Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft
File:                     1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft (raw, json)
Hash identifier:          KhcH279QFEThuhA45RFMc6zeditVc4I5CBx5kv0R2zY=
Subject key identifier:   AD:3E:65:54:86:30:AD:24:A9:76:D2:BF:44:85:C3:7E:43:A7:9A:48
Authority key identifier: F9:E2:0F:7D:3A:2C:C9:5D:9D:E6:F4:E3:34:CB:4B:67:92:2E:70:F5
Certificate issuer:       /CN=f9e20f7d3a2cc95d9de6f4e334cb4b67922e70f5
Certificate serial:       0198D473D1F006D2C99C1905D9F2CEB0E671
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-eIPfTosyV2d5vTjNMtLZ5IucPU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft
Manifest number:          085D
Signing time:             Sat 23 Aug 2025 01:03:36 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:36 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:36 +0000
Files and hashes:         1: 1-eIPfTosyV2d5vTjNMtLZ5IucPU.crl (hash: B1pZUlLgWM0hC6zQ6nJMR01L6pS5q6ChSmvWlaOUcPw=)
                          2: QE0Nop6hH-ReZM2oUJr6dWTxh-o.roa (hash: MDrtXAxZplUH7/qxVqW6e+250Fu4R4SP6B723HR2u5E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-eIPfTosyV2d5vTjNMtLZ5IucPU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:d1:f0:06:d2:c9:9c:19:05:d9:f2:ce:b0:e6:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9e20f7d3a2cc95d9de6f4e334cb4b67922e70f5
        Validity
            Not Before: Aug 23 01:03:36 2025 GMT
            Not After : Aug 24 01:03:36 2025 GMT
        Subject: CN=ad3e65548630ad24a976d2bf4485c37e43a79a48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:c3:0c:a5:7b:1c:8c:4f:bb:d7:2a:31:f5:86:
                    d8:63:b9:bf:a3:8b:b2:1a:ce:43:31:20:23:85:93:
                    57:dd:22:a1:9a:27:79:7a:fc:84:4c:d6:fa:2d:6e:
                    94:0e:83:95:47:5a:24:ee:13:e1:51:27:b8:1a:34:
                    1b:22:fd:51:6a:0d:7e:28:83:6b:76:ad:8c:45:48:
                    e5:ef:82:89:d0:98:cb:c3:de:44:66:c1:41:7b:d2:
                    a3:e9:a5:6e:31:30:0a:15:69:af:98:d1:4e:15:99:
                    0b:b5:30:16:f2:cd:29:2a:40:86:37:13:d0:f0:71:
                    b1:71:41:96:47:04:7a:a6:19:44:94:fa:02:3e:35:
                    60:04:9f:4f:7f:f8:96:c9:e2:1e:3c:19:08:6c:49:
                    c9:68:00:9e:07:cf:fa:f1:49:23:9b:c7:f4:4a:f1:
                    1a:63:c8:06:50:c1:d3:aa:32:87:9a:77:1e:8c:72:
                    ff:88:55:2c:ae:21:ad:2e:33:c6:c6:2a:ea:eb:2e:
                    50:ea:3d:12:91:fb:06:bf:f7:4c:ed:ba:c9:ac:49:
                    1b:01:00:70:2a:a7:b9:84:1d:12:34:47:2a:08:cf:
                    23:41:72:15:b6:b8:c7:e8:37:82:0e:52:2f:eb:64:
                    4c:fb:44:0f:87:b5:06:1c:3f:d1:bb:ca:92:17:4c:
                    5b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:3E:65:54:86:30:AD:24:A9:76:D2:BF:44:85:C3:7E:43:A7:9A:48
            X509v3 Authority Key Identifier:
                keyid:F9:E2:0F:7D:3A:2C:C9:5D:9D:E6:F4:E3:34:CB:4B:67:92:2E:70:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eIPfTosyV2d5vTjNMtLZ5IucPU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:7d:e4:fa:b6:3e:64:da:00:5e:85:2c:39:8d:76:44:b5:c3:
         37:3c:9d:aa:00:4d:89:cd:42:1a:b5:31:6f:09:f2:65:79:e8:
         7a:8e:bc:06:2d:7f:fa:1d:35:ec:fc:7e:4e:b2:14:2c:34:0d:
         87:c8:31:35:0e:c1:0d:05:b9:24:ea:26:1c:7c:ce:cf:bd:78:
         a4:c2:76:c5:fe:90:e3:88:54:dd:ba:ab:cc:8d:2e:5b:f8:c5:
         9c:ea:40:17:bb:c5:14:28:7f:c7:a9:e3:c1:d0:ff:bd:66:65:
         6e:ba:fd:e0:c5:73:76:ee:a2:b6:3c:a4:55:ca:93:11:cc:e3:
         4c:77:14:70:1c:5f:b3:20:9e:d8:6d:5e:38:31:59:84:be:01:
         48:b7:c6:f6:84:1d:82:66:7c:f3:50:24:3f:53:bf:5b:ea:10:
         67:ea:76:f5:0c:1c:71:48:ae:2a:16:08:66:f3:74:c8:fd:30:
         55:42:e0:dc:ee:f3:24:e3:b4:0e:88:fd:97:e7:3b:a5:7a:71:
         79:23:ab:53:84:83:db:6f:b9:df:7f:ed:e2:02:9f:e7:a6:00:
         47:a3:78:ab:a5:c0:4c:79:36:c6:da:54:a7:f1:2b:b0:36:ff:
         f1:c0:3c:fc:5f:1b:5d:9d:78:fe:97:50:bf:ba:63:be:12:7e:
         d7:36:7e:da
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZjUc9HwBtLJnBkF2fLOsOZxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5ZTIwZjdkM2EyY2M5NWQ5ZGU2ZjRlMzM0Y2I0YjY3OTIy
ZTcwZjUwHhcNMjUwODIzMDEwMzM2WhcNMjUwODI0MDEwMzM2WjAzMTEwLwYDVQQD
EyhhZDNlNjU1NDg2MzBhZDI0YTk3NmQyYmY0NDg1YzM3ZTQzYTc5YTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+sMMpXscjE+71yox9YbYY7m/o4uy
Gs5DMSAjhZNX3SKhmid5evyETNb6LW6UDoOVR1ok7hPhUSe4GjQbIv1Rag1+KINr
dq2MRUjl74KJ0JjLw95EZsFBe9Kj6aVuMTAKFWmvmNFOFZkLtTAW8s0pKkCGNxPQ
8HGxcUGWRwR6phlElPoCPjVgBJ9Pf/iWyeIePBkIbEnJaACeB8/68Ukjm8f0SvEa
Y8gGUMHTqjKHmncejHL/iFUsriGtLjPGxirq6y5Q6j0SkfsGv/dM7brJrEkbAQBw
Kqe5hB0SNEcqCM8jQXIVtrjH6DeCDlIv62RM+0QPh7UGHD/Ru8qSF0xbYwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFK0+ZVSGMK0kqXbSv0SFw35Dp5pIMB8GA1UdIwQY
MBaAFPniD306LMldneb04zTLS2eSLnD1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1lSVBmVG9zeVYyZDV2VGpOTXRMWjVJdWNQVS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvN2U3ZmNlLTQ4NDEtNDc2Yi04NGMw
LWE1NGViODU2NmJlZi8xLzEtZUlQZlRvc3lWMmQ1dlRqTk10TFo1SXVjUFUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzZhLzdlN2ZjZS00ODQxLTQ3NmItODRjMC1hNTRlYjg1NjZi
ZWYvMS8xLWVJUGZUb3N5VjJkNXZUak5NdExaNUl1Y1BVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf33k
+rY+ZNoAXoUsOY12RLXDNzydqgBNic1CGrUxbwnyZXnoeo68Bi1/+h017Px+TrIU
LDQNh8gxNQ7BDQW5JOomHHzOz714pMJ2xf6Q44hU3bqrzI0uW/jFnOpAF7vFFCh/
x6njwdD/vWZlbrr94MVzdu6itjykVcqTEczjTHcUcBxfsyCe2G1eODFZhL4BSLfG
9oQdgmZ881AkP1O/W+oQZ+p29QwccUiuKhYIZvN0yP0wVULg3O7zJOO0Doj9l+c7
pXpxeSOrU4SD22+533/t4gKf56YAR6N4q6XATHk2xtpUp/ErsDb/8cA8/F8bXZ14
/pdQv7pjvhJ+1zZ+2g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:26 2025 by rpki-client