Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft
File:                     G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft (raw, json)
Hash identifier:          S0aJhKhP5igH2oqT9SCLRclTJjeWCkNznw1CSCPavlE=
Subject key identifier:   DC:07:A2:F4:C5:17:66:F3:68:48:B6:5C:6E:A8:41:DF:D9:C0:BE:5F
Authority key identifier: 1B:B2:9B:3F:15:8F:A8:07:10:C1:2A:58:B6:9F:B9:26:09:8D:51:29
Certificate issuer:       /CN=1bb29b3f158fa80710c12a58b69fb926098d5129
Certificate serial:       0198861FBD4708F1DA9841375C895947EDF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G7KbPxWPqAcQwSpYtp-5JgmNUSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft
Manifest number:          0CB5
Signing time:             Thu 07 Aug 2025 20:01:23 +0000
Manifest this update:     Thu 07 Aug 2025 20:01:23 +0000
Manifest next update:     Fri 08 Aug 2025 20:01:23 +0000
Files and hashes:         1: G7KbPxWPqAcQwSpYtp-5JgmNUSk.crl (hash: KlBfGszOUxyeciGIvDUu3uqxSz1eOD4tlYBamp9/I9s=)
                          2: j_n9Kg39TCshbmu8W1dk2NVjcFI.roa (hash: 56S9svTLKP+1FymtE0skXNThCYHX7pM3o2tRL4nBuW8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G7KbPxWPqAcQwSpYtp-5JgmNUSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 16:13:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:86:1f:bd:47:08:f1:da:98:41:37:5c:89:59:47:ed:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bb29b3f158fa80710c12a58b69fb926098d5129
        Validity
            Not Before: Aug  7 20:01:23 2025 GMT
            Not After : Aug  8 20:01:23 2025 GMT
        Subject: CN=dc07a2f4c51766f36848b65c6ea841dfd9c0be5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:27:bc:a1:7d:c6:43:a0:ae:88:fc:cc:6b:25:
                    08:c3:8f:dc:9b:5e:20:1b:5a:35:c6:6c:1f:77:0b:
                    df:dc:32:7e:6b:46:d7:d6:9b:12:3a:67:30:ae:87:
                    b1:6b:51:04:a7:4c:d6:bc:c8:12:40:5f:25:8b:cb:
                    06:83:50:66:77:5c:79:0a:a9:58:4e:b0:3c:3a:33:
                    e2:ac:d3:a6:3e:a9:fa:44:2d:8e:b8:1f:77:60:7c:
                    7f:51:c5:32:c8:cc:41:ab:47:d7:56:19:0d:53:1e:
                    9b:0c:67:d3:fc:96:25:59:ec:41:17:74:fc:20:9a:
                    e2:2b:4e:8a:08:f1:90:56:11:53:87:34:ef:6c:fd:
                    86:06:69:f4:13:92:fe:79:e0:39:fa:52:49:50:c2:
                    a3:5a:50:16:18:f0:ad:b7:9a:ba:fc:2c:c7:0c:23:
                    d4:39:f2:a9:0f:40:2f:0c:f1:25:03:d2:53:71:57:
                    6c:4b:2f:80:33:78:03:1d:e7:fe:fb:42:e8:e4:da:
                    12:b4:68:12:7a:01:37:50:9d:d0:a8:fe:e9:be:d6:
                    7c:c4:1d:b2:32:3c:44:ea:63:d2:da:bc:95:de:46:
                    1e:e8:7a:cc:4e:df:3f:2d:44:bb:5e:d0:37:ea:81:
                    32:fd:ed:59:52:3b:8e:cc:14:e7:c4:4b:ed:d7:45:
                    c2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:07:A2:F4:C5:17:66:F3:68:48:B6:5C:6E:A8:41:DF:D9:C0:BE:5F
            X509v3 Authority Key Identifier:
                keyid:1B:B2:9B:3F:15:8F:A8:07:10:C1:2A:58:B6:9F:B9:26:09:8D:51:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7KbPxWPqAcQwSpYtp-5JgmNUSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:7b:4b:52:31:44:40:13:ba:b8:bb:10:68:4b:f2:8c:b8:75:
         82:7f:e9:35:d0:74:9b:cd:d0:12:1a:0b:fc:74:02:77:12:91:
         30:07:eb:8c:2d:a4:ca:64:a7:99:f2:86:f5:6e:8f:03:ef:ca:
         21:90:3d:d2:b6:f0:8b:56:21:d3:10:6c:28:e1:00:c7:f1:a5:
         c9:60:a8:7e:c1:e0:a0:64:26:37:8b:2d:0c:40:33:c7:97:c4:
         b8:8d:e2:3d:a3:27:e6:e9:93:c4:9c:60:fd:33:53:4c:c5:bb:
         ee:92:be:46:40:e9:46:5f:8e:e8:dd:82:30:cb:95:ff:44:9b:
         29:7d:3c:d1:c4:74:5e:14:e1:b3:10:82:ee:4d:bd:b3:64:72:
         c7:26:40:be:56:77:5c:41:d7:bd:ef:bf:e9:ce:80:df:dc:dc:
         ae:ab:58:fb:4f:8d:f3:3d:62:5c:9a:bd:18:0f:8c:bb:6b:02:
         e6:10:ab:d1:74:87:e5:55:f5:bd:b6:c6:d8:73:a1:cf:4d:0f:
         96:2f:b1:47:9b:12:75:b3:4f:d6:61:53:fc:9e:26:f1:72:60:
         b9:8f:c3:9e:82:64:c4:39:66:07:3b:da:fa:ad:73:d8:80:ea:
         09:0c:63:1e:d9:6b:6e:08:80:13:86:84:54:19:41:7e:13:fd:
         f5:3c:a8:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiGH71HCPHamEE3XIlZR+3xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYjI5YjNmMTU4ZmE4MDcxMGMxMmE1OGI2OWZiOTI2MDk4
ZDUxMjkwHhcNMjUwODA3MjAwMTIzWhcNMjUwODA4MjAwMTIzWjAzMTEwLwYDVQQD
EyhkYzA3YTJmNGM1MTc2NmYzNjg0OGI2NWM2ZWE4NDFkZmQ5YzBiZTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSe8oX3GQ6CuiPzMayUIw4/cm14g
G1o1xmwfdwvf3DJ+a0bX1psSOmcwroexa1EEp0zWvMgSQF8li8sGg1Bmd1x5CqlY
TrA8OjPirNOmPqn6RC2OuB93YHx/UcUyyMxBq0fXVhkNUx6bDGfT/JYlWexBF3T8
IJriK06KCPGQVhFThzTvbP2GBmn0E5L+eeA5+lJJUMKjWlAWGPCtt5q6/CzHDCPU
OfKpD0AvDPElA9JTcVdsSy+AM3gDHef++0Lo5NoStGgSegE3UJ3QqP7pvtZ8xB2y
MjxE6mPS2ryV3kYe6HrMTt8/LUS7XtA36oEy/e1ZUjuOzBTnxEvt10XCrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNwHovTFF2bzaEi2XG6oQd/ZwL5fMB8GA1UdIwQY
MBaAFBuymz8Vj6gHEMEqWLafuSYJjVEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzdLYlB4V1BxQWNRd1NwWXRwLTVKZ21OVVNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi81NzNmMGItNTMyNS00MWQzLWI5ZmYt
OGY3ZDU2YjdiNDE3LzEvRzdLYlB4V1BxQWNRd1NwWXRwLTVKZ21OVVNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi81NzNmMGItNTMyNS00MWQzLWI5ZmYtOGY3ZDU2YjdiNDE3
LzEvRzdLYlB4V1BxQWNRd1NwWXRwLTVKZ21OVVNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk3tLUjFE
QBO6uLsQaEvyjLh1gn/pNdB0m83QEhoL/HQCdxKRMAfrjC2kymSnmfKG9W6PA+/K
IZA90rbwi1Yh0xBsKOEAx/GlyWCofsHgoGQmN4stDEAzx5fEuI3iPaMn5umTxJxg
/TNTTMW77pK+RkDpRl+O6N2CMMuV/0SbKX080cR0XhThsxCC7k29s2RyxyZAvlZ3
XEHXve+/6c6A39zcrqtY+0+N8z1iXJq9GA+Mu2sC5hCr0XSH5VX1vbbG2HOhz00P
li+xR5sSdbNP1mFT/J4m8XJguY/DnoJkxDlmBzva+q1z2IDqCQxjHtlrbgiAE4aE
VBlBfhP99TyoTg==
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:13:42 2025 by rpki-client