Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
File:                     fp2uVBo7fD77bdZkadCH6F9179o.mft (raw, json)
Hash identifier:          3HYd9ohe0f/FmOOu1wlbiO64sitZigNl5zqS5h/f+Zs=
Subject key identifier:   7C:0C:EE:0B:C3:8B:F2:01:BE:0B:2F:9A:37:24:8D:95:7F:67:E9:9F
Authority key identifier: 7E:9D:AE:54:1A:3B:7C:3E:FB:6D:D6:64:69:D0:87:E8:5F:75:EF:DA
Certificate issuer:       /CN=7e9dae541a3b7c3efb6dd66469d087e85f75efda
Certificate serial:       019883567F5B0C96EF85361CDAFC039932A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
Manifest number:          0280
Signing time:             Thu 07 Aug 2025 07:02:20 +0000
Manifest this update:     Thu 07 Aug 2025 07:02:20 +0000
Manifest next update:     Fri 08 Aug 2025 07:02:20 +0000
Files and hashes:         1: fp2uVBo7fD77bdZkadCH6F9179o.crl (hash: yS4mpUW0ZmvOd+6/pKAAXVHH/Ld1CSP3eRlkA4SpDh0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 07:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:83:56:7f:5b:0c:96:ef:85:36:1c:da:fc:03:99:32:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e9dae541a3b7c3efb6dd66469d087e85f75efda
        Validity
            Not Before: Aug  7 07:02:20 2025 GMT
            Not After : Aug  8 07:02:20 2025 GMT
        Subject: CN=7c0cee0bc38bf201be0b2f9a37248d957f67e99f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:72:58:d8:e0:50:68:67:dd:4f:fb:e6:2a:00:
                    35:98:ba:e9:8e:7c:96:a6:1f:81:84:a4:05:d4:6d:
                    95:53:01:ce:73:26:0f:dc:f1:92:ed:3e:f1:21:ed:
                    c8:a5:a5:4e:1f:13:a2:8d:1e:34:6e:da:fa:2b:fb:
                    c6:72:78:08:69:7d:37:a9:2d:a9:9e:e0:82:6d:80:
                    d3:a1:7f:01:28:4a:1f:41:c4:8a:71:6c:d6:3f:ae:
                    4f:59:36:4e:18:a0:b4:8f:3d:56:62:a2:a6:fc:f2:
                    33:76:bf:f2:d9:ae:88:14:13:f1:da:42:93:52:a4:
                    bd:c5:24:c6:a4:7d:82:56:a2:ee:d5:c3:42:85:f8:
                    5f:75:08:ec:0d:32:70:88:e6:4f:4a:48:8e:d6:18:
                    d9:65:06:b2:e6:9c:66:ed:68:4d:0a:6c:c9:ca:2a:
                    a6:ea:9d:7f:39:9d:91:d9:9d:5b:89:96:b7:fc:0a:
                    f0:b1:45:e1:c3:d8:b0:8a:11:bd:cb:3a:0b:6e:64:
                    b8:7c:b7:ad:8c:82:22:33:d2:79:44:59:0b:c6:bc:
                    f3:49:dc:d4:88:c1:03:e1:b7:eb:1f:9a:cc:92:57:
                    55:c3:ec:c5:20:79:28:37:07:5a:49:17:70:24:e2:
                    0d:a8:95:61:8e:9f:42:ca:23:32:0d:1e:d3:bf:54:
                    95:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:0C:EE:0B:C3:8B:F2:01:BE:0B:2F:9A:37:24:8D:95:7F:67:E9:9F
            X509v3 Authority Key Identifier:
                keyid:7E:9D:AE:54:1A:3B:7C:3E:FB:6D:D6:64:69:D0:87:E8:5F:75:EF:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:5b:11:ef:3c:1d:51:99:82:f0:f2:66:77:f9:8b:c0:3a:26:
         b1:dd:51:40:4d:9a:ef:e9:87:c8:fd:18:06:47:9f:73:b9:d1:
         88:23:cd:6f:12:7f:28:5d:d6:04:50:f2:f9:36:38:44:b0:d6:
         4b:58:6e:9a:05:1f:f6:6b:13:1b:41:f8:94:a1:f3:5c:4c:ae:
         07:d4:44:fd:ea:d5:89:7e:a8:60:c6:f6:45:e9:82:a5:c8:52:
         3f:37:e4:25:66:13:5e:ca:e2:0b:84:12:7d:e4:29:0c:d3:f6:
         45:2c:6e:b0:81:e9:4c:10:31:49:a7:f0:62:ea:dd:80:13:a2:
         9a:fb:6d:b5:d3:ca:42:5f:50:bb:77:77:50:59:ca:4f:e1:d1:
         ab:23:98:59:0d:3b:0c:f3:97:1e:bc:4e:5e:14:a2:33:81:5f:
         1d:59:b7:ed:08:0e:a0:73:7c:23:f9:a8:5b:81:2b:9a:ae:aa:
         89:b7:77:b5:e7:8d:72:ed:14:0c:22:a7:18:65:76:46:56:e2:
         da:7f:5f:9f:5d:69:3d:13:5e:84:8e:64:c6:6d:cf:42:e3:6a:
         fb:bb:3c:d6:51:df:ae:9a:c5:92:d8:32:12:25:fb:9e:f6:5d:
         5f:e6:12:15:f8:a5:91:26:82:5c:55:da:73:74:a5:0a:c5:08:
         4b:1e:e9:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiDVn9bDJbvhTYc2vwDmTKnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlOWRhZTU0MWEzYjdjM2VmYjZkZDY2NDY5ZDA4N2U4NWY3
NWVmZGEwHhcNMjUwODA3MDcwMjIwWhcNMjUwODA4MDcwMjIwWjAzMTEwLwYDVQQD
Eyg3YzBjZWUwYmMzOGJmMjAxYmUwYjJmOWEzNzI0OGQ5NTdmNjdlOTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXJY2OBQaGfdT/vmKgA1mLrpjnyW
ph+BhKQF1G2VUwHOcyYP3PGS7T7xIe3IpaVOHxOijR40btr6K/vGcngIaX03qS2p
nuCCbYDToX8BKEofQcSKcWzWP65PWTZOGKC0jz1WYqKm/PIzdr/y2a6IFBPx2kKT
UqS9xSTGpH2CVqLu1cNChfhfdQjsDTJwiOZPSkiO1hjZZQay5pxm7WhNCmzJyiqm
6p1/OZ2R2Z1biZa3/ArwsUXhw9iwihG9yzoLbmS4fLetjIIiM9J5RFkLxrzzSdzU
iMED4bfrH5rMkldVw+zFIHkoNwdaSRdwJOINqJVhjp9CyiMyDR7Tv1SVYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHwM7gvDi/IBvgsvmjckjZV/Z+mfMB8GA1UdIwQY
MBaAFH6drlQaO3w++23WZGnQh+hfde/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnAydVZCbzdmRDc3YmRaa2FkQ0g2RjkxNzlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kNmE3YzgtZjVkYy00MmQzLWI5MDgt
NzgwMTcxNzc5ZTUwLzEvZnAydVZCbzdmRDc3YmRaa2FkQ0g2RjkxNzlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9kNmE3YzgtZjVkYy00MmQzLWI5MDgtNzgwMTcxNzc5ZTUw
LzEvZnAydVZCbzdmRDc3YmRaa2FkQ0g2RjkxNzlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkVsR7zwd
UZmC8PJmd/mLwDomsd1RQE2a7+mHyP0YBkefc7nRiCPNbxJ/KF3WBFDy+TY4RLDW
S1humgUf9msTG0H4lKHzXEyuB9RE/erViX6oYMb2RemCpchSPzfkJWYTXsriC4QS
feQpDNP2RSxusIHpTBAxSafwYurdgBOimvtttdPKQl9Qu3d3UFnKT+HRqyOYWQ07
DPOXHrxOXhSiM4FfHVm37QgOoHN8I/moW4Ermq6qibd3teeNcu0UDCKnGGV2Rlbi
2n9fn11pPRNehI5kxm3PQuNq+7s81lHfrprFktgyEiX7nvZdX+YSFfilkSaCXFXa
c3SlCsUISx7pzQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 11:11:04 2025 by rpki-client