Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
File:                     fUd7pApydSv1DkLAADdl5NdHPkY.mft (raw, json)
Hash identifier:          NSczx9Xtezn/r+bHEEfPxt7lPIvtZ6PdBqCYyTDgdjY=
Subject key identifier:   3C:90:80:84:B8:F9:65:6E:F6:BB:B0:F5:83:F1:CB:B9:3E:C5:7E:2C
Authority key identifier: 7D:47:7B:A4:0A:72:75:2B:F5:0E:42:C0:00:37:65:E4:D7:47:3E:46
Certificate issuer:       /CN=7d477ba40a72752bf50e42c0003765e4d7473e46
Certificate serial:       01987B9C7E60A5440C4E1941353BB072F373
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
Manifest number:          161B
Signing time:             Tue 05 Aug 2025 19:01:50 +0000
Manifest this update:     Tue 05 Aug 2025 19:01:50 +0000
Manifest next update:     Wed 06 Aug 2025 19:01:50 +0000
Files and hashes:         1: fUd7pApydSv1DkLAADdl5NdHPkY.crl (hash: YrGPG75qDX3CIPtrfYm8hNlVxGAwY1JnCFD6nHl46LU=)
                          2: txL1fO8y0T0j5IS_C5y7fOIOxHU.roa (hash: kwDxX3obWOhODfrryMMC7f740mdS1jAQgVwH1EYVsHU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 19:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:9c:7e:60:a5:44:0c:4e:19:41:35:3b:b0:72:f3:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d477ba40a72752bf50e42c0003765e4d7473e46
        Validity
            Not Before: Aug  5 19:01:50 2025 GMT
            Not After : Aug  6 19:01:50 2025 GMT
        Subject: CN=3c908084b8f9656ef6bbb0f583f1cbb93ec57e2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:01:d7:5d:30:8b:4e:dc:b4:a4:ec:8b:bd:a2:
                    7b:6d:47:39:c2:60:0d:dc:d0:f0:86:43:75:ec:56:
                    d4:b5:0f:9d:d3:49:ff:cb:f5:21:22:79:8b:0f:21:
                    b1:4a:5e:22:ce:13:be:54:e5:c9:a3:32:c7:89:23:
                    e2:68:a8:a5:d1:ed:53:ba:48:95:46:54:4b:dc:02:
                    0f:83:1f:37:60:df:af:aa:f9:e2:16:ad:b0:61:8a:
                    4d:90:6b:c5:37:51:3a:2d:f4:c7:1e:c6:dd:f3:9f:
                    0c:15:d3:f4:85:b4:b3:76:97:a7:60:2e:5a:a0:05:
                    3b:d5:32:12:c5:fb:e8:09:05:40:14:05:9e:4b:2f:
                    46:54:fa:c0:75:dd:40:77:65:97:12:52:35:0b:56:
                    9d:d7:f9:11:22:e0:d1:f2:4b:fb:48:8e:15:75:9f:
                    0b:ae:71:d4:ad:8c:7d:2a:53:3e:49:cc:f8:b0:82:
                    ca:b0:26:29:42:f2:a8:8f:48:47:e5:02:e9:f1:50:
                    c6:c3:e1:da:f0:45:57:b6:67:10:cb:c2:2a:ef:fa:
                    7b:6f:02:bc:62:b9:cd:38:5d:71:5c:83:5c:81:fd:
                    7d:41:29:57:7c:0d:12:13:27:b3:47:2e:f0:5e:65:
                    18:73:a3:e1:f9:a5:ba:0c:10:2b:32:9b:64:32:ab:
                    89:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:90:80:84:B8:F9:65:6E:F6:BB:B0:F5:83:F1:CB:B9:3E:C5:7E:2C
            X509v3 Authority Key Identifier:
                keyid:7D:47:7B:A4:0A:72:75:2B:F5:0E:42:C0:00:37:65:E4:D7:47:3E:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:dc:44:27:ee:c2:14:b0:63:57:d3:32:34:36:f5:99:86:ba:
         73:b9:ff:fa:48:1d:f9:a8:5b:23:02:ed:69:a4:85:6a:2c:ec:
         71:32:9e:61:38:cb:7c:fe:b2:65:f1:0d:89:ee:35:c2:3d:cd:
         f3:5c:f3:df:fa:4f:6b:62:9c:61:37:6f:f5:a0:f9:ce:f7:24:
         84:9d:48:81:de:87:d7:4d:20:a2:a3:21:66:1f:18:96:2e:c6:
         93:a5:26:30:61:d5:0b:d8:af:2c:34:f1:ea:a7:78:aa:6c:45:
         44:14:fe:f3:c5:30:ae:8e:51:c7:2b:de:c4:29:50:b2:ca:ef:
         15:63:46:f8:8c:f7:aa:af:70:5d:42:61:82:6f:fc:6a:b9:3d:
         a1:18:30:40:71:c4:7a:9b:cd:99:79:78:a8:9c:70:9c:db:af:
         6d:7c:7b:45:93:cd:b1:8d:e9:73:6a:da:4f:03:89:68:56:8f:
         0c:3f:25:f4:a8:26:bd:39:0a:ea:a0:5d:ce:68:fe:db:54:ea:
         d5:46:61:8d:3a:76:26:b0:46:8c:4d:33:c8:73:f6:9f:b5:67:
         e2:0d:32:be:e5:00:cd:85:46:72:8a:4a:5b:fa:d8:32:9f:c2:
         84:b9:81:cf:8f:fa:0a:19:68:b9:dd:fe:80:7c:f0:f1:31:6b:
         65:66:cc:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh7nH5gpUQMThlBNTuwcvNzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNDc3YmE0MGE3Mjc1MmJmNTBlNDJjMDAwMzc2NWU0ZDc0
NzNlNDYwHhcNMjUwODA1MTkwMTUwWhcNMjUwODA2MTkwMTUwWjAzMTEwLwYDVQQD
EygzYzkwODA4NGI4Zjk2NTZlZjZiYmIwZjU4M2YxY2JiOTNlYzU3ZTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAHXXTCLTty0pOyLvaJ7bUc5wmAN
3NDwhkN17FbUtQ+d00n/y/UhInmLDyGxSl4izhO+VOXJozLHiSPiaKil0e1TukiV
RlRL3AIPgx83YN+vqvniFq2wYYpNkGvFN1E6LfTHHsbd858MFdP0hbSzdpenYC5a
oAU71TISxfvoCQVAFAWeSy9GVPrAdd1Ad2WXElI1C1ad1/kRIuDR8kv7SI4VdZ8L
rnHUrYx9KlM+Scz4sILKsCYpQvKoj0hH5QLp8VDGw+Ha8EVXtmcQy8Iq7/p7bwK8
YrnNOF1xXINcgf19QSlXfA0SEyezRy7wXmUYc6Ph+aW6DBArMptkMquJPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDyQgIS4+WVu9ruw9YPxy7k+xX4sMB8GA1UdIwQY
MBaAFH1He6QKcnUr9Q5CwAA3ZeTXRz5GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlVkN3BBcHlkU3YxRGtMQUFEZGw1TmRIUGtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9iYThjMjUtNDBlZi00YmFiLWFhM2Et
OWE3ZTE0NjQ4NjJhLzEvZlVkN3BBcHlkU3YxRGtMQUFEZGw1TmRIUGtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9iYThjMjUtNDBlZi00YmFiLWFhM2EtOWE3ZTE0NjQ4NjJh
LzEvZlVkN3BBcHlkU3YxRGtMQUFEZGw1TmRIUGtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa9xEJ+7C
FLBjV9MyNDb1mYa6c7n/+kgd+ahbIwLtaaSFaizscTKeYTjLfP6yZfENie41wj3N
81zz3/pPa2KcYTdv9aD5zvckhJ1Igd6H100goqMhZh8Yli7Gk6UmMGHVC9ivLDTx
6qd4qmxFRBT+88Uwro5RxyvexClQssrvFWNG+Iz3qq9wXUJhgm/8ark9oRgwQHHE
epvNmXl4qJxwnNuvbXx7RZPNsY3pc2raTwOJaFaPDD8l9KgmvTkK6qBdzmj+21Tq
1UZhjTp2JrBGjE0zyHP2n7Vn4g0yvuUAzYVGcopKW/rYMp/ChLmBz4/6Chloud3+
gHzw8TFrZWbM7Q==
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:14:26 2025 by rpki-client