Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft
File:                     V0zsR2DtovCf62939yFCvmmbuMM.mft (raw, json)
Hash identifier:          VNvHO+M5ORTl8R8Ld5Y7XdeOofyHmoRc3uWy13q6iDA=
Subject key identifier:   E7:0A:84:EF:A8:68:D6:D0:8A:5D:6D:82:18:D5:E0:1B:DA:EF:B7:4F
Authority key identifier: 57:4C:EC:47:60:ED:A2:F0:9F:EB:6F:77:F7:21:42:BE:69:9B:B8:C3
Certificate issuer:       /CN=574cec4760eda2f09feb6f77f72142be699bb8c3
Certificate serial:       0198D54E0B05A950892D98C024C5DC535814
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V0zsR2DtovCf62939yFCvmmbuMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft
Manifest number:          10D3
Signing time:             Sat 23 Aug 2025 05:01:58 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:58 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:58 +0000
Files and hashes:         1: V0zsR2DtovCf62939yFCvmmbuMM.crl (hash: rOvDt2lrMgPKcpGJjUqSGjds3viHO1Cuiv1I3XhKJpI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V0zsR2DtovCf62939yFCvmmbuMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:0b:05:a9:50:89:2d:98:c0:24:c5:dc:53:58:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=574cec4760eda2f09feb6f77f72142be699bb8c3
        Validity
            Not Before: Aug 23 05:01:58 2025 GMT
            Not After : Aug 24 05:01:58 2025 GMT
        Subject: CN=e70a84efa868d6d08a5d6d8218d5e01bdaefb74f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c6:7e:60:9b:9b:3e:b6:da:87:92:a7:8a:3c:
                    ec:28:fb:8a:f4:d3:a7:84:80:77:92:fd:44:35:31:
                    cf:7a:59:14:03:e9:16:c4:ec:0c:eb:39:7a:76:07:
                    84:28:c9:29:70:8a:88:bc:c4:7b:eb:15:48:b0:df:
                    c5:4b:62:7f:31:35:88:12:23:b2:34:c2:71:fc:26:
                    e8:a9:79:ce:a3:6c:c4:6e:1e:63:03:30:f3:df:b5:
                    91:06:da:d2:ed:a0:4d:ee:a7:0f:35:c0:bc:a4:4a:
                    62:85:27:18:7b:e4:b5:fa:92:b1:c4:1f:43:31:f2:
                    3e:ba:b8:53:4b:69:8d:e7:b8:60:49:3d:69:b8:fa:
                    56:94:12:bd:24:26:a6:00:ef:58:9c:28:91:f9:be:
                    5f:f6:d6:47:91:8e:d9:e3:06:c3:55:a1:13:33:68:
                    0f:6d:7c:cb:bc:7a:09:38:ed:30:4b:d7:08:1e:86:
                    45:f7:cb:f4:34:a3:9c:d7:c8:e0:b0:36:d1:e5:10:
                    23:2d:cd:f9:78:79:71:5d:1d:54:60:91:17:2b:e5:
                    29:9c:a9:bb:2c:ce:5f:51:ca:1f:e4:9e:aa:66:58:
                    d1:61:44:35:54:01:34:28:66:3f:6f:79:fe:40:18:
                    47:e0:51:be:83:f5:9e:e2:5d:44:75:5b:10:ea:1f:
                    c1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:0A:84:EF:A8:68:D6:D0:8A:5D:6D:82:18:D5:E0:1B:DA:EF:B7:4F
            X509v3 Authority Key Identifier:
                keyid:57:4C:EC:47:60:ED:A2:F0:9F:EB:6F:77:F7:21:42:BE:69:9B:B8:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0zsR2DtovCf62939yFCvmmbuMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:f7:0d:f4:a8:37:64:68:0a:02:db:1c:dc:f9:5e:bf:4d:d8:
         68:d3:55:d3:9a:76:d7:4d:f0:24:3d:16:29:71:27:6d:ed:57:
         63:7b:94:ec:46:82:2d:50:04:ae:d3:a0:90:7d:4c:78:8f:fb:
         b7:1b:1b:03:1e:ec:0d:54:b9:0a:73:f3:45:f1:49:3a:e9:f1:
         d3:73:c3:3e:b6:c0:e2:46:58:07:b8:8c:23:89:d8:3d:42:dc:
         96:a3:2a:f6:a0:8c:61:1d:27:08:70:af:ae:d1:75:1d:c2:f4:
         57:8a:e8:87:fb:0e:d0:b8:c9:0a:0e:df:24:27:14:0f:96:32:
         1f:7c:7e:18:78:5b:9a:88:61:bf:d0:6a:a5:4d:61:e9:13:d2:
         53:17:af:8a:a7:f5:1a:10:6e:20:d9:02:ae:3a:ea:ec:e2:6b:
         60:84:2c:69:00:e8:31:ef:7e:d9:53:50:11:88:28:60:fd:c8:
         9e:3b:d0:76:7f:3a:00:45:0f:c2:b8:48:de:71:41:68:de:80:
         9c:3b:b5:9c:4b:20:29:7d:31:a2:39:ec:50:7e:b8:25:6f:c4:
         e8:78:68:6f:70:51:ee:14:63:fe:e0:6b:da:91:90:92:16:ea:
         b7:8c:a3:17:26:91:7e:33:2f:19:7d:0c:4e:a4:74:74:94:fb:
         00:bd:02:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTgsFqVCJLZjAJMXcU1gUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NGNlYzQ3NjBlZGEyZjA5ZmViNmY3N2Y3MjE0MmJlNjk5
YmI4YzMwHhcNMjUwODIzMDUwMTU4WhcNMjUwODI0MDUwMTU4WjAzMTEwLwYDVQQD
EyhlNzBhODRlZmE4NjhkNmQwOGE1ZDZkODIxOGQ1ZTAxYmRhZWZiNzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8Z+YJubPrbah5KnijzsKPuK9NOn
hIB3kv1ENTHPelkUA+kWxOwM6zl6dgeEKMkpcIqIvMR76xVIsN/FS2J/MTWIEiOy
NMJx/CboqXnOo2zEbh5jAzDz37WRBtrS7aBN7qcPNcC8pEpihScYe+S1+pKxxB9D
MfI+urhTS2mN57hgST1puPpWlBK9JCamAO9YnCiR+b5f9tZHkY7Z4wbDVaETM2gP
bXzLvHoJOO0wS9cIHoZF98v0NKOc18jgsDbR5RAjLc35eHlxXR1UYJEXK+UpnKm7
LM5fUcof5J6qZljRYUQ1VAE0KGY/b3n+QBhH4FG+g/We4l1EdVsQ6h/BsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOcKhO+oaNbQil1tghjV4Bva77dPMB8GA1UdIwQY
MBaAFFdM7Edg7aLwn+tvd/chQr5pm7jDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjB6c1IyRHRvdkNmNjI5Mzl5RkN2bW1idU1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC85NTcxZGEtZWZjYS00MWQ2LTg1ZjMt
ZDZhOTk5MzRjNDkzLzEvVjB6c1IyRHRvdkNmNjI5Mzl5RkN2bW1idU1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC85NTcxZGEtZWZjYS00MWQ2LTg1ZjMtZDZhOTk5MzRjNDkz
LzEvVjB6c1IyRHRvdkNmNjI5Mzl5RkN2bW1idU1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACfcN9Kg3
ZGgKAtsc3Plev03YaNNV05p2103wJD0WKXEnbe1XY3uU7EaCLVAErtOgkH1MeI/7
txsbAx7sDVS5CnPzRfFJOunx03PDPrbA4kZYB7iMI4nYPULclqMq9qCMYR0nCHCv
rtF1HcL0V4roh/sO0LjJCg7fJCcUD5YyH3x+GHhbmohhv9BqpU1h6RPSUxeviqf1
GhBuINkCrjrq7OJrYIQsaQDoMe9+2VNQEYgoYP3InjvQdn86AEUPwrhI3nFBaN6A
nDu1nEsgKX0xojnsUH64JW/E6Hhob3BR7hRj/uBr2pGQkhbqt4yjFyaRfjMvGX0M
TqR0dJT7AL0Crw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:43:41 2025 by rpki-client