Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8d46bf-5444-43aa-8cd4-e7b0ee0f498c/1/JoYpJqhXSRVUvulJUbtfpnAgfZ4.mft
File:                     JoYpJqhXSRVUvulJUbtfpnAgfZ4.mft (raw, json)
Hash identifier:          hi7qY34lmOE8TC1go6BJZD77+1iC7iMGQuXGH22bhic=
Subject key identifier:   AB:C8:0F:DC:99:EC:36:84:91:F8:0A:FF:A9:A5:79:BF:DF:1D:11:0F
Authority key identifier: 26:86:29:26:A8:57:49:15:54:BE:E9:49:51:BB:5F:A6:70:20:7D:9E
Certificate issuer:       /CN=26862926a857491554bee94951bb5fa670207d9e
Certificate serial:       01988166A91BBB625638B34D7076FD22F201
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JoYpJqhXSRVUvulJUbtfpnAgfZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/8d46bf-5444-43aa-8cd4-e7b0ee0f498c/1/JoYpJqhXSRVUvulJUbtfpnAgfZ4.mft
Manifest number:          09D5
Signing time:             Wed 06 Aug 2025 22:00:45 +0000
Manifest this update:     Wed 06 Aug 2025 22:00:45 +0000
Manifest next update:     Thu 07 Aug 2025 22:00:45 +0000
Files and hashes:         1: JoYpJqhXSRVUvulJUbtfpnAgfZ4.crl (hash: cH6oe4hsOohyUGGADmqfO9rOvaoxXCf9xVSZjlm88gA=)
                          2: P_e_hfFdOIg4RdhQ7kbJdYP3-R4.roa (hash: eyPYhbBHlHybHAFvY42BHBhkxjH8RlGXuW3S7/1wkOw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/8d46bf-5444-43aa-8cd4-e7b0ee0f498c/1/JoYpJqhXSRVUvulJUbtfpnAgfZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/8d46bf-5444-43aa-8cd4-e7b0ee0f498c/1/JoYpJqhXSRVUvulJUbtfpnAgfZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JoYpJqhXSRVUvulJUbtfpnAgfZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:66:a9:1b:bb:62:56:38:b3:4d:70:76:fd:22:f2:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26862926a857491554bee94951bb5fa670207d9e
        Validity
            Not Before: Aug  6 22:00:45 2025 GMT
            Not After : Aug  7 22:00:45 2025 GMT
        Subject: CN=abc80fdc99ec368491f80affa9a579bfdf1d110f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ba:75:64:47:3c:94:70:0e:7a:bd:8e:60:4e:
                    c1:2e:b9:3d:80:ef:f8:d7:f0:67:3f:a1:48:13:50:
                    9a:d8:ec:3d:09:f2:7f:1d:e2:65:7e:87:59:69:aa:
                    ab:23:21:18:b6:97:ca:cf:52:0a:fe:e5:b7:a2:a4:
                    1e:bb:83:09:24:36:c6:25:32:6a:29:dd:f1:7b:39:
                    0a:8b:c6:fe:ab:a1:4e:75:33:c4:39:6d:27:de:3f:
                    33:20:1f:06:1b:1a:ac:06:3f:1b:1a:61:69:6e:4d:
                    a0:e8:59:33:53:42:8a:09:c6:5b:56:f8:95:e2:ae:
                    e7:ba:11:4f:64:d4:d9:d0:98:da:ea:54:dc:5b:65:
                    8d:49:40:60:52:e6:e4:a2:7d:e7:6c:c7:17:ee:eb:
                    53:8e:7b:6e:ae:62:60:af:a2:3f:5b:bd:c7:4b:06:
                    5f:53:ac:9c:ff:6b:c2:79:55:a8:ac:5a:49:ab:d9:
                    2a:64:ad:69:87:99:8b:72:08:66:78:c8:de:8b:97:
                    e4:86:cb:82:70:b9:ce:24:c8:b6:64:52:7a:c1:a6:
                    ba:ac:3b:92:54:02:f9:c4:d3:38:5b:64:03:32:ec:
                    5e:30:82:98:bf:88:43:45:d3:5e:5c:a8:bb:5d:d4:
                    c1:8f:e0:a6:83:18:17:ee:4c:c7:2d:6e:ae:c2:1a:
                    28:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C8:0F:DC:99:EC:36:84:91:F8:0A:FF:A9:A5:79:BF:DF:1D:11:0F
            X509v3 Authority Key Identifier:
                keyid:26:86:29:26:A8:57:49:15:54:BE:E9:49:51:BB:5F:A6:70:20:7D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoYpJqhXSRVUvulJUbtfpnAgfZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8d46bf-5444-43aa-8cd4-e7b0ee0f498c/1/JoYpJqhXSRVUvulJUbtfpnAgfZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8d46bf-5444-43aa-8cd4-e7b0ee0f498c/1/JoYpJqhXSRVUvulJUbtfpnAgfZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:03:f6:20:73:d2:38:63:60:3b:7f:d8:1c:b5:70:5e:26:6e:
         10:8c:94:54:4e:3c:2b:9b:c2:d6:68:33:78:6d:97:5e:27:24:
         10:fd:91:5f:9c:9f:b3:eb:6c:a8:20:68:94:60:c7:1b:cc:d1:
         22:b3:fb:49:a8:42:8d:08:5d:ca:08:62:b0:49:04:f2:95:b8:
         a9:7c:35:75:ee:66:52:bf:d9:ee:38:e4:1b:45:89:15:80:0f:
         ed:15:6a:cf:f1:62:de:48:36:1b:48:87:b9:4a:50:05:d9:22:
         e3:2a:df:fc:67:04:10:79:e1:90:57:69:8e:58:02:2d:d7:ca:
         75:26:5a:fd:be:51:6c:5d:a1:4a:80:86:a9:cf:e0:7f:63:1a:
         5f:61:7e:3f:d1:b9:2d:7e:f6:fc:89:72:e1:25:4f:36:79:12:
         c8:4e:ea:45:62:20:61:c0:ea:b0:d9:bf:a9:d4:85:9c:67:e2:
         e7:42:f6:7e:14:2d:dc:59:08:f0:d9:0d:f9:56:37:5c:76:05:
         61:cb:44:ca:6b:e0:1a:01:bf:1d:a8:c3:1d:8f:a4:5f:fd:d4:
         d0:ea:ca:da:e2:fd:51:08:57:10:4d:32:e6:be:02:95:de:44:
         90:0a:ad:8e:d7:e8:be:b2:b7:56:31:57:0b:a9:47:7c:8f:ef:
         6e:1c:e9:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBZqkbu2JWOLNNcHb9IvIBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2ODYyOTI2YTg1NzQ5MTU1NGJlZTk0OTUxYmI1ZmE2NzAy
MDdkOWUwHhcNMjUwODA2MjIwMDQ1WhcNMjUwODA3MjIwMDQ1WjAzMTEwLwYDVQQD
EyhhYmM4MGZkYzk5ZWMzNjg0OTFmODBhZmZhOWE1NzliZmRmMWQxMTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7p1ZEc8lHAOer2OYE7BLrk9gO/4
1/BnP6FIE1Ca2Ow9CfJ/HeJlfodZaaqrIyEYtpfKz1IK/uW3oqQeu4MJJDbGJTJq
Kd3xezkKi8b+q6FOdTPEOW0n3j8zIB8GGxqsBj8bGmFpbk2g6FkzU0KKCcZbVviV
4q7nuhFPZNTZ0Jja6lTcW2WNSUBgUubkon3nbMcX7utTjnturmJgr6I/W73HSwZf
U6yc/2vCeVWorFpJq9kqZK1ph5mLcghmeMjei5fkhsuCcLnOJMi2ZFJ6waa6rDuS
VAL5xNM4W2QDMuxeMIKYv4hDRdNeXKi7XdTBj+CmgxgX7kzHLW6uwhooBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvID9yZ7DaEkfgK/6mleb/fHREPMB8GA1UdIwQY
MBaAFCaGKSaoV0kVVL7pSVG7X6ZwIH2eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm9ZcEpxaFhTUlZVdnVsSlVidGZwbkFnZlo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84ZDQ2YmYtNTQ0NC00M2FhLThjZDQt
ZTdiMGVlMGY0OThjLzEvSm9ZcEpxaFhTUlZVdnVsSlVidGZwbkFnZlo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni84ZDQ2YmYtNTQ0NC00M2FhLThjZDQtZTdiMGVlMGY0OThj
LzEvSm9ZcEpxaFhTUlZVdnVsSlVidGZwbkFnZlo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYwP2IHPS
OGNgO3/YHLVwXiZuEIyUVE48K5vC1mgzeG2XXickEP2RX5yfs+tsqCBolGDHG8zR
IrP7SahCjQhdyghisEkE8pW4qXw1de5mUr/Z7jjkG0WJFYAP7RVqz/Fi3kg2G0iH
uUpQBdki4yrf/GcEEHnhkFdpjlgCLdfKdSZa/b5RbF2hSoCGqc/gf2MaX2F+P9G5
LX72/Ily4SVPNnkSyE7qRWIgYcDqsNm/qdSFnGfi50L2fhQt3FkI8NkN+VY3XHYF
YctEymvgGgG/HajDHY+kX/3U0OrK2uL9UQhXEE0y5r4Cld5EkAqtjtfovrK3VjFX
C6lHfI/vbhzpBQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 01:17:33 2025 by rpki-client