Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft
File:                     Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft (raw, json)
Hash identifier:          cASRlJDvmS5OqQMfv8skuw+uQbJUClH2I9Mg93ViwPM=
Subject key identifier:   9C:AD:DE:FE:6B:13:CC:2F:65:6F:1F:AF:E5:54:53:19:B8:E9:4B:7C
Authority key identifier: 39:FD:A6:ED:16:1F:82:2B:82:BE:AD:29:EE:10:61:C6:8F:FD:4A:EC
Certificate issuer:       /CN=39fda6ed161f822b82bead29ee1061c68ffd4aec
Certificate serial:       0198D515830DB1A1A5DDE0AE2EB69AB9F905
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Of2m7RYfgiuCvq0p7hBhxo_9Suw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft
Manifest number:          0EF6
Signing time:             Sat 23 Aug 2025 04:00:13 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:13 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:13 +0000
Files and hashes:         1: Of2m7RYfgiuCvq0p7hBhxo_9Suw.crl (hash: qdPrL60mEYMFIYgQbz8J1TOqF9doI66UmRch4W+RmE8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Of2m7RYfgiuCvq0p7hBhxo_9Suw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:83:0d:b1:a1:a5:dd:e0:ae:2e:b6:9a:b9:f9:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39fda6ed161f822b82bead29ee1061c68ffd4aec
        Validity
            Not Before: Aug 23 04:00:13 2025 GMT
            Not After : Aug 24 04:00:13 2025 GMT
        Subject: CN=9caddefe6b13cc2f656f1fafe5545319b8e94b7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e4:c1:f9:02:c0:c8:11:d0:58:50:d5:30:37:
                    94:8c:c6:87:50:0a:10:1c:f9:4c:82:5e:26:82:0d:
                    33:44:13:3e:65:9c:66:6e:54:ce:90:eb:60:68:1e:
                    57:07:e0:77:80:f3:73:03:ba:4c:8a:17:38:ea:71:
                    a4:7e:99:a8:da:09:13:80:08:c8:c0:c2:7f:2e:36:
                    39:20:8c:d3:94:c4:43:93:ed:74:21:60:55:c4:18:
                    4a:51:29:dc:2b:6e:14:fa:73:b7:d1:6d:ac:6d:c6:
                    88:6c:0e:a6:89:b5:cb:c2:cb:e5:66:46:20:af:4a:
                    ff:ac:c4:4a:72:ec:a8:66:94:a7:0e:d6:e4:04:11:
                    b9:3d:42:5d:c8:ad:96:9f:de:7a:b8:6d:24:1c:9e:
                    bf:05:d5:43:6e:47:30:5b:1f:cb:90:4a:d6:7f:15:
                    84:3c:b0:91:74:7b:41:f1:19:d5:c2:42:72:3c:c8:
                    c9:85:0b:64:f2:12:bb:4b:ba:b1:49:89:5a:14:89:
                    17:40:3d:88:64:ab:36:ea:dc:0a:f6:75:d1:2a:84:
                    df:19:7f:78:1a:fc:2d:51:ff:94:11:98:64:f1:f6:
                    29:6e:3f:cf:c6:f3:b7:ca:69:81:2e:c0:6f:69:c5:
                    d1:0a:87:e0:84:67:48:8d:bd:64:22:27:14:26:c0:
                    70:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:AD:DE:FE:6B:13:CC:2F:65:6F:1F:AF:E5:54:53:19:B8:E9:4B:7C
            X509v3 Authority Key Identifier:
                keyid:39:FD:A6:ED:16:1F:82:2B:82:BE:AD:29:EE:10:61:C6:8F:FD:4A:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Of2m7RYfgiuCvq0p7hBhxo_9Suw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:66:7f:9b:86:6c:e2:0f:16:0a:f6:a5:c2:70:a3:2d:0c:05:
         50:14:18:da:b7:ac:5d:43:90:9a:37:5c:e0:b5:2d:66:b3:fe:
         df:8f:5e:38:ca:1f:3b:2f:69:2f:15:fd:6c:34:39:c8:15:32:
         76:e1:f5:f9:2d:8b:16:c9:9b:66:6d:10:3e:59:59:c6:c7:b2:
         df:cd:d5:e8:3a:e8:60:e0:0d:c0:56:45:dd:f6:a3:44:52:81:
         88:9f:86:29:07:ba:34:f6:80:4b:48:66:eb:2f:21:40:aa:1b:
         20:56:89:c1:51:f9:7e:49:34:d0:35:2b:41:34:e9:74:2a:d5:
         ba:75:22:94:1a:9c:c6:63:3c:89:69:aa:fc:5b:af:38:42:fe:
         59:52:cf:a5:88:45:ce:0b:03:0c:e0:7b:ea:68:d2:68:86:d5:
         37:74:5a:ec:4d:68:6a:37:b1:2f:ee:1c:ee:47:c7:46:64:ed:
         83:55:e8:29:07:7a:d9:ea:c2:08:e3:ab:75:b4:53:86:8b:70:
         e5:a1:cb:ce:64:d3:16:31:d7:0f:f8:59:cd:f3:81:0f:a8:6c:
         d5:93:68:0a:6c:ca:ef:3d:4f:65:ad:c1:e3:d4:11:be:c6:fa:
         06:b3:e9:7f:4e:f2:40:f8:65:69:64:96:88:00:c7:4e:d3:c1:
         da:fe:ae:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFYMNsaGl3eCuLraaufkFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ZmRhNmVkMTYxZjgyMmI4MmJlYWQyOWVlMTA2MWM2OGZm
ZDRhZWMwHhcNMjUwODIzMDQwMDEzWhcNMjUwODI0MDQwMDEzWjAzMTEwLwYDVQQD
Eyg5Y2FkZGVmZTZiMTNjYzJmNjU2ZjFmYWZlNTU0NTMxOWI4ZTk0YjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuTB+QLAyBHQWFDVMDeUjMaHUAoQ
HPlMgl4mgg0zRBM+ZZxmblTOkOtgaB5XB+B3gPNzA7pMihc46nGkfpmo2gkTgAjI
wMJ/LjY5IIzTlMRDk+10IWBVxBhKUSncK24U+nO30W2sbcaIbA6mibXLwsvlZkYg
r0r/rMRKcuyoZpSnDtbkBBG5PUJdyK2Wn956uG0kHJ6/BdVDbkcwWx/LkErWfxWE
PLCRdHtB8RnVwkJyPMjJhQtk8hK7S7qxSYlaFIkXQD2IZKs26twK9nXRKoTfGX94
GvwtUf+UEZhk8fYpbj/PxvO3ymmBLsBvacXRCofghGdIjb1kIicUJsBwRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyt3v5rE8wvZW8fr+VUUxm46Ut8MB8GA1UdIwQY
MBaAFDn9pu0WH4Irgr6tKe4QYcaP/UrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2YybTdSWWZnaXVDdnEwcDdoQmh4b185U3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xMWViOTMtN2VhNy00YjdkLWFjNTct
Y2MzN2MyNzJiNzcxLzEvT2YybTdSWWZnaXVDdnEwcDdoQmh4b185U3V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8xMWViOTMtN2VhNy00YjdkLWFjNTctY2MzN2MyNzJiNzcx
LzEvT2YybTdSWWZnaXVDdnEwcDdoQmh4b185U3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH2Z/m4Zs
4g8WCvalwnCjLQwFUBQY2resXUOQmjdc4LUtZrP+349eOMofOy9pLxX9bDQ5yBUy
duH1+S2LFsmbZm0QPllZxsey383V6DroYOANwFZF3fajRFKBiJ+GKQe6NPaAS0hm
6y8hQKobIFaJwVH5fkk00DUrQTTpdCrVunUilBqcxmM8iWmq/FuvOEL+WVLPpYhF
zgsDDOB76mjSaIbVN3Ra7E1oajexL+4c7kfHRmTtg1XoKQd62erCCOOrdbRThotw
5aHLzmTTFjHXD/hZzfOBD6hs1ZNoCmzK7z1PZa3B49QRvsb6BrPpf07yQPhlaWSW
iADHTtPB2v6ugw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:35:45 2025 by rpki-client