Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
File:                     1GlI-8kl-XWftp-e-xLuPxzUFhU.mft (raw, json)
Hash identifier:          0rHWiFj/CxjmvjG1oUozBeUqgsrL91cNiKmQ5mJGz44=
Subject key identifier:   3E:68:05:80:ED:10:05:E9:07:2E:3D:DA:1E:24:5D:78:08:69:0E:84
Authority key identifier: D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15
Certificate issuer:       /CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
Certificate serial:       019892C93F7DC8EA29AB45CD9A923797E772
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
Manifest number:          05BD
Signing time:             Sun 10 Aug 2025 07:01:59 +0000
Manifest this update:     Sun 10 Aug 2025 07:01:59 +0000
Manifest next update:     Mon 11 Aug 2025 07:01:59 +0000
Files and hashes:         1: 1GlI-8kl-XWftp-e-xLuPxzUFhU.crl (hash: ENJOMWsO2yzb9Cu3jym9FyGROmDnkasrokdJb9LfJ9M=)
                          2: EZ9xcPpmaaiDdmg5D8Xp47gSAJw.roa (hash: /ZPFrrUhiRzvgJS9F6X6CPNQ9l9Fj7isIDOoSoDinwA=)
                          3: xTN3jN3JRtB4P5xBVjLw9cDkoVg.roa (hash: UKVupoJGtNRB7xSecoUEhumnrVWffmz284NYSDysuEw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 07:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:92:c9:3f:7d:c8:ea:29:ab:45:cd:9a:92:37:97:e7:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
        Validity
            Not Before: Aug 10 07:01:59 2025 GMT
            Not After : Aug 11 07:01:59 2025 GMT
        Subject: CN=3e680580ed1005e9072e3dda1e245d7808690e84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c3:e5:55:5a:25:75:9b:42:38:f1:ca:ef:de:
                    36:eb:c0:ba:8f:c0:98:37:ae:fb:a0:64:0f:d9:62:
                    bd:1d:8d:3d:a2:f9:ff:3b:24:a5:11:ab:91:72:0a:
                    91:70:e2:23:63:34:a4:79:e2:4b:a6:83:73:52:1a:
                    84:a2:8f:d2:61:00:f8:bf:ff:58:08:75:43:7a:ec:
                    4c:78:2f:d1:7a:46:35:af:c2:b0:10:a3:15:f6:ef:
                    15:b4:5d:fa:97:86:43:30:ce:7f:0d:a5:ae:de:21:
                    13:22:42:e8:6d:83:78:bb:4f:5d:2f:07:85:73:23:
                    c5:db:c0:fc:66:31:85:99:0e:4d:8a:3b:1f:50:33:
                    71:cd:3b:9e:79:47:ef:53:36:4f:fa:a5:b4:b6:37:
                    87:5b:b5:97:0c:a0:fe:a2:cf:d7:42:af:04:9d:81:
                    9c:e5:06:b0:52:59:2a:07:1a:31:b2:1e:6c:ae:3a:
                    1f:d7:79:f6:f2:f0:0b:4d:ca:6b:0e:d9:75:24:64:
                    5b:60:b5:52:83:1a:7f:5d:5a:d0:2b:32:c2:ee:e9:
                    a3:4f:67:0f:7a:7c:f9:87:f9:29:c4:3c:4a:ea:5d:
                    bd:63:a2:ab:a9:a0:d2:c1:17:50:e1:05:6e:a0:a9:
                    68:33:6b:50:dc:ce:0c:7b:54:db:a3:66:67:a1:a6:
                    62:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:68:05:80:ED:10:05:E9:07:2E:3D:DA:1E:24:5D:78:08:69:0E:84
            X509v3 Authority Key Identifier:
                keyid:D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:b6:89:09:0c:31:9e:77:9b:b0:a6:81:f8:9c:50:26:25:a4:
         d3:53:12:67:08:84:89:b1:51:fc:80:1e:f7:e6:6e:bf:ae:c2:
         ae:c5:18:0c:78:6e:93:aa:b5:0a:f9:48:ef:ae:9d:d6:cd:ac:
         d6:5f:25:d8:bb:e4:d3:c1:40:d1:62:53:e7:0f:bc:eb:3a:a8:
         a6:75:82:82:1f:98:68:e8:8c:b4:95:13:3e:9b:e4:dd:22:76:
         70:7b:cc:83:36:a2:3b:28:db:8c:7b:78:10:8f:ee:eb:e3:04:
         e3:4c:62:c6:6a:dc:06:29:a0:a1:e4:fd:9d:ce:af:c0:33:10:
         21:c9:7a:ca:ba:29:9f:99:da:bc:19:1e:45:58:38:f2:a1:e8:
         d4:56:aa:d9:f4:ae:1f:87:3c:77:1e:41:7f:65:f3:0d:36:7d:
         aa:32:87:2c:62:9a:54:ff:4c:c0:93:17:de:f0:59:a2:80:ad:
         93:c7:be:a0:7b:46:2e:43:b0:b2:f9:b5:ac:5f:4a:18:b0:23:
         7b:5e:f6:c0:09:13:ff:68:00:73:88:0d:f5:4d:68:45:e6:68:
         34:b2:ac:27:f3:a0:f8:52:38:2a:b6:9a:b4:b6:45:6c:f5:f1:
         fa:a8:62:43:1f:7b:be:92:73:5b:2a:54:d0:8b:fa:a7:4f:87:
         56:10:12:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiSyT99yOopq0XNmpI3l+dyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Njk0OGZiYzkyNWY5NzU5ZmI2OWY5ZWZiMTJlZTNmMWNk
NDE2MTUwHhcNMjUwODEwMDcwMTU5WhcNMjUwODExMDcwMTU5WjAzMTEwLwYDVQQD
EygzZTY4MDU4MGVkMTAwNWU5MDcyZTNkZGExZTI0NWQ3ODA4NjkwZTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcPlVVoldZtCOPHK794268C6j8CY
N677oGQP2WK9HY09ovn/OySlEauRcgqRcOIjYzSkeeJLpoNzUhqEoo/SYQD4v/9Y
CHVDeuxMeC/RekY1r8KwEKMV9u8VtF36l4ZDMM5/DaWu3iETIkLobYN4u09dLweF
cyPF28D8ZjGFmQ5NijsfUDNxzTueeUfvUzZP+qW0tjeHW7WXDKD+os/XQq8EnYGc
5QawUlkqBxoxsh5srjof13n28vALTcprDtl1JGRbYLVSgxp/XVrQKzLC7umjT2cP
enz5h/kpxDxK6l29Y6KrqaDSwRdQ4QVuoKloM2tQ3M4Me1Tbo2ZnoaZiIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD5oBYDtEAXpBy492h4kXXgIaQ6EMB8GA1UdIwQY
MBaAFNRpSPvJJfl1n7afnvsS7j8c1BYVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUdsSS04a2wtWFdmdHAtZS14THVQeHpVRmhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy85ZTZjMmItNTk1Ni00M2I2LWFjYTkt
MTgxZTY0MDU5ZDMxLzEvMUdsSS04a2wtWFdmdHAtZS14THVQeHpVRmhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy85ZTZjMmItNTk1Ni00M2I2LWFjYTktMTgxZTY0MDU5ZDMx
LzEvMUdsSS04a2wtWFdmdHAtZS14THVQeHpVRmhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFLaJCQwx
nnebsKaB+JxQJiWk01MSZwiEibFR/IAe9+Zuv67CrsUYDHhuk6q1CvlI766d1s2s
1l8l2Lvk08FA0WJT5w+86zqopnWCgh+YaOiMtJUTPpvk3SJ2cHvMgzaiOyjbjHt4
EI/u6+ME40xixmrcBimgoeT9nc6vwDMQIcl6yropn5navBkeRVg48qHo1Faq2fSu
H4c8dx5Bf2XzDTZ9qjKHLGKaVP9MwJMX3vBZooCtk8e+oHtGLkOwsvm1rF9KGLAj
e172wAkT/2gAc4gN9U1oReZoNLKsJ/Og+FI4KraatLZFbPXx+qhiQx97vpJzWypU
0Iv6p0+HVhAS/g==
-----END CERTIFICATE-----
Generated at Sun Aug 10 15:58:19 2025 by rpki-client