Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft
File:                     eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft (raw, json)
Hash identifier:          rWU8GSoOtaRTP8M76PRWDyssR/Ac3INWbD/9KLRtkhI=
Subject key identifier:   FB:D9:CD:68:A2:DF:64:F2:BD:6E:92:1B:B0:B1:0A:92:FD:EF:79:83
Authority key identifier: 78:CB:20:3B:BC:2D:BD:14:64:B5:42:B7:AA:DC:99:AD:40:3F:51:0F
Certificate issuer:       /CN=78cb203bbc2dbd1464b542b7aadc99ad403f510f
Certificate serial:       0198D4724EA73F0C95C9EF0314CB610EA220
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eMsgO7wtvRRktUK3qtyZrUA_UQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft
Manifest number:          1646
Signing time:             Sat 23 Aug 2025 01:01:57 +0000
Manifest this update:     Sat 23 Aug 2025 01:01:57 +0000
Manifest next update:     Sun 24 Aug 2025 01:01:57 +0000
Files and hashes:         1: eMsgO7wtvRRktUK3qtyZrUA_UQ8.crl (hash: jJsqgipI0GXDSmsL0y8P0A1W6a+FwQfdqCfApOsQILc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eMsgO7wtvRRktUK3qtyZrUA_UQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:4e:a7:3f:0c:95:c9:ef:03:14:cb:61:0e:a2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78cb203bbc2dbd1464b542b7aadc99ad403f510f
        Validity
            Not Before: Aug 23 01:01:57 2025 GMT
            Not After : Aug 24 01:01:57 2025 GMT
        Subject: CN=fbd9cd68a2df64f2bd6e921bb0b10a92fdef7983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f3:db:8d:9e:c0:be:00:81:d5:d0:0f:1f:9a:
                    30:d4:9f:a8:6b:59:cc:2a:cd:bf:cc:48:da:50:d0:
                    e1:7a:0f:70:5e:eb:5e:a8:f5:6a:94:96:54:5d:4e:
                    69:28:a4:27:02:ac:7f:6d:28:9b:c6:97:ba:d9:a9:
                    cf:d1:94:98:c7:30:71:e8:30:54:92:64:b1:ef:3b:
                    28:c9:ce:6b:28:8e:f2:09:ed:0b:8a:78:99:60:be:
                    9c:75:93:55:88:ec:c3:4c:f4:b6:28:b6:b5:19:ad:
                    6e:54:8f:f7:8e:b4:4a:52:b1:26:4a:ed:e7:39:b9:
                    1e:07:6d:d1:34:f7:15:b3:0a:8b:51:c0:0c:71:9d:
                    3b:72:e1:95:a6:41:c2:8c:24:d9:f2:5a:29:cc:e7:
                    cc:58:0d:45:8c:d9:fd:d7:6b:54:8e:f1:c6:93:20:
                    38:64:7b:28:f3:3b:43:2d:b8:7c:19:25:d8:08:28:
                    9f:39:e6:4a:01:e5:b0:12:22:07:6c:eb:ea:1d:dd:
                    74:67:59:66:fb:cb:ba:28:4f:e9:62:69:f3:70:5d:
                    4e:01:a6:3a:45:80:19:fb:82:a2:36:cb:20:7b:48:
                    95:d8:c9:f5:1b:d4:19:33:44:3e:1f:b1:bc:5f:7a:
                    39:a8:3a:46:49:07:39:27:89:65:20:97:0c:85:13:
                    f0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D9:CD:68:A2:DF:64:F2:BD:6E:92:1B:B0:B1:0A:92:FD:EF:79:83
            X509v3 Authority Key Identifier:
                keyid:78:CB:20:3B:BC:2D:BD:14:64:B5:42:B7:AA:DC:99:AD:40:3F:51:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMsgO7wtvRRktUK3qtyZrUA_UQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:4c:23:17:bc:8c:f9:a2:a1:d8:22:47:d9:cd:68:77:08:30:
         8f:45:1d:2c:b7:e6:92:97:16:eb:63:e8:d6:00:f5:0d:0c:d2:
         9c:00:9a:58:59:f2:cc:15:a4:d5:61:9b:b9:2c:94:1c:96:72:
         5b:b0:40:65:25:1e:49:a9:b3:6f:92:48:15:88:ca:f5:95:87:
         fc:d5:6c:dc:14:97:e0:af:7c:81:70:22:7d:68:11:f0:e2:30:
         29:b5:91:e0:68:d4:2d:7d:3d:3c:13:06:79:c2:f7:49:30:0f:
         96:7c:33:4e:2a:22:82:1a:8e:6a:71:53:f4:99:c7:92:86:19:
         69:bd:d4:6a:36:e0:78:c8:1f:9a:0b:eb:72:90:6e:38:8d:a7:
         9a:44:75:f1:65:d5:4d:bf:75:1e:9c:0a:70:69:2c:a9:49:e4:
         1b:7d:02:3f:a3:15:be:a3:2d:aa:18:8e:2f:fd:92:0b:3a:44:
         49:23:b9:78:39:ce:f3:61:29:f9:f6:c0:28:c9:2d:6f:83:a5:
         87:f7:a7:da:52:b5:c6:af:ec:93:c3:da:6b:82:76:51:c8:05:
         ee:dd:53:26:a3:18:69:de:e5:ec:1a:a2:63:63:86:35:71:02:
         30:a1:29:f1:50:57:ca:2b:12:61:10:f4:d4:90:2a:db:b6:af:
         7c:5c:37:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUck6nPwyVye8DFMthDqIgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4Y2IyMDNiYmMyZGJkMTQ2NGI1NDJiN2FhZGM5OWFkNDAz
ZjUxMGYwHhcNMjUwODIzMDEwMTU3WhcNMjUwODI0MDEwMTU3WjAzMTEwLwYDVQQD
EyhmYmQ5Y2Q2OGEyZGY2NGYyYmQ2ZTkyMWJiMGIxMGE5MmZkZWY3OTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvPbjZ7AvgCB1dAPH5ow1J+oa1nM
Ks2/zEjaUNDheg9wXuteqPVqlJZUXU5pKKQnAqx/bSibxpe62anP0ZSYxzBx6DBU
kmSx7zsoyc5rKI7yCe0LiniZYL6cdZNViOzDTPS2KLa1Ga1uVI/3jrRKUrEmSu3n
ObkeB23RNPcVswqLUcAMcZ07cuGVpkHCjCTZ8lopzOfMWA1FjNn912tUjvHGkyA4
ZHso8ztDLbh8GSXYCCifOeZKAeWwEiIHbOvqHd10Z1lm+8u6KE/pYmnzcF1OAaY6
RYAZ+4KiNssge0iV2Mn1G9QZM0Q+H7G8X3o5qDpGSQc5J4llIJcMhRPwhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvZzWii32TyvW6SG7CxCpL973mDMB8GA1UdIwQY
MBaAFHjLIDu8Lb0UZLVCt6rcma1AP1EPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZU1zZ083d3R2UlJrdFVLM3F0eVpyVUFfVVE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9lOTY2NDYtMGM5MS00OWIxLWExNDAt
ZTM5MjRmNzhkODQyLzEvZU1zZ083d3R2UlJrdFVLM3F0eVpyVUFfVVE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9lOTY2NDYtMGM5MS00OWIxLWExNDAtZTM5MjRmNzhkODQy
LzEvZU1zZ083d3R2UlJrdFVLM3F0eVpyVUFfVVE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKkwjF7yM
+aKh2CJH2c1odwgwj0UdLLfmkpcW62Po1gD1DQzSnACaWFnyzBWk1WGbuSyUHJZy
W7BAZSUeSamzb5JIFYjK9ZWH/NVs3BSX4K98gXAifWgR8OIwKbWR4GjULX09PBMG
ecL3STAPlnwzTioighqOanFT9JnHkoYZab3UajbgeMgfmgvrcpBuOI2nmkR18WXV
Tb91HpwKcGksqUnkG30CP6MVvqMtqhiOL/2SCzpESSO5eDnO82Ep+fbAKMktb4Ol
h/en2lK1xq/sk8Paa4J2UcgF7t1TJqMYad7l7BqiY2OGNXECMKEp8VBXyisSYRD0
1JAq27avfFw3fA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:34:50 2025 by rpki-client