Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
File:                     epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft (raw, json)
Hash identifier:          GLPmVfD8H5D4OnW0pO16OXNbLQ4nu7f/gtVjKDTobIQ=
Subject key identifier:   69:24:CB:9B:1E:F8:CD:B0:BF:5B:06:2B:6F:4F:77:67:14:13:EE:5D
Authority key identifier: 7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
Certificate issuer:       /CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Certificate serial:       0198D54E252C847451B36BF91E99B48922E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
Manifest number:          12C1
Signing time:             Sat 23 Aug 2025 05:02:04 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:04 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:04 +0000
Files and hashes:         1: BdZzfpWUqYfKFqlermnKvlGhVqg.roa (hash: cnfauNqEx83yzpIrax/6Sz6YjPOm2320n5WGQAD+OeQ=)
                          2: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl (hash: 5jOJ3vWph1OezaIVAlD1fZrlPm99TOwT8S9h5oM5OpA=)
                          3: ra0nnbcZjMUUDlUlb-vmYcIyds0.roa (hash: 61VSpJ95ELuZw8iWy7GNiz4aAFsXsl/dAx+qYdFwNhU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:25:2c:84:74:51:b3:6b:f9:1e:99:b4:89:22:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
        Validity
            Not Before: Aug 23 05:02:04 2025 GMT
            Not After : Aug 24 05:02:04 2025 GMT
        Subject: CN=6924cb9b1ef8cdb0bf5b062b6f4f77671413ee5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bd:1d:a9:0c:d8:9c:53:e6:e2:7c:d8:23:d9:
                    0e:29:2d:6d:54:85:35:73:36:66:f7:fd:ee:f4:a5:
                    61:b5:31:0e:f5:0f:ca:58:e1:bf:a1:60:de:39:42:
                    d4:6f:c4:f9:ef:fc:5a:8f:48:d9:3f:81:bd:d5:ee:
                    05:5f:59:b0:b0:d6:b5:ff:c6:ea:75:75:c1:58:8b:
                    0c:cd:39:93:c6:85:92:d6:88:80:69:9b:9a:76:18:
                    12:1e:ff:c6:09:06:cd:28:5a:11:e4:f3:d4:3a:d2:
                    ae:53:8b:09:58:07:30:ff:c0:81:e2:97:8b:c5:c3:
                    08:94:7b:35:3d:2f:12:93:bf:e3:80:c8:f4:36:d2:
                    84:aa:8d:5d:fb:7d:90:ce:a8:3e:ca:0c:1b:92:f2:
                    ba:ee:03:ad:da:32:80:af:d0:9f:79:34:cd:ad:d0:
                    98:f8:c9:ce:9a:25:8b:1b:7b:8e:31:59:60:b6:f9:
                    22:6a:1f:2b:75:fb:99:ae:18:1d:96:c4:43:de:e7:
                    46:9b:70:9e:c6:0a:d3:2b:0d:43:97:1b:1f:1c:16:
                    b0:54:1d:8e:d7:a4:5c:b1:cf:46:0e:72:ec:a7:3c:
                    69:3f:84:aa:b9:f7:1b:67:bf:23:ce:5c:ea:34:ee:
                    d2:4e:1a:4c:6a:0f:82:a1:27:d5:ac:9b:fe:ea:bb:
                    9b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:24:CB:9B:1E:F8:CD:B0:BF:5B:06:2B:6F:4F:77:67:14:13:EE:5D
            X509v3 Authority Key Identifier:
                keyid:7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:de:b5:d9:5e:43:39:81:9f:15:47:81:85:16:e5:19:cd:a4:
         f3:00:30:5f:9c:ae:35:e0:fd:ef:39:ac:e6:53:2e:19:34:1e:
         19:df:ff:97:01:dc:1d:9c:75:c9:27:66:b4:5b:fc:91:3b:24:
         c5:8d:9e:33:b6:b3:31:17:d5:d7:9f:5d:5b:96:b8:b0:d0:63:
         98:14:c2:10:64:ec:1c:1e:57:fa:86:3e:47:28:69:76:b2:1b:
         e9:2d:bd:56:c2:4c:cb:51:50:37:bc:8c:26:ba:a9:b9:b7:fe:
         09:2f:a0:bb:0f:cb:90:0e:75:e7:99:e8:39:e3:92:7b:1f:71:
         29:c8:72:9e:25:bd:c5:38:c7:37:ac:03:47:39:91:2f:07:97:
         70:a9:de:8b:b1:7e:79:16:af:86:28:b6:e9:c0:4c:cb:56:51:
         1f:4e:1b:96:bf:72:40:7e:23:b4:e3:dd:f4:41:34:64:03:12:
         39:e6:b9:0e:c6:7c:30:88:dc:86:6e:28:13:4d:8c:ec:14:74:
         69:ab:34:f8:74:08:66:62:d1:24:0b:a3:f8:cf:9a:a5:3a:91:
         4c:df:49:ff:82:b3:ec:98:13:59:02:3f:fc:07:c8:e9:42:0d:
         ac:ff:00:93:26:52:a4:67:5e:95:28:6f:0d:64:ba:22:06:12:
         72:68:21:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTiUshHRRs2v5Hpm0iSLgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhOTFiMzQxNTNkYTBkNWQxMjFjZmY0MzI1OWZjZDllM2Ri
ZmM3ZDQwHhcNMjUwODIzMDUwMjA0WhcNMjUwODI0MDUwMjA0WjAzMTEwLwYDVQQD
Eyg2OTI0Y2I5YjFlZjhjZGIwYmY1YjA2MmI2ZjRmNzc2NzE0MTNlZTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqr0dqQzYnFPm4nzYI9kOKS1tVIU1
czZm9/3u9KVhtTEO9Q/KWOG/oWDeOULUb8T57/xaj0jZP4G91e4FX1mwsNa1/8bq
dXXBWIsMzTmTxoWS1oiAaZuadhgSHv/GCQbNKFoR5PPUOtKuU4sJWAcw/8CB4peL
xcMIlHs1PS8Sk7/jgMj0NtKEqo1d+32Qzqg+ygwbkvK67gOt2jKAr9CfeTTNrdCY
+MnOmiWLG3uOMVlgtvkiah8rdfuZrhgdlsRD3udGm3CexgrTKw1DlxsfHBawVB2O
16Rcsc9GDnLspzxpP4SqufcbZ78jzlzqNO7SThpMag+CoSfVrJv+6rubHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGkky5se+M2wv1sGK29Pd2cUE+5dMB8GA1UdIwQY
MBaAFHqRs0FT2g1dEhz/QyWfzZ49v8fUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXBHelFWUGFEVjBTSFA5REpaX05uajJfeDlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81M2Y2NTItMDFiMS00MmYyLTg1ZTkt
NGRjYjIzZmRiMDZhLzEvZXBHelFWUGFEVjBTSFA5REpaX05uajJfeDlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC81M2Y2NTItMDFiMS00MmYyLTg1ZTktNGRjYjIzZmRiMDZh
LzEvZXBHelFWUGFEVjBTSFA5REpaX05uajJfeDlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQt612V5D
OYGfFUeBhRblGc2k8wAwX5yuNeD97zms5lMuGTQeGd//lwHcHZx1ySdmtFv8kTsk
xY2eM7azMRfV159dW5a4sNBjmBTCEGTsHB5X+oY+RyhpdrIb6S29VsJMy1FQN7yM
Jrqpubf+CS+guw/LkA5155noOeOSex9xKchyniW9xTjHN6wDRzmRLweXcKnei7F+
eRavhii26cBMy1ZRH04blr9yQH4jtOPd9EE0ZAMSOea5DsZ8MIjchm4oE02M7BR0
aas0+HQIZmLRJAuj+M+apTqRTN9J/4Kz7JgTWQI//AfI6UINrP8AkyZSpGdelShv
DWS6IgYScmgh3Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:08:55 2025 by rpki-client