Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.mft
File:                     V9wqO2671XpOSCmt0_KgKnbld4k.mft (raw, json)
Hash identifier:          Gg94qUMEliXGitRvrRN1PtSoVq5wO6uVakK3v0elmwI=
Subject key identifier:   BB:67:B2:01:14:5C:E0:D5:86:F4:B8:98:58:5D:EF:92:41:4A:2F:9D
Authority key identifier: 57:DC:2A:3B:6E:BB:D5:7A:4E:48:29:AD:D3:F2:A0:2A:76:E5:77:89
Certificate issuer:       /CN=57dc2a3b6ebbd57a4e4829add3f2a02a76e57789
Certificate serial:       0198D583D24C084621B1E0F0875354ED2F06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9wqO2671XpOSCmt0_KgKnbld4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.mft
Manifest number:          0340
Signing time:             Sat 23 Aug 2025 06:00:42 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:42 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:42 +0000
Files and hashes:         1: V9wqO2671XpOSCmt0_KgKnbld4k.crl (hash: zGHesJJaBBd8PMwc8jNsViMOnUUy5GYgiqlu+fIkv90=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V9wqO2671XpOSCmt0_KgKnbld4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:d2:4c:08:46:21:b1:e0:f0:87:53:54:ed:2f:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57dc2a3b6ebbd57a4e4829add3f2a02a76e57789
        Validity
            Not Before: Aug 23 06:00:42 2025 GMT
            Not After : Aug 24 06:00:42 2025 GMT
        Subject: CN=bb67b201145ce0d586f4b898585def92414a2f9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c5:6f:6e:76:2c:36:b4:3f:70:fe:a7:47:e4:
                    3f:ca:4c:75:58:1b:7f:43:8c:92:32:08:c9:d1:d3:
                    f1:82:c0:82:6c:22:dc:76:97:1b:70:98:d7:d1:22:
                    7e:31:04:6e:fd:11:07:c6:f9:f9:91:6c:06:3d:33:
                    6a:73:91:0d:6f:3e:ab:57:b1:a5:72:79:c4:16:2a:
                    5c:19:3d:ba:18:e4:d0:75:a0:45:84:2f:ba:e0:44:
                    82:2f:2a:4f:d8:6b:fd:9d:62:70:5e:57:22:b1:66:
                    20:9d:de:b2:ea:d4:9b:e1:73:e1:5b:36:15:b0:0b:
                    ea:15:0e:b0:30:20:c3:8a:c3:fc:37:fd:fd:18:4d:
                    34:ec:fe:ad:64:11:b3:25:c3:7c:d5:18:18:49:7d:
                    8f:32:ff:ac:4e:8c:3a:d6:d2:48:8d:b1:73:e6:74:
                    1f:a4:fd:58:b0:13:52:4b:46:da:aa:78:9a:08:72:
                    20:bc:e1:34:dc:ab:50:e6:af:40:76:89:00:45:31:
                    2c:d6:61:e0:a6:b9:78:a1:55:1b:bd:7b:7f:6f:9d:
                    c1:74:4c:7d:fb:a2:dc:fb:0c:80:e7:53:78:14:80:
                    0b:5f:29:73:7a:c8:56:d9:af:8f:43:00:78:4b:ed:
                    03:9b:5c:e7:1a:a7:5f:75:55:ca:c6:87:ea:93:5e:
                    9b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:67:B2:01:14:5C:E0:D5:86:F4:B8:98:58:5D:EF:92:41:4A:2F:9D
            X509v3 Authority Key Identifier:
                keyid:57:DC:2A:3B:6E:BB:D5:7A:4E:48:29:AD:D3:F2:A0:2A:76:E5:77:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9wqO2671XpOSCmt0_KgKnbld4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:8d:eb:1c:ff:dc:71:43:90:34:96:f5:7c:a4:c4:16:90:3d:
         ed:ba:dd:0b:a3:c2:a8:f7:fa:28:c2:64:20:15:92:a8:83:6a:
         d4:26:b5:a5:38:c1:d3:4b:d3:bb:5c:07:36:b7:5e:46:87:9c:
         e4:41:0d:51:65:56:fa:fa:b5:5f:83:f3:b0:2b:37:92:7f:8d:
         2a:38:08:d9:96:76:4d:97:81:d3:6c:0c:ac:cd:a7:0f:38:f2:
         c7:51:79:e9:ed:b8:4d:8e:c9:fd:64:d5:07:7e:bb:ee:a6:33:
         58:a2:2f:25:75:e5:78:42:06:a1:c7:27:06:56:5a:5a:91:ad:
         4f:a8:83:af:c3:6c:6c:e5:33:07:a0:a1:99:1a:20:c7:6a:a6:
         97:44:d4:0b:de:00:83:e0:13:1e:c5:19:e6:d7:f0:95:4a:d1:
         74:f9:01:78:e4:12:dd:00:c7:5d:c8:67:c7:94:d5:e9:30:e9:
         6d:0c:2e:65:b4:b2:7c:d6:4e:92:81:c5:3e:a1:29:fc:85:80:
         1a:32:c7:42:32:75:96:11:ed:d8:f6:ce:7e:3d:83:c7:0f:24:
         f0:8f:6f:6b:7b:d1:86:e8:55:ff:ac:2e:07:24:04:df:c8:be:
         58:b0:5c:1c:71:c1:26:ac:c6:65:f7:53:9b:e4:e3:5c:0f:e4:
         e2:8d:19:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg9JMCEYhseDwh1NU7S8GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ZGMyYTNiNmViYmQ1N2E0ZTQ4MjlhZGQzZjJhMDJhNzZl
NTc3ODkwHhcNMjUwODIzMDYwMDQyWhcNMjUwODI0MDYwMDQyWjAzMTEwLwYDVQQD
EyhiYjY3YjIwMTE0NWNlMGQ1ODZmNGI4OTg1ODVkZWY5MjQxNGEyZjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMVvbnYsNrQ/cP6nR+Q/ykx1WBt/
Q4ySMgjJ0dPxgsCCbCLcdpcbcJjX0SJ+MQRu/REHxvn5kWwGPTNqc5ENbz6rV7Gl
cnnEFipcGT26GOTQdaBFhC+64ESCLypP2Gv9nWJwXlcisWYgnd6y6tSb4XPhWzYV
sAvqFQ6wMCDDisP8N/39GE007P6tZBGzJcN81RgYSX2PMv+sTow61tJIjbFz5nQf
pP1YsBNSS0baqniaCHIgvOE03KtQ5q9AdokARTEs1mHgprl4oVUbvXt/b53BdEx9
+6Lc+wyA51N4FIALXylzeshW2a+PQwB4S+0Dm1znGqdfdVXKxofqk16bXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLtnsgEUXODVhvS4mFhd75JBSi+dMB8GA1UdIwQY
MBaAFFfcKjtuu9V6TkgprdPyoCp25XeJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjl3cU8yNjcxWHBPU0NtdDBfS2dLbmJsZDRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS82NTQ1MDQtNTRlMS00NTAyLWFiMjIt
NDA0NTlkNjkzNGFlLzEvVjl3cU8yNjcxWHBPU0NtdDBfS2dLbmJsZDRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS82NTQ1MDQtNTRlMS00NTAyLWFiMjItNDA0NTlkNjkzNGFl
LzEvVjl3cU8yNjcxWHBPU0NtdDBfS2dLbmJsZDRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeI3rHP/c
cUOQNJb1fKTEFpA97brdC6PCqPf6KMJkIBWSqINq1Ca1pTjB00vTu1wHNrdeRoec
5EENUWVW+vq1X4PzsCs3kn+NKjgI2ZZ2TZeB02wMrM2nDzjyx1F56e24TY7J/WTV
B3677qYzWKIvJXXleEIGoccnBlZaWpGtT6iDr8NsbOUzB6ChmRogx2qml0TUC94A
g+ATHsUZ5tfwlUrRdPkBeOQS3QDHXchnx5TV6TDpbQwuZbSyfNZOkoHFPqEp/IWA
GjLHQjJ1lhHt2PbOfj2Dxw8k8I9va3vRhuhV/6wuByQE38i+WLBcHHHBJqzGZfdT
m+TjXA/k4o0ZsQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:01 2025 by rpki-client