Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/427e2c-96f6-4e43-914a-8c7c54f3c5b0/1/daRvv8jeUjM5XHPeUflVO7doRgU.mft
File:                     daRvv8jeUjM5XHPeUflVO7doRgU.mft (raw, json)
Hash identifier:          0ij2pP68cP6JvIspR5gxWjOjJldcLRHS9vrs+DTlqvY=
Subject key identifier:   BF:EC:BD:E1:A8:90:2E:44:08:87:63:6E:38:3C:64:ED:5C:24:CD:27
Authority key identifier: 75:A4:6F:BF:C8:DE:52:33:39:5C:73:DE:51:F9:55:3B:B7:68:46:05
Certificate issuer:       /CN=75a46fbfc8de5233395c73de51f9553bb7684605
Certificate serial:       01987D8B7B19BFB33BF98A023DB4D9740DFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/daRvv8jeUjM5XHPeUflVO7doRgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/427e2c-96f6-4e43-914a-8c7c54f3c5b0/1/daRvv8jeUjM5XHPeUflVO7doRgU.mft
Manifest number:          1617
Signing time:             Wed 06 Aug 2025 04:02:29 +0000
Manifest this update:     Wed 06 Aug 2025 04:02:29 +0000
Manifest next update:     Thu 07 Aug 2025 04:02:29 +0000
Files and hashes:         1: daRvv8jeUjM5XHPeUflVO7doRgU.crl (hash: YvJnCZQzGQXcrAvHM6RlNgd4vNB+N5uh2YobuXF3Y24=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/427e2c-96f6-4e43-914a-8c7c54f3c5b0/1/daRvv8jeUjM5XHPeUflVO7doRgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/427e2c-96f6-4e43-914a-8c7c54f3c5b0/1/daRvv8jeUjM5XHPeUflVO7doRgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/daRvv8jeUjM5XHPeUflVO7doRgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:8b:7b:19:bf:b3:3b:f9:8a:02:3d:b4:d9:74:0d:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75a46fbfc8de5233395c73de51f9553bb7684605
        Validity
            Not Before: Aug  6 04:02:29 2025 GMT
            Not After : Aug  7 04:02:29 2025 GMT
        Subject: CN=bfecbde1a8902e440887636e383c64ed5c24cd27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:97:2b:64:3b:74:bb:a7:01:95:ea:18:12:b8:
                    a5:e1:99:ef:06:ca:51:c1:df:8b:f6:4f:9e:f9:12:
                    12:65:b9:5e:a8:ee:3f:76:63:e4:fd:c9:8d:b6:07:
                    39:54:f2:68:a1:63:ee:d8:ee:bf:67:66:57:aa:a1:
                    5c:76:82:75:89:c0:a4:30:27:61:b3:50:8f:7b:20:
                    cb:aa:35:cb:77:f6:17:f8:b0:9b:b3:14:ad:ad:5b:
                    52:0d:80:2e:4a:36:ea:fa:eb:48:8c:20:db:0a:59:
                    f3:78:bc:a9:3a:78:ed:96:8b:b9:84:e1:3a:9d:dc:
                    8c:25:5d:8f:2a:72:75:bf:d1:35:69:b9:0e:6e:4b:
                    10:21:8c:f9:98:76:7a:01:78:bd:e3:c5:dd:d9:00:
                    0d:7d:82:53:9f:f7:6d:5b:4a:eb:15:bf:f1:56:a9:
                    55:f4:59:d1:06:76:5c:7c:d2:9d:72:52:43:76:f0:
                    da:0a:4a:97:a3:be:a4:40:2e:73:80:59:d7:36:67:
                    89:6a:c0:e2:9b:f0:3e:9b:67:c8:61:af:43:1e:9e:
                    94:96:b8:43:96:91:11:8f:51:d4:5e:24:f6:00:95:
                    c0:09:33:b8:80:47:95:1d:53:00:37:72:1c:54:46:
                    50:07:c3:b8:6d:c0:21:bc:f3:6e:9c:91:40:4a:0f:
                    f7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:EC:BD:E1:A8:90:2E:44:08:87:63:6E:38:3C:64:ED:5C:24:CD:27
            X509v3 Authority Key Identifier:
                keyid:75:A4:6F:BF:C8:DE:52:33:39:5C:73:DE:51:F9:55:3B:B7:68:46:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/daRvv8jeUjM5XHPeUflVO7doRgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/427e2c-96f6-4e43-914a-8c7c54f3c5b0/1/daRvv8jeUjM5XHPeUflVO7doRgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/427e2c-96f6-4e43-914a-8c7c54f3c5b0/1/daRvv8jeUjM5XHPeUflVO7doRgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:12:91:c2:0c:1e:8a:74:e0:c5:12:8b:6a:38:b0:77:2f:46:
         d0:84:ef:21:c1:0f:8f:8c:41:54:d8:17:03:48:2a:03:b7:d8:
         cb:33:da:e2:ed:fe:16:ae:14:64:05:c5:74:a5:34:5b:88:3a:
         07:74:35:f4:ab:df:02:6d:4e:dd:62:6d:a2:7b:fd:9a:e9:10:
         9c:26:89:95:c3:0f:02:c4:b7:dd:55:4f:a7:5f:0e:db:69:7c:
         0b:49:96:a2:47:7b:b7:22:61:80:dd:f3:a3:25:b9:08:1b:a1:
         85:32:6a:ff:5e:24:3e:73:00:d7:df:0d:d2:73:a4:a4:54:00:
         a3:5a:58:d9:88:4a:00:7d:c3:49:9a:1b:98:a0:bc:a1:d9:03:
         63:81:59:31:d1:70:6f:fe:c2:56:18:5c:91:f1:43:e8:77:70:
         39:fa:ee:d2:e5:85:7a:fa:91:02:af:13:91:70:64:bf:20:9f:
         95:1e:8b:03:99:18:aa:67:7d:80:5d:2d:33:9a:50:70:d5:9a:
         1a:32:3e:15:98:36:8b:36:e5:da:9d:ed:e1:a1:a0:8e:c1:e6:
         e2:9c:10:ad:74:1f:5a:8c:f1:de:24:a8:82:16:8d:f9:fb:e8:
         56:03:c4:7b:eb:d8:4f:37:3c:49:a2:5b:91:da:8e:7f:82:bb:
         0f:c3:8e:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9i3sZv7M7+YoCPbTZdA3+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YTQ2ZmJmYzhkZTUyMzMzOTVjNzNkZTUxZjk1NTNiYjc2
ODQ2MDUwHhcNMjUwODA2MDQwMjI5WhcNMjUwODA3MDQwMjI5WjAzMTEwLwYDVQQD
EyhiZmVjYmRlMWE4OTAyZTQ0MDg4NzYzNmUzODNjNjRlZDVjMjRjZDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypcrZDt0u6cBleoYEril4ZnvBspR
wd+L9k+e+RISZbleqO4/dmPk/cmNtgc5VPJooWPu2O6/Z2ZXqqFcdoJ1icCkMCdh
s1CPeyDLqjXLd/YX+LCbsxStrVtSDYAuSjbq+utIjCDbClnzeLypOnjtlou5hOE6
ndyMJV2PKnJ1v9E1abkObksQIYz5mHZ6AXi948Xd2QANfYJTn/dtW0rrFb/xVqlV
9FnRBnZcfNKdclJDdvDaCkqXo76kQC5zgFnXNmeJasDim/A+m2fIYa9DHp6UlrhD
lpERj1HUXiT2AJXACTO4gEeVHVMAN3IcVEZQB8O4bcAhvPNunJFASg/3rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/sveGokC5ECIdjbjg8ZO1cJM0nMB8GA1UdIwQY
MBaAFHWkb7/I3lIzOVxz3lH5VTu3aEYFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGFSdnY4amVVak01WEhQZVVmbFZPN2RvUmdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS80MjdlMmMtOTZmNi00ZTQzLTkxNGEt
OGM3YzU0ZjNjNWIwLzEvZGFSdnY4amVVak01WEhQZVVmbFZPN2RvUmdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS80MjdlMmMtOTZmNi00ZTQzLTkxNGEtOGM3YzU0ZjNjNWIw
LzEvZGFSdnY4amVVak01WEhQZVVmbFZPN2RvUmdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqhKRwgwe
inTgxRKLajiwdy9G0ITvIcEPj4xBVNgXA0gqA7fYyzPa4u3+Fq4UZAXFdKU0W4g6
B3Q19KvfAm1O3WJtonv9mukQnCaJlcMPAsS33VVPp18O22l8C0mWokd7tyJhgN3z
oyW5CBuhhTJq/14kPnMA198N0nOkpFQAo1pY2YhKAH3DSZobmKC8odkDY4FZMdFw
b/7CVhhckfFD6HdwOfru0uWFevqRAq8TkXBkvyCflR6LA5kYqmd9gF0tM5pQcNWa
GjI+FZg2izbl2p3t4aGgjsHm4pwQrXQfWozx3iSoghaN+fvoVgPEe+vYTzc8SaJb
kdqOf4K7D8OOsA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 07:53:34 2025 by rpki-client