Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
File:                     taJj0Y61xUD3R4glu3LvrG8o-Cs.mft (raw, json)
Hash identifier:          UoMF7gnBXYrEFtEtqsdQQjtIqD1nox35rF3kFKTZr24=
Subject key identifier:   D6:2E:88:5D:6A:05:17:0A:E7:BD:FD:28:8E:F7:04:D8:36:46:B3:86
Authority key identifier: B5:A2:63:D1:8E:B5:C5:40:F7:47:88:25:BB:72:EF:AC:6F:28:F8:2B
Certificate issuer:       /CN=b5a263d18eb5c540f7478825bb72efac6f28f82b
Certificate serial:       019931C858DF8269D37899E2F340EE0B4BBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
Manifest number:          160A
Signing time:             Wed 10 Sep 2025 04:00:37 +0000
Manifest this update:     Wed 10 Sep 2025 04:00:37 +0000
Manifest next update:     Thu 11 Sep 2025 04:00:37 +0000
Files and hashes:         1: FxOU5mcs5zu6It7tyYPtggiNpMw.roa (hash: HYzosP3W6gjE2lC2/EeCUTPjqHpatsBGbz79rZD00GQ=)
                          2: taJj0Y61xUD3R4glu3LvrG8o-Cs.crl (hash: gMwU3p7QZ1gDY39eZTrjhtVnGjSCEtll9lSZM+aYsgk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 02:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:31:c8:58:df:82:69:d3:78:99:e2:f3:40:ee:0b:4b:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5a263d18eb5c540f7478825bb72efac6f28f82b
        Validity
            Not Before: Sep 10 04:00:37 2025 GMT
            Not After : Sep 11 04:00:37 2025 GMT
        Subject: CN=d62e885d6a05170ae7bdfd288ef704d83646b386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7b:72:11:61:06:9c:0a:a9:8e:e2:73:c9:63:
                    ae:19:0c:ee:58:d9:bd:43:c2:71:9a:c4:6e:74:39:
                    10:9f:6b:e3:69:1b:a9:8a:98:02:40:9f:1e:5e:c7:
                    5a:b8:6a:4a:ae:d6:5a:c6:8e:4c:a9:0f:eb:8f:7b:
                    d4:24:6b:76:a8:66:e9:fb:35:dc:b5:4c:e1:34:59:
                    50:25:5b:39:35:ac:51:d1:96:4c:d5:ec:07:69:67:
                    5d:47:c4:43:2a:40:95:d2:0a:f7:6b:be:2b:a4:b4:
                    f9:4d:bc:32:0a:2a:04:40:db:c7:db:c7:ac:94:32:
                    06:87:5c:1e:fd:c1:06:d4:c7:60:3e:0a:b5:d1:4d:
                    85:93:8d:34:3e:32:2c:3b:48:0a:59:f7:81:b3:82:
                    99:1f:7d:e2:e0:30:49:65:9e:0c:de:4f:95:7e:0f:
                    8a:18:c7:a3:66:ee:00:c1:3a:97:3e:0a:75:b6:e8:
                    24:6c:df:d1:61:d3:b3:82:86:a4:4f:f0:dd:c3:82:
                    a6:bd:94:01:21:1b:06:86:17:0e:bf:66:18:0d:48:
                    97:06:1c:ee:15:b5:9b:cd:0b:d9:87:84:14:43:12:
                    6e:92:87:48:89:0d:a3:1e:95:e9:de:1d:fb:8a:3c:
                    93:50:1e:da:3a:a2:02:f4:eb:fb:62:74:83:48:cd:
                    06:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:2E:88:5D:6A:05:17:0A:E7:BD:FD:28:8E:F7:04:D8:36:46:B3:86
            X509v3 Authority Key Identifier:
                keyid:B5:A2:63:D1:8E:B5:C5:40:F7:47:88:25:BB:72:EF:AC:6F:28:F8:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:5c:b9:ac:69:ec:3b:cb:65:06:6b:76:7e:af:71:9e:26:8e:
         d3:1f:6d:46:12:66:2f:41:87:fb:fb:dd:3b:c3:4d:be:18:12:
         b9:9b:6d:3e:67:fc:69:4f:b4:6b:a3:ce:86:7d:6f:c0:fe:d8:
         13:42:6b:21:78:39:f7:d9:cc:f4:9e:5a:03:43:13:8e:8b:d1:
         3f:0e:9a:f2:87:06:6a:5b:3c:5b:22:e0:bb:f5:49:8a:65:1f:
         9b:72:bc:70:5c:7a:e9:d3:bb:72:f6:7e:f5:76:9b:44:1d:9d:
         6d:6b:31:cf:d7:b1:f6:44:22:9a:7c:63:3c:4d:1a:bd:d5:16:
         8a:2d:02:72:1a:e6:ee:8b:47:07:06:6b:f0:26:e6:93:81:b8:
         2d:58:e9:03:f1:c6:e3:7c:08:08:7d:e4:c7:81:2b:97:46:6b:
         01:53:0f:74:c2:1b:e9:52:db:44:a9:5e:65:71:fb:80:4f:cd:
         5e:24:18:11:15:47:fa:f4:90:21:d2:6b:44:5c:13:27:47:9b:
         a2:58:26:33:a0:8b:98:64:61:8f:9c:32:32:07:15:30:ae:75:
         60:65:2d:3c:3f:ef:1e:12:f3:df:98:3b:d9:2c:44:33:51:46:
         c6:b7:0e:12:48:32:f6:22:a8:46:56:86:a0:09:8f:eb:51:e7:
         04:50:5c:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkxyFjfgmnTeJni80DuC0u/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YTI2M2QxOGViNWM1NDBmNzQ3ODgyNWJiNzJlZmFjNmYy
OGY4MmIwHhcNMjUwOTEwMDQwMDM3WhcNMjUwOTExMDQwMDM3WjAzMTEwLwYDVQQD
EyhkNjJlODg1ZDZhMDUxNzBhZTdiZGZkMjg4ZWY3MDRkODM2NDZiMzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzntyEWEGnAqpjuJzyWOuGQzuWNm9
Q8JxmsRudDkQn2vjaRupipgCQJ8eXsdauGpKrtZaxo5MqQ/rj3vUJGt2qGbp+zXc
tUzhNFlQJVs5NaxR0ZZM1ewHaWddR8RDKkCV0gr3a74rpLT5TbwyCioEQNvH28es
lDIGh1we/cEG1MdgPgq10U2Fk400PjIsO0gKWfeBs4KZH33i4DBJZZ4M3k+Vfg+K
GMejZu4AwTqXPgp1tugkbN/RYdOzgoakT/Ddw4KmvZQBIRsGhhcOv2YYDUiXBhzu
FbWbzQvZh4QUQxJukodIiQ2jHpXp3h37ijyTUB7aOqIC9Ov7YnSDSM0GgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNYuiF1qBRcK5739KI73BNg2RrOGMB8GA1UdIwQY
MBaAFLWiY9GOtcVA90eIJbty76xvKPgrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGFKajBZNjF4VUQzUjRnbHUzTHZyRzhvLUNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xZDAxNzEtMzMwNy00NTMxLWE3M2Et
MTQ2YTY5YjZkOGU0LzEvdGFKajBZNjF4VUQzUjRnbHUzTHZyRzhvLUNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8xZDAxNzEtMzMwNy00NTMxLWE3M2EtMTQ2YTY5YjZkOGU0
LzEvdGFKajBZNjF4VUQzUjRnbHUzTHZyRzhvLUNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjFy5rGns
O8tlBmt2fq9xniaO0x9tRhJmL0GH+/vdO8NNvhgSuZttPmf8aU+0a6POhn1vwP7Y
E0JrIXg599nM9J5aA0MTjovRPw6a8ocGals8WyLgu/VJimUfm3K8cFx66dO7cvZ+
9XabRB2dbWsxz9ex9kQimnxjPE0avdUWii0Cchrm7otHBwZr8Cbmk4G4LVjpA/HG
43wICH3kx4Erl0ZrAVMPdMIb6VLbRKleZXH7gE/NXiQYERVH+vSQIdJrRFwTJ0eb
olgmM6CLmGRhj5wyMgcVMK51YGUtPD/vHhLz35g72SxEM1FGxrcOEkgy9iKoRlaG
oAmP61HnBFBcjA==
-----END CERTIFICATE-----
Generated at Wed Sep 10 10:30:54 2025 by rpki-client