Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft
File:                     078oufsovtkGaqQRPLi-Bl7c9BI.mft (raw, json)
Hash identifier:          3lSS7RnjzkjM7MibOUckWuPpGawl+44hbR6gS2j2yic=
Subject key identifier:   C9:55:99:D0:FA:E8:D9:63:5F:71:3C:49:C2:C8:FF:7C:C6:7F:80:E2
Authority key identifier: D3:BF:28:B9:FB:28:BE:D9:06:6A:A4:11:3C:B8:BE:06:5E:DC:F4:12
Certificate issuer:       /CN=d3bf28b9fb28bed9066aa4113cb8be065edcf412
Certificate serial:       0198D5BBC2EA956CC3482A0D2963E4CC8BC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/078oufsovtkGaqQRPLi-Bl7c9BI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft
Manifest number:          10D2
Signing time:             Sat 23 Aug 2025 07:01:48 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:48 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:48 +0000
Files and hashes:         1: 078oufsovtkGaqQRPLi-Bl7c9BI.crl (hash: YTtG57QeJNqJvPIMqLgeGi+GKKoghQpn2k6skqRY4Cs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/078oufsovtkGaqQRPLi-Bl7c9BI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:c2:ea:95:6c:c3:48:2a:0d:29:63:e4:cc:8b:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3bf28b9fb28bed9066aa4113cb8be065edcf412
        Validity
            Not Before: Aug 23 07:01:48 2025 GMT
            Not After : Aug 24 07:01:48 2025 GMT
        Subject: CN=c95599d0fae8d9635f713c49c2c8ff7cc67f80e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9c:2f:57:59:a0:cd:16:4a:d9:ec:bf:5f:6a:
                    12:e2:53:d0:96:8f:57:ea:1e:ab:f6:0b:76:3b:52:
                    38:5e:9b:68:62:07:1a:f6:76:50:8e:27:b9:55:49:
                    4a:09:61:6a:45:6f:61:cc:f0:5c:ef:c2:14:f5:11:
                    b1:33:1d:41:fd:f1:3f:01:2f:13:67:be:c8:2b:90:
                    b5:32:d7:3e:a7:9c:cb:52:da:2b:5e:db:5a:9b:ba:
                    7c:d0:01:f8:eb:d6:3b:e5:d0:e0:d6:27:70:77:db:
                    a3:cf:38:cc:65:2e:85:61:7f:cc:65:d6:19:e0:a6:
                    83:5e:61:8f:a1:81:c1:a1:7c:01:9a:1e:1d:a1:11:
                    20:f4:3c:1a:b2:05:02:72:b6:b0:af:82:a9:98:c8:
                    19:42:a9:5c:86:34:c4:42:76:ac:0b:44:2b:9a:19:
                    f8:58:3b:6b:94:16:ad:35:a7:5e:08:50:e8:a7:1e:
                    01:64:e2:d4:0d:ea:c5:8b:4f:81:63:03:b8:07:d6:
                    d0:3e:50:cc:6c:50:19:0b:74:3c:3f:2c:be:79:6b:
                    3c:ec:ef:1b:4b:b7:ae:6d:99:28:e2:6f:05:4f:cf:
                    48:34:e3:be:f0:59:fd:2d:56:6d:74:4d:60:2c:4d:
                    f7:72:b6:c7:a0:58:09:c9:94:86:19:f2:d5:b8:3b:
                    59:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:55:99:D0:FA:E8:D9:63:5F:71:3C:49:C2:C8:FF:7C:C6:7F:80:E2
            X509v3 Authority Key Identifier:
                keyid:D3:BF:28:B9:FB:28:BE:D9:06:6A:A4:11:3C:B8:BE:06:5E:DC:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/078oufsovtkGaqQRPLi-Bl7c9BI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:a2:88:fa:f9:d9:ee:c9:23:6f:15:e9:82:49:9c:fd:4c:f4:
         21:c1:d1:c6:67:a2:5f:a3:8d:4a:27:97:fa:47:7b:b6:30:92:
         fc:92:67:81:93:66:0d:96:28:be:ab:cb:22:0e:d5:25:e6:6f:
         4b:ee:a6:40:ac:aa:5e:cb:31:df:73:da:d3:a8:ce:d3:c1:3c:
         2f:74:e4:74:9b:a6:97:81:24:27:ee:83:93:74:32:40:8f:df:
         a5:2e:be:b9:a5:5d:ca:39:6e:77:3d:61:a5:f8:7e:dd:ef:90:
         d9:9a:25:a4:08:fc:b6:24:b7:8e:c8:a4:7f:15:53:ac:6c:55:
         ab:4e:39:70:e1:d8:78:7d:62:e8:fb:2a:f2:e0:52:a7:45:b2:
         33:ae:b4:73:9f:af:2a:05:23:dd:f5:7b:a1:bc:66:0a:ba:12:
         ed:09:3b:7f:51:d0:e5:23:d5:25:33:db:88:05:e1:95:e3:da:
         41:4b:f7:11:3d:73:0e:30:fc:dd:d1:3b:37:54:3a:39:d6:39:
         05:ae:51:40:2e:53:91:e8:87:c1:7d:fa:40:c3:ea:22:3d:21:
         f7:ad:27:7c:60:d8:ec:92:59:62:fc:cd:01:17:ac:99:c0:44:
         3a:5e:d0:ea:81:3e:1c:59:cc:ad:a3:f3:3e:98:d0:f3:b6:e9:
         c8:db:6a:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu8LqlWzDSCoNKWPkzIvFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYmYyOGI5ZmIyOGJlZDkwNjZhYTQxMTNjYjhiZTA2NWVk
Y2Y0MTIwHhcNMjUwODIzMDcwMTQ4WhcNMjUwODI0MDcwMTQ4WjAzMTEwLwYDVQQD
EyhjOTU1OTlkMGZhZThkOTYzNWY3MTNjNDljMmM4ZmY3Y2M2N2Y4MGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpwvV1mgzRZK2ey/X2oS4lPQlo9X
6h6r9gt2O1I4XptoYgca9nZQjie5VUlKCWFqRW9hzPBc78IU9RGxMx1B/fE/AS8T
Z77IK5C1Mtc+p5zLUtorXttam7p80AH469Y75dDg1idwd9ujzzjMZS6FYX/MZdYZ
4KaDXmGPoYHBoXwBmh4doREg9DwasgUCcrawr4KpmMgZQqlchjTEQnasC0Qrmhn4
WDtrlBatNadeCFDopx4BZOLUDerFi0+BYwO4B9bQPlDMbFAZC3Q8Pyy+eWs87O8b
S7eubZko4m8FT89INOO+8Fn9LVZtdE1gLE33crbHoFgJyZSGGfLVuDtZsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMlVmdD66NljX3E8ScLI/3zGf4DiMB8GA1UdIwQY
MBaAFNO/KLn7KL7ZBmqkETy4vgZe3PQSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDc4b3Vmc292dGtHYXFRUlBMaS1CbDdjOUJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81NjI4MTEtYzU5Yy00YmFiLWI5MjAt
MTgwNGQyMDJkNDZkLzEvMDc4b3Vmc292dGtHYXFRUlBMaS1CbDdjOUJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi81NjI4MTEtYzU5Yy00YmFiLWI5MjAtMTgwNGQyMDJkNDZk
LzEvMDc4b3Vmc292dGtHYXFRUlBMaS1CbDdjOUJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR6KI+vnZ
7skjbxXpgkmc/Uz0IcHRxmeiX6ONSieX+kd7tjCS/JJngZNmDZYovqvLIg7VJeZv
S+6mQKyqXssx33Pa06jO08E8L3TkdJuml4EkJ+6Dk3QyQI/fpS6+uaVdyjludz1h
pfh+3e+Q2ZolpAj8tiS3jsikfxVTrGxVq045cOHYeH1i6Psq8uBSp0WyM660c5+v
KgUj3fV7obxmCroS7Qk7f1HQ5SPVJTPbiAXhlePaQUv3ET1zDjD83dE7N1Q6OdY5
Ba5RQC5TkeiHwX36QMPqIj0h960nfGDY7JJZYvzNAResmcBEOl7Q6oE+HFnMraPz
PpjQ87bpyNtq0A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:36:21 2025 by rpki-client