Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
File:                     4OvbaaM-jzrzY64UT4U1OOgDG2M.mft (raw, json)
Hash identifier:          PLTNv0Ulyff62yVabigFXt55A7EzH8ZT0bCpPKHMbs8=
Subject key identifier:   F0:83:D7:1A:2C:DF:74:24:36:D1:06:45:08:36:61:8B:54:EC:76:2D
Authority key identifier: E0:EB:DB:69:A3:3E:8F:3A:F3:63:AE:14:4F:85:35:38:E8:03:1B:63
Certificate issuer:       /CN=e0ebdb69a33e8f3af363ae144f853538e8031b63
Certificate serial:       019874192DD48D216DD0F16443A588C1111B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
Manifest number:          08EE
Signing time:             Mon 04 Aug 2025 08:01:03 +0000
Manifest this update:     Mon 04 Aug 2025 08:01:03 +0000
Manifest next update:     Tue 05 Aug 2025 08:01:03 +0000
Files and hashes:         1: 3eUay2tu69uIVC2ydoh-KNcQB3E.roa (hash: G/dDpLohr3NTC2lM78apSFe1V+YNmYFmlWqkTGl1RZw=)
                          2: 4OvbaaM-jzrzY64UT4U1OOgDG2M.crl (hash: qfqpXvH6eEYVHHu6LkPxQGOYXww0Q3/whJ91/rliv/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:19:2d:d4:8d:21:6d:d0:f1:64:43:a5:88:c1:11:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0ebdb69a33e8f3af363ae144f853538e8031b63
        Validity
            Not Before: Aug  4 08:01:03 2025 GMT
            Not After : Aug  5 08:01:03 2025 GMT
        Subject: CN=f083d71a2cdf742436d106450836618b54ec762d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:00:f5:30:18:e3:c7:55:e4:4a:95:32:da:06:
                    66:6c:af:f3:e7:24:9b:27:24:e1:36:a8:79:04:64:
                    2e:40:19:4e:86:9d:37:e1:df:70:a6:30:4f:a1:d3:
                    6c:bd:69:29:ef:8e:0e:ca:05:85:eb:4f:b7:01:b3:
                    16:5e:81:8f:dc:f0:53:bd:17:eb:92:a1:b7:36:da:
                    25:ad:03:a1:75:7c:f5:5b:b5:d2:0e:63:f9:2e:66:
                    3d:ee:a7:dc:d7:94:a2:24:cc:6f:a4:f4:fe:5d:c0:
                    ed:92:33:39:51:a6:d5:dc:3c:99:b1:c7:13:9f:c5:
                    8c:65:3f:c8:50:62:dd:7d:7e:54:dd:74:b6:0b:18:
                    cb:00:b6:b6:83:5b:ae:d0:27:4b:76:8b:17:e0:e6:
                    6b:f0:e5:c7:7c:a2:86:ab:19:e3:da:de:76:22:ef:
                    03:63:5c:b9:5e:60:cd:e3:6c:88:fd:2c:91:aa:6b:
                    73:5b:62:32:ad:47:17:c5:43:e5:f9:02:39:cc:4c:
                    8d:6e:6b:58:23:c5:0e:ee:13:ec:3a:f6:5f:a4:02:
                    72:5d:a9:d3:fa:b4:ff:58:ba:21:80:1c:d1:9e:97:
                    67:d1:90:83:45:3d:35:e0:9f:d0:fd:7f:d4:2d:aa:
                    b1:4e:a8:c9:04:72:c0:ab:83:17:a2:c2:1c:fe:f4:
                    c9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:83:D7:1A:2C:DF:74:24:36:D1:06:45:08:36:61:8B:54:EC:76:2D
            X509v3 Authority Key Identifier:
                keyid:E0:EB:DB:69:A3:3E:8F:3A:F3:63:AE:14:4F:85:35:38:E8:03:1B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:18:e4:ad:37:8c:ec:c8:b5:34:c7:c0:cc:e7:ec:a0:93:98:
         32:0c:dd:79:ed:a2:eb:1c:66:40:37:fe:e3:68:d0:27:54:eb:
         f0:a2:86:01:9c:cc:e5:7c:96:67:83:a2:7a:a2:d7:b3:50:ee:
         b5:1a:d7:47:e7:31:f7:18:df:e6:09:3a:4e:4d:30:2b:41:88:
         2a:94:2a:95:ee:1e:48:77:ba:6c:c8:74:46:ac:aa:15:9c:07:
         48:50:50:76:25:b3:cf:63:a1:69:30:f4:da:ea:34:b8:c8:e7:
         ff:97:70:f2:03:b1:f0:d2:a1:ac:8b:50:f9:74:75:bf:1d:58:
         f9:2b:b0:74:70:ac:e9:65:56:a0:1d:30:46:6d:91:a6:3e:de:
         a2:24:0c:2c:74:52:99:26:07:c8:e0:7b:4f:71:e3:6a:ea:8f:
         d0:95:38:dd:3a:38:88:ff:3b:c3:bb:fd:6c:b2:f2:1e:75:ec:
         8a:c1:24:e1:67:9c:21:0a:ae:8a:ab:6c:ec:65:2e:89:fc:26:
         7b:18:cb:24:b6:a4:54:f9:5e:1d:49:5f:72:52:aa:9a:df:b2:
         57:b8:7a:eb:12:16:19:73:b5:98:4d:c6:81:1a:5d:56:f4:3a:
         7f:bc:07:f7:85:2b:3e:66:cc:8c:24:ba:ff:41:c0:97:d4:6d:
         e1:bb:79:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0GS3UjSFt0PFkQ6WIwREbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZWJkYjY5YTMzZThmM2FmMzYzYWUxNDRmODUzNTM4ZTgw
MzFiNjMwHhcNMjUwODA0MDgwMTAzWhcNMjUwODA1MDgwMTAzWjAzMTEwLwYDVQQD
EyhmMDgzZDcxYTJjZGY3NDI0MzZkMTA2NDUwODM2NjE4YjU0ZWM3NjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgD1MBjjx1XkSpUy2gZmbK/z5ySb
JyThNqh5BGQuQBlOhp034d9wpjBPodNsvWkp744OygWF60+3AbMWXoGP3PBTvRfr
kqG3NtolrQOhdXz1W7XSDmP5LmY97qfc15SiJMxvpPT+XcDtkjM5UabV3DyZsccT
n8WMZT/IUGLdfX5U3XS2CxjLALa2g1uu0CdLdosX4OZr8OXHfKKGqxnj2t52Iu8D
Y1y5XmDN42yI/SyRqmtzW2IyrUcXxUPl+QI5zEyNbmtYI8UO7hPsOvZfpAJyXanT
+rT/WLohgBzRnpdn0ZCDRT014J/Q/X/ULaqxTqjJBHLAq4MXosIc/vTJfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPCD1xos33QkNtEGRQg2YYtU7HYtMB8GA1UdIwQY
MBaAFODr22mjPo8682OuFE+FNTjoAxtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE92YmFhTS1qenJ6WTY0VVQ0VTFPT2dERzJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9kOGM0YmEtMWM0OC00ODBiLWJiNTkt
ZDIzMTBiYmEwZTExLzEvNE92YmFhTS1qenJ6WTY0VVQ0VTFPT2dERzJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9kOGM0YmEtMWM0OC00ODBiLWJiNTktZDIzMTBiYmEwZTEx
LzEvNE92YmFhTS1qenJ6WTY0VVQ0VTFPT2dERzJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmxjkrTeM
7Mi1NMfAzOfsoJOYMgzdee2i6xxmQDf+42jQJ1Tr8KKGAZzM5XyWZ4OieqLXs1Du
tRrXR+cx9xjf5gk6Tk0wK0GIKpQqle4eSHe6bMh0RqyqFZwHSFBQdiWzz2OhaTD0
2uo0uMjn/5dw8gOx8NKhrItQ+XR1vx1Y+SuwdHCs6WVWoB0wRm2Rpj7eoiQMLHRS
mSYHyOB7T3HjauqP0JU43To4iP87w7v9bLLyHnXsisEk4WecIQquiqts7GUuifwm
exjLJLakVPleHUlfclKqmt+yV7h66xIWGXO1mE3GgRpdVvQ6f7wH94UrPmbMjCS6
/0HAl9Rt4bt5BQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:47 2025 by rpki-client