Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8473c3-1de8-4a50-9cab-7ce5eca263de/1/C53uHUCq19-1viY4ApT04HcD14Q.mft
File:                     C53uHUCq19-1viY4ApT04HcD14Q.mft (raw, json)
Hash identifier:          ZJJWzOjoHvotuOH8+vfWL/kP7xKaIYhhIPktrSSnK7k=
Subject key identifier:   87:E4:AC:59:CC:7B:62:3D:36:7C:A4:D9:B9:3A:8F:83:1B:52:59:A9
Authority key identifier: 0B:9D:EE:1D:40:AA:D7:DF:B5:BE:26:38:02:94:F4:E0:77:03:D7:84
Certificate issuer:       /CN=0b9dee1d40aad7dfb5be26380294f4e07703d784
Certificate serial:       01987E65CE80C063A2ED9D2C17581ED08425
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C53uHUCq19-1viY4ApT04HcD14Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/8473c3-1de8-4a50-9cab-7ce5eca263de/1/C53uHUCq19-1viY4ApT04HcD14Q.mft
Manifest number:          1619
Signing time:             Wed 06 Aug 2025 08:00:57 +0000
Manifest this update:     Wed 06 Aug 2025 08:00:57 +0000
Manifest next update:     Thu 07 Aug 2025 08:00:57 +0000
Files and hashes:         1: C53uHUCq19-1viY4ApT04HcD14Q.crl (hash: pbNqwhCz3htKxViVmOmk34PVDQPIFSkMm/9HQEMlDdQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/8473c3-1de8-4a50-9cab-7ce5eca263de/1/C53uHUCq19-1viY4ApT04HcD14Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/8473c3-1de8-4a50-9cab-7ce5eca263de/1/C53uHUCq19-1viY4ApT04HcD14Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C53uHUCq19-1viY4ApT04HcD14Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:65:ce:80:c0:63:a2:ed:9d:2c:17:58:1e:d0:84:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b9dee1d40aad7dfb5be26380294f4e07703d784
        Validity
            Not Before: Aug  6 08:00:57 2025 GMT
            Not After : Aug  7 08:00:57 2025 GMT
        Subject: CN=87e4ac59cc7b623d367ca4d9b93a8f831b5259a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d0:e5:89:e5:d7:f7:c3:bd:de:2d:4e:39:2e:
                    6d:d8:7e:82:53:c0:67:54:a9:54:b1:30:c2:54:7c:
                    3e:65:55:69:03:06:23:34:7a:6e:52:f0:41:64:fb:
                    e1:8d:26:41:47:90:fd:e3:30:43:b2:c7:a6:75:b7:
                    66:87:cb:71:9d:d6:04:b7:d8:65:34:e4:c1:cc:4c:
                    ea:cb:e1:b9:a8:d6:81:4a:b4:08:d3:d7:5f:35:f9:
                    43:4b:10:34:7f:e9:32:e3:62:7e:4e:09:75:4b:28:
                    56:cc:3e:7e:c3:bc:0a:b8:d2:13:27:bd:07:2b:71:
                    25:96:59:04:a6:bc:8d:a7:d3:80:64:65:c2:1c:40:
                    a5:52:af:62:ff:32:db:0e:ce:bf:8f:23:8b:20:bf:
                    72:42:da:c7:d1:ad:d1:48:19:0c:fd:a3:d1:45:4d:
                    14:9b:13:a2:5f:b1:48:c0:3f:55:05:77:1e:62:f8:
                    96:ff:33:5c:5e:76:3b:3f:5a:e8:f1:88:ec:e1:ce:
                    98:60:68:10:c5:2f:aa:c3:7a:3e:5d:6c:2a:12:94:
                    2c:d7:15:59:56:7b:82:1d:1b:ce:58:c9:59:13:18:
                    af:19:ab:1f:ca:70:d9:7a:87:de:20:7a:52:1a:b5:
                    ea:45:15:83:24:20:f4:d2:51:bf:df:08:41:8c:6b:
                    b4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E4:AC:59:CC:7B:62:3D:36:7C:A4:D9:B9:3A:8F:83:1B:52:59:A9
            X509v3 Authority Key Identifier:
                keyid:0B:9D:EE:1D:40:AA:D7:DF:B5:BE:26:38:02:94:F4:E0:77:03:D7:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C53uHUCq19-1viY4ApT04HcD14Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8473c3-1de8-4a50-9cab-7ce5eca263de/1/C53uHUCq19-1viY4ApT04HcD14Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8473c3-1de8-4a50-9cab-7ce5eca263de/1/C53uHUCq19-1viY4ApT04HcD14Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:54:96:8c:46:50:ef:e3:fc:de:20:30:94:b4:e6:61:8d:7d:
         2c:dd:f1:be:3f:83:20:29:65:35:4f:fc:96:ef:e9:d0:97:1e:
         ed:9c:26:a9:b5:7e:ea:50:18:de:af:e3:c0:55:5c:21:a0:57:
         74:12:93:22:66:cb:68:c8:5d:2b:45:4d:1a:3c:97:f5:b1:fc:
         17:1d:cb:a4:0a:ac:e1:c8:47:03:a7:d2:31:fa:d8:f9:3c:9b:
         21:d8:8e:59:cd:be:2d:58:03:20:39:1e:3b:c2:a7:25:be:ca:
         8f:99:d8:fc:f7:5f:2f:58:5b:20:9f:b0:2d:e5:e7:53:ab:bb:
         1e:eb:eb:ae:bb:fd:13:f0:51:cd:c7:a8:37:d2:a9:29:ef:e5:
         68:c5:19:26:a2:d1:a8:84:bb:b5:9b:f7:cc:37:e0:6a:d1:d1:
         03:fc:d1:e9:37:ab:b4:3d:a5:df:9e:ea:34:c3:5a:d3:c1:b9:
         a2:6d:07:92:9a:f9:b8:c8:1e:26:34:86:8c:1f:89:47:ad:42:
         27:24:cb:9f:ec:2c:38:2a:8b:b5:59:7b:4d:ec:5b:5e:d6:e5:
         af:a1:0f:50:88:19:f7:2e:d8:e5:8c:ad:96:ed:a1:e5:37:97:
         8b:bc:dd:26:af:ef:44:42:6a:d8:f2:0f:89:08:f2:f1:ce:d4:
         4c:cb:9f:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+Zc6AwGOi7Z0sF1ge0IQlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiOWRlZTFkNDBhYWQ3ZGZiNWJlMjYzODAyOTRmNGUwNzcw
M2Q3ODQwHhcNMjUwODA2MDgwMDU3WhcNMjUwODA3MDgwMDU3WjAzMTEwLwYDVQQD
Eyg4N2U0YWM1OWNjN2I2MjNkMzY3Y2E0ZDliOTNhOGY4MzFiNTI1OWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dDlieXX98O93i1OOS5t2H6CU8Bn
VKlUsTDCVHw+ZVVpAwYjNHpuUvBBZPvhjSZBR5D94zBDssemdbdmh8txndYEt9hl
NOTBzEzqy+G5qNaBSrQI09dfNflDSxA0f+ky42J+Tgl1SyhWzD5+w7wKuNITJ70H
K3ElllkEpryNp9OAZGXCHEClUq9i/zLbDs6/jyOLIL9yQtrH0a3RSBkM/aPRRU0U
mxOiX7FIwD9VBXceYviW/zNcXnY7P1ro8Yjs4c6YYGgQxS+qw3o+XWwqEpQs1xVZ
VnuCHRvOWMlZExivGasfynDZeofeIHpSGrXqRRWDJCD00lG/3whBjGu0awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfkrFnMe2I9Nnyk2bk6j4MbUlmpMB8GA1UdIwQY
MBaAFAud7h1Aqtfftb4mOAKU9OB3A9eEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzUzdUhVQ3ExOS0xdmlZNEFwVDA0SGNEMTRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84NDczYzMtMWRlOC00YTUwLTljYWIt
N2NlNWVjYTI2M2RlLzEvQzUzdUhVQ3ExOS0xdmlZNEFwVDA0SGNEMTRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS84NDczYzMtMWRlOC00YTUwLTljYWItN2NlNWVjYTI2M2Rl
LzEvQzUzdUhVQ3ExOS0xdmlZNEFwVDA0SGNEMTRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARFSWjEZQ
7+P83iAwlLTmYY19LN3xvj+DICllNU/8lu/p0Jce7ZwmqbV+6lAY3q/jwFVcIaBX
dBKTImbLaMhdK0VNGjyX9bH8Fx3LpAqs4chHA6fSMfrY+TybIdiOWc2+LVgDIDke
O8KnJb7Kj5nY/PdfL1hbIJ+wLeXnU6u7Huvrrrv9E/BRzceoN9KpKe/laMUZJqLR
qIS7tZv3zDfgatHRA/zR6TertD2l357qNMNa08G5om0Hkpr5uMgeJjSGjB+JR61C
JyTLn+wsOCqLtVl7TexbXtblr6EPUIgZ9y7Y5Yytlu2h5TeXi7zdJq/vREJq2PIP
iQjy8c7UTMufwg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:10:03 2025 by rpki-client