Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
File:                     8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft (raw, json)
Hash identifier:          BPwIaZTFZBKzYbVfZGJhPuZ1gRIPqusZCeWMRpecDks=
Subject key identifier:   D9:AB:15:9B:06:16:88:66:71:49:8B:C2:6F:3D:FF:0B:6B:A3:C4:52
Authority key identifier: F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74
Certificate issuer:       /CN=f03ed4fedf56d0b02b172c8f89ec376510cd3174
Certificate serial:       01987E667BB4F8C00DF4D879ED89CFA685FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
Manifest number:          0478
Signing time:             Wed 06 Aug 2025 08:01:42 +0000
Manifest this update:     Wed 06 Aug 2025 08:01:42 +0000
Manifest next update:     Thu 07 Aug 2025 08:01:42 +0000
Files and hashes:         1: 8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl (hash: ZmhoiN+EM8oQ5jLEwWew6wh6ny0X5PJwyqjJrD/amTk=)
                          2: i40en23OGg_DEWIRxhMGmgEox1s.roa (hash: iWUkdAfgE1mLIKUO/1DuqvBR2l5IncPfNwSFVOKSJKY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:66:7b:b4:f8:c0:0d:f4:d8:79:ed:89:cf:a6:85:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f03ed4fedf56d0b02b172c8f89ec376510cd3174
        Validity
            Not Before: Aug  6 08:01:42 2025 GMT
            Not After : Aug  7 08:01:42 2025 GMT
        Subject: CN=d9ab159b0616886671498bc26f3dff0b6ba3c452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:db:a8:05:d1:f6:bd:d8:59:d7:79:c8:8b:9a:
                    54:be:bc:74:25:9d:d0:41:68:7d:55:a6:14:d9:ab:
                    bf:94:63:2a:7f:fa:5e:ca:32:df:5b:40:33:a9:71:
                    e6:05:12:40:dc:0b:2e:07:fb:9a:87:62:59:c4:2a:
                    7b:9d:50:66:0d:de:77:33:aa:46:5d:1a:5b:13:fb:
                    f3:d5:ce:00:53:27:30:26:90:fe:0f:df:ed:85:50:
                    1a:7b:fb:d5:47:e9:69:62:bd:0f:34:63:8d:75:27:
                    d6:9e:aa:31:45:e6:98:cb:83:65:26:8c:3a:06:d3:
                    60:6a:11:cb:2a:41:98:67:22:75:64:ce:fe:38:87:
                    74:d9:6a:d3:46:fc:b5:01:98:14:69:cd:04:e4:20:
                    a6:28:d8:b8:17:45:b8:a0:f7:07:bf:b7:0d:46:6a:
                    a2:4e:28:83:58:91:0b:fe:77:85:12:ab:32:a7:7a:
                    eb:ed:5d:43:3b:6c:02:c5:a7:33:ec:55:b6:67:5b:
                    0e:bd:31:d6:43:40:f1:93:a3:d9:c0:48:ca:3f:66:
                    5f:dc:cc:3a:5c:23:ef:84:a6:ab:59:8c:b8:7f:49:
                    87:54:c8:af:4c:31:07:87:5a:54:c4:d7:44:61:0a:
                    57:c1:98:9b:ed:6e:d2:42:18:d5:a9:53:5e:4a:7e:
                    d5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:AB:15:9B:06:16:88:66:71:49:8B:C2:6F:3D:FF:0B:6B:A3:C4:52
            X509v3 Authority Key Identifier:
                keyid:F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:26:2d:47:9e:d7:87:5a:45:df:50:70:cc:89:bd:c1:d0:ae:
         f1:a5:e7:ea:81:ed:2f:eb:a2:0a:fe:99:ef:06:f8:48:4c:12:
         9b:7f:50:d5:e7:f3:75:35:dc:7d:df:1c:41:da:4f:d2:4a:37:
         49:61:15:b0:bc:d5:e9:09:4b:fb:32:1e:96:f8:2d:65:b4:9f:
         7d:10:65:80:b4:dd:a6:af:3f:3a:7b:1f:e5:85:88:83:4c:53:
         9f:fb:8c:ce:80:b8:3e:af:60:17:ef:89:5c:01:a5:3c:4c:ca:
         9d:7b:9a:9b:ad:e7:f4:10:02:0c:86:69:67:1e:59:6e:c8:21:
         5c:ea:21:19:d7:10:cf:6a:92:af:7a:46:73:79:96:78:6f:b1:
         ce:92:af:26:9e:2f:90:ed:3d:21:62:c1:e5:cb:c2:aa:97:49:
         97:5e:2c:44:74:74:17:e8:de:a5:70:c5:de:f7:ec:93:a3:e0:
         cf:d5:35:f1:55:3e:a5:d5:e1:54:a5:0d:a1:84:54:bc:97:75:
         7b:5f:92:39:34:77:4d:a3:1b:97:ae:5a:93:61:06:3c:e6:65:
         bd:a1:43:05:28:c9:36:0a:2d:be:25:d3:8c:08:4d:b6:1a:cb:
         ec:19:28:96:4e:e5:0e:a8:30:2d:5c:18:7e:3a:c9:2f:1d:ad:
         ce:d4:05:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+Znu0+MAN9Nh57YnPpoX8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwM2VkNGZlZGY1NmQwYjAyYjE3MmM4Zjg5ZWMzNzY1MTBj
ZDMxNzQwHhcNMjUwODA2MDgwMTQyWhcNMjUwODA3MDgwMTQyWjAzMTEwLwYDVQQD
EyhkOWFiMTU5YjA2MTY4ODY2NzE0OThiYzI2ZjNkZmYwYjZiYTNjNDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlduoBdH2vdhZ13nIi5pUvrx0JZ3Q
QWh9VaYU2au/lGMqf/peyjLfW0AzqXHmBRJA3AsuB/uah2JZxCp7nVBmDd53M6pG
XRpbE/vz1c4AUycwJpD+D9/thVAae/vVR+lpYr0PNGONdSfWnqoxReaYy4NlJow6
BtNgahHLKkGYZyJ1ZM7+OId02WrTRvy1AZgUac0E5CCmKNi4F0W4oPcHv7cNRmqi
TiiDWJEL/neFEqsyp3rr7V1DO2wCxacz7FW2Z1sOvTHWQ0Dxk6PZwEjKP2Zf3Mw6
XCPvhKarWYy4f0mHVMivTDEHh1pUxNdEYQpXwZib7W7SQhjVqVNeSn7V3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmrFZsGFohmcUmLwm89/wtro8RSMB8GA1UdIwQY
MBaAFPA+1P7fVtCwKxcsj4nsN2UQzTF0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEQ3VV90OVcwTEFyRnl5UGlldzNaUkROTVhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lNjM5NTAtNzZlOC00ZjJiLTg3MzEt
ZmI0ZmQwN2UyNmEwLzEvOEQ3VV90OVcwTEFyRnl5UGlldzNaUkROTVhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9lNjM5NTAtNzZlOC00ZjJiLTg3MzEtZmI0ZmQwN2UyNmEw
LzEvOEQ3VV90OVcwTEFyRnl5UGlldzNaUkROTVhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALiYtR57X
h1pF31BwzIm9wdCu8aXn6oHtL+uiCv6Z7wb4SEwSm39Q1efzdTXcfd8cQdpP0ko3
SWEVsLzV6QlL+zIelvgtZbSffRBlgLTdpq8/Onsf5YWIg0xTn/uMzoC4Pq9gF++J
XAGlPEzKnXuam63n9BACDIZpZx5ZbsghXOohGdcQz2qSr3pGc3mWeG+xzpKvJp4v
kO09IWLB5cvCqpdJl14sRHR0F+jepXDF3vfsk6Pgz9U18VU+pdXhVKUNoYRUvJd1
e1+SOTR3TaMbl65ak2EGPOZlvaFDBSjJNgotviXTjAhNthrL7Bkolk7lDqgwLVwY
fjrJLx2tztQFRg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:16:13 2025 by rpki-client