Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft
File:                     e_es5VMOXVCQfS3bQ1vym03x1uQ.mft (raw, json)
Hash identifier:          TH/NglXXeE+hdkz4GzEtwV33Cxt5IyhpNku2vNUTMoM=
Subject key identifier:   A0:AA:4A:04:10:F0:76:2B:67:4E:BA:15:9E:F5:B7:66:F7:0A:4E:CA
Authority key identifier: 7B:F7:AC:E5:53:0E:5D:50:90:7D:2D:DB:43:5B:F2:9B:4D:F1:D6:E4
Certificate issuer:       /CN=7bf7ace5530e5d50907d2ddb435bf29b4df1d6e4
Certificate serial:       019876075141B689822847221CD218432ECD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft
Manifest number:          0411
Signing time:             Mon 04 Aug 2025 17:00:47 +0000
Manifest this update:     Mon 04 Aug 2025 17:00:47 +0000
Manifest next update:     Tue 05 Aug 2025 17:00:47 +0000
Files and hashes:         1: 7ZUQ_v-BIT_KwAz6NDX0t_K7Y_o.roa (hash: W6gsf8oTn0VsRjkJRSnQZjA1UWhDIyT1LhfUV5ExzMo=)
                          2: e_es5VMOXVCQfS3bQ1vym03x1uQ.crl (hash: vmMyEn9jPmZ5YDHP1sduEggRHrjhZ/7wm9ke2ko8eKI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:76:07:51:41:b6:89:82:28:47:22:1c:d2:18:43:2e:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bf7ace5530e5d50907d2ddb435bf29b4df1d6e4
        Validity
            Not Before: Aug  4 17:00:47 2025 GMT
            Not After : Aug  5 17:00:47 2025 GMT
        Subject: CN=a0aa4a0410f0762b674eba159ef5b766f70a4eca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:53:4b:1b:da:51:89:01:9e:ba:af:ae:03:3a:
                    3a:41:3a:84:48:74:37:60:f8:21:04:33:67:1b:62:
                    7d:0d:ce:62:63:87:54:6c:4a:cd:01:c2:89:71:d5:
                    4b:df:9e:91:67:b5:25:ae:54:bc:66:54:29:85:7c:
                    32:0f:de:96:07:25:63:54:23:a6:9a:e5:c8:79:f0:
                    83:ca:c3:cc:77:ce:07:61:f4:fa:6f:98:0d:31:9b:
                    bb:53:1a:c9:e9:52:17:9f:13:6b:e5:98:03:79:2c:
                    9f:2f:4d:e4:0a:74:6d:1c:c5:72:63:06:50:89:30:
                    03:03:c4:73:f8:47:9c:e0:6e:c3:53:dd:c4:ca:6f:
                    fc:aa:12:7d:d1:87:7b:09:28:77:fd:00:39:4b:be:
                    67:c0:06:c9:64:7c:3f:52:7b:e8:96:e8:7d:bb:6f:
                    83:8c:2c:f7:47:07:50:d4:d4:71:a1:a7:6b:c6:d8:
                    78:0f:79:e0:aa:d5:d7:4f:b8:ba:87:d1:d2:2c:67:
                    f7:70:bb:29:2e:22:f0:a7:8e:16:af:87:a9:99:30:
                    bc:0f:f7:f0:42:4a:cf:86:e6:37:f6:49:aa:0d:ef:
                    b6:af:9e:9e:96:1e:98:b7:e6:f8:0a:d2:71:29:c1:
                    ea:ab:b9:85:ed:b0:1e:08:71:92:c6:78:14:01:e9:
                    25:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:AA:4A:04:10:F0:76:2B:67:4E:BA:15:9E:F5:B7:66:F7:0A:4E:CA
            X509v3 Authority Key Identifier:
                keyid:7B:F7:AC:E5:53:0E:5D:50:90:7D:2D:DB:43:5B:F2:9B:4D:F1:D6:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:88:d3:2c:30:8c:7d:06:c1:d8:ab:7f:e0:65:b8:88:2d:aa:
         80:01:8c:e3:18:80:61:ca:00:78:5e:d9:24:57:a7:b7:8c:1e:
         e3:ea:b2:98:59:26:7a:3a:e2:d8:cd:0b:06:97:a6:02:9c:f8:
         26:5e:b0:a3:1f:5a:4b:af:d9:98:31:97:8a:74:aa:46:43:40:
         ce:08:3d:ba:15:b4:63:f1:0b:d8:27:30:23:77:ab:fe:c8:47:
         5f:df:ce:8d:74:91:27:6c:b2:91:c8:91:c4:a7:72:24:30:ba:
         f6:2a:83:78:e9:06:81:45:65:dc:75:6e:e1:72:8d:54:30:dd:
         66:40:01:39:ae:a1:b2:ac:68:c1:47:6d:17:cf:1f:c2:59:57:
         3b:69:a5:7b:67:2d:62:4e:a9:dc:d0:fd:88:8b:dd:6a:e4:43:
         1e:12:c1:00:88:34:f5:3b:41:3c:39:4e:c9:9a:0b:d2:a3:b7:
         f5:a6:cf:2f:de:8e:97:99:e8:01:f1:f3:5f:54:31:42:44:8f:
         90:f1:e9:d7:e6:80:5e:b0:83:dc:7b:59:ee:0d:64:d3:07:64:
         6d:ee:8f:bd:3c:ab:55:a1:8b:ec:fa:d8:9d:56:ea:f9:01:a8:
         bc:7c:9c:38:f5:74:83:9e:51:f8:0b:79:e6:f7:d4:a3:13:ea:
         3a:bb:d6:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh2B1FBtomCKEciHNIYQy7NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiZjdhY2U1NTMwZTVkNTA5MDdkMmRkYjQzNWJmMjliNGRm
MWQ2ZTQwHhcNMjUwODA0MTcwMDQ3WhcNMjUwODA1MTcwMDQ3WjAzMTEwLwYDVQQD
EyhhMGFhNGEwNDEwZjA3NjJiNjc0ZWJhMTU5ZWY1Yjc2NmY3MGE0ZWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlNLG9pRiQGeuq+uAzo6QTqESHQ3
YPghBDNnG2J9Dc5iY4dUbErNAcKJcdVL356RZ7UlrlS8ZlQphXwyD96WByVjVCOm
muXIefCDysPMd84HYfT6b5gNMZu7UxrJ6VIXnxNr5ZgDeSyfL03kCnRtHMVyYwZQ
iTADA8Rz+Eec4G7DU93Eym/8qhJ90Yd7CSh3/QA5S75nwAbJZHw/Unvoluh9u2+D
jCz3RwdQ1NRxoadrxth4D3ngqtXXT7i6h9HSLGf3cLspLiLwp44Wr4epmTC8D/fw
QkrPhuY39kmqDe+2r56elh6Yt+b4CtJxKcHqq7mF7bAeCHGSxngUAekl9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKCqSgQQ8HYrZ066FZ71t2b3Ck7KMB8GA1UdIwQY
MBaAFHv3rOVTDl1QkH0t20Nb8ptN8dbkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZV9lczVWTU9YVkNRZlMzYlExdnltMDN4MXVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi81MTcxYzctOGRmYy00ZDExLWFlMjIt
YzI4YmU0ODM4NzhhLzEvZV9lczVWTU9YVkNRZlMzYlExdnltMDN4MXVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi81MTcxYzctOGRmYy00ZDExLWFlMjItYzI4YmU0ODM4Nzhh
LzEvZV9lczVWTU9YVkNRZlMzYlExdnltMDN4MXVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU4jTLDCM
fQbB2Kt/4GW4iC2qgAGM4xiAYcoAeF7ZJFent4we4+qymFkmejri2M0LBpemApz4
Jl6wox9aS6/ZmDGXinSqRkNAzgg9uhW0Y/EL2CcwI3er/shHX9/OjXSRJ2yykciR
xKdyJDC69iqDeOkGgUVl3HVu4XKNVDDdZkABOa6hsqxowUdtF88fwllXO2mle2ct
Yk6p3ND9iIvdauRDHhLBAIg09TtBPDlOyZoL0qO39abPL96Ol5noAfHzX1QxQkSP
kPHp1+aAXrCD3HtZ7g1k0wdkbe6PvTyrVaGL7PrYnVbq+QGovHycOPV0g55R+At5
5vfUoxPqOrvWBQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 21:52:52 2025 by rpki-client