Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.mft
File:                     De-ewcAwfGBzzor4PwmWjKt6u-8.mft (raw, json)
Hash identifier:          mu4ysfZ0XgtXXogD+/373UB1L0gm4XaFoKaVYiU5Wfs=
Subject key identifier:   01:67:19:E0:03:C0:6E:68:87:C8:8E:35:12:EE:5D:39:32:C2:59:D6
Authority key identifier: 0D:EF:9E:C1:C0:30:7C:60:73:CE:8A:F8:3F:09:96:8C:AB:7A:BB:EF
Certificate issuer:       /CN=0def9ec1c0307c6073ce8af83f09968cab7abbef
Certificate serial:       0198801D7667E4306734E4744F285BE204D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/De-ewcAwfGBzzor4PwmWjKt6u-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.mft
Manifest number:          115F
Signing time:             Wed 06 Aug 2025 16:01:11 +0000
Manifest this update:     Wed 06 Aug 2025 16:01:11 +0000
Manifest next update:     Thu 07 Aug 2025 16:01:11 +0000
Files and hashes:         1: De-ewcAwfGBzzor4PwmWjKt6u-8.crl (hash: yH55+H+Bqen6cpoH4CS82L00UnuKbGTfaAiaOUYGEcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/De-ewcAwfGBzzor4PwmWjKt6u-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:1d:76:67:e4:30:67:34:e4:74:4f:28:5b:e2:04:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0def9ec1c0307c6073ce8af83f09968cab7abbef
        Validity
            Not Before: Aug  6 16:01:11 2025 GMT
            Not After : Aug  7 16:01:11 2025 GMT
        Subject: CN=016719e003c06e6887c88e3512ee5d3932c259d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a3:2d:63:0b:74:bc:96:d9:35:ce:70:e0:09:
                    b0:3c:03:78:a8:05:b9:0f:12:57:1b:51:92:b0:75:
                    f5:1e:d5:ff:36:4b:23:53:af:46:89:03:23:df:d2:
                    34:eb:ce:5b:6a:e8:08:76:ef:60:5b:c3:e0:23:fe:
                    ce:92:95:eb:9f:74:03:6d:d6:3b:43:86:af:4b:25:
                    12:ac:2a:15:d0:3d:af:8a:89:80:10:6d:3a:f5:d1:
                    89:b6:e9:10:55:f1:2a:b5:e9:8c:98:08:66:c9:97:
                    8f:29:fc:3d:11:54:c4:0d:b5:8b:2d:18:cd:b7:bb:
                    f9:2b:3d:c9:d5:ca:6f:bc:0d:30:5f:17:74:ad:b0:
                    eb:80:7c:bb:a5:f3:fa:03:92:74:79:a7:de:5c:71:
                    54:05:32:b5:97:c6:ef:1a:df:0a:49:33:f3:58:c3:
                    6f:df:58:67:fa:fc:78:ef:a8:6e:7a:06:56:a4:58:
                    51:03:0c:61:33:c5:7f:57:4b:bd:e5:77:08:05:c9:
                    60:f5:86:84:9e:89:7c:00:97:70:c9:a7:e3:84:a3:
                    f3:9f:e0:8a:fe:f2:71:e4:05:2a:e7:38:9d:fd:5f:
                    ca:ec:15:62:92:32:cc:93:af:d2:90:c9:f2:6c:8c:
                    f6:b3:ec:cd:49:a4:38:12:b9:02:b9:2b:dc:f4:d2:
                    11:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:67:19:E0:03:C0:6E:68:87:C8:8E:35:12:EE:5D:39:32:C2:59:D6
            X509v3 Authority Key Identifier:
                keyid:0D:EF:9E:C1:C0:30:7C:60:73:CE:8A:F8:3F:09:96:8C:AB:7A:BB:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/De-ewcAwfGBzzor4PwmWjKt6u-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:25:be:4e:c7:7e:71:c1:eb:2f:b4:4d:3a:63:57:a4:4c:19:
         73:96:d2:71:88:ee:20:63:3c:96:87:80:dd:f9:31:ca:09:7a:
         95:45:0a:5e:ce:69:55:36:b8:7f:5b:e0:a2:d0:a1:e9:69:8f:
         cc:1d:fb:cf:8d:07:a4:1a:ab:16:c0:58:4a:c8:f5:ca:b5:e9:
         53:22:d0:9a:90:25:ad:00:73:78:93:dc:09:90:3e:4f:51:00:
         e4:cd:5a:a0:d4:f2:90:a0:18:a4:bf:af:bc:95:34:29:ad:92:
         e6:17:8b:f9:bc:4d:33:a6:48:cd:79:1d:51:ca:16:2a:cd:25:
         e7:bd:9a:86:64:ce:60:61:a0:46:a0:df:37:d7:cc:1d:c8:a9:
         03:9b:b5:e5:30:e8:8b:39:07:e8:27:67:8e:96:c1:c9:ea:1a:
         4b:c6:92:da:18:ca:27:6b:dd:68:ce:97:1c:d2:d1:a7:b0:9c:
         c7:12:c3:dc:3f:6e:26:65:56:67:b2:a0:9c:91:52:c1:13:a7:
         41:57:4c:ea:19:21:43:b3:07:74:a7:12:c9:d9:7d:7c:c3:d0:
         f7:57:2d:5e:25:6d:e0:30:ee:fc:af:9b:41:55:96:69:93:bb:
         88:ba:2b:50:62:28:54:48:b3:38:3b:b0:5f:a4:8a:8d:d7:38:
         a1:d4:74:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAHXZn5DBnNOR0Tyhb4gTQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZWY5ZWMxYzAzMDdjNjA3M2NlOGFmODNmMDk5NjhjYWI3
YWJiZWYwHhcNMjUwODA2MTYwMTExWhcNMjUwODA3MTYwMTExWjAzMTEwLwYDVQQD
EygwMTY3MTllMDAzYzA2ZTY4ODdjODhlMzUxMmVlNWQzOTMyYzI1OWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqMtYwt0vJbZNc5w4AmwPAN4qAW5
DxJXG1GSsHX1HtX/NksjU69GiQMj39I0685baugIdu9gW8PgI/7OkpXrn3QDbdY7
Q4avSyUSrCoV0D2viomAEG069dGJtukQVfEqtemMmAhmyZePKfw9EVTEDbWLLRjN
t7v5Kz3J1cpvvA0wXxd0rbDrgHy7pfP6A5J0eafeXHFUBTK1l8bvGt8KSTPzWMNv
31hn+vx476huegZWpFhRAwxhM8V/V0u95XcIBclg9YaEnol8AJdwyafjhKPzn+CK
/vJx5AUq5zid/V/K7BVikjLMk6/SkMnybIz2s+zNSaQ4ErkCuSvc9NIRGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFnGeADwG5oh8iONRLuXTkywlnWMB8GA1UdIwQY
MBaAFA3vnsHAMHxgc86K+D8JloyrervvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGUtZXdjQXdmR0J6em9yNFB3bVdqS3Q2dS04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85Zjc3YTQtM2JiYi00M2RkLWJiYzAt
N2M5MzViNWQ5NzJlLzEvRGUtZXdjQXdmR0J6em9yNFB3bVdqS3Q2dS04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS85Zjc3YTQtM2JiYi00M2RkLWJiYzAtN2M5MzViNWQ5NzJl
LzEvRGUtZXdjQXdmR0J6em9yNFB3bVdqS3Q2dS04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARSW+Tsd+
ccHrL7RNOmNXpEwZc5bScYjuIGM8loeA3fkxygl6lUUKXs5pVTa4f1vgotCh6WmP
zB37z40HpBqrFsBYSsj1yrXpUyLQmpAlrQBzeJPcCZA+T1EA5M1aoNTykKAYpL+v
vJU0Ka2S5heL+bxNM6ZIzXkdUcoWKs0l572ahmTOYGGgRqDfN9fMHcipA5u15TDo
izkH6CdnjpbByeoaS8aS2hjKJ2vdaM6XHNLRp7CcxxLD3D9uJmVWZ7KgnJFSwROn
QVdM6hkhQ7MHdKcSydl9fMPQ91ctXiVt4DDu/K+bQVWWaZO7iLorUGIoVEizODuw
X6SKjdc4odR0bw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 02:09:49 2025 by rpki-client