Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
File:                     EL2oyoaUjZ_gKdoRGgyecNMEalo.mft (raw, json)
Hash identifier:          kUkYcoxufqrRdM9+ddWmpRSznLvLW2FAoM7WuiCjL8Y=
Subject key identifier:   17:04:5C:01:3C:93:10:09:E0:C7:92:2E:57:DA:5A:B4:18:E2:4A:70
Authority key identifier: 10:BD:A8:CA:86:94:8D:9F:E0:29:DA:11:1A:0C:9E:70:D3:04:6A:5A
Certificate issuer:       /CN=10bda8ca86948d9fe029da111a0c9e70d3046a5a
Certificate serial:       01988FC78A058D515B127E79C8C5C752F6A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
Manifest number:          0905
Signing time:             Sat 09 Aug 2025 17:01:15 +0000
Manifest this update:     Sat 09 Aug 2025 17:01:15 +0000
Manifest next update:     Sun 10 Aug 2025 17:01:15 +0000
Files and hashes:         1: 1-WKKgZBRZsISjM-pPAKq9ZOTfHY.roa (hash: WaCyd+8XHtQ9NQJZXiDHgOg3ILGjfZThoYeSrYEPMP4=)
                          2: EL2oyoaUjZ_gKdoRGgyecNMEalo.crl (hash: UjknnPi/jf+03G0G6BMQ8cd2PrgWiSKKauZqgrzQ+Xw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8f:c7:8a:05:8d:51:5b:12:7e:79:c8:c5:c7:52:f6:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10bda8ca86948d9fe029da111a0c9e70d3046a5a
        Validity
            Not Before: Aug  9 17:01:15 2025 GMT
            Not After : Aug 10 17:01:15 2025 GMT
        Subject: CN=17045c013c931009e0c7922e57da5ab418e24a70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:69:71:e7:28:f1:6e:3d:57:28:25:69:7f:6a:
                    bb:3e:31:56:be:7f:fb:25:1b:fd:81:f0:3d:63:44:
                    91:7e:af:ee:59:8c:2d:73:5b:2f:aa:e3:cc:c8:66:
                    fd:94:1f:c0:d9:4a:af:9d:0a:6c:89:41:84:5f:56:
                    26:a8:3a:5c:24:a5:71:ce:b6:a6:79:ea:77:f5:f7:
                    e6:38:71:9e:d4:51:9d:0b:0c:fe:df:31:70:72:c3:
                    e9:95:dd:0f:cb:f1:76:e8:76:8a:d9:46:e6:2d:01:
                    ac:62:ba:7f:e1:6f:7a:77:6f:2a:b9:47:55:e5:47:
                    b5:f3:c0:4c:c4:67:ed:12:07:0d:79:75:6e:25:22:
                    c7:46:27:85:4c:08:01:23:f5:e5:10:7a:51:64:2b:
                    ae:d2:66:96:94:cd:ac:4c:7b:3f:97:59:05:a3:4a:
                    81:97:a7:56:4e:ef:db:a1:b1:f5:a1:91:4c:78:b7:
                    e3:25:26:44:ba:30:fa:3e:e3:c5:ce:d9:2f:92:f6:
                    82:23:da:eb:26:8d:c4:99:25:4e:3e:14:7b:20:36:
                    58:2b:08:72:3f:53:0a:50:95:12:59:c6:e2:60:bd:
                    4a:b7:35:10:4b:50:15:08:55:28:dd:6b:71:23:fb:
                    4d:1b:3e:6c:c6:c9:1b:a2:fc:c2:53:49:d5:b6:bc:
                    5d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:04:5C:01:3C:93:10:09:E0:C7:92:2E:57:DA:5A:B4:18:E2:4A:70
            X509v3 Authority Key Identifier:
                keyid:10:BD:A8:CA:86:94:8D:9F:E0:29:DA:11:1A:0C:9E:70:D3:04:6A:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:0d:c4:74:70:6a:82:3c:d2:63:96:89:7c:ac:8c:ba:dd:50:
         0f:a1:5f:78:1c:6d:d3:77:1b:e4:85:6a:0d:4d:fa:a7:ae:1a:
         bc:54:75:b7:60:6e:3c:d2:88:7c:f1:58:ba:91:b1:b9:97:ed:
         19:fb:ec:28:72:8c:c2:62:82:ea:07:00:48:55:76:1c:c1:cf:
         fa:8a:5e:1e:f5:c0:13:e2:5b:b9:f4:53:22:81:d0:d7:7e:45:
         5e:52:6a:fa:4d:b0:b5:1f:1e:0f:58:45:20:7e:d8:d5:76:62:
         4b:63:7b:58:9a:88:3e:bb:c1:12:ab:10:2d:73:21:46:ec:5a:
         cd:b5:50:13:9e:75:c1:d7:f8:dc:e9:60:45:00:c7:de:ee:fd:
         5d:ff:6c:8f:e3:69:5d:1a:06:8b:a7:33:db:16:a8:fc:d8:fe:
         4b:f6:6e:21:fa:3a:01:42:69:de:95:d5:97:3b:13:90:94:ac:
         f6:2c:e6:7a:1e:e9:3e:2e:f0:3a:a3:6f:2c:02:04:f6:d1:37:
         66:a0:df:9e:8e:e7:d6:df:f6:d1:56:67:cd:d6:c8:8e:f6:ba:
         74:88:e9:1b:da:11:46:9d:16:07:e2:e3:af:fa:7c:a5:95:0f:
         7d:b5:b4:42:60:e4:f5:a0:a1:08:b9:68:83:30:8b:8e:74:ee:
         91:06:f1:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiPx4oFjVFbEn55yMXHUvapMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwYmRhOGNhODY5NDhkOWZlMDI5ZGExMTFhMGM5ZTcwZDMw
NDZhNWEwHhcNMjUwODA5MTcwMTE1WhcNMjUwODEwMTcwMTE1WjAzMTEwLwYDVQQD
EygxNzA0NWMwMTNjOTMxMDA5ZTBjNzkyMmU1N2RhNWFiNDE4ZTI0YTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGlx5yjxbj1XKCVpf2q7PjFWvn/7
JRv9gfA9Y0SRfq/uWYwtc1svquPMyGb9lB/A2UqvnQpsiUGEX1YmqDpcJKVxzram
eep39ffmOHGe1FGdCwz+3zFwcsPpld0Py/F26HaK2UbmLQGsYrp/4W96d28quUdV
5Ue188BMxGftEgcNeXVuJSLHRieFTAgBI/XlEHpRZCuu0maWlM2sTHs/l1kFo0qB
l6dWTu/bobH1oZFMeLfjJSZEujD6PuPFztkvkvaCI9rrJo3EmSVOPhR7IDZYKwhy
P1MKUJUSWcbiYL1KtzUQS1AVCFUo3WtxI/tNGz5sxskbovzCU0nVtrxdwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBcEXAE8kxAJ4MeSLlfaWrQY4kpwMB8GA1UdIwQY
MBaAFBC9qMqGlI2f4CnaERoMnnDTBGpaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUwyb3lvYVVqWl9nS2RvUkdneWVjTk1FYWxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9jMGE3OTAtNGVkOS00NGMzLThkZmQt
MGJlZjlhM2JhYmE4LzEvRUwyb3lvYVVqWl9nS2RvUkdneWVjTk1FYWxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9jMGE3OTAtNGVkOS00NGMzLThkZmQtMGJlZjlhM2JhYmE4
LzEvRUwyb3lvYVVqWl9nS2RvUkdneWVjTk1FYWxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMA3EdHBq
gjzSY5aJfKyMut1QD6FfeBxt03cb5IVqDU36p64avFR1t2BuPNKIfPFYupGxuZft
GfvsKHKMwmKC6gcASFV2HMHP+opeHvXAE+JbufRTIoHQ135FXlJq+k2wtR8eD1hF
IH7Y1XZiS2N7WJqIPrvBEqsQLXMhRuxazbVQE551wdf43OlgRQDH3u79Xf9sj+Np
XRoGi6cz2xao/Nj+S/ZuIfo6AUJp3pXVlzsTkJSs9izmeh7pPi7wOqNvLAIE9tE3
ZqDfno7n1t/20VZnzdbIjva6dIjpG9oRRp0WB+Ljr/p8pZUPfbW0QmDk9aChCLlo
gzCLjnTukQbxhA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 20:34:30 2025 by rpki-client