Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft
File:                     E0nM7_Skij2rAkBn4XYNv1hlD9o.mft (raw, json)
Hash identifier:          CqQ3rZxHN7YbgaIS33wK6M9YHSwihTsqoXASWyH6Vjg=
Subject key identifier:   F1:ED:E6:C0:91:B4:98:84:25:04:6A:31:5F:2A:1A:7D:6F:F9:4F:EE
Authority key identifier: 13:49:CC:EF:F4:A4:8A:3D:AB:02:40:67:E1:76:0D:BF:58:65:0F:DA
Certificate issuer:       /CN=1349cceff4a48a3dab024067e1760dbf58650fda
Certificate serial:       019872CFF5CEA7EA89695C731C6A2D1C49BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft
Manifest number:          0C9A
Signing time:             Mon 04 Aug 2025 02:01:28 +0000
Manifest this update:     Mon 04 Aug 2025 02:01:28 +0000
Manifest next update:     Tue 05 Aug 2025 02:01:28 +0000
Files and hashes:         1: E0nM7_Skij2rAkBn4XYNv1hlD9o.crl (hash: eiai/YCh8pFWJVumI/dblyopGMxV5ZMPy7y7PHwnm8U=)
                          2: HN5Ai7UYMPmItHMFu1UIru4_irQ.roa (hash: uhP51xaan/wVcnPelAPmsRFjLXlTf1vXwd1upBi15zA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:f5:ce:a7:ea:89:69:5c:73:1c:6a:2d:1c:49:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1349cceff4a48a3dab024067e1760dbf58650fda
        Validity
            Not Before: Aug  4 02:01:28 2025 GMT
            Not After : Aug  5 02:01:28 2025 GMT
        Subject: CN=f1ede6c091b4988425046a315f2a1a7d6ff94fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:58:da:3a:70:0d:83:24:9e:64:c9:58:1b:48:
                    f3:76:14:ca:00:ec:4f:b4:11:7b:e3:cf:0e:5d:16:
                    85:ea:b7:40:1d:3d:77:ef:6b:05:7d:5b:0e:e4:1c:
                    c0:8a:6b:b4:cf:89:5c:08:32:81:08:f8:e3:88:0f:
                    59:fe:71:8b:0f:eb:79:30:fb:63:28:b5:e2:67:03:
                    93:3d:c7:9d:c3:31:59:db:37:57:55:03:eb:3c:35:
                    76:56:c2:16:72:27:83:3c:62:4e:89:82:08:d4:25:
                    7e:d8:1f:7d:ee:66:09:4e:c2:20:b9:25:ac:fd:45:
                    12:b2:ce:f7:39:dd:13:78:f2:70:48:f5:80:bc:0e:
                    5b:f3:b3:d9:13:f6:de:29:d2:0f:cb:ce:57:ff:31:
                    46:0b:fb:2a:85:b5:5c:4e:d1:d4:c2:ad:d9:65:05:
                    9d:0f:e4:b4:b4:e3:8f:06:70:4a:b7:d4:4b:85:e5:
                    bf:78:20:48:bb:16:69:45:48:d6:21:b7:49:ca:c5:
                    82:60:97:d2:39:22:a5:be:45:bd:2a:34:9a:74:be:
                    6e:6a:60:43:3d:47:53:90:49:90:c4:33:8e:54:b0:
                    f0:3a:6d:b8:57:fa:8f:cf:bb:df:e2:fb:e4:2c:fb:
                    3e:3f:ae:b0:7d:a5:28:4e:d2:09:04:cc:2c:06:58:
                    22:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:ED:E6:C0:91:B4:98:84:25:04:6A:31:5F:2A:1A:7D:6F:F9:4F:EE
            X509v3 Authority Key Identifier:
                keyid:13:49:CC:EF:F4:A4:8A:3D:AB:02:40:67:E1:76:0D:BF:58:65:0F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:7f:e2:2a:3e:2b:5c:b3:5c:09:98:5e:71:12:68:b8:b4:ba:
         2f:8d:43:7e:b9:b8:9c:26:6b:4a:99:0e:3e:cf:3c:e8:ef:c0:
         22:18:66:80:d0:14:e2:d8:09:7d:81:15:50:08:43:ae:de:bd:
         e3:35:03:06:64:f3:64:f5:f7:92:6a:ac:ca:72:d4:87:99:79:
         cf:dc:97:14:af:14:8f:92:85:3e:9d:4a:8d:f6:1e:fe:2e:6a:
         14:66:20:13:81:bc:19:60:39:03:2d:3c:97:eb:4e:fb:e4:2a:
         e5:66:3b:8e:93:c1:46:0d:04:93:45:93:a8:7e:a3:f3:d9:0a:
         b2:d9:86:dd:97:91:e6:1e:4b:08:91:fd:20:17:31:1a:f8:61:
         42:23:79:fa:94:03:b4:99:39:0b:c2:d0:d0:97:ae:51:c8:b2:
         39:1f:e4:fb:23:db:e8:81:c1:6e:d3:20:36:8e:e8:50:e1:89:
         27:64:da:24:14:84:25:f8:f0:a7:5d:0f:cc:ed:32:3a:01:50:
         fb:01:17:5a:04:fa:81:bf:8e:cc:02:45:0e:fb:f0:43:ea:ad:
         2d:68:c1:9b:74:ba:39:99:66:9e:83:24:96:1f:66:5a:3e:ed:
         be:a0:c6:e2:1b:96:df:b4:6e:d0:26:bb:e2:a0:e1:c9:6f:b0:
         8f:ae:5d:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyz/XOp+qJaVxzHGotHEm6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNDljY2VmZjRhNDhhM2RhYjAyNDA2N2UxNzYwZGJmNTg2
NTBmZGEwHhcNMjUwODA0MDIwMTI4WhcNMjUwODA1MDIwMTI4WjAzMTEwLwYDVQQD
EyhmMWVkZTZjMDkxYjQ5ODg0MjUwNDZhMzE1ZjJhMWE3ZDZmZjk0ZmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFjaOnANgySeZMlYG0jzdhTKAOxP
tBF7488OXRaF6rdAHT1372sFfVsO5BzAimu0z4lcCDKBCPjjiA9Z/nGLD+t5MPtj
KLXiZwOTPcedwzFZ2zdXVQPrPDV2VsIWcieDPGJOiYII1CV+2B997mYJTsIguSWs
/UUSss73Od0TePJwSPWAvA5b87PZE/beKdIPy85X/zFGC/sqhbVcTtHUwq3ZZQWd
D+S0tOOPBnBKt9RLheW/eCBIuxZpRUjWIbdJysWCYJfSOSKlvkW9KjSadL5uamBD
PUdTkEmQxDOOVLDwOm24V/qPz7vf4vvkLPs+P66wfaUoTtIJBMwsBlgiWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPHt5sCRtJiEJQRqMV8qGn1v+U/uMB8GA1UdIwQY
MBaAFBNJzO/0pIo9qwJAZ+F2Db9YZQ/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTBuTTdfU2tpajJyQWtCbjRYWU52MWhsRDlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hMzA2ZDAtNGEyMC00YmNmLTg0OGUt
ZDJhZTJjMzM2MzI4LzEvRTBuTTdfU2tpajJyQWtCbjRYWU52MWhsRDlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9hMzA2ZDAtNGEyMC00YmNmLTg0OGUtZDJhZTJjMzM2MzI4
LzEvRTBuTTdfU2tpajJyQWtCbjRYWU52MWhsRDlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPH/iKj4r
XLNcCZhecRJouLS6L41Dfrm4nCZrSpkOPs886O/AIhhmgNAU4tgJfYEVUAhDrt69
4zUDBmTzZPX3kmqsynLUh5l5z9yXFK8Uj5KFPp1KjfYe/i5qFGYgE4G8GWA5Ay08
l+tO++Qq5WY7jpPBRg0Ek0WTqH6j89kKstmG3ZeR5h5LCJH9IBcxGvhhQiN5+pQD
tJk5C8LQ0JeuUciyOR/k+yPb6IHBbtMgNo7oUOGJJ2TaJBSEJfjwp10PzO0yOgFQ
+wEXWgT6gb+OzAJFDvvwQ+qtLWjBm3S6OZlmnoMklh9mWj7tvqDG4huW37Ru0Ca7
4qDhyW+wj65dQw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:45 2025 by rpki-client