Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
File:                     J0VyDZpVOOo1ix9D0I-Izeb267Y.mft (raw, json)
Hash identifier:          eReIT4RYt4edFjf1/VNTPW+oYjLuiwhdPVMi1jyJBKY=
Subject key identifier:   B9:50:1B:0F:E2:BB:CB:2C:3B:A7:58:D5:E5:12:C9:D3:6F:38:25:50
Authority key identifier: 27:45:72:0D:9A:55:38:EA:35:8B:1F:43:D0:8F:88:CD:E6:F6:EB:B6
Certificate issuer:       /CN=2745720d9a5538ea358b1f43d08f88cde6f6ebb6
Certificate serial:       0198D54E75CCE80BB84CA8237B99E903E416
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
Manifest number:          121A
Signing time:             Sat 23 Aug 2025 05:02:25 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:25 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:25 +0000
Files and hashes:         1: J0VyDZpVOOo1ix9D0I-Izeb267Y.crl (hash: dCDAlVDkk7/zTmNcq7CQrl6+I7YaIErdI6QWiKsYMjY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:75:cc:e8:0b:b8:4c:a8:23:7b:99:e9:03:e4:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2745720d9a5538ea358b1f43d08f88cde6f6ebb6
        Validity
            Not Before: Aug 23 05:02:25 2025 GMT
            Not After : Aug 24 05:02:25 2025 GMT
        Subject: CN=b9501b0fe2bbcb2c3ba758d5e512c9d36f382550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:14:c0:ef:e5:71:91:53:06:6c:1e:53:78:e9:
                    7b:58:24:d3:3e:e8:6a:63:4d:d3:16:21:2d:da:17:
                    77:62:d9:ae:0d:bb:81:fb:73:7f:bc:24:8e:5c:17:
                    2a:13:ce:17:a5:18:47:1a:36:09:f1:42:4a:7f:a2:
                    27:fd:76:68:ba:26:13:6e:3d:29:07:05:5a:d0:d7:
                    db:d8:e4:73:00:0d:d5:92:2f:f7:d7:2d:43:96:c4:
                    45:04:87:4c:37:f9:8d:04:a6:2f:bf:bf:7d:b8:b0:
                    18:af:0e:ea:bb:67:88:51:3a:83:c3:0f:58:8c:cb:
                    ce:66:61:35:22:73:25:93:ef:63:9c:67:d6:e7:85:
                    57:be:94:58:7c:13:50:1e:72:de:ea:e8:34:18:fd:
                    bc:af:ee:da:35:6d:07:06:47:ed:ac:41:27:92:74:
                    0a:e1:ec:e8:d5:96:f5:e5:23:10:2f:8c:87:4f:ca:
                    02:d5:73:31:b2:3e:3c:3a:a8:c7:bf:ca:37:af:8f:
                    b2:bf:5d:1e:07:91:72:a0:07:df:57:7a:a3:cd:ac:
                    6d:5a:9f:bf:fe:51:4b:ac:81:87:dd:57:5f:4f:b7:
                    26:84:2d:fe:ed:0e:27:71:ef:02:fc:eb:47:af:ea:
                    7f:6d:72:11:6c:55:ec:77:0e:f7:76:18:6b:5d:ff:
                    d5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:50:1B:0F:E2:BB:CB:2C:3B:A7:58:D5:E5:12:C9:D3:6F:38:25:50
            X509v3 Authority Key Identifier:
                keyid:27:45:72:0D:9A:55:38:EA:35:8B:1F:43:D0:8F:88:CD:E6:F6:EB:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:19:a1:da:fe:1b:63:5f:c3:1a:79:dd:d2:f3:a6:bb:78:3c:
         a0:22:a6:01:39:30:f7:06:3e:19:b5:fc:4b:8c:b3:6e:01:69:
         68:77:bb:42:44:e3:d7:31:5e:19:18:d2:2a:29:d0:0e:03:3e:
         60:00:36:6e:f2:b6:8c:3b:dc:1b:9f:21:4a:a8:0f:31:96:60:
         af:ae:87:48:e4:7d:6b:93:a1:d4:7c:35:ba:0f:02:ba:cb:64:
         36:50:dc:62:62:d3:28:5c:6d:00:7f:db:fe:af:15:4d:2b:9f:
         13:4d:e7:76:b7:98:b6:a2:44:0f:17:9c:5a:0f:2b:d3:62:bb:
         94:fa:c0:ab:50:a3:0f:16:08:8d:fe:8c:3b:1e:6a:91:e1:97:
         ec:ae:0e:c6:13:5b:63:5d:65:a3:34:33:a6:9c:98:33:9e:75:
         ad:4f:27:3f:45:1e:b5:4b:43:db:f6:52:42:2f:bb:d7:bd:de:
         ff:3a:a0:dd:cc:c5:e2:35:47:6b:6d:94:a2:ce:b1:fe:36:28:
         90:0f:cd:60:df:5c:91:be:12:17:37:0e:37:01:67:5e:8c:fc:
         70:f4:23:9d:32:b7:c7:cb:12:82:b9:ae:e1:75:6e:fa:39:2b:
         d8:32:3e:2c:99:56:05:5b:83:d1:69:f1:50:77:a0:9f:9e:06:
         de:c9:4f:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTnXM6Au4TKgje5npA+QWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NDU3MjBkOWE1NTM4ZWEzNThiMWY0M2QwOGY4OGNkZTZm
NmViYjYwHhcNMjUwODIzMDUwMjI1WhcNMjUwODI0MDUwMjI1WjAzMTEwLwYDVQQD
EyhiOTUwMWIwZmUyYmJjYjJjM2JhNzU4ZDVlNTEyYzlkMzZmMzgyNTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRTA7+VxkVMGbB5TeOl7WCTTPuhq
Y03TFiEt2hd3YtmuDbuB+3N/vCSOXBcqE84XpRhHGjYJ8UJKf6In/XZouiYTbj0p
BwVa0Nfb2ORzAA3Vki/31y1DlsRFBIdMN/mNBKYvv799uLAYrw7qu2eIUTqDww9Y
jMvOZmE1InMlk+9jnGfW54VXvpRYfBNQHnLe6ug0GP28r+7aNW0HBkftrEEnknQK
4ezo1Zb15SMQL4yHT8oC1XMxsj48OqjHv8o3r4+yv10eB5FyoAffV3qjzaxtWp+/
/lFLrIGH3VdfT7cmhC3+7Q4nce8C/OtHr+p/bXIRbFXsdw73dhhrXf/VeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLlQGw/iu8ssO6dY1eUSydNvOCVQMB8GA1UdIwQY
MBaAFCdFcg2aVTjqNYsfQ9CPiM3m9uu2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjBWeURacFZPT28xaXg5RDBJLUl6ZWIyNjdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9hZjljYjQtODU3NC00MmJmLTlkMDUt
YzNlZjczNzcxMjg2LzEvSjBWeURacFZPT28xaXg5RDBJLUl6ZWIyNjdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9hZjljYjQtODU3NC00MmJmLTlkMDUtYzNlZjczNzcxMjg2
LzEvSjBWeURacFZPT28xaXg5RDBJLUl6ZWIyNjdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgBmh2v4b
Y1/DGnnd0vOmu3g8oCKmATkw9wY+GbX8S4yzbgFpaHe7QkTj1zFeGRjSKinQDgM+
YAA2bvK2jDvcG58hSqgPMZZgr66HSOR9a5Oh1Hw1ug8CustkNlDcYmLTKFxtAH/b
/q8VTSufE03ndreYtqJEDxecWg8r02K7lPrAq1CjDxYIjf6MOx5qkeGX7K4OxhNb
Y11lozQzppyYM551rU8nP0UetUtD2/ZSQi+7173e/zqg3czF4jVHa22Uos6x/jYo
kA/NYN9ckb4SFzcONwFnXoz8cPQjnTK3x8sSgrmu4XVu+jkr2DI+LJlWBVuD0Wnx
UHegn54G3slPYQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:53:07 2025 by rpki-client