Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/6dffd8-e433-441b-bb37-6046c00496bc/1/Us3j-fOkO7GGEIo8M9n2NVeh14w.mft
File:                     Us3j-fOkO7GGEIo8M9n2NVeh14w.mft (raw, json)
Hash identifier:          tV9UlxhdeiUVOy/Q74ODzs5ZucHktptwJXYRKnYuVlU=
Subject key identifier:   81:7E:CB:75:D8:9F:99:C2:3A:8B:78:55:D9:97:DA:05:E1:56:3D:56
Authority key identifier: 52:CD:E3:F9:F3:A4:3B:B1:86:10:8A:3C:33:D9:F6:35:57:A1:D7:8C
Certificate issuer:       /CN=52cde3f9f3a43bb186108a3c33d9f63557a1d78c
Certificate serial:       01988B0EDD8B8C14138A0632FC2A2E1833AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Us3j-fOkO7GGEIo8M9n2NVeh14w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/6dffd8-e433-441b-bb37-6046c00496bc/1/Us3j-fOkO7GGEIo8M9n2NVeh14w.mft
Manifest number:          D7
Signing time:             Fri 08 Aug 2025 19:01:03 +0000
Manifest this update:     Fri 08 Aug 2025 19:01:03 +0000
Manifest next update:     Sat 09 Aug 2025 19:01:03 +0000
Files and hashes:         1: Us3j-fOkO7GGEIo8M9n2NVeh14w.crl (hash: tgDFnXbBha2bJ1zp5BtXEes8xqIoruZetJtMRq6tY2k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/6dffd8-e433-441b-bb37-6046c00496bc/1/Us3j-fOkO7GGEIo8M9n2NVeh14w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/6dffd8-e433-441b-bb37-6046c00496bc/1/Us3j-fOkO7GGEIo8M9n2NVeh14w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Us3j-fOkO7GGEIo8M9n2NVeh14w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:0e:dd:8b:8c:14:13:8a:06:32:fc:2a:2e:18:33:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52cde3f9f3a43bb186108a3c33d9f63557a1d78c
        Validity
            Not Before: Aug  8 19:01:03 2025 GMT
            Not After : Aug  9 19:01:03 2025 GMT
        Subject: CN=817ecb75d89f99c23a8b7855d997da05e1563d56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:12:59:42:f8:da:0c:46:56:86:a2:6c:f7:2b:
                    9f:de:20:f6:eb:cf:43:1f:9c:45:b0:60:5b:be:2d:
                    d2:46:07:87:44:4c:13:2e:67:8f:1c:73:29:53:e6:
                    d8:58:13:d1:3d:4d:42:7c:11:09:a9:bc:44:82:92:
                    d4:66:0b:39:c1:aa:4e:38:fb:af:2d:7d:08:1a:16:
                    79:9e:02:35:96:a1:1b:a1:00:3c:10:d9:1e:53:84:
                    75:9c:50:0d:fb:ff:4f:64:15:db:1f:ff:cd:94:f2:
                    c0:fa:94:d0:20:a9:76:9e:55:5d:e3:c7:12:59:cc:
                    6b:f8:78:2b:5b:ef:cc:e4:ce:de:24:ea:20:84:44:
                    53:67:75:27:7a:b1:56:17:02:83:30:2d:58:aa:02:
                    a6:72:01:ac:42:16:a7:89:54:f6:4b:fb:17:0c:44:
                    2e:47:6b:dc:b4:78:1d:fd:7a:0b:d4:2a:9d:86:e7:
                    d3:0e:8a:93:22:d3:08:06:3c:65:fb:73:c4:cc:a5:
                    2b:e8:67:b0:2d:54:62:7c:99:69:16:ec:b1:5a:5d:
                    a2:f1:f8:bc:51:f7:f0:09:3b:c7:28:ed:2e:7c:7e:
                    e6:89:19:ec:c1:c9:6d:55:6d:cd:94:c0:8f:25:4b:
                    74:cd:30:ab:39:c8:27:3e:2d:49:af:e6:e1:a6:ed:
                    b2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:7E:CB:75:D8:9F:99:C2:3A:8B:78:55:D9:97:DA:05:E1:56:3D:56
            X509v3 Authority Key Identifier:
                keyid:52:CD:E3:F9:F3:A4:3B:B1:86:10:8A:3C:33:D9:F6:35:57:A1:D7:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us3j-fOkO7GGEIo8M9n2NVeh14w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6dffd8-e433-441b-bb37-6046c00496bc/1/Us3j-fOkO7GGEIo8M9n2NVeh14w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6dffd8-e433-441b-bb37-6046c00496bc/1/Us3j-fOkO7GGEIo8M9n2NVeh14w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:69:a8:a0:44:00:b0:34:4d:3b:c2:48:1a:72:d9:7d:40:5e:
         41:03:60:27:1f:97:da:e2:c3:49:8a:2b:7f:56:ff:b6:63:83:
         eb:5c:ef:7d:9d:ed:20:40:90:7c:d9:56:41:23:15:21:8b:55:
         53:60:72:c1:f0:41:65:67:9c:2e:de:36:06:cc:76:19:0e:a8:
         55:d3:31:d3:b8:da:a3:b3:a0:6d:d3:e7:6f:83:65:15:ab:fe:
         93:7e:00:b1:38:ad:d8:1a:f6:2e:dc:9d:27:4b:77:a3:4c:dd:
         ae:2d:d4:19:fb:a1:30:e5:85:c4:12:79:39:38:cf:4f:ba:fe:
         9f:80:10:85:15:a1:32:28:f0:4f:ee:9d:f5:22:71:f4:57:aa:
         13:5c:98:8c:3e:ae:0d:c7:cf:24:81:f9:a4:77:76:60:10:e7:
         45:62:1b:19:fb:0e:8c:09:aa:8f:33:65:ba:12:45:41:cb:2b:
         51:6d:75:20:71:a6:d2:d1:a6:f7:2d:5e:42:da:65:60:84:e3:
         f1:1f:a1:20:fa:41:f1:9b:a9:89:86:b2:a8:49:ef:cc:7a:5e:
         37:27:17:d0:7d:1f:28:ff:d7:75:60:e2:68:1e:a2:ca:dd:c5:
         bb:75:40:e0:9c:53:55:3f:d6:7b:e3:c0:40:f0:34:95:eb:63:
         a5:a5:95:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLDt2LjBQTigYy/CouGDOrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyY2RlM2Y5ZjNhNDNiYjE4NjEwOGEzYzMzZDlmNjM1NTdh
MWQ3OGMwHhcNMjUwODA4MTkwMTAzWhcNMjUwODA5MTkwMTAzWjAzMTEwLwYDVQQD
Eyg4MTdlY2I3NWQ4OWY5OWMyM2E4Yjc4NTVkOTk3ZGEwNWUxNTYzZDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xJZQvjaDEZWhqJs9yuf3iD2689D
H5xFsGBbvi3SRgeHREwTLmePHHMpU+bYWBPRPU1CfBEJqbxEgpLUZgs5wapOOPuv
LX0IGhZ5ngI1lqEboQA8ENkeU4R1nFAN+/9PZBXbH//NlPLA+pTQIKl2nlVd48cS
Wcxr+HgrW+/M5M7eJOoghERTZ3UnerFWFwKDMC1YqgKmcgGsQhaniVT2S/sXDEQu
R2vctHgd/XoL1CqdhufTDoqTItMIBjxl+3PEzKUr6GewLVRifJlpFuyxWl2i8fi8
UffwCTvHKO0ufH7miRnswcltVW3NlMCPJUt0zTCrOcgnPi1Jr+bhpu2yoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIF+y3XYn5nCOot4VdmX2gXhVj1WMB8GA1UdIwQY
MBaAFFLN4/nzpDuxhhCKPDPZ9jVXodeMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXMzai1mT2tPN0dHRUlvOE05bjJOVmVoMTR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy82ZGZmZDgtZTQzMy00NDFiLWJiMzct
NjA0NmMwMDQ5NmJjLzEvVXMzai1mT2tPN0dHRUlvOE05bjJOVmVoMTR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy82ZGZmZDgtZTQzMy00NDFiLWJiMzctNjA0NmMwMDQ5NmJj
LzEvVXMzai1mT2tPN0dHRUlvOE05bjJOVmVoMTR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkGmooEQA
sDRNO8JIGnLZfUBeQQNgJx+X2uLDSYorf1b/tmOD61zvfZ3tIECQfNlWQSMVIYtV
U2BywfBBZWecLt42Bsx2GQ6oVdMx07jao7OgbdPnb4NlFav+k34AsTit2Br2Ltyd
J0t3o0zdri3UGfuhMOWFxBJ5OTjPT7r+n4AQhRWhMijwT+6d9SJx9FeqE1yYjD6u
DcfPJIH5pHd2YBDnRWIbGfsOjAmqjzNluhJFQcsrUW11IHGm0tGm9y1eQtplYITj
8R+hIPpB8ZupiYayqEnvzHpeNycX0H0fKP/XdWDiaB6iyt3Fu3VA4JxTVT/We+PA
QPA0letjpaWVpA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:49:38 2025 by rpki-client