Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft
File:                     RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft (raw, json)
Hash identifier:          yrqnUB6JYuXK0pRk3lh/nOzVjihUovUs/tz1KR6eFgA=
Subject key identifier:   3E:D1:B5:96:7F:C6:B2:22:1A:AB:8E:F9:78:8E:41:0C:1B:FE:11:6C
Authority key identifier: 45:76:70:54:D1:93:A3:B8:D6:C2:C0:09:F5:9C:F6:43:E1:49:E3:9F
Certificate issuer:       /CN=45767054d193a3b8d6c2c009f59cf643e149e39f
Certificate serial:       01988B45C8A968ACB3427FAD21D584B9B467
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft
Manifest number:          101E
Signing time:             Fri 08 Aug 2025 20:01:03 +0000
Manifest this update:     Fri 08 Aug 2025 20:01:03 +0000
Manifest next update:     Sat 09 Aug 2025 20:01:03 +0000
Files and hashes:         1: RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.crl (hash: IEwzoTt61HhoNywu2ybnwiYzEs+R8cd9GfzqjYlD/MA=)
                          2: kpeNUrCjwD-bH5D8QQPXuEqA70c.roa (hash: /GB93CH2vpBaaqYNdlIMujujZ/LFvmv11CaA0a79OcU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:45:c8:a9:68:ac:b3:42:7f:ad:21:d5:84:b9:b4:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45767054d193a3b8d6c2c009f59cf643e149e39f
        Validity
            Not Before: Aug  8 20:01:03 2025 GMT
            Not After : Aug  9 20:01:03 2025 GMT
        Subject: CN=3ed1b5967fc6b2221aab8ef9788e410c1bfe116c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7a:d3:52:a3:26:d9:11:47:3d:b0:54:05:cc:
                    a2:2d:c6:89:1f:91:37:53:a2:55:fb:4c:09:8f:b1:
                    62:4f:cf:5f:36:03:52:15:77:5c:f7:13:42:2c:70:
                    a7:b9:4e:48:a8:6f:1c:51:97:6f:5c:f7:8f:12:fc:
                    02:f4:c7:9a:95:53:f9:34:25:ad:36:2c:d5:a8:e3:
                    ef:e2:0e:90:18:b5:6c:9a:05:76:5e:d8:41:c7:50:
                    99:e3:a3:54:f9:a9:9f:83:eb:30:42:4d:85:54:96:
                    3a:ba:96:d6:c0:06:5c:1e:f8:e6:fb:dd:b3:f4:95:
                    be:52:33:1d:17:bf:a8:3b:ee:f7:ca:f6:85:da:41:
                    06:de:30:80:e2:03:d2:77:6f:bf:a4:37:9a:8c:46:
                    8d:d9:ed:86:85:0b:4b:3a:32:3f:68:b9:37:e9:0c:
                    b4:96:c2:d9:b4:bf:f4:fd:a4:2f:61:96:cd:74:cc:
                    c5:c1:23:24:c7:41:c0:90:c9:c9:dc:0d:59:a9:6f:
                    42:29:3f:6a:b9:16:8d:ef:48:ac:74:b3:10:a4:40:
                    6f:45:10:2d:a1:56:fe:64:86:14:ae:10:4d:b3:a8:
                    1d:35:4e:22:ab:52:4b:9c:42:63:9f:98:4e:11:57:
                    f9:1c:1a:c4:2a:75:5a:8c:9a:c3:5d:61:88:84:b2:
                    4c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D1:B5:96:7F:C6:B2:22:1A:AB:8E:F9:78:8E:41:0C:1B:FE:11:6C
            X509v3 Authority Key Identifier:
                keyid:45:76:70:54:D1:93:A3:B8:D6:C2:C0:09:F5:9C:F6:43:E1:49:E3:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:ac:f2:ce:6a:32:00:e7:84:70:4c:1b:80:ba:df:b9:58:a5:
         00:a1:bc:2b:34:49:7f:86:ef:51:e4:34:a9:c8:79:8a:e8:a9:
         73:8d:6f:08:cf:60:39:43:a6:88:9a:f8:17:20:b4:52:aa:bc:
         cd:83:9f:00:0f:a5:a9:6d:89:d7:61:7f:e1:46:47:a3:56:29:
         23:74:98:ce:26:67:e6:5f:2c:9e:82:d7:42:a1:54:e2:eb:04:
         75:32:d4:6c:fa:35:a7:d5:ac:7b:69:7a:92:c5:64:5f:c7:bc:
         20:66:d8:18:d0:22:da:8a:c5:61:93:65:8e:76:51:ac:39:42:
         d1:08:24:9d:bd:dd:8e:a0:c7:44:18:6f:19:8b:7f:7d:25:15:
         50:20:25:8a:ac:2f:53:71:5f:2c:01:ac:05:65:50:66:d4:6f:
         c4:e6:5c:8d:16:05:68:0c:de:30:1e:83:4e:17:1b:f0:dd:61:
         3b:61:d7:fa:0c:0d:04:54:b8:8b:e1:ac:92:73:16:fa:e0:09:
         57:a7:86:a5:6c:1c:35:5f:9a:b9:8a:0b:82:8b:7c:6f:83:f8:
         73:dc:b2:d4:09:c9:18:65:83:8b:7f:20:96:ac:55:33:2a:67:
         8e:a5:fb:1d:9b:47:7a:44:61:ac:10:44:2c:63:85:c3:2c:49:
         5b:75:4b:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLRcipaKyzQn+tIdWEubRnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1NzY3MDU0ZDE5M2EzYjhkNmMyYzAwOWY1OWNmNjQzZTE0
OWUzOWYwHhcNMjUwODA4MjAwMTAzWhcNMjUwODA5MjAwMTAzWjAzMTEwLwYDVQQD
EygzZWQxYjU5NjdmYzZiMjIyMWFhYjhlZjk3ODhlNDEwYzFiZmUxMTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunrTUqMm2RFHPbBUBcyiLcaJH5E3
U6JV+0wJj7FiT89fNgNSFXdc9xNCLHCnuU5IqG8cUZdvXPePEvwC9MealVP5NCWt
NizVqOPv4g6QGLVsmgV2XthBx1CZ46NU+amfg+swQk2FVJY6upbWwAZcHvjm+92z
9JW+UjMdF7+oO+73yvaF2kEG3jCA4gPSd2+/pDeajEaN2e2GhQtLOjI/aLk36Qy0
lsLZtL/0/aQvYZbNdMzFwSMkx0HAkMnJ3A1ZqW9CKT9quRaN70isdLMQpEBvRRAt
oVb+ZIYUrhBNs6gdNU4iq1JLnEJjn5hOEVf5HBrEKnVajJrDXWGIhLJMVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7RtZZ/xrIiGquO+XiOQQwb/hFsMB8GA1UdIwQY
MBaAFEV2cFTRk6O41sLACfWc9kPhSeOfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlhad1ZOR1RvN2pXd3NBSjlaejJRLUZKNDU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8yOGEzYTktZmQ0My00ODljLWJjYzgt
YjgwYTIzYWM3ODkzLzEvUlhad1ZOR1RvN2pXd3NBSjlaejJRLUZKNDU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8yOGEzYTktZmQ0My00ODljLWJjYzgtYjgwYTIzYWM3ODkz
LzEvUlhad1ZOR1RvN2pXd3NBSjlaejJRLUZKNDU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeqzyzmoy
AOeEcEwbgLrfuVilAKG8KzRJf4bvUeQ0qch5iuipc41vCM9gOUOmiJr4FyC0Uqq8
zYOfAA+lqW2J12F/4UZHo1YpI3SYziZn5l8snoLXQqFU4usEdTLUbPo1p9Wse2l6
ksVkX8e8IGbYGNAi2orFYZNljnZRrDlC0Qgknb3djqDHRBhvGYt/fSUVUCAliqwv
U3FfLAGsBWVQZtRvxOZcjRYFaAzeMB6DThcb8N1hO2HX+gwNBFS4i+GsknMW+uAJ
V6eGpWwcNV+auYoLgot8b4P4c9yy1AnJGGWDi38glqxVMypnjqX7HZtHekRhrBBE
LGOFwyxJW3VLGg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:36:02 2025 by rpki-client