Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
File:                     ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft (raw, json)
Hash identifier:          WCi5NGQ1HcltuMBHh+fhexVqKTMl+w8RVKEKAfnMHzI=
Subject key identifier:   9B:25:84:17:79:E6:45:BE:99:E9:12:50:A7:D1:3B:F9:49:A0:3B:09
Authority key identifier: 89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75
Certificate issuer:       /CN=89aed2cff8ce31b334f83a0b305feef01d71da75
Certificate serial:       01987D8A8FC20B213B977D05A5F4CA43643F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
Manifest number:          15D6
Signing time:             Wed 06 Aug 2025 04:01:29 +0000
Manifest this update:     Wed 06 Aug 2025 04:01:29 +0000
Manifest next update:     Thu 07 Aug 2025 04:01:29 +0000
Files and hashes:         1: TuA6dq5RUfQK0g-nhGPwelxAp8s.roa (hash: A068hT4+Hwiukpw4NAI0ekcWki3f2qgAy0smH/qbl44=)
                          2: ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl (hash: WuJmmTVx94aDJUmqDv/VoO1nIrnvFLfCTenxyEiZCcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 04:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:8a:8f:c2:0b:21:3b:97:7d:05:a5:f4:ca:43:64:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89aed2cff8ce31b334f83a0b305feef01d71da75
        Validity
            Not Before: Aug  6 04:01:29 2025 GMT
            Not After : Aug  7 04:01:29 2025 GMT
        Subject: CN=9b25841779e645be99e91250a7d13bf949a03b09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:14:8a:41:b6:f7:d1:28:00:8e:a4:e0:a1:86:
                    04:fe:54:55:81:83:a6:d7:f8:a9:0b:c6:f8:bd:63:
                    8e:67:ef:1b:5f:98:5d:86:8b:9d:2a:74:d1:c3:ea:
                    d7:23:50:6f:8b:3b:b5:1a:15:2e:7f:5b:57:06:75:
                    61:32:50:e4:1c:b8:3d:89:b4:94:57:46:26:f3:e7:
                    c6:27:6a:99:43:61:2c:f6:91:d7:22:16:0b:f5:e2:
                    65:cd:a2:69:c8:61:8d:c5:f4:95:f9:99:62:48:b7:
                    dc:dd:91:32:a2:05:5e:f3:6e:96:82:5b:15:27:bb:
                    e9:26:b4:77:a1:e5:a4:53:1b:43:ef:69:9d:af:75:
                    06:7a:a7:af:f5:05:8f:fc:8b:e3:dd:3c:d8:f1:d6:
                    70:fa:63:00:21:30:32:bf:16:68:e9:22:f4:dc:09:
                    74:97:6c:5f:74:e0:9c:e4:f5:14:b9:e5:1b:e2:cb:
                    3b:70:b0:41:8e:64:d3:fb:dc:3e:87:cb:10:28:82:
                    62:56:86:e9:9e:c0:ce:42:8a:db:f0:96:d7:5d:9b:
                    ed:80:18:67:ca:04:ee:a6:d4:40:cb:67:14:87:6a:
                    00:13:46:c0:1f:a0:e5:aa:5d:62:ac:f4:2a:68:7e:
                    f7:92:4e:8e:75:79:98:c6:5c:cc:9b:b4:c9:25:95:
                    4e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:25:84:17:79:E6:45:BE:99:E9:12:50:A7:D1:3B:F9:49:A0:3B:09
            X509v3 Authority Key Identifier:
                keyid:89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:54:f8:e8:26:52:44:af:d5:23:c2:2e:04:1d:39:db:d4:60:
         ab:00:9e:89:fa:7f:58:21:d0:55:a9:69:27:9e:58:28:5c:f0:
         6a:6c:fa:51:63:fc:a2:e6:01:06:d6:9f:56:5b:5b:d2:03:fd:
         b6:48:d8:33:c2:a9:77:13:7f:7d:66:37:32:91:b0:a4:49:2d:
         4c:8e:5a:9f:c1:71:da:46:46:54:5d:64:b1:da:e2:93:36:48:
         33:47:2a:d6:72:02:98:07:a8:72:91:2c:f7:6e:8f:9f:44:cc:
         b6:e1:a7:49:b7:c2:7b:cb:ab:b7:25:95:a1:6e:03:c2:99:a5:
         32:47:c3:38:ed:57:cf:55:93:f2:a8:25:e1:70:4c:13:4a:2c:
         27:a6:e6:d6:1d:8b:6a:c9:2f:7d:39:8c:30:f7:ca:02:69:cb:
         6c:62:2a:0f:87:f4:23:f7:39:e2:82:d7:56:d4:98:5f:97:14:
         7b:8e:d6:6c:28:bf:81:7c:e5:c4:92:8c:a9:22:95:fd:87:66:
         c8:8c:7c:88:80:cc:6e:77:e1:79:e6:63:7d:14:8a:7c:c7:95:
         de:33:d7:aa:ea:dc:05:4d:22:40:08:9d:8c:de:d7:93:1a:16:
         1f:42:80:fe:25:a6:8f:01:0b:de:9b:db:58:54:14:2b:bb:93:
         b5:4e:a4:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9io/CCyE7l30FpfTKQ2Q/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YWVkMmNmZjhjZTMxYjMzNGY4M2EwYjMwNWZlZWYwMWQ3
MWRhNzUwHhcNMjUwODA2MDQwMTI5WhcNMjUwODA3MDQwMTI5WjAzMTEwLwYDVQQD
Eyg5YjI1ODQxNzc5ZTY0NWJlOTllOTEyNTBhN2QxM2JmOTQ5YTAzYjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BSKQbb30SgAjqTgoYYE/lRVgYOm
1/ipC8b4vWOOZ+8bX5hdhoudKnTRw+rXI1Bvizu1GhUuf1tXBnVhMlDkHLg9ibSU
V0Ym8+fGJ2qZQ2Es9pHXIhYL9eJlzaJpyGGNxfSV+ZliSLfc3ZEyogVe826WglsV
J7vpJrR3oeWkUxtD72mdr3UGeqev9QWP/Ivj3TzY8dZw+mMAITAyvxZo6SL03Al0
l2xfdOCc5PUUueUb4ss7cLBBjmTT+9w+h8sQKIJiVobpnsDOQorb8JbXXZvtgBhn
ygTuptRAy2cUh2oAE0bAH6Dlql1irPQqaH73kk6OdXmYxlzMm7TJJZVO8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJslhBd55kW+mekSUKfRO/lJoDsJMB8GA1UdIwQY
MBaAFImu0s/4zjGzNPg6CzBf7vAdcdp1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWE3U3pfak9NYk0wLURvTE1GX3U4QjF4Mm5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9lOTBmNTEtODlhYS00OWViLTllYTYt
ZmJlOGJjNWEyOWZhLzEvaWE3U3pfak9NYk0wLURvTE1GX3U4QjF4Mm5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9lOTBmNTEtODlhYS00OWViLTllYTYtZmJlOGJjNWEyOWZh
LzEvaWE3U3pfak9NYk0wLURvTE1GX3U4QjF4Mm5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ1T46CZS
RK/VI8IuBB0529RgqwCeifp/WCHQValpJ55YKFzwamz6UWP8ouYBBtafVltb0gP9
tkjYM8KpdxN/fWY3MpGwpEktTI5an8Fx2kZGVF1ksdrikzZIM0cq1nICmAeocpEs
926Pn0TMtuGnSbfCe8urtyWVoW4DwpmlMkfDOO1Xz1WT8qgl4XBME0osJ6bm1h2L
askvfTmMMPfKAmnLbGIqD4f0I/c54oLXVtSYX5cUe47WbCi/gXzlxJKMqSKV/Ydm
yIx8iIDMbnfheeZjfRSKfMeV3jPXqurcBU0iQAidjN7XkxoWH0KA/iWmjwEL3pvb
WFQUK7uTtU6kDg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:09:34 2025 by rpki-client