Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft
File:                     D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft (raw, json)
Hash identifier:          9w7z2jmJJsOYKahvbqOt8hr9L2M8Tmtw0tA59kWvxsY=
Subject key identifier:   DC:FB:CC:22:79:43:6E:E8:08:FB:AC:78:EB:7A:44:2E:24:B6:B9:29
Authority key identifier: 0F:B7:F1:FD:87:68:E2:11:63:54:2A:FC:F5:5A:83:C6:98:02:15:A3
Certificate issuer:       /CN=0fb7f1fd8768e21163542afcf55a83c6980215a3
Certificate serial:       01987C77292DB5A230050B171EF2A4BC266A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D7fx_Ydo4hFjVCr89VqDxpgCFaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft
Manifest number:          0776
Signing time:             Tue 05 Aug 2025 23:00:40 +0000
Manifest this update:     Tue 05 Aug 2025 23:00:40 +0000
Manifest next update:     Wed 06 Aug 2025 23:00:40 +0000
Files and hashes:         1: D7fx_Ydo4hFjVCr89VqDxpgCFaM.crl (hash: C0oFJ33mXRPcGIf7y2dXgvnA9YlpOcsqxSVh0EqAT6A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D7fx_Ydo4hFjVCr89VqDxpgCFaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:77:29:2d:b5:a2:30:05:0b:17:1e:f2:a4:bc:26:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fb7f1fd8768e21163542afcf55a83c6980215a3
        Validity
            Not Before: Aug  5 23:00:40 2025 GMT
            Not After : Aug  6 23:00:40 2025 GMT
        Subject: CN=dcfbcc2279436ee808fbac78eb7a442e24b6b929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:52:58:64:08:78:07:8c:37:97:d7:71:c9:83:
                    ea:3f:0e:43:30:36:54:d5:f6:75:e2:1b:0f:51:78:
                    93:35:4b:67:ba:f3:5d:9b:a6:aa:ad:8c:62:b4:ea:
                    9e:8a:3b:a3:8e:53:0f:84:3d:c6:9b:f4:26:63:cd:
                    c3:8b:41:0c:cc:46:49:16:77:2c:b2:7f:94:b7:df:
                    19:03:2f:e7:69:d3:cb:93:e6:7a:3e:8f:ae:65:c8:
                    6d:52:4f:d2:f2:e1:50:b4:1b:70:8b:63:50:95:a5:
                    44:45:a2:06:84:88:5e:2b:87:67:e9:82:7f:90:c7:
                    f1:a1:13:37:68:ac:07:ba:2c:fb:f4:5b:61:b8:38:
                    48:45:36:83:ff:43:2f:da:a3:12:69:a5:3f:50:5f:
                    54:95:49:f7:ad:31:b5:ab:3b:36:b8:37:2f:6d:0f:
                    c3:8f:18:7c:c0:4e:c6:02:28:34:b2:16:d1:f5:32:
                    ef:73:20:17:d2:a1:e2:7e:aa:95:2a:46:5a:da:99:
                    2a:7f:33:f7:8f:17:65:ca:d9:f8:1e:a8:f6:1d:6a:
                    97:bc:33:bf:ca:b7:8a:9a:74:e0:54:62:cb:12:49:
                    c7:22:85:f8:c6:63:dc:0e:f7:63:c1:c9:c7:e0:92:
                    0b:17:53:80:9e:f5:be:84:11:8d:4a:df:5e:82:99:
                    f1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:FB:CC:22:79:43:6E:E8:08:FB:AC:78:EB:7A:44:2E:24:B6:B9:29
            X509v3 Authority Key Identifier:
                keyid:0F:B7:F1:FD:87:68:E2:11:63:54:2A:FC:F5:5A:83:C6:98:02:15:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7fx_Ydo4hFjVCr89VqDxpgCFaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:79:1a:0f:d7:02:2d:36:86:6d:a0:04:84:0d:5e:0e:3f:1e:
         98:9c:8b:9b:f9:7e:ef:97:89:9d:70:df:9c:99:e4:e0:58:bf:
         c7:d8:b7:b2:92:61:8e:cb:5c:ff:c0:79:75:5e:7d:13:99:d1:
         3d:e9:36:60:4c:38:75:9d:93:d8:1a:01:ec:ba:d3:4e:5c:8f:
         b9:6b:ba:96:46:f1:bf:a8:8d:6d:79:d0:00:16:a3:35:1e:2a:
         da:b5:bb:b7:a2:f5:f3:ac:ea:76:b3:e4:46:67:9c:a6:50:70:
         ce:de:d1:33:cf:c4:5a:2c:7f:f8:59:f6:31:af:f7:20:5c:e4:
         78:14:31:41:7b:e1:e8:fc:d9:4d:31:3b:b5:b7:db:4e:7e:5c:
         79:ff:6d:6f:10:a6:a6:16:94:a8:54:60:d7:0e:d9:00:fc:ba:
         40:ff:0c:5b:9c:d1:cb:bf:b6:04:ce:5d:f6:8b:ce:e0:43:30:
         33:e1:e4:4c:19:dc:1d:ea:de:a7:ee:d0:ea:8c:e1:19:27:df:
         45:4b:9a:af:81:58:93:a1:f3:da:ca:c4:39:f1:bb:49:1d:b8:
         88:a4:fe:5f:57:21:be:96:6d:c9:3d:26:bc:ac:d6:6e:d0:0f:
         6f:6b:40:95:5b:bc:ec:31:a8:4b:6a:d7:f0:73:68:e4:96:16:
         c5:a4:7c:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8dykttaIwBQsXHvKkvCZqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmYjdmMWZkODc2OGUyMTE2MzU0MmFmY2Y1NWE4M2M2OTgw
MjE1YTMwHhcNMjUwODA1MjMwMDQwWhcNMjUwODA2MjMwMDQwWjAzMTEwLwYDVQQD
EyhkY2ZiY2MyMjc5NDM2ZWU4MDhmYmFjNzhlYjdhNDQyZTI0YjZiOTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVJYZAh4B4w3l9dxyYPqPw5DMDZU
1fZ14hsPUXiTNUtnuvNdm6aqrYxitOqeijujjlMPhD3Gm/QmY83Di0EMzEZJFncs
sn+Ut98ZAy/nadPLk+Z6Po+uZchtUk/S8uFQtBtwi2NQlaVERaIGhIheK4dn6YJ/
kMfxoRM3aKwHuiz79FthuDhIRTaD/0Mv2qMSaaU/UF9UlUn3rTG1qzs2uDcvbQ/D
jxh8wE7GAig0shbR9TLvcyAX0qHifqqVKkZa2pkqfzP3jxdlytn4Hqj2HWqXvDO/
yreKmnTgVGLLEknHIoX4xmPcDvdjwcnH4JILF1OAnvW+hBGNSt9egpnxvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNz7zCJ5Q27oCPuseOt6RC4ktrkpMB8GA1UdIwQY
MBaAFA+38f2HaOIRY1Qq/PVag8aYAhWjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDdmeF9ZZG80aEZqVkNyODlWcUR4cGdDRmFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9lN2M4ZDAtNzQ5Yi00NTJkLWJmZjAt
YTBlMjhkY2ZmZmM3LzEvRDdmeF9ZZG80aEZqVkNyODlWcUR4cGdDRmFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9lN2M4ZDAtNzQ5Yi00NTJkLWJmZjAtYTBlMjhkY2ZmZmM3
LzEvRDdmeF9ZZG80aEZqVkNyODlWcUR4cGdDRmFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZHkaD9cC
LTaGbaAEhA1eDj8emJyLm/l+75eJnXDfnJnk4Fi/x9i3spJhjstc/8B5dV59E5nR
Pek2YEw4dZ2T2BoB7LrTTlyPuWu6lkbxv6iNbXnQABajNR4q2rW7t6L186zqdrPk
RmecplBwzt7RM8/EWix/+Fn2Ma/3IFzkeBQxQXvh6PzZTTE7tbfbTn5cef9tbxCm
phaUqFRg1w7ZAPy6QP8MW5zRy7+2BM5d9ovO4EMwM+HkTBncHerep+7Q6ozhGSff
RUuar4FYk6Hz2srEOfG7SR24iKT+X1chvpZtyT0mvKzWbtAPb2tAlVu87DGoS2rX
8HNo5JYWxaR8kA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 08:00:52 2025 by rpki-client