Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
File:                     MIfS4cwIqVF0v3lOLy3m49A--Co.mft (raw, json)
Hash identifier:          bAruUpueufUGntHonaAmQUhVinfrQxg+JbcK+3B2CgA=
Subject key identifier:   F6:D4:4F:D9:67:40:A1:02:EC:78:D4:BB:4B:00:54:B2:8B:C1:66:2D
Authority key identifier: 30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A
Certificate issuer:       /CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a
Certificate serial:       019873744F22D5B97043C84558BF78DA133B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
Manifest number:          117E
Signing time:             Mon 04 Aug 2025 05:00:58 +0000
Manifest this update:     Mon 04 Aug 2025 05:00:58 +0000
Manifest next update:     Tue 05 Aug 2025 05:00:58 +0000
Files and hashes:         1: MIfS4cwIqVF0v3lOLy3m49A--Co.crl (hash: oVdxTxicE82PM5OMtwHET8aoVppIZOoNbsMqxqnX7AE=)
                          2: rER2RyM9WMWv62airMbML41Jj_A.roa (hash: Vq04pvE8uFONGjHiSeRfJcN2ONH656v/BmVYpoQ3tn8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 05:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:74:4f:22:d5:b9:70:43:c8:45:58:bf:78:da:13:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a
        Validity
            Not Before: Aug  4 05:00:58 2025 GMT
            Not After : Aug  5 05:00:58 2025 GMT
        Subject: CN=f6d44fd96740a102ec78d4bb4b0054b28bc1662d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1a:74:22:b5:c3:72:51:d1:30:7c:63:6d:23:
                    48:ca:5e:2b:88:79:b1:c7:09:58:f8:1a:ff:39:78:
                    3a:22:12:8c:de:42:bf:0c:7d:64:03:6a:31:6a:c0:
                    67:d0:55:f2:f9:b8:bd:8d:8f:05:61:22:4a:ed:5a:
                    1e:a2:ee:b7:08:82:bf:8a:66:9e:e5:75:99:5e:3c:
                    90:ab:a6:40:56:35:c3:58:a8:66:3b:6c:f3:dd:37:
                    b0:92:cc:68:2e:a9:3c:5a:c9:d3:4e:4a:9b:2a:1f:
                    83:84:0d:cd:68:0e:39:27:c6:73:6a:57:b9:f3:c7:
                    55:79:23:78:b7:dd:9a:8e:9c:3b:8f:c2:7f:eb:5b:
                    29:f5:f8:a3:ed:2d:24:e3:ce:6f:88:fb:b3:02:11:
                    29:4e:83:63:63:36:68:72:80:d8:b2:12:3a:c5:2f:
                    df:06:0d:5f:11:28:04:41:b5:f4:2a:32:5a:30:a0:
                    4b:c1:80:03:63:01:6e:de:ac:3b:4c:5f:eb:bf:3b:
                    00:96:ec:4a:5b:23:7f:ef:61:d0:d7:5b:0c:cc:f3:
                    06:fa:97:d5:55:fe:0b:1a:86:b3:2e:7f:43:0c:73:
                    0c:d6:84:88:02:7d:ea:c7:e3:ce:00:93:7c:92:47:
                    5c:a3:31:f6:ce:ca:39:c9:96:b7:ed:61:e5:99:ca:
                    66:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D4:4F:D9:67:40:A1:02:EC:78:D4:BB:4B:00:54:B2:8B:C1:66:2D
            X509v3 Authority Key Identifier:
                keyid:30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:9e:5a:8f:79:2c:cc:89:e7:56:27:e5:fa:4f:3c:27:ef:59:
         3b:01:53:30:14:52:8f:a1:05:7e:97:2e:6a:38:b4:d3:ab:91:
         b5:d7:ac:0a:b5:45:01:b4:66:de:3e:6a:a1:af:e7:6f:6d:da:
         e4:e9:bb:a4:d9:4b:a1:38:12:a2:e9:20:39:6b:13:f9:29:5e:
         ba:37:a4:e9:d1:d5:6c:a3:a5:04:b0:6e:46:00:55:79:c6:1f:
         5b:88:6a:34:4b:36:44:aa:8f:69:3a:24:9f:12:f5:c3:ae:4a:
         d2:3e:4f:69:16:9c:53:c2:89:d9:89:4a:ae:5e:e4:df:0d:41:
         35:f8:38:aa:1b:d6:19:90:32:a7:68:69:a7:4b:9a:be:7b:41:
         50:62:b4:68:69:94:5b:8b:70:6c:24:8b:15:b4:dd:1a:61:98:
         35:00:fc:58:24:7d:5f:6b:93:71:cb:05:5b:42:23:16:31:8a:
         8a:9e:f6:73:0b:7a:c1:31:f8:70:8c:f5:d3:cf:e0:35:af:4c:
         ed:5b:c7:02:24:4e:fd:91:b8:ff:22:f0:70:bb:96:11:4f:84:
         57:ba:7d:23:a0:2a:9a:bb:2d:4d:e9:69:ba:b7:9f:e5:f7:3b:
         3f:72:ec:95:24:91:37:f5:9f:02:d8:2f:27:5b:bb:f9:62:28:
         f8:b9:c0:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzdE8i1blwQ8hFWL942hM7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwODdkMmUxY2MwOGE5NTE3NGJmNzk0ZTJmMmRlNmUzZDAz
ZWY4MmEwHhcNMjUwODA0MDUwMDU4WhcNMjUwODA1MDUwMDU4WjAzMTEwLwYDVQQD
EyhmNmQ0NGZkOTY3NDBhMTAyZWM3OGQ0YmI0YjAwNTRiMjhiYzE2NjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBp0IrXDclHRMHxjbSNIyl4riHmx
xwlY+Br/OXg6IhKM3kK/DH1kA2oxasBn0FXy+bi9jY8FYSJK7Voeou63CIK/imae
5XWZXjyQq6ZAVjXDWKhmO2zz3TewksxoLqk8WsnTTkqbKh+DhA3NaA45J8Zzale5
88dVeSN4t92ajpw7j8J/61sp9fij7S0k485viPuzAhEpToNjYzZocoDYshI6xS/f
Bg1fESgEQbX0KjJaMKBLwYADYwFu3qw7TF/rvzsAluxKWyN/72HQ11sMzPMG+pfV
Vf4LGoazLn9DDHMM1oSIAn3qx+POAJN8kkdcozH2zso5yZa37WHlmcpmFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPbUT9lnQKEC7HjUu0sAVLKLwWYtMB8GA1UdIwQY
MBaAFDCH0uHMCKlRdL95Ti8t5uPQPvgqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUlmUzRjd0lxVkYwdjNsT0x5M200OUEtLUNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xYmE5YTYtZjYxNi00ZTc0LTk2N2Qt
N2U3MTkwZmZjNGM5LzEvTUlmUzRjd0lxVkYwdjNsT0x5M200OUEtLUNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8xYmE5YTYtZjYxNi00ZTc0LTk2N2QtN2U3MTkwZmZjNGM5
LzEvTUlmUzRjd0lxVkYwdjNsT0x5M200OUEtLUNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVp5aj3ks
zInnVifl+k88J+9ZOwFTMBRSj6EFfpcuaji006uRtdesCrVFAbRm3j5qoa/nb23a
5Om7pNlLoTgSoukgOWsT+Sleujek6dHVbKOlBLBuRgBVecYfW4hqNEs2RKqPaTok
nxL1w65K0j5PaRacU8KJ2YlKrl7k3w1BNfg4qhvWGZAyp2hpp0uavntBUGK0aGmU
W4twbCSLFbTdGmGYNQD8WCR9X2uTccsFW0IjFjGKip72cwt6wTH4cIz108/gNa9M
7VvHAiRO/ZG4/yLwcLuWEU+EV7p9I6AqmrstTelpuref5fc7P3LslSSRN/WfAtgv
J1u7+WIo+LnAbA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:38:33 2025 by rpki-client