c:61:25:f1:b5:27:2e:b5:cf:e4:47:
                    31:82:06:de:c8:87:0d:28:89:9c:80:43:58:4a:fd:
                    da:a5:ab:d7:09:f9:d7:62:69:fc:8c:d2:96:4c:ad:
                    b9:ae:80:20:d2:75:cb:73:26:b3:1a:e7:ce:0b:06:
                    60:28:41:f4:d0:36:60:01:91:11:fd:d8:6e:c6:52:
                    53:06:de:4b:78:18:21:74:e9:14:7e:3f:6e:1c:32:
                    a6:7f:bc:02:87:95:2b:10:78:55:c9:71:07:56:70:
                    bb:48:45:ac:f9:76:60:77:ce:29:05:db:97:63:5e:
                    89:ff:13:64:04:3f:59:40:44:b9:7f:80:c0:30:60:
                    b9:a3:79:bf:b3:dd:0a:74:9d:65:87:ba:3c:4a:74:
                    b6:5f:b7:08:18:7a:32:20:e5:c8:f3:3e:b0:a0:30:
                    60:a7:9f:91:0d:29:1f:90:ef:8f:bd:9d:68:dc:b8:
                    23:0d:29:ae:4a:60:47:4b:d9:6f:a1:c7:49:2a:0d:
                    8a:0b:4b:02:07:be:da:5e:c2:a1:76:7d:b0:8f:65:
                    6a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:FD:84:76:0A:15:BA:ED:C9:F5:01:CC:17:A7:DE:C6:19:F1:35:6A
            X509v3 Authority Key Identifier:
                keyid:23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:7b:1e:ac:b7:65:46:c2:ee:dd:ac:34:93:85:8c:e9:c6:b8:
         ec:cd:44:26:23:62:f5:ae:29:43:3b:64:6b:b4:77:3a:7c:4f:
         29:63:31:41:ce:22:51:a7:98:1d:ac:67:d9:73:c0:12:14:ef:
         7e:86:39:72:4f:c7:fe:b1:b7:8d:df:b0:61:9e:52:74:7f:2e:
         ac:78:eb:9a:9a:45:94:72:9a:67:b2:b5:67:a2:74:7b:63:d8:
         4f:3b:97:34:c4:1c:74:35:b7:81:e0:f5:16:6f:af:4f:c7:ba:
         33:d7:db:ff:35:7d:92:1d:d8:7e:47:7f:2c:48:3b:ee:1d:97:
         4d:8c:3d:51:c7:b4:19:58:9d:6a:c2:b4:95:35:08:05:a4:1d:
         8e:ac:9b:55:68:5f:ca:36:d7:90:5c:c8:3a:87:db:34:7e:0c:
         c5:a9:48:7b:36:8e:46:21:d6:87:d9:7a:60:5e:53:9b:ab:34:
         32:4c:8f:9f:c2:d2:98:e9:fc:51:08:a7:79:33:1f:88:75:ee:
         a7:42:49:2a:cb:ae:5f:48:16:74:77:59:06:b0:d5:6e:99:e5:
         62:51:d7:3a:51:f4:f6:01:6d:00:f3:b1:00:3a:4a:92:27:e0:
         e3:aa:4c:f8:19:da:e0:51:ae:01:ee:91:47:2e:00:94:28:9b:
         a9:78:26:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk3lMuzOON1ICfLipwHe26oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzN2M4MzQ0N2QxNzE4MzM4MGY0ODliYzk0NmM4YjllMzAw
ZmZiMWQwHhcNMjUwOTExMDcwMjAyWhcNMjUwOTEyMDcwMjAyWjAzMTEwLwYDVQQD
Eyg4MWZkODQ3NjBhMTViYWVkYzlmNTAxY2MxN2E3ZGVjNjE5ZjEzNTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGQOeJ+/ktAKSoAsUtKC6/5tDzGn
VX+SAjGguzy6g2/yHG7EurUsAiyWvwgNAD8ePGEl8bUnLrXP5EcxggbeyIcNKImc
gENYSv3apavXCfnXYmn8jNKWTK25roAg0nXLcyazGufOCwZgKEH00DZgAZER/dhu
xlJTBt5LeBghdOkUfj9uHDKmf7wCh5UrEHhVyXEHVnC7SEWs+XZgd84pBduXY16J
/xNkBD9ZQES5f4DAMGC5o3m/s90KdJ1lh7o8SnS2X7cIGHoyIOXI8z6woDBgp5+R
DSkfkO+PvZ1o3LgjDSmuSmBHS9lvocdJKg2KC0sCB77aXsKhdn2wj2VqPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIH9hHYKFbrtyfUBzBen3sYZ8TVqMB8GA1UdIwQY
MBaAFCN8g0R9FxgzgPSJvJRsi54wD/sdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTN5RFJIMFhHRE9BOUltOGxHeUxuakFQLXgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS85ZDU5ZTEtN2E2Ny00NjlkLWI0ZGEt
OGIzMzcyMjM0ZGMwLzEvSTN5RFJIMFhHRE9BOUltOGxHeUxuakFQLXgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS85ZDU5ZTEtN2E2Ny00NjlkLWI0ZGEtOGIzMzcyMjM0ZGMw
LzEvSTN5RFJIMFhHRE9BOUltOGxHeUxuakFQLXgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOHserLdl
RsLu3aw0k4WM6ca47M1EJiNi9a4pQztka7R3OnxPKWMxQc4iUaeYHaxn2XPAEhTv
foY5ck/H/rG3jd+wYZ5SdH8urHjrmppFlHKaZ7K1Z6J0e2PYTzuXNMQcdDW3geD1
Fm+vT8e6M9fb/zV9kh3Yfkd/LEg77h2XTYw9Uce0GVidasK0lTUIBaQdjqybVWhf
yjbXkFzIOofbNH4MxalIezaORiHWh9l6YF5Tm6s0MkyPn8LSmOn8UQineTMfiHXu
p0JJKsuuX0gWdHdZBrDVbpnlYlHXOlH09gFtAPOxADpKkifg46pM+Bna4FGuAe6R
Ry4AlCibqXgmDQ==
-----END CERTIFICATE-----
Generated at Thu Sep 11 11:42:19 2025 by rpki-client