Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/1e334d-98b5-47b9-b4fd-29f71ee1791d/1/dvLzQc-Yuei0bt04mkgGTHuub5o.mft
File:                     dvLzQc-Yuei0bt04mkgGTHuub5o.mft (raw, json)
Hash identifier:          ZVDIR4E+j/cyq0hmL1WBitPfij5L7v+Q4/x4w3sc0ko=
Subject key identifier:   99:99:A1:92:A3:EF:D2:69:D2:DE:0C:EC:CD:A4:7F:89:80:26:B1:A9
Authority key identifier: 76:F2:F3:41:CF:98:B9:E8:B4:6E:DD:38:9A:48:06:4C:7B:AE:6F:9A
Certificate issuer:       /CN=76f2f341cf98b9e8b46edd389a48064c7bae6f9a
Certificate serial:       0198A04D9702501D2C2988E3788C0AB231D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dvLzQc-Yuei0bt04mkgGTHuub5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/1e334d-98b5-47b9-b4fd-29f71ee1791d/1/dvLzQc-Yuei0bt04mkgGTHuub5o.mft
Manifest number:          0E11
Signing time:             Tue 12 Aug 2025 22:01:36 +0000
Manifest this update:     Tue 12 Aug 2025 22:01:36 +0000
Manifest next update:     Wed 13 Aug 2025 22:01:36 +0000
Files and hashes:         1: dvLzQc-Yuei0bt04mkgGTHuub5o.crl (hash: cMtyh8u6Xnp7RQcWN4YTsNDI2ncr0/K1THoV1KdvRp0=)
                          2: pLFGIGuwO6p3VXl7848DpqUCykE.roa (hash: cQnY5M6yFrvUehgYlIPw55V4Prm/y9EByLYSiv2JqLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/1e334d-98b5-47b9-b4fd-29f71ee1791d/1/dvLzQc-Yuei0bt04mkgGTHuub5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/1e334d-98b5-47b9-b4fd-29f71ee1791d/1/dvLzQc-Yuei0bt04mkgGTHuub5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dvLzQc-Yuei0bt04mkgGTHuub5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a0:4d:97:02:50:1d:2c:29:88:e3:78:8c:0a:b2:31:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76f2f341cf98b9e8b46edd389a48064c7bae6f9a
        Validity
            Not Before: Aug 12 22:01:36 2025 GMT
            Not After : Aug 13 22:01:36 2025 GMT
        Subject: CN=9999a192a3efd269d2de0ceccda47f898026b1a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5c:cc:92:f6:9f:06:94:3f:fd:99:47:66:72:
                    c6:75:2b:ff:ce:57:30:ea:82:a7:49:b1:ec:ea:22:
                    d6:0c:a6:29:67:47:d0:ab:12:c8:31:09:4c:df:dc:
                    aa:1b:a9:d4:35:1f:6d:de:c7:88:25:12:53:dc:3a:
                    26:74:f7:58:5e:f1:0b:62:fe:21:b5:d0:f1:4e:0e:
                    e3:fb:38:51:87:fb:62:f2:02:f2:09:e7:3a:97:6e:
                    20:7c:c2:65:77:00:f0:cc:84:fc:e6:0c:26:5a:65:
                    2b:54:87:1f:e8:4b:8f:af:e5:70:2a:c1:12:23:e3:
                    a3:41:7c:2c:e8:cf:7b:8e:c8:4b:2b:60:10:8d:24:
                    d6:7d:ff:a6:0d:27:8e:c4:17:af:7f:cd:71:07:f0:
                    fe:68:70:4a:a0:59:f2:1f:03:ab:a3:1b:04:3c:e2:
                    08:de:d4:f5:2c:5f:ad:57:8d:2f:ee:ef:15:2b:2a:
                    47:44:3c:69:35:d5:71:66:a7:b1:aa:02:67:4b:36:
                    a0:a5:62:fd:32:7a:3d:f7:4f:8f:f7:bf:3d:a4:4f:
                    bd:5e:58:1a:b3:d1:84:52:94:16:5e:35:9d:93:08:
                    42:7b:6d:f9:20:23:e1:35:9f:49:45:6f:e1:f8:4a:
                    fb:60:c9:f0:a4:dd:e5:81:5a:16:7b:ac:e7:c8:36:
                    e6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:99:A1:92:A3:EF:D2:69:D2:DE:0C:EC:CD:A4:7F:89:80:26:B1:A9
            X509v3 Authority Key Identifier:
                keyid:76:F2:F3:41:CF:98:B9:E8:B4:6E:DD:38:9A:48:06:4C:7B:AE:6F:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dvLzQc-Yuei0bt04mkgGTHuub5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e334d-98b5-47b9-b4fd-29f71ee1791d/1/dvLzQc-Yuei0bt04mkgGTHuub5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e334d-98b5-47b9-b4fd-29f71ee1791d/1/dvLzQc-Yuei0bt04mkgGTHuub5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:e3:11:5a:02:5d:1d:a3:59:7f:5a:19:ba:db:5c:4b:7e:53:
         ac:05:08:48:30:d9:21:5f:0b:f9:01:e4:5d:30:36:3b:ad:3a:
         1d:88:e1:32:d0:11:2e:db:5d:8e:2c:c2:a0:1f:ed:b6:c9:83:
         35:cf:a0:b4:fb:13:34:ab:9d:18:e5:88:a7:7e:ed:15:93:ac:
         88:b4:d0:03:5f:ea:de:94:fe:da:1d:06:da:aa:be:c7:79:a0:
         d4:e7:8b:33:bb:18:e1:b2:20:29:20:99:7f:5b:b9:97:14:dc:
         8f:e0:b5:c4:ab:8e:8c:a8:8e:57:75:01:3d:7f:03:98:59:6a:
         0c:f2:ed:00:4c:c4:2d:ec:33:84:06:9d:16:6f:1d:3c:d5:c4:
         af:56:b0:34:51:bc:b6:08:a4:5c:ff:bb:65:38:7b:2f:55:9e:
         09:84:82:43:1e:60:25:df:65:06:41:99:d2:36:47:c1:b5:4c:
         a0:06:2c:02:bc:ce:f9:5d:d0:ff:6d:f6:fe:c6:1c:41:e6:08:
         81:a1:b4:42:6e:7b:f9:48:56:3e:d6:10:e0:eb:2e:1c:15:62:
         6d:db:a1:a3:8c:e3:d7:96:c0:61:7a:4c:c4:52:99:50:c0:53:
         ef:e6:f0:37:64:c9:3d:3e:58:3c:a4:18:5d:94:a8:18:ed:58:
         04:9b:ae:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZigTZcCUB0sKYjjeIwKsjHSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2ZjJmMzQxY2Y5OGI5ZThiNDZlZGQzODlhNDgwNjRjN2Jh
ZTZmOWEwHhcNMjUwODEyMjIwMTM2WhcNMjUwODEzMjIwMTM2WjAzMTEwLwYDVQQD
Eyg5OTk5YTE5MmEzZWZkMjY5ZDJkZTBjZWNjZGE0N2Y4OTgwMjZiMWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVzMkvafBpQ//ZlHZnLGdSv/zlcw
6oKnSbHs6iLWDKYpZ0fQqxLIMQlM39yqG6nUNR9t3seIJRJT3DomdPdYXvELYv4h
tdDxTg7j+zhRh/ti8gLyCec6l24gfMJldwDwzIT85gwmWmUrVIcf6EuPr+VwKsES
I+OjQXws6M97jshLK2AQjSTWff+mDSeOxBevf81xB/D+aHBKoFnyHwOroxsEPOII
3tT1LF+tV40v7u8VKypHRDxpNdVxZqexqgJnSzagpWL9Mno990+P9789pE+9Xlga
s9GEUpQWXjWdkwhCe235ICPhNZ9JRW/h+Er7YMnwpN3lgVoWe6znyDbmpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmZoZKj79Jp0t4M7M2kf4mAJrGpMB8GA1UdIwQY
MBaAFHby80HPmLnotG7dOJpIBkx7rm+aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHZMelFjLVl1ZWkwYnQwNG1rZ0dUSHV1YjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8xZTMzNGQtOThiNS00N2I5LWI0ZmQt
MjlmNzFlZTE3OTFkLzEvZHZMelFjLVl1ZWkwYnQwNG1rZ0dUSHV1YjVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8xZTMzNGQtOThiNS00N2I5LWI0ZmQtMjlmNzFlZTE3OTFk
LzEvZHZMelFjLVl1ZWkwYnQwNG1rZ0dUSHV1YjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg+MRWgJd
HaNZf1oZuttcS35TrAUISDDZIV8L+QHkXTA2O606HYjhMtARLttdjizCoB/ttsmD
Nc+gtPsTNKudGOWIp37tFZOsiLTQA1/q3pT+2h0G2qq+x3mg1OeLM7sY4bIgKSCZ
f1u5lxTcj+C1xKuOjKiOV3UBPX8DmFlqDPLtAEzELewzhAadFm8dPNXEr1awNFG8
tgikXP+7ZTh7L1WeCYSCQx5gJd9lBkGZ0jZHwbVMoAYsArzO+V3Q/232/sYcQeYI
gaG0Qm57+UhWPtYQ4OsuHBVibduho4zj15bAYXpMxFKZUMBT7+bwN2TJPT5YPKQY
XZSoGO1YBJuubA==
-----END CERTIFICATE-----
Generated at Wed Aug 13 00:38:05 2025 by rpki-client