Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/pUiu2QpeI7SnNpVgjztleL_exhU.mft
File:                     pUiu2QpeI7SnNpVgjztleL_exhU.mft (raw, json)
Hash identifier:          oOtfHLWM4EZQHldgVWIL695JyPlBoXp5IukSKL93BUA=
Subject key identifier:   A4:DC:EF:1E:5B:63:58:AF:6B:72:2B:20:9B:B2:62:DD:FE:F5:0B:7A
Authority key identifier: A5:48:AE:D9:0A:5E:23:B4:A7:36:95:60:8F:3B:65:78:BF:DE:C6:15
Certificate issuer:       /CN=a548aed90a5e23b4a73695608f3b6578bfdec615
Certificate serial:       01987DF879E1D55DD31268CEEA4CFD5E0D05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pUiu2QpeI7SnNpVgjztleL_exhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/pUiu2QpeI7SnNpVgjztleL_exhU.mft
Manifest number:          0EE3
Signing time:             Wed 06 Aug 2025 06:01:32 +0000
Manifest this update:     Wed 06 Aug 2025 06:01:32 +0000
Manifest next update:     Thu 07 Aug 2025 06:01:32 +0000
Files and hashes:         1: O4HPjKtfYNvc1lksPI1mIC2KoZE.roa (hash: G5jnz6Oa7fbgHp+PjYrqWRfRXq38tvNWQ9FfwitWKvo=)
                          2: pUiu2QpeI7SnNpVgjztleL_exhU.crl (hash: hpnV0Xs8Kr5NktCcXUIzHNCbrW9cjNMyDXaLT5Oqqa4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/pUiu2QpeI7SnNpVgjztleL_exhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/pUiu2QpeI7SnNpVgjztleL_exhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pUiu2QpeI7SnNpVgjztleL_exhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 06:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:f8:79:e1:d5:5d:d3:12:68:ce:ea:4c:fd:5e:0d:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a548aed90a5e23b4a73695608f3b6578bfdec615
        Validity
            Not Before: Aug  6 06:01:32 2025 GMT
            Not After : Aug  7 06:01:32 2025 GMT
        Subject: CN=a4dcef1e5b6358af6b722b209bb262ddfef50b7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e6:62:86:29:42:fa:72:8f:45:cc:de:42:90:
                    d0:85:17:03:a9:c8:0a:75:d0:11:86:27:f7:dd:4c:
                    bb:3c:62:f1:2e:1d:3f:a2:28:0a:46:40:e7:1f:e9:
                    fc:25:73:99:02:13:4a:b0:6a:24:57:e1:f7:c9:17:
                    e6:ef:e6:1b:9b:20:17:78:fa:09:16:b7:22:23:5b:
                    46:86:e7:27:77:4a:1d:d8:da:51:a4:8f:c9:d7:18:
                    0d:a7:d5:38:61:c9:67:67:f4:0c:e8:f0:a6:2d:38:
                    31:cd:57:8b:85:1e:46:61:b5:d4:2b:23:49:98:fc:
                    45:5d:29:d9:10:bf:a7:5f:e2:65:1e:ee:00:9e:14:
                    f0:fa:6e:4e:2c:f8:be:60:31:d0:c9:a6:31:d4:d1:
                    f5:95:cb:e0:fa:77:e7:e2:0b:f1:0d:29:b4:b8:48:
                    45:53:8d:63:74:4b:55:6c:e3:40:a6:ca:9b:91:83:
                    58:f3:c4:f1:c6:48:a5:25:f4:0f:7c:34:e2:df:1f:
                    04:e7:e1:14:82:4a:b5:98:8b:81:e3:c2:3b:52:71:
                    a0:70:5f:bc:96:80:2b:13:d4:1a:3a:c1:7c:da:36:
                    9e:54:5c:28:2d:33:ad:d8:c2:11:d8:da:35:ef:18:
                    fc:0a:e5:0e:fa:02:f1:6c:6b:a7:9b:6d:eb:54:05:
                    d6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:DC:EF:1E:5B:63:58:AF:6B:72:2B:20:9B:B2:62:DD:FE:F5:0B:7A
            X509v3 Authority Key Identifier:
                keyid:A5:48:AE:D9:0A:5E:23:B4:A7:36:95:60:8F:3B:65:78:BF:DE:C6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUiu2QpeI7SnNpVgjztleL_exhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/pUiu2QpeI7SnNpVgjztleL_exhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/pUiu2QpeI7SnNpVgjztleL_exhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:c9:45:f2:72:39:33:46:30:13:37:7a:68:38:13:52:48:af:
         50:04:22:94:8b:19:5f:d1:34:90:cf:1d:8b:ae:2f:28:38:4c:
         b8:81:a3:89:ea:84:ef:bd:19:41:21:d1:89:b1:39:c2:a3:9b:
         0d:7f:6b:d8:1c:24:de:85:bb:90:60:f1:06:43:e4:99:f4:e2:
         1d:fd:dc:be:15:46:54:33:85:55:72:c8:5f:42:8b:15:46:a9:
         60:06:4e:29:d4:46:02:98:0a:05:cb:e3:e8:b0:f7:1f:f1:5a:
         21:af:d8:15:35:fb:95:6e:40:c1:62:8f:db:67:7b:d0:fa:d2:
         d9:e8:79:c0:d5:00:26:e3:17:f6:00:07:45:39:b7:56:25:1d:
         47:c5:5c:b3:b3:ee:58:38:09:3e:0f:e9:45:ba:13:c6:4f:f7:
         cb:9f:5f:de:6f:08:a1:a0:d6:98:93:8f:5e:47:38:78:f0:ce:
         48:7d:bb:9c:92:27:8c:0c:5f:60:2c:8b:35:5a:77:93:d4:70:
         99:61:3a:7b:db:87:11:e6:1e:2c:e6:c0:08:30:d0:3d:7c:6f:
         17:95:aa:87:b1:f4:da:24:d0:cb:31:af:ab:8e:b0:8c:39:89:
         37:b1:62:9b:80:cf:e1:00:23:3f:90:15:6e:10:38:15:3c:ab:
         dc:a0:76:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9+Hnh1V3TEmjO6kz9Xg0FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NDhhZWQ5MGE1ZTIzYjRhNzM2OTU2MDhmM2I2NTc4YmZk
ZWM2MTUwHhcNMjUwODA2MDYwMTMyWhcNMjUwODA3MDYwMTMyWjAzMTEwLwYDVQQD
EyhhNGRjZWYxZTViNjM1OGFmNmI3MjJiMjA5YmIyNjJkZGZlZjUwYjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOZihilC+nKPRczeQpDQhRcDqcgK
ddARhif33Uy7PGLxLh0/oigKRkDnH+n8JXOZAhNKsGokV+H3yRfm7+YbmyAXePoJ
FrciI1tGhucnd0od2NpRpI/J1xgNp9U4YclnZ/QM6PCmLTgxzVeLhR5GYbXUKyNJ
mPxFXSnZEL+nX+JlHu4AnhTw+m5OLPi+YDHQyaYx1NH1lcvg+nfn4gvxDSm0uEhF
U41jdEtVbONApsqbkYNY88TxxkilJfQPfDTi3x8E5+EUgkq1mIuB48I7UnGgcF+8
loArE9QaOsF82jaeVFwoLTOt2MIR2No17xj8CuUO+gLxbGunm23rVAXWGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTc7x5bY1iva3IrIJuyYt3+9Qt6MB8GA1UdIwQY
MBaAFKVIrtkKXiO0pzaVYI87ZXi/3sYVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFVpdTJRcGVJN1NuTnBWZ2p6dGxlTF9leGhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83NDY2YzItNTZkNC00OTRhLWIyNjct
NTQ2M2I3MWUyNmRlLzEvcFVpdTJRcGVJN1NuTnBWZ2p6dGxlTF9leGhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83NDY2YzItNTZkNC00OTRhLWIyNjctNTQ2M2I3MWUyNmRl
LzEvcFVpdTJRcGVJN1NuTnBWZ2p6dGxlTF9leGhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACslF8nI5
M0YwEzd6aDgTUkivUAQilIsZX9E0kM8di64vKDhMuIGjieqE770ZQSHRibE5wqOb
DX9r2Bwk3oW7kGDxBkPkmfTiHf3cvhVGVDOFVXLIX0KLFUapYAZOKdRGApgKBcvj
6LD3H/FaIa/YFTX7lW5AwWKP22d70PrS2eh5wNUAJuMX9gAHRTm3ViUdR8Vcs7Pu
WDgJPg/pRboTxk/3y59f3m8IoaDWmJOPXkc4ePDOSH27nJInjAxfYCyLNVp3k9Rw
mWE6e9uHEeYeLObACDDQPXxvF5Wqh7H02iTQyzGvq46wjDmJN7Fim4DP4QAjP5AV
bhA4FTyr3KB2BQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:16:53 2025 by rpki-client