Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.mft
File:                     bT9EOcndC2AD4JTTGkPlMJ9P_vU.mft (raw, json)
Hash identifier:          27j2vK9APCR95foAz0mMehf2m0IMs57d/0nKIxO+tpI=
Subject key identifier:   70:0F:2D:BD:BD:7D:6F:5B:F5:4D:41:C8:C6:7E:2E:66:18:DE:37:61
Authority key identifier: 6D:3F:44:39:C9:DD:0B:60:03:E0:94:D3:1A:43:E5:30:9F:4F:FE:F5
Certificate issuer:       /CN=6d3f4439c9dd0b6003e094d31a43e5309f4ffef5
Certificate serial:       01988C8F70B5A01C19FB85828133B3FF2F17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bT9EOcndC2AD4JTTGkPlMJ9P_vU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.mft
Manifest number:          02AF
Signing time:             Sat 09 Aug 2025 02:01:07 +0000
Manifest this update:     Sat 09 Aug 2025 02:01:07 +0000
Manifest next update:     Sun 10 Aug 2025 02:01:07 +0000
Files and hashes:         1: 7f6247ytrAn8qHZ3lg8x0Jbg3pU.roa (hash: wQjiNc4CCIKnGkmgdVYRMnPV1+DQiNnrix3wCvH87Fs=)
                          2: bT9EOcndC2AD4JTTGkPlMJ9P_vU.crl (hash: Qdek5TeIu6tPuvKX0zg3u7JUtT7TO0EwpXYxJaIa+hc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bT9EOcndC2AD4JTTGkPlMJ9P_vU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8c:8f:70:b5:a0:1c:19:fb:85:82:81:33:b3:ff:2f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d3f4439c9dd0b6003e094d31a43e5309f4ffef5
        Validity
            Not Before: Aug  9 02:01:07 2025 GMT
            Not After : Aug 10 02:01:07 2025 GMT
        Subject: CN=700f2dbdbd7d6f5bf54d41c8c67e2e6618de3761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:19:fe:86:1d:cd:4d:51:56:a2:e0:4a:1b:88:
                    72:c8:28:9f:d6:ef:b1:21:eb:9f:de:51:c5:86:0f:
                    fb:b2:e7:b3:a7:7e:1a:11:35:0c:1b:fe:69:a2:9f:
                    98:73:7e:e7:df:cf:b6:12:c1:a2:f1:79:85:10:20:
                    11:19:72:2f:49:50:87:0b:32:73:c3:cb:2c:34:75:
                    7f:f3:a6:e6:c2:a8:a4:89:c5:a5:94:02:60:f2:bb:
                    54:e5:96:64:7c:b5:23:92:fc:b2:12:94:bf:15:90:
                    a5:e0:c8:24:05:e3:3a:d1:c7:ce:2b:c9:16:ff:75:
                    02:c0:f1:82:cb:92:70:f3:ea:52:5c:8a:b9:d4:78:
                    23:c9:e0:27:0e:85:12:b1:cf:d8:0c:5d:e9:9e:d1:
                    81:b6:af:8e:66:34:b6:42:b6:a9:a3:29:ac:99:dc:
                    9a:e5:29:44:d8:a2:7f:5d:6c:15:f3:bf:8a:b1:10:
                    88:bb:8b:ef:c6:01:97:77:01:74:71:8b:9b:84:89:
                    29:9b:18:77:fc:09:f4:fe:64:1e:10:ef:20:c7:13:
                    3f:fa:43:49:a9:a8:57:dc:de:ef:ef:2d:16:90:ee:
                    9f:4d:aa:bc:ac:e0:81:31:e1:af:4e:d2:3e:35:7b:
                    70:18:0f:a7:3a:30:72:17:c1:fa:f2:b9:f4:cc:14:
                    fb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:0F:2D:BD:BD:7D:6F:5B:F5:4D:41:C8:C6:7E:2E:66:18:DE:37:61
            X509v3 Authority Key Identifier:
                keyid:6D:3F:44:39:C9:DD:0B:60:03:E0:94:D3:1A:43:E5:30:9F:4F:FE:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bT9EOcndC2AD4JTTGkPlMJ9P_vU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:51:e7:47:25:f9:07:7a:cb:fd:1c:b5:66:57:48:34:1f:d5:
         df:67:37:d9:62:6b:26:92:c9:12:33:78:98:66:ea:36:37:44:
         8f:6f:6c:e1:86:6e:a4:32:0e:e2:59:69:da:76:e0:58:54:37:
         1f:6a:92:f4:0b:d4:22:f9:f2:73:5e:1a:23:64:4e:84:0e:4c:
         78:05:53:33:76:13:9e:0c:3c:d7:6a:7a:3e:0e:1d:84:ae:31:
         68:f8:fb:de:27:a9:6a:16:69:b4:e5:ec:89:c0:d5:e7:67:01:
         49:f9:b2:46:09:06:06:f9:b1:f8:23:9f:0a:77:95:69:63:59:
         cb:0e:68:83:49:fd:1f:a1:69:2f:ab:4d:54:81:0b:a0:69:60:
         8c:74:fb:0a:2d:70:f4:33:2d:08:b6:e0:de:ad:02:c4:d5:85:
         a0:de:57:0c:fb:63:e5:c7:31:4e:0c:8e:56:9c:2c:48:bd:ff:
         34:03:c6:33:39:1c:13:03:c3:b2:18:23:9f:f3:06:21:46:f4:
         ba:fc:4f:94:f1:c7:87:d2:2b:35:35:cf:46:a7:5d:58:0a:d3:
         fd:fb:26:63:5f:4b:59:63:94:ad:73:88:bd:4e:4c:8b:ab:2b:
         c6:53:8d:72:70:1e:ab:07:0e:c5:1d:a0:f5:07:8f:b5:a0:91:
         57:80:a4:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiMj3C1oBwZ+4WCgTOz/y8XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkM2Y0NDM5YzlkZDBiNjAwM2UwOTRkMzFhNDNlNTMwOWY0
ZmZlZjUwHhcNMjUwODA5MDIwMTA3WhcNMjUwODEwMDIwMTA3WjAzMTEwLwYDVQQD
Eyg3MDBmMmRiZGJkN2Q2ZjViZjU0ZDQxYzhjNjdlMmU2NjE4ZGUzNzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxn+hh3NTVFWouBKG4hyyCif1u+x
Ieuf3lHFhg/7suezp34aETUMG/5pop+Yc37n38+2EsGi8XmFECARGXIvSVCHCzJz
w8ssNHV/86bmwqikicWllAJg8rtU5ZZkfLUjkvyyEpS/FZCl4MgkBeM60cfOK8kW
/3UCwPGCy5Jw8+pSXIq51HgjyeAnDoUSsc/YDF3pntGBtq+OZjS2Qrapoymsmdya
5SlE2KJ/XWwV87+KsRCIu4vvxgGXdwF0cYubhIkpmxh3/An0/mQeEO8gxxM/+kNJ
qahX3N7v7y0WkO6fTaq8rOCBMeGvTtI+NXtwGA+nOjByF8H68rn0zBT7KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHAPLb29fW9b9U1ByMZ+LmYY3jdhMB8GA1UdIwQY
MBaAFG0/RDnJ3QtgA+CU0xpD5TCfT/71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlQ5RU9jbmRDMkFENEpUVEdrUGxNSjlQX3ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jNDdlNDEtNzFiOC00ZDAwLWE1YTct
NWQ5MWIzN2JkODJlLzEvYlQ5RU9jbmRDMkFENEpUVEdrUGxNSjlQX3ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9jNDdlNDEtNzFiOC00ZDAwLWE1YTctNWQ5MWIzN2JkODJl
LzEvYlQ5RU9jbmRDMkFENEpUVEdrUGxNSjlQX3ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbFHnRyX5
B3rL/Ry1ZldINB/V32c32WJrJpLJEjN4mGbqNjdEj29s4YZupDIO4llp2nbgWFQ3
H2qS9AvUIvnyc14aI2ROhA5MeAVTM3YTngw812p6Pg4dhK4xaPj73iepahZptOXs
icDV52cBSfmyRgkGBvmx+COfCneVaWNZyw5og0n9H6FpL6tNVIELoGlgjHT7Ci1w
9DMtCLbg3q0CxNWFoN5XDPtj5ccxTgyOVpwsSL3/NAPGMzkcEwPDshgjn/MGIUb0
uvxPlPHHh9IrNTXPRqddWArT/fsmY19LWWOUrXOIvU5Mi6srxlONcnAeqwcOxR2g
9QePtaCRV4Ckog==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:51:12 2025 by rpki-client