Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
File:                     w3Q8id807HcKZZc_EAUUa_sysPI.mft (raw, json)
Hash identifier:          QOcWzmrcJ4GDx/kVdlYCHZu4Y4JADk7BjvAZUBkFm2w=
Subject key identifier:   AE:FB:0B:C4:9C:77:25:2F:20:8B:DE:4D:08:B2:84:CE:D9:6F:3F:A6
Authority key identifier: C3:74:3C:89:DF:34:EC:77:0A:65:97:3F:10:05:14:6B:FB:32:B0:F2
Certificate issuer:       /CN=c3743c89df34ec770a65973f1005146bfb32b0f2
Certificate serial:       01987450812457B9B7688F3A7D67B7FF87B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
Manifest number:          0CF8
Signing time:             Mon 04 Aug 2025 09:01:29 +0000
Manifest this update:     Mon 04 Aug 2025 09:01:29 +0000
Manifest next update:     Tue 05 Aug 2025 09:01:29 +0000
Files and hashes:         1: lGKMR71wIiss24ARjCT6dglSzeg.roa (hash: pOKk5O831tF+GU5ZB5nOM1eHOcUVJqNluw5xZGpLXhs=)
                          2: w3Q8id807HcKZZc_EAUUa_sysPI.crl (hash: adMkPRfB3y6pIbXDUTSi0Ojusqh7qwNo8j0C3SWgzk0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:50:81:24:57:b9:b7:68:8f:3a:7d:67:b7:ff:87:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3743c89df34ec770a65973f1005146bfb32b0f2
        Validity
            Not Before: Aug  4 09:01:29 2025 GMT
            Not After : Aug  5 09:01:29 2025 GMT
        Subject: CN=aefb0bc49c77252f208bde4d08b284ced96f3fa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:51:1c:8d:e1:8d:0a:7a:33:cc:f0:e4:28:d4:
                    27:6e:26:16:73:ef:fb:99:8c:85:f2:c4:a6:d2:c9:
                    24:00:23:fe:a3:01:1c:44:4b:a7:59:31:b7:55:02:
                    0b:d2:8b:3d:59:7d:ed:8d:6d:45:93:ec:75:6b:72:
                    5f:4a:cb:ca:9e:96:c4:30:98:af:51:73:8e:2a:a3:
                    0d:a8:72:fd:3c:c6:59:8d:cb:1e:50:7a:0c:6d:08:
                    e1:88:c2:d1:8d:4d:d4:74:97:0c:05:5b:c8:66:48:
                    c4:78:6e:52:f7:92:02:5e:f4:80:96:1c:66:07:0d:
                    6a:77:a5:fc:0e:10:c0:90:88:bc:75:72:f8:98:46:
                    94:93:85:70:a5:5e:f6:e9:b8:6f:39:47:d0:52:2a:
                    6a:3d:1f:95:8f:f9:f3:9e:f7:13:9b:4c:eb:6b:eb:
                    53:89:e2:ec:18:52:8f:59:39:63:bb:95:37:d5:89:
                    f6:c7:a9:72:3e:7b:7c:6e:27:b7:90:60:41:f4:c3:
                    a5:80:82:a5:2e:8b:c2:d2:04:d0:c9:4a:24:a7:8a:
                    ed:0d:55:3e:a2:1d:5f:65:21:04:f5:d6:cb:bf:27:
                    aa:b7:f0:27:3f:b0:df:79:ad:30:1c:87:96:b3:a2:
                    0f:17:7d:2a:43:85:1d:c7:c0:16:a8:b5:97:57:d7:
                    56:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:FB:0B:C4:9C:77:25:2F:20:8B:DE:4D:08:B2:84:CE:D9:6F:3F:A6
            X509v3 Authority Key Identifier:
                keyid:C3:74:3C:89:DF:34:EC:77:0A:65:97:3F:10:05:14:6B:FB:32:B0:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:3b:f0:92:d8:23:74:04:b8:58:5e:60:83:44:b9:ec:aa:ad:
         18:6d:ff:f6:93:18:b9:e7:0e:3f:b3:a0:e4:cc:da:a8:f0:bb:
         3c:c6:74:55:c8:8f:5c:b6:c5:73:0d:96:25:19:62:85:0b:83:
         da:65:fa:fd:d8:ba:13:15:7b:b5:77:53:74:98:a0:48:b2:ea:
         63:1f:bc:45:5a:3c:d4:00:0d:4f:ef:e6:68:49:c6:41:8d:7b:
         35:e9:ce:a3:e0:b3:cf:d4:25:1c:0c:fc:4e:95:47:12:90:c9:
         e6:d5:7e:2b:61:00:58:47:ef:74:78:13:f5:be:a8:66:73:68:
         93:8d:16:0a:1a:97:97:45:3e:de:75:81:41:1c:8a:75:d6:b6:
         8a:e3:e8:09:c0:1d:b8:4d:3b:6b:eb:43:cd:f6:a8:f7:15:00:
         fe:19:d9:f1:4b:03:aa:bd:37:95:5c:76:19:11:72:6e:11:8f:
         00:b1:fc:6b:eb:89:e5:32:b6:5d:14:e8:67:40:59:18:d6:f1:
         ac:b7:68:a1:f0:a4:f0:79:a0:a2:54:54:68:60:d9:ad:69:11:
         02:ba:4f:32:29:a5:3b:80:0e:af:ae:5a:81:c9:fb:67:5d:28:
         c7:c0:f4:47:3b:b4:59:b5:a8:71:bc:8e:8f:f2:ab:c5:8a:13:
         e1:04:fe:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UIEkV7m3aI86fWe3/4e4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNzQzYzg5ZGYzNGVjNzcwYTY1OTczZjEwMDUxNDZiZmIz
MmIwZjIwHhcNMjUwODA0MDkwMTI5WhcNMjUwODA1MDkwMTI5WjAzMTEwLwYDVQQD
EyhhZWZiMGJjNDljNzcyNTJmMjA4YmRlNGQwOGIyODRjZWQ5NmYzZmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lEcjeGNCnozzPDkKNQnbiYWc+/7
mYyF8sSm0skkACP+owEcREunWTG3VQIL0os9WX3tjW1Fk+x1a3JfSsvKnpbEMJiv
UXOOKqMNqHL9PMZZjcseUHoMbQjhiMLRjU3UdJcMBVvIZkjEeG5S95ICXvSAlhxm
Bw1qd6X8DhDAkIi8dXL4mEaUk4VwpV726bhvOUfQUipqPR+Vj/nznvcTm0zra+tT
ieLsGFKPWTlju5U31Yn2x6lyPnt8bie3kGBB9MOlgIKlLovC0gTQyUokp4rtDVU+
oh1fZSEE9dbLvyeqt/AnP7Dfea0wHIeWs6IPF30qQ4Udx8AWqLWXV9dWlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK77C8ScdyUvIIveTQiyhM7Zbz+mMB8GA1UdIwQY
MBaAFMN0PInfNOx3CmWXPxAFFGv7MrDyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzNROGlkODA3SGNLWlpjX0VBVVVhX3N5c1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mOTlkYjQtOTg3ZS00M2IxLWEwY2Et
MjBmMjdlODcwZDAxLzEvdzNROGlkODA3SGNLWlpjX0VBVVVhX3N5c1BJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9mOTlkYjQtOTg3ZS00M2IxLWEwY2EtMjBmMjdlODcwZDAx
LzEvdzNROGlkODA3SGNLWlpjX0VBVVVhX3N5c1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfjvwktgj
dAS4WF5gg0S57KqtGG3/9pMYuecOP7Og5MzaqPC7PMZ0VciPXLbFcw2WJRlihQuD
2mX6/di6ExV7tXdTdJigSLLqYx+8RVo81AANT+/maEnGQY17NenOo+Czz9QlHAz8
TpVHEpDJ5tV+K2EAWEfvdHgT9b6oZnNok40WChqXl0U+3nWBQRyKdda2iuPoCcAd
uE07a+tDzfao9xUA/hnZ8UsDqr03lVx2GRFybhGPALH8a+uJ5TK2XRToZ0BZGNbx
rLdoofCk8HmgolRUaGDZrWkRArpPMimlO4AOr65agcn7Z10ox8D0Rzu0WbWocbyO
j/KrxYoT4QT+QA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:04 2025 by rpki-client