Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
File:                     24gOLcNLroD0K7HjhFf-GXqH1LM.mft (raw, json)
Hash identifier:          JWM81vLkBnTOfB4uwiWbhW2WgpVjcZ6/UTxrf3TTDXI=
Subject key identifier:   FE:9E:6F:6E:7D:9F:46:FE:27:0B:06:99:C1:AD:00:13:A9:99:0E:0F
Authority key identifier: DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
Certificate issuer:       /CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Certificate serial:       01988CFE23B8E64ED58A3DB69726041A929F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
Manifest number:          1554
Signing time:             Sat 09 Aug 2025 04:02:02 +0000
Manifest this update:     Sat 09 Aug 2025 04:02:02 +0000
Manifest next update:     Sun 10 Aug 2025 04:02:02 +0000
Files and hashes:         1: 24gOLcNLroD0K7HjhFf-GXqH1LM.crl (hash: 7M65aV8EG6VcQebkFzu2nxI3hTb4htDoy7sPTA/1Wo8=)
                          2: 4PwJxAwKax5Reljdgs0YL3qX31Q.roa (hash: UYp5AvhZKwwfeYa3iRTnePJRJNovfCx7buPjdCyUR7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 04:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8c:fe:23:b8:e6:4e:d5:8a:3d:b6:97:26:04:1a:92:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
        Validity
            Not Before: Aug  9 04:02:02 2025 GMT
            Not After : Aug 10 04:02:02 2025 GMT
        Subject: CN=fe9e6f6e7d9f46fe270b0699c1ad0013a9990e0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d3:61:b4:27:05:43:de:d6:5d:89:34:0c:49:
                    cc:7e:64:97:47:35:91:3d:09:58:6d:28:31:19:74:
                    51:24:4d:3c:7d:c1:46:5a:da:7d:6a:1c:87:91:29:
                    cb:bd:93:aa:96:b5:cd:15:09:dc:b3:94:78:9b:34:
                    93:3f:94:c5:45:c9:d6:54:3c:1e:c0:b5:ea:1b:5d:
                    46:56:57:1f:6f:14:7b:07:9f:be:fe:f3:49:9b:75:
                    b5:66:5d:55:36:96:62:8e:fe:58:f1:6d:ee:00:10:
                    5d:b9:67:af:03:78:1d:8d:eb:dd:86:55:78:c9:3b:
                    4e:56:19:fc:3f:f4:9d:1e:8b:d0:21:65:e7:99:ba:
                    92:15:ff:73:d2:7d:2f:fc:f2:90:f4:4a:82:a9:80:
                    1a:8a:d1:12:97:d0:58:4e:28:c9:d9:f3:56:78:a4:
                    c4:d5:51:25:d3:08:fc:1a:53:e9:ef:20:0d:47:6b:
                    03:1e:7c:10:e4:39:6c:af:ad:44:d8:eb:21:b7:d2:
                    1d:48:ff:9b:97:a7:30:0f:8f:db:fb:30:09:29:37:
                    be:ba:22:af:61:bb:02:30:44:15:96:58:0c:3f:80:
                    54:49:3b:25:3d:28:4e:42:9b:1b:6c:45:8c:51:8f:
                    e1:ce:5e:78:a4:d1:6c:19:74:2c:2f:f4:22:c0:d2:
                    22:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:9E:6F:6E:7D:9F:46:FE:27:0B:06:99:C1:AD:00:13:A9:99:0E:0F
            X509v3 Authority Key Identifier:
                keyid:DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:6e:23:af:17:80:79:26:66:73:d0:ec:b1:d8:fc:ad:c2:12:
         81:ca:52:a5:c5:c7:27:b3:6e:9e:3e:83:24:fc:98:1f:8b:d9:
         ac:33:c9:dc:36:86:83:a9:e6:38:a2:7a:9c:83:7b:ef:78:bf:
         eb:cf:a1:42:64:08:8d:43:a1:db:3a:b3:53:e3:0e:2f:2d:f8:
         be:21:8c:26:ab:f2:68:0a:65:53:02:b0:8f:d1:ad:58:93:ab:
         d5:b4:07:f2:93:e3:eb:ed:14:d9:cc:42:c0:7c:9e:54:86:a7:
         82:eb:74:0f:b6:09:1b:39:7b:9d:dd:d6:24:54:40:1f:6e:f7:
         73:a6:43:d5:0b:e5:5e:da:75:d4:ff:9d:a9:ef:6c:a1:4f:12:
         34:78:c1:a6:8c:14:98:c2:48:8a:ce:ea:e7:e1:5c:1b:7d:be:
         59:dd:ea:e2:2c:59:11:ee:51:8d:fc:c3:7a:1f:9a:04:f2:c1:
         5e:ac:1f:43:02:a2:81:e8:0e:10:6d:67:7c:57:0a:03:1a:5d:
         8f:8d:3f:73:9f:f1:5a:b8:20:cc:69:6c:33:69:c0:3f:e8:d8:
         14:fe:13:da:4d:9c:14:b9:47:be:f4:a9:86:da:57:88:d0:d3:
         66:06:9a:e9:bf:fd:52:6f:11:70:0b:62:9d:fd:14:11:98:32:
         76:01:3f:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiM/iO45k7Vij22lyYEGpKfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiODgwZTJkYzM0YmFlODBmNDJiYjFlMzg0NTdmZTE5N2E4
N2Q0YjMwHhcNMjUwODA5MDQwMjAyWhcNMjUwODEwMDQwMjAyWjAzMTEwLwYDVQQD
EyhmZTllNmY2ZTdkOWY0NmZlMjcwYjA2OTljMWFkMDAxM2E5OTkwZTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNNhtCcFQ97WXYk0DEnMfmSXRzWR
PQlYbSgxGXRRJE08fcFGWtp9ahyHkSnLvZOqlrXNFQncs5R4mzSTP5TFRcnWVDwe
wLXqG11GVlcfbxR7B5++/vNJm3W1Zl1VNpZijv5Y8W3uABBduWevA3gdjevdhlV4
yTtOVhn8P/SdHovQIWXnmbqSFf9z0n0v/PKQ9EqCqYAaitESl9BYTijJ2fNWeKTE
1VEl0wj8GlPp7yANR2sDHnwQ5Dlsr61E2Osht9IdSP+bl6cwD4/b+zAJKTe+uiKv
YbsCMEQVllgMP4BUSTslPShOQpsbbEWMUY/hzl54pNFsGXQsL/QiwNIi6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6eb259n0b+JwsGmcGtABOpmQ4PMB8GA1UdIwQY
MBaAFNuIDi3DS66A9Cux44RX/hl6h9SzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjRnT0xjTkxyb0QwSzdIamhGZi1HWHFIMUxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80MWE1MWQtNDI2OS00MWEwLTkyZGYt
NGQyOWE1ZTI5ODVkLzEvMjRnT0xjTkxyb0QwSzdIamhGZi1HWHFIMUxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS80MWE1MWQtNDI2OS00MWEwLTkyZGYtNGQyOWE1ZTI5ODVk
LzEvMjRnT0xjTkxyb0QwSzdIamhGZi1HWHFIMUxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANW4jrxeA
eSZmc9Dssdj8rcISgcpSpcXHJ7Nunj6DJPyYH4vZrDPJ3DaGg6nmOKJ6nIN773i/
68+hQmQIjUOh2zqzU+MOLy34viGMJqvyaAplUwKwj9GtWJOr1bQH8pPj6+0U2cxC
wHyeVIangut0D7YJGzl7nd3WJFRAH273c6ZD1QvlXtp11P+dqe9soU8SNHjBpowU
mMJIis7q5+FcG32+Wd3q4ixZEe5RjfzDeh+aBPLBXqwfQwKigegOEG1nfFcKAxpd
j40/c5/xWrggzGlsM2nAP+jYFP4T2k2cFLlHvvSphtpXiNDTZgaa6b/9Um8RcAti
nf0UEZgydgE/xA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:32:15 2025 by rpki-client