Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.mft
File:                     _EMwm9pG6O0l7AweipMAbyJpHjw.mft (raw, json)
Hash identifier:          6DH8L+7M7/kQabJe/WHbkOgXt0VJIlSjaRxrORhH4WA=
Subject key identifier:   77:21:20:D3:54:F8:25:80:E5:FB:14:72:55:37:57:DD:5E:6A:83:20
Authority key identifier: FC:43:30:9B:DA:46:E8:ED:25:EC:0C:1E:8A:93:00:6F:22:69:1E:3C
Certificate issuer:       /CN=fc43309bda46e8ed25ec0c1e8a93006f22691e3c
Certificate serial:       019874F54F6832B52F7FF27CDC0C62366CCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_EMwm9pG6O0l7AweipMAbyJpHjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.mft
Manifest number:          0AFC
Signing time:             Mon 04 Aug 2025 12:01:30 +0000
Manifest this update:     Mon 04 Aug 2025 12:01:30 +0000
Manifest next update:     Tue 05 Aug 2025 12:01:30 +0000
Files and hashes:         1: P4VoQSF7lCnsq5vr3E2b_J-Itmg.roa (hash: 75J3FI/MjvsUpmT1+e7f6kq+Idon95nr5b/vGurSSfM=)
                          2: _EMwm9pG6O0l7AweipMAbyJpHjw.crl (hash: AdQ4vT8HzYK/9q41GV3JgLhTp1+xDoU9FrJyEw9Q1aQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_EMwm9pG6O0l7AweipMAbyJpHjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:f5:4f:68:32:b5:2f:7f:f2:7c:dc:0c:62:36:6c:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc43309bda46e8ed25ec0c1e8a93006f22691e3c
        Validity
            Not Before: Aug  4 12:01:30 2025 GMT
            Not After : Aug  5 12:01:30 2025 GMT
        Subject: CN=772120d354f82580e5fb1472553757dd5e6a8320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:33:4d:35:30:ce:98:26:46:03:d4:b0:8e:d2:
                    77:31:cc:aa:74:84:2b:38:7c:00:a7:35:35:e1:cf:
                    ee:12:09:af:5f:fa:fe:ab:2f:76:6e:18:45:a8:84:
                    8d:2c:21:a2:e4:0d:af:7c:fa:08:e0:fc:62:47:84:
                    6c:d5:e5:40:4f:e7:2f:7c:ca:79:38:71:2c:61:88:
                    be:c7:b6:bc:e9:98:8c:a9:f4:65:3a:bc:25:2c:0d:
                    5d:c1:85:5b:17:49:ed:b2:73:79:b0:b7:03:01:a9:
                    db:a9:3c:47:8c:58:37:6f:cc:be:ef:a4:52:7b:e6:
                    b6:47:80:66:75:a0:c5:e1:fd:81:40:fc:cb:37:ba:
                    8b:5f:9a:74:7a:4d:ae:03:94:41:d3:4d:46:11:6e:
                    5e:ec:79:1c:f5:8e:e6:2f:06:37:07:5c:3a:ec:8a:
                    d1:eb:7a:28:e8:c7:20:99:da:25:54:a5:1d:b2:b8:
                    91:b4:68:f0:d0:c7:d9:9a:6e:29:fb:5f:c0:c6:08:
                    ea:4b:09:9e:45:d2:97:b7:7b:b5:68:d1:04:da:9f:
                    d0:65:5b:33:45:06:9c:7f:b4:ea:16:6c:d9:31:b1:
                    e9:c2:50:ca:0e:29:a3:4a:d5:a0:b3:d6:83:e4:80:
                    17:9c:b3:41:66:a8:22:fd:f1:b2:fa:79:b8:35:72:
                    09:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:21:20:D3:54:F8:25:80:E5:FB:14:72:55:37:57:DD:5E:6A:83:20
            X509v3 Authority Key Identifier:
                keyid:FC:43:30:9B:DA:46:E8:ED:25:EC:0C:1E:8A:93:00:6F:22:69:1E:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EMwm9pG6O0l7AweipMAbyJpHjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:27:86:88:9e:10:2f:75:7f:a3:d5:9c:e1:d6:51:29:9e:ab:
         15:b6:70:6b:4c:4d:02:a9:61:13:08:0a:79:e9:43:fa:f5:50:
         21:cc:c5:55:f8:a6:3b:d2:33:d1:cc:8e:7a:52:67:72:72:28:
         c3:1f:d9:fd:67:b4:aa:6d:78:38:45:69:ac:41:06:5e:25:53:
         3a:2f:ac:ef:66:6b:bb:2b:fa:de:2d:ea:b7:97:85:73:0d:81:
         5f:82:85:71:4d:e8:f6:e0:99:63:f1:9b:1e:22:7e:75:ff:4b:
         00:f2:37:50:3f:c3:1a:21:36:11:5b:ac:cd:a0:20:41:c3:07:
         38:d9:e7:05:8d:4b:c3:7a:b8:2c:25:d7:89:40:0e:38:02:eb:
         61:e1:89:d2:63:92:a0:3f:9d:66:db:a6:6d:7b:88:d8:ba:b8:
         8a:ed:06:36:a9:dc:57:54:b2:e5:8d:af:f1:00:dd:59:bd:f5:
         6d:2d:27:17:63:e1:07:aa:ac:6f:a4:2c:4e:38:f3:0f:70:60:
         9d:04:6a:68:14:40:9f:20:d5:f2:ff:c0:01:71:67:07:91:63:
         09:96:08:1b:c8:7a:50:98:b0:c8:74:72:0f:49:20:7b:79:7a:
         db:ad:4d:b8:52:69:7d:c3:81:31:92:8d:3a:01:62:99:a1:a4:
         e6:49:ca:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh09U9oMrUvf/J83AxiNmzPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNDMzMDliZGE0NmU4ZWQyNWVjMGMxZThhOTMwMDZmMjI2
OTFlM2MwHhcNMjUwODA0MTIwMTMwWhcNMjUwODA1MTIwMTMwWjAzMTEwLwYDVQQD
Eyg3NzIxMjBkMzU0ZjgyNTgwZTVmYjE0NzI1NTM3NTdkZDVlNmE4MzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5DNNNTDOmCZGA9SwjtJ3McyqdIQr
OHwApzU14c/uEgmvX/r+qy92bhhFqISNLCGi5A2vfPoI4PxiR4Rs1eVAT+cvfMp5
OHEsYYi+x7a86ZiMqfRlOrwlLA1dwYVbF0ntsnN5sLcDAanbqTxHjFg3b8y+76RS
e+a2R4BmdaDF4f2BQPzLN7qLX5p0ek2uA5RB001GEW5e7Hkc9Y7mLwY3B1w67IrR
63oo6McgmdolVKUdsriRtGjw0MfZmm4p+1/AxgjqSwmeRdKXt3u1aNEE2p/QZVsz
RQacf7TqFmzZMbHpwlDKDimjStWgs9aD5IAXnLNBZqgi/fGy+nm4NXIJWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHchINNU+CWA5fsUclU3V91eaoMgMB8GA1UdIwQY
MBaAFPxDMJvaRujtJewMHoqTAG8iaR48MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0VNd205cEc2TzBsN0F3ZWlwTUFieUpwSGp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wMDgyMTctNjAzNC00ZjhmLThlMjgt
NjAyNDczZGU2ZTNkLzEvX0VNd205cEc2TzBsN0F3ZWlwTUFieUpwSGp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8wMDgyMTctNjAzNC00ZjhmLThlMjgtNjAyNDczZGU2ZTNk
LzEvX0VNd205cEc2TzBsN0F3ZWlwTUFieUpwSGp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARSeGiJ4Q
L3V/o9Wc4dZRKZ6rFbZwa0xNAqlhEwgKeelD+vVQIczFVfimO9Iz0cyOelJncnIo
wx/Z/We0qm14OEVprEEGXiVTOi+s72Zruyv63i3qt5eFcw2BX4KFcU3o9uCZY/Gb
HiJ+df9LAPI3UD/DGiE2EVuszaAgQcMHONnnBY1Lw3q4LCXXiUAOOALrYeGJ0mOS
oD+dZtumbXuI2Lq4iu0GNqncV1Sy5Y2v8QDdWb31bS0nF2PhB6qsb6QsTjjzD3Bg
nQRqaBRAnyDV8v/AAXFnB5FjCZYIG8h6UJiwyHRyD0kge3l6261NuFJpfcOBMZKN
OgFimaGk5knKFw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:13:39 2025 by rpki-client