Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cb5f21-b9df-40db-b566-3e3cd95a5c2e/1/SboHm38CFqb2ZzyXHCr63VrpQuo.mft
File:                     SboHm38CFqb2ZzyXHCr63VrpQuo.mft (raw, json)
Hash identifier:          2rL9rC5wT7ftZivCSm6xjhhMTiVvb/wWRuCZQyfvDQ8=
Subject key identifier:   AF:08:D3:9D:8A:24:CC:89:3E:31:68:FB:28:68:B3:0E:10:1E:15:97
Authority key identifier: 49:BA:07:9B:7F:02:16:A6:F6:67:3C:97:1C:2A:FA:DD:5A:E9:42:EA
Certificate issuer:       /CN=49ba079b7f0216a6f6673c971c2afadd5ae942ea
Certificate serial:       01987D8BE14948BD7978D95D15CF92CAC921
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SboHm38CFqb2ZzyXHCr63VrpQuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/cb5f21-b9df-40db-b566-3e3cd95a5c2e/1/SboHm38CFqb2ZzyXHCr63VrpQuo.mft
Manifest number:          07F2
Signing time:             Wed 06 Aug 2025 04:02:55 +0000
Manifest this update:     Wed 06 Aug 2025 04:02:55 +0000
Manifest next update:     Thu 07 Aug 2025 04:02:55 +0000
Files and hashes:         1: 1LC0dyD00kv8E_n1OjhAkJTE9Mg.roa (hash: 3MFjBxWOk0fq4hLcLajIgBilcjWSlDvQAatSzU2ufc0=)
                          2: SboHm38CFqb2ZzyXHCr63VrpQuo.crl (hash: HPUYn/T3erFOxePFgFuKBdLQnBEKtuDFy7d5sF93W7Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/cb5f21-b9df-40db-b566-3e3cd95a5c2e/1/SboHm38CFqb2ZzyXHCr63VrpQuo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/cb5f21-b9df-40db-b566-3e3cd95a5c2e/1/SboHm38CFqb2ZzyXHCr63VrpQuo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SboHm38CFqb2ZzyXHCr63VrpQuo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:8b:e1:49:48:bd:79:78:d9:5d:15:cf:92:ca:c9:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49ba079b7f0216a6f6673c971c2afadd5ae942ea
        Validity
            Not Before: Aug  6 04:02:55 2025 GMT
            Not After : Aug  7 04:02:55 2025 GMT
        Subject: CN=af08d39d8a24cc893e3168fb2868b30e101e1597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:62:dd:ff:03:fe:fc:2e:d9:12:d5:8c:2c:36:
                    de:9f:3f:56:87:93:15:d9:c3:61:fb:26:da:9a:e2:
                    1b:ed:51:29:a3:a2:b6:24:59:5d:22:ab:da:7a:e6:
                    c4:3d:21:fc:17:df:b1:19:99:93:af:91:fc:53:d6:
                    57:25:ed:d6:57:11:48:9f:b9:97:1c:eb:5e:8b:40:
                    1e:37:f8:a1:52:7d:87:d9:36:da:7f:59:53:ef:73:
                    59:e6:65:f1:ad:0c:57:ad:34:ae:0c:90:b9:ce:3c:
                    b8:e9:26:14:c1:d8:54:3f:97:55:91:15:30:4f:4f:
                    b7:69:9e:5c:73:b0:46:08:15:bc:88:9e:d4:6c:5c:
                    6b:d4:1d:f9:5b:2f:59:82:86:a7:a1:0e:f5:83:11:
                    9a:8e:0d:e1:d0:60:f0:9d:9b:f5:fe:a7:c2:50:58:
                    c2:78:1c:1c:90:b5:c3:76:cd:54:4c:81:d9:40:49:
                    8f:72:46:c7:19:ea:58:03:c8:8d:06:aa:a1:74:14:
                    04:af:7b:95:2e:1b:bb:64:c9:12:ac:3b:ce:91:58:
                    92:7f:34:1c:40:5d:58:c7:1d:25:0f:cd:11:90:b8:
                    37:61:b3:6e:f6:a1:b8:87:4b:70:6f:07:19:e4:c5:
                    76:5c:91:58:b6:32:b4:b9:96:30:74:c9:66:dc:5f:
                    2f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:08:D3:9D:8A:24:CC:89:3E:31:68:FB:28:68:B3:0E:10:1E:15:97
            X509v3 Authority Key Identifier:
                keyid:49:BA:07:9B:7F:02:16:A6:F6:67:3C:97:1C:2A:FA:DD:5A:E9:42:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SboHm38CFqb2ZzyXHCr63VrpQuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cb5f21-b9df-40db-b566-3e3cd95a5c2e/1/SboHm38CFqb2ZzyXHCr63VrpQuo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cb5f21-b9df-40db-b566-3e3cd95a5c2e/1/SboHm38CFqb2ZzyXHCr63VrpQuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:8c:b2:f4:20:a9:ec:0d:92:42:71:27:1e:24:b1:98:69:7e:
         eb:91:e7:80:29:2b:50:e0:e4:30:95:d4:c4:e3:88:4d:68:c7:
         c4:3c:db:7d:23:ff:20:2d:1e:c4:68:46:51:aa:d7:ea:45:3e:
         7b:26:1d:99:62:10:3b:13:2b:c6:73:a3:b4:57:01:d4:25:bb:
         49:c4:38:6e:f8:63:c0:c5:2e:85:99:1e:8c:a8:b1:e2:2e:6d:
         a7:2f:67:ef:10:89:47:6c:4b:7e:0c:00:33:e7:b4:51:3c:c3:
         2a:2f:89:76:c7:7a:a0:cd:b8:b0:56:86:18:6a:69:d3:28:b5:
         1a:80:96:ab:7f:bd:5a:a0:3c:47:d3:2d:67:6f:4d:ae:42:64:
         a0:10:cd:e4:f6:60:ee:26:82:d8:17:7d:4c:79:07:03:39:98:
         c8:5d:f5:b8:e2:9b:2e:5a:af:15:f7:02:bf:30:8a:65:f3:e1:
         88:5f:05:4b:c8:42:1a:67:8d:3a:0f:0d:c0:21:18:f3:fd:b4:
         24:7f:24:10:f3:b2:3f:69:89:ee:60:45:3d:07:4c:fc:c1:a9:
         e1:9e:18:4f:3d:5d:a9:7e:1d:5b:3c:ce:83:79:aa:24:9d:38:
         dd:57:3f:fc:71:be:8c:2a:f5:fe:88:24:2d:91:e0:91:71:59:
         f1:55:74:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9i+FJSL15eNldFc+SyskhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5YmEwNzliN2YwMjE2YTZmNjY3M2M5NzFjMmFmYWRkNWFl
OTQyZWEwHhcNMjUwODA2MDQwMjU1WhcNMjUwODA3MDQwMjU1WjAzMTEwLwYDVQQD
EyhhZjA4ZDM5ZDhhMjRjYzg5M2UzMTY4ZmIyODY4YjMwZTEwMWUxNTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWLd/wP+/C7ZEtWMLDbenz9Wh5MV
2cNh+ybamuIb7VEpo6K2JFldIqvaeubEPSH8F9+xGZmTr5H8U9ZXJe3WVxFIn7mX
HOtei0AeN/ihUn2H2Tbaf1lT73NZ5mXxrQxXrTSuDJC5zjy46SYUwdhUP5dVkRUw
T0+3aZ5cc7BGCBW8iJ7UbFxr1B35Wy9ZgoanoQ71gxGajg3h0GDwnZv1/qfCUFjC
eBwckLXDds1UTIHZQEmPckbHGepYA8iNBqqhdBQEr3uVLhu7ZMkSrDvOkViSfzQc
QF1Yxx0lD80RkLg3YbNu9qG4h0twbwcZ5MV2XJFYtjK0uZYwdMlm3F8vWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8I052KJMyJPjFo+yhosw4QHhWXMB8GA1UdIwQY
MBaAFEm6B5t/Aham9mc8lxwq+t1a6ULqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2JvSG0zOENGcWIyWnp5WEhDcjYzVnJwUXVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jYjVmMjEtYjlkZi00MGRiLWI1NjYt
M2UzY2Q5NWE1YzJlLzEvU2JvSG0zOENGcWIyWnp5WEhDcjYzVnJwUXVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9jYjVmMjEtYjlkZi00MGRiLWI1NjYtM2UzY2Q5NWE1YzJl
LzEvU2JvSG0zOENGcWIyWnp5WEhDcjYzVnJwUXVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEoyy9CCp
7A2SQnEnHiSxmGl+65HngCkrUODkMJXUxOOITWjHxDzbfSP/IC0exGhGUarX6kU+
eyYdmWIQOxMrxnOjtFcB1CW7ScQ4bvhjwMUuhZkejKix4i5tpy9n7xCJR2xLfgwA
M+e0UTzDKi+Jdsd6oM24sFaGGGpp0yi1GoCWq3+9WqA8R9MtZ29NrkJkoBDN5PZg
7iaC2Bd9THkHAzmYyF31uOKbLlqvFfcCvzCKZfPhiF8FS8hCGmeNOg8NwCEY8/20
JH8kEPOyP2mJ7mBFPQdM/MGp4Z4YTz1dqX4dWzzOg3mqJJ043Vc//HG+jCr1/ogk
LZHgkXFZ8VV03Q==
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:01:02 2025 by rpki-client