Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft
File:                     9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft (raw, json)
Hash identifier:          O8hV2J6mA86Lq5fbmJJh6GRelkkg1QEsUHTtADG0gd0=
Subject key identifier:   87:87:05:FC:78:B1:53:F4:71:4C:49:1E:3D:E1:49:CE:7B:BC:B9:40
Authority key identifier: F6:05:7E:74:AA:D2:1A:BC:F1:33:74:F5:91:5B:1A:7E:82:7D:4E:A1
Certificate issuer:       /CN=f6057e74aad21abcf13374f5915b1a7e827d4ea1
Certificate serial:       0198A04D96772451D5333E1C6DC4B138F6C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9gV-dKrSGrzxM3T1kVsafoJ9TqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft
Manifest number:          1342
Signing time:             Tue 12 Aug 2025 22:01:36 +0000
Manifest this update:     Tue 12 Aug 2025 22:01:36 +0000
Manifest next update:     Wed 13 Aug 2025 22:01:36 +0000
Files and hashes:         1: 9gV-dKrSGrzxM3T1kVsafoJ9TqE.crl (hash: 8HA9nj7QM9D0KamYGz7tJ5izU9jot3QMQm5xoGYtsvg=)
                          2: aDwAS1LQt-dxkqhRRrd8pQDVwd4.roa (hash: duXpBH3mnr8j/KJuHRzuQfhllP9IGUW8jdVpYb4QHpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9gV-dKrSGrzxM3T1kVsafoJ9TqE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a0:4d:96:77:24:51:d5:33:3e:1c:6d:c4:b1:38:f6:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6057e74aad21abcf13374f5915b1a7e827d4ea1
        Validity
            Not Before: Aug 12 22:01:36 2025 GMT
            Not After : Aug 13 22:01:36 2025 GMT
        Subject: CN=878705fc78b153f4714c491e3de149ce7bbcb940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:59:d3:32:1e:b4:29:e1:35:e7:08:4d:2e:ed:
                    17:53:95:3b:04:a5:59:86:f5:f3:f3:f5:8a:c9:93:
                    be:ce:5e:4d:0d:1f:d5:f2:f9:cc:2d:a0:eb:c3:60:
                    f2:21:40:ce:43:42:fb:ec:c0:1f:9f:8f:b1:fc:82:
                    55:70:fd:33:a2:dc:8d:98:c1:b8:10:ff:7d:5a:b5:
                    f9:b2:31:f7:d2:18:59:0a:6b:33:13:8d:dc:7b:df:
                    21:3d:b9:4e:89:0a:80:10:75:34:33:3e:83:cb:05:
                    e3:ef:10:b3:09:90:61:61:be:52:a8:a1:08:63:61:
                    17:b7:32:62:9b:a8:f5:d6:b6:1c:cc:13:24:87:c4:
                    2a:07:6e:28:53:7e:7d:e9:c3:ec:d9:d5:bd:c8:23:
                    db:71:85:23:91:ad:a3:85:82:6e:4b:5d:0c:56:c4:
                    79:ec:7a:d1:3a:9b:a8:96:bc:58:3c:aa:20:61:1a:
                    b0:be:e6:d5:e5:32:97:1a:9b:3f:49:a4:0c:ae:97:
                    4c:75:b5:9d:16:c7:4e:37:52:6b:1a:e4:bf:a5:8f:
                    71:25:ab:45:8a:3d:d5:3f:4c:b5:be:29:b9:c0:48:
                    ac:7d:da:17:46:ea:de:0d:dc:56:00:77:8e:42:71:
                    1c:ac:4f:d1:c4:c2:50:c2:7f:d3:92:03:17:8e:9f:
                    23:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:87:05:FC:78:B1:53:F4:71:4C:49:1E:3D:E1:49:CE:7B:BC:B9:40
            X509v3 Authority Key Identifier:
                keyid:F6:05:7E:74:AA:D2:1A:BC:F1:33:74:F5:91:5B:1A:7E:82:7D:4E:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gV-dKrSGrzxM3T1kVsafoJ9TqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:72:ff:36:5b:8d:95:d5:c1:7f:25:5d:c0:c1:83:b4:de:38:
         4b:0e:ba:5b:f1:1a:6a:54:4c:ad:d7:56:e2:38:f7:c8:42:78:
         0d:fb:06:41:e6:27:3b:df:c6:2f:71:76:a2:c0:20:85:5e:c4:
         c2:07:b8:43:df:ef:2b:a6:01:f6:5e:43:f7:82:eb:2e:5e:31:
         ba:8f:68:de:37:f3:3c:04:90:8b:c8:c4:33:ca:0a:d2:85:d7:
         54:37:62:61:a7:34:27:de:4e:05:c8:34:20:42:36:d2:d1:73:
         39:4c:b4:61:b9:cf:47:24:3c:35:0c:60:a8:64:5c:36:b3:4f:
         1e:01:e5:4e:c0:b5:a4:58:c0:ce:ea:ed:ce:d9:ae:be:96:4b:
         4c:57:45:0f:f1:80:d7:ef:d7:cf:e8:12:da:ee:5f:06:0d:27:
         8b:fb:30:ec:95:12:ee:d4:6b:f4:9f:ec:39:fb:dd:74:d7:35:
         16:c3:50:92:e2:30:db:7e:3b:81:1f:1b:6b:cc:e9:8f:a3:3e:
         37:e7:3d:01:66:34:9d:70:0b:b0:9d:3f:c4:da:47:b3:0d:39:
         37:70:22:1d:18:fc:e5:d2:46:96:90:a5:0d:3c:3d:8d:26:26:
         48:79:f0:a3:15:b7:6d:7c:fb:6d:bb:73:2d:97:4b:a5:4a:f6:
         a2:47:b7:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZigTZZ3JFHVMz4cbcSxOPbBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2MDU3ZTc0YWFkMjFhYmNmMTMzNzRmNTkxNWIxYTdlODI3
ZDRlYTEwHhcNMjUwODEyMjIwMTM2WhcNMjUwODEzMjIwMTM2WjAzMTEwLwYDVQQD
Eyg4Nzg3MDVmYzc4YjE1M2Y0NzE0YzQ5MWUzZGUxNDljZTdiYmNiOTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VnTMh60KeE15whNLu0XU5U7BKVZ
hvXz8/WKyZO+zl5NDR/V8vnMLaDrw2DyIUDOQ0L77MAfn4+x/IJVcP0zotyNmMG4
EP99WrX5sjH30hhZCmszE43ce98hPblOiQqAEHU0Mz6DywXj7xCzCZBhYb5SqKEI
Y2EXtzJim6j11rYczBMkh8QqB24oU3596cPs2dW9yCPbcYUjka2jhYJuS10MVsR5
7HrROpuolrxYPKogYRqwvubV5TKXGps/SaQMrpdMdbWdFsdON1JrGuS/pY9xJatF
ij3VP0y1vim5wEisfdoXRureDdxWAHeOQnEcrE/RxMJQwn/TkgMXjp8j3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIeHBfx4sVP0cUxJHj3hSc57vLlAMB8GA1UdIwQY
MBaAFPYFfnSq0hq88TN09ZFbGn6CfU6hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWdWLWRLclNHcnp4TTNUMWtWc2Fmb0o5VHFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zYWUxZGUtYmQ1Yy00YTE3LTlmYTgt
MGE5YTFmMWM5ODljLzEvOWdWLWRLclNHcnp4TTNUMWtWc2Fmb0o5VHFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zYWUxZGUtYmQ1Yy00YTE3LTlmYTgtMGE5YTFmMWM5ODlj
LzEvOWdWLWRLclNHcnp4TTNUMWtWc2Fmb0o5VHFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADnL/NluN
ldXBfyVdwMGDtN44Sw66W/EaalRMrddW4jj3yEJ4DfsGQeYnO9/GL3F2osAghV7E
wge4Q9/vK6YB9l5D94LrLl4xuo9o3jfzPASQi8jEM8oK0oXXVDdiYac0J95OBcg0
IEI20tFzOUy0YbnPRyQ8NQxgqGRcNrNPHgHlTsC1pFjAzurtztmuvpZLTFdFD/GA
1+/Xz+gS2u5fBg0ni/sw7JUS7tRr9J/sOfvddNc1FsNQkuIw2347gR8ba8zpj6M+
N+c9AWY0nXALsJ0/xNpHsw05N3AiHRj85dJGlpClDTw9jSYmSHnwoxW3bXz7bbtz
LZdLpUr2oke3uw==
-----END CERTIFICATE-----
Generated at Wed Aug 13 04:24:07 2025 by rpki-client