Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft
File:                     UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft (raw, json)
Hash identifier:          A1YSrg/wCyowm1JoOGhfplou472yY/wkUG1F5Jo7Mgk=
Subject key identifier:   77:85:96:98:AD:1D:FC:24:B0:28:53:B2:A8:74:FF:FC:61:AE:96:F3
Authority key identifier: 52:96:55:47:F1:09:60:64:B6:B5:73:C0:28:17:14:C1:F0:61:CD:4D
Certificate issuer:       /CN=52965547f1096064b6b573c0281714c1f061cd4d
Certificate serial:       01988EED256F54BD1AD4F5147FA580BB4094
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft
Manifest number:          0EFA
Signing time:             Sat 09 Aug 2025 13:02:42 +0000
Manifest this update:     Sat 09 Aug 2025 13:02:42 +0000
Manifest next update:     Sun 10 Aug 2025 13:02:42 +0000
Files and hashes:         1: UpZVR_EJYGS2tXPAKBcUwfBhzU0.crl (hash: 7PQRXzP8kBMNT02oCh4EWKw0Y1Mmm4R70kPI44uiybU=)
                          2: ove2TkiR5Y_QzNqFVx6binaCimY.roa (hash: nkoFx2cGJ1UQ07ClYGuA0sWHVfaghbV6qV22jBDNl8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8e:ed:25:6f:54:bd:1a:d4:f5:14:7f:a5:80:bb:40:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52965547f1096064b6b573c0281714c1f061cd4d
        Validity
            Not Before: Aug  9 13:02:42 2025 GMT
            Not After : Aug 10 13:02:42 2025 GMT
        Subject: CN=77859698ad1dfc24b02853b2a874fffc61ae96f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8e:9e:45:eb:b1:8f:18:d9:36:f2:d2:4c:69:
                    91:48:d2:3c:a8:e4:52:58:9d:ce:06:ef:06:6d:58:
                    6d:34:e7:aa:bb:fc:40:7e:ab:72:12:14:33:58:2c:
                    64:81:62:33:57:2e:e5:03:6c:0c:05:a5:a5:99:0f:
                    8a:86:b0:7c:13:bd:03:91:27:c4:18:d9:86:24:3e:
                    5a:99:80:61:a1:7a:58:61:fa:ac:a3:3a:42:20:08:
                    b6:02:01:b5:50:0b:8e:96:d9:0b:3a:96:c6:df:2f:
                    50:b4:fc:f3:b7:b9:09:1e:53:42:47:86:44:9c:09:
                    a8:d8:f5:4b:c1:27:9f:cc:70:7d:0a:b7:50:f8:2b:
                    f3:71:05:2d:66:4b:fb:b3:42:1c:21:61:64:f8:e1:
                    e2:34:cc:01:17:9b:2d:40:a6:9b:0b:c2:57:8e:77:
                    3f:5a:60:d5:e0:cf:31:a1:12:a6:1f:0b:2a:f2:5a:
                    d7:2f:ac:6c:d5:7f:1d:1b:71:8d:a7:bc:5b:ce:4f:
                    18:2b:1e:91:ab:34:fe:21:6e:3d:a9:c8:86:db:01:
                    7e:58:19:a5:97:2b:9a:bb:b2:fa:39:43:a8:2b:07:
                    a6:a0:16:c1:17:ad:bd:54:13:b7:8f:1e:01:49:d2:
                    82:fb:77:16:dc:bf:58:a3:2b:76:dd:cd:05:40:09:
                    4d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:85:96:98:AD:1D:FC:24:B0:28:53:B2:A8:74:FF:FC:61:AE:96:F3
            X509v3 Authority Key Identifier:
                keyid:52:96:55:47:F1:09:60:64:B6:B5:73:C0:28:17:14:C1:F0:61:CD:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:78:bf:4e:22:af:0e:db:e8:d9:71:50:d3:42:66:41:aa:5a:
         80:46:f6:2e:5e:96:db:6a:fa:c4:c7:78:2d:1b:a9:d9:3c:0f:
         4c:a6:d6:ab:37:de:08:ed:21:0f:35:3e:d7:77:ac:86:f4:3b:
         28:cf:f9:8d:40:4b:5b:61:f0:0d:87:89:fd:b4:b4:80:96:fc:
         fe:f6:4a:09:6e:83:3e:51:5a:64:56:80:94:7f:12:1a:ff:e2:
         70:7d:de:9a:88:85:d0:2e:52:52:51:13:ee:c4:d9:f4:46:d8:
         7a:b1:84:02:a4:1c:4a:dc:2f:ec:2d:9c:8a:b0:62:5a:14:cb:
         b3:31:7d:60:c3:c2:c9:a2:8f:8c:e9:bf:ae:eb:fd:40:e6:1b:
         18:37:7d:bc:82:ed:38:71:45:d9:26:15:9b:50:5b:77:ff:7d:
         71:94:cf:64:78:b3:f8:ea:a9:ee:af:08:c8:04:ec:4f:b8:f9:
         36:ff:bd:46:d2:d7:46:8d:5e:e3:96:a5:93:ec:9c:76:49:4b:
         ee:67:ac:af:19:c0:bd:db:42:09:5e:52:f1:be:5b:a7:f8:4b:
         e1:e5:c1:de:6a:ef:c2:ec:8e:6b:95:a9:96:da:ed:b6:06:8a:
         71:9a:77:13:13:94:b2:98:d1:cf:13:3d:b2:ed:b6:72:39:36:
         14:37:54:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiO7SVvVL0a1PUUf6WAu0CUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyOTY1NTQ3ZjEwOTYwNjRiNmI1NzNjMDI4MTcxNGMxZjA2
MWNkNGQwHhcNMjUwODA5MTMwMjQyWhcNMjUwODEwMTMwMjQyWjAzMTEwLwYDVQQD
Eyg3Nzg1OTY5OGFkMWRmYzI0YjAyODUzYjJhODc0ZmZmYzYxYWU5NmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoY6eReuxjxjZNvLSTGmRSNI8qORS
WJ3OBu8GbVhtNOequ/xAfqtyEhQzWCxkgWIzVy7lA2wMBaWlmQ+KhrB8E70DkSfE
GNmGJD5amYBhoXpYYfqsozpCIAi2AgG1UAuOltkLOpbG3y9QtPzzt7kJHlNCR4ZE
nAmo2PVLwSefzHB9CrdQ+CvzcQUtZkv7s0IcIWFk+OHiNMwBF5stQKabC8JXjnc/
WmDV4M8xoRKmHwsq8lrXL6xs1X8dG3GNp7xbzk8YKx6RqzT+IW49qciG2wF+WBml
lyuau7L6OUOoKwemoBbBF629VBO3jx4BSdKC+3cW3L9Yoyt23c0FQAlNEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHeFlpitHfwksChTsqh0//xhrpbzMB8GA1UdIwQY
MBaAFFKWVUfxCWBktrVzwCgXFMHwYc1NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXBaVlJfRUpZR1MydFhQQUtCY1V3ZkJoelUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8wNjQ5MDYtNWJlMy00ZWQxLWFiNzQt
NWRhM2VjODJjYzU2LzEvVXBaVlJfRUpZR1MydFhQQUtCY1V3ZkJoelUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8wNjQ5MDYtNWJlMy00ZWQxLWFiNzQtNWRhM2VjODJjYzU2
LzEvVXBaVlJfRUpZR1MydFhQQUtCY1V3ZkJoelUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAini/TiKv
Dtvo2XFQ00JmQapagEb2Ll6W22r6xMd4LRup2TwPTKbWqzfeCO0hDzU+13eshvQ7
KM/5jUBLW2HwDYeJ/bS0gJb8/vZKCW6DPlFaZFaAlH8SGv/icH3emoiF0C5SUlET
7sTZ9EbYerGEAqQcStwv7C2cirBiWhTLszF9YMPCyaKPjOm/ruv9QOYbGDd9vILt
OHFF2SYVm1Bbd/99cZTPZHiz+Oqp7q8IyATsT7j5Nv+9RtLXRo1e45alk+ycdklL
7mesrxnAvdtCCV5S8b5bp/hL4eXB3mrvwuyOa5WpltrttgaKcZp3ExOUspjRzxM9
su22cjk2FDdUAA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:23:07 2025 by rpki-client