Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.mft
File:                     _z73u2pGuvTbG6633ySkDB1MFU8.mft (raw, json)
Hash identifier:          IQa4oaKKWal2CebN4MXo2dHYmNFUmb/Vd/csVoJXUy8=
Subject key identifier:   AC:BF:4B:E5:71:79:31:A6:E2:F0:D7:71:46:C4:B2:F7:1C:02:C4:73
Authority key identifier: FF:3E:F7:BB:6A:46:BA:F4:DB:1B:AE:B7:DF:24:A4:0C:1D:4C:15:4F
Certificate issuer:       /CN=ff3ef7bb6a46baf4db1baeb7df24a40c1d4c154f
Certificate serial:       01988920AF69B13AE0B8EB0F9504D299BEAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_z73u2pGuvTbG6633ySkDB1MFU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.mft
Manifest number:          02CF
Signing time:             Fri 08 Aug 2025 10:01:17 +0000
Manifest this update:     Fri 08 Aug 2025 10:01:17 +0000
Manifest next update:     Sat 09 Aug 2025 10:01:17 +0000
Files and hashes:         1: CyralhGuX94DIISxgcLaFGkuwEE.roa (hash: jbaQiBUIOwYyUUxeUd5k0D2sxSHilcS8Ozj2S6lNjj0=)
                          2: _z73u2pGuvTbG6633ySkDB1MFU8.crl (hash: ge37a/yE5ofS7sj7R5LkjKHuRqPfoXNxOvnSEOcgL6c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_z73u2pGuvTbG6633ySkDB1MFU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 10:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:89:20:af:69:b1:3a:e0:b8:eb:0f:95:04:d2:99:be:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff3ef7bb6a46baf4db1baeb7df24a40c1d4c154f
        Validity
            Not Before: Aug  8 10:01:17 2025 GMT
            Not After : Aug  9 10:01:17 2025 GMT
        Subject: CN=acbf4be5717931a6e2f0d77146c4b2f71c02c473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b3:46:dd:9b:16:98:8c:8c:d9:4f:5d:90:5b:
                    ff:2a:84:b3:05:26:d6:a8:cf:dc:6d:25:c6:aa:2d:
                    4b:97:40:5d:ea:ec:d7:b8:f2:9a:5a:e8:7c:6e:b7:
                    3b:56:e0:c8:a1:5d:ed:d1:80:60:46:72:8d:a6:5c:
                    9f:3c:9f:74:c9:db:03:b3:38:a2:50:42:85:ca:88:
                    50:6f:45:59:91:8c:d7:50:33:e5:4d:d3:6e:8f:20:
                    66:5d:15:91:ff:72:70:96:69:2e:94:fd:1f:dc:45:
                    d6:5f:05:0d:6b:ec:a8:ad:d5:1f:81:59:6a:38:8f:
                    3b:23:4e:c0:c7:8d:c6:a6:7e:cc:85:4c:e1:3d:96:
                    bf:8c:13:dd:4b:d4:1b:b5:0e:f1:2d:af:3b:92:f6:
                    73:42:72:f0:5c:7c:c0:5d:65:00:0b:1f:27:80:e4:
                    b5:39:39:e5:b5:61:f0:c3:7b:2f:9c:92:1c:48:19:
                    90:0e:bd:71:b7:ec:03:36:df:3e:5f:26:84:46:d0:
                    bf:d9:0a:22:be:23:3d:88:dd:6c:d9:55:bc:7c:59:
                    ce:6a:b2:e4:f1:67:2b:2d:11:a8:47:3e:43:74:b6:
                    45:91:ee:82:05:15:aa:4b:bd:3b:e7:ba:4e:fa:3b:
                    70:25:87:30:34:7a:b8:0a:97:56:8c:5e:5c:44:46:
                    53:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:BF:4B:E5:71:79:31:A6:E2:F0:D7:71:46:C4:B2:F7:1C:02:C4:73
            X509v3 Authority Key Identifier:
                keyid:FF:3E:F7:BB:6A:46:BA:F4:DB:1B:AE:B7:DF:24:A4:0C:1D:4C:15:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z73u2pGuvTbG6633ySkDB1MFU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:5f:1d:30:0a:ab:e2:5c:7d:26:ac:bf:71:9c:1d:e2:cf:dd:
         fa:3e:a2:47:ea:7c:bb:77:a4:83:90:6f:5d:70:e1:4e:63:f6:
         9f:f8:41:3e:7e:c5:50:c7:6a:c1:df:74:07:f3:95:02:e6:1d:
         5b:c2:c9:17:85:b7:d5:8c:3f:19:d1:ce:4e:56:90:1f:48:0e:
         db:a6:71:05:58:ea:ac:5d:76:45:a5:34:3a:d2:54:6e:36:9f:
         50:70:1a:2f:b3:b1:e6:5e:d7:8c:10:ad:90:1d:60:55:90:58:
         e2:85:94:1c:15:0c:6b:78:1c:6a:9a:a0:51:cb:01:05:0c:a8:
         a6:32:f4:0c:c3:63:58:42:a3:a0:d3:c4:8a:fe:8f:fc:f1:d1:
         e3:30:11:25:44:8e:78:ef:2f:8d:27:e7:82:f5:51:b7:e2:30:
         11:ab:6c:5b:e6:23:b1:42:0b:fd:bf:ed:e9:ae:f3:34:30:2e:
         89:c1:0f:31:fa:dc:32:f8:b7:79:5d:63:a8:25:4f:dc:5c:74:
         61:e8:23:d6:a5:70:76:49:a1:69:00:16:b6:5c:a2:aa:ae:10:
         8d:11:7d:6c:87:ef:f1:53:57:1d:eb:eb:73:c1:ab:d1:98:9d:
         cf:8c:43:ed:d1:4b:6b:ed:f3:5a:24:c7:c5:aa:f5:07:82:ac:
         34:a2:96:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiJIK9psTrguOsPlQTSmb6vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmM2VmN2JiNmE0NmJhZjRkYjFiYWViN2RmMjRhNDBjMWQ0
YzE1NGYwHhcNMjUwODA4MTAwMTE3WhcNMjUwODA5MTAwMTE3WjAzMTEwLwYDVQQD
EyhhY2JmNGJlNTcxNzkzMWE2ZTJmMGQ3NzE0NmM0YjJmNzFjMDJjNDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7NG3ZsWmIyM2U9dkFv/KoSzBSbW
qM/cbSXGqi1Ll0Bd6uzXuPKaWuh8brc7VuDIoV3t0YBgRnKNplyfPJ90ydsDszii
UEKFyohQb0VZkYzXUDPlTdNujyBmXRWR/3JwlmkulP0f3EXWXwUNa+yordUfgVlq
OI87I07Ax43Gpn7MhUzhPZa/jBPdS9QbtQ7xLa87kvZzQnLwXHzAXWUACx8ngOS1
OTnltWHww3svnJIcSBmQDr1xt+wDNt8+XyaERtC/2QoiviM9iN1s2VW8fFnOarLk
8WcrLRGoRz5DdLZFke6CBRWqS70757pO+jtwJYcwNHq4CpdWjF5cREZTYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKy/S+VxeTGm4vDXcUbEsvccAsRzMB8GA1UdIwQY
MBaAFP8+97tqRrr02xuut98kpAwdTBVPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3o3M3UycEd1dlRiRzY2MzN5U2tEQjFNRlU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi82ODcxYTAtYWZiMi00NWFiLWFkZGUt
NjJiZTFmMDJhYjBjLzEvX3o3M3UycEd1dlRiRzY2MzN5U2tEQjFNRlU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi82ODcxYTAtYWZiMi00NWFiLWFkZGUtNjJiZTFmMDJhYjBj
LzEvX3o3M3UycEd1dlRiRzY2MzN5U2tEQjFNRlU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfl8dMAqr
4lx9Jqy/cZwd4s/d+j6iR+p8u3ekg5BvXXDhTmP2n/hBPn7FUMdqwd90B/OVAuYd
W8LJF4W31Yw/GdHOTlaQH0gO26ZxBVjqrF12RaU0OtJUbjafUHAaL7Ox5l7XjBCt
kB1gVZBY4oWUHBUMa3gcapqgUcsBBQyopjL0DMNjWEKjoNPEiv6P/PHR4zARJUSO
eO8vjSfngvVRt+IwEatsW+YjsUIL/b/t6a7zNDAuicEPMfrcMvi3eV1jqCVP3Fx0
Yegj1qVwdkmhaQAWtlyiqq4QjRF9bIfv8VNXHevrc8Gr0Zidz4xD7dFLa+3zWiTH
xar1B4KsNKKWDA==
-----END CERTIFICATE-----
Generated at Fri Aug 8 12:48:28 2025 by rpki-client