Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
File:                     7yxcS2HXivmYzOm3w1e8_PQYGkw.mft (raw, json)
Hash identifier:          H/XQ9/c21OVst1Br+hsSVoQLYAkb8Z4EtlT2XONDqkQ=
Subject key identifier:   25:83:75:B8:45:15:75:7B:B1:CF:2E:39:65:6F:DE:B2:C5:60:67:32
Authority key identifier: EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
Certificate issuer:       /CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Certificate serial:       0198D54E2A9A38BED06BDC21F0B5D9095F57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
Manifest number:          0E1E
Signing time:             Sat 23 Aug 2025 05:02:06 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:06 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:06 +0000
Files and hashes:         1: 7yxcS2HXivmYzOm3w1e8_PQYGkw.crl (hash: RLeXzRY+2tZopN+0jdvy29CvhOzr54OmDQQE3LmUOQc=)
                          2: LW4-Oe35V5eJKzg68ztfFqGhSFg.roa (hash: D73s/rG3IJUbtI4RHRwuGNv/eWQmd3ddtUaorKL1EVI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:2a:9a:38:be:d0:6b:dc:21:f0:b5:d9:09:5f:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
        Validity
            Not Before: Aug 23 05:02:06 2025 GMT
            Not After : Aug 24 05:02:06 2025 GMT
        Subject: CN=258375b84515757bb1cf2e39656fdeb2c5606732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2d:60:ea:8d:52:43:7f:3c:a1:7a:b9:ce:21:
                    c3:58:88:15:be:06:e4:00:c7:78:fc:2b:5c:1d:3b:
                    fd:d5:78:6e:a9:07:b9:24:e8:7b:05:6b:c8:51:e1:
                    76:34:03:5f:b2:84:6f:b3:19:2f:04:be:5f:a2:82:
                    50:5f:b0:9a:d5:20:91:b2:2d:ef:e4:72:1b:e8:7d:
                    93:00:3a:0c:c0:28:3c:ae:2c:e3:61:03:af:96:60:
                    67:e7:4b:53:1a:95:7d:2b:a6:c9:5d:21:a4:f2:d7:
                    cc:1d:f1:63:fb:b6:f2:d6:d6:00:b7:64:c9:b5:0e:
                    52:7c:1b:22:20:bd:34:c2:46:72:17:be:8e:c5:ca:
                    c9:9c:c6:17:9d:0f:d0:dc:5a:27:ab:53:32:fa:96:
                    19:fb:5b:c3:e1:52:3c:94:95:03:fb:0a:76:45:18:
                    3d:f4:7a:73:d8:86:a3:cb:b9:c7:82:72:49:5a:20:
                    c0:a9:28:9f:c4:c1:89:91:ee:fb:2a:ad:c4:61:c2:
                    fc:5b:f7:da:9c:a5:03:d8:e9:5a:87:85:c5:56:0f:
                    3e:60:ae:7b:53:a1:3e:6b:f0:b3:b1:ee:c8:0a:70:
                    cd:03:cb:57:65:d7:4b:2f:1b:f7:f3:14:ce:c1:a0:
                    51:12:0b:a3:2c:49:e2:a0:07:c6:ab:ee:03:18:64:
                    70:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:83:75:B8:45:15:75:7B:B1:CF:2E:39:65:6F:DE:B2:C5:60:67:32
            X509v3 Authority Key Identifier:
                keyid:EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:c3:d9:73:a0:c6:9f:58:12:79:94:1d:95:a8:b3:b9:6e:d4:
         93:89:d9:50:61:19:99:73:ea:cc:f0:48:bd:49:10:3c:b4:df:
         d3:da:89:59:11:d3:e9:b8:18:fd:c8:4e:5e:8b:71:15:87:cd:
         d1:dc:6b:4a:b2:cb:24:40:65:43:d3:b7:b5:c5:a5:31:70:57:
         b7:0c:7f:4a:fa:b6:06:5a:30:25:27:3a:73:cf:92:8a:2a:7f:
         b0:fc:09:e3:31:e2:f5:be:0a:aa:89:6e:1b:c6:c6:48:76:56:
         54:61:19:3e:fb:dd:3e:28:06:86:36:b8:f6:30:07:87:bb:14:
         04:f0:1b:3c:bf:62:72:6b:01:7b:a2:57:e5:ca:e6:00:c0:06:
         e6:e1:26:1e:5e:92:89:82:20:d2:a0:03:6b:36:38:07:07:92:
         23:f8:a9:9e:cc:5d:46:99:3f:9b:7c:5b:92:f6:38:fe:5d:29:
         85:89:76:f9:68:49:c2:3c:09:2f:19:58:c5:7e:16:41:fc:c5:
         41:e0:96:d0:fe:ee:65:66:67:ec:8d:3f:7a:86:fb:a6:df:b5:
         c2:3b:1e:8e:37:34:1c:f8:db:8d:dd:a2:ff:bd:f8:7e:1c:ff:
         c5:f8:47:7f:59:60:70:95:1b:67:32:92:1e:ad:81:73:1d:f2:
         f8:e9:ae:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTiqaOL7Qa9wh8LXZCV9XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMmM1YzRiNjFkNzhhZjk5OGNjZTliN2MzNTdiY2ZjZjQx
ODFhNGMwHhcNMjUwODIzMDUwMjA2WhcNMjUwODI0MDUwMjA2WjAzMTEwLwYDVQQD
EygyNTgzNzViODQ1MTU3NTdiYjFjZjJlMzk2NTZmZGViMmM1NjA2NzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnS1g6o1SQ388oXq5ziHDWIgVvgbk
AMd4/CtcHTv91XhuqQe5JOh7BWvIUeF2NANfsoRvsxkvBL5fooJQX7Ca1SCRsi3v
5HIb6H2TADoMwCg8rizjYQOvlmBn50tTGpV9K6bJXSGk8tfMHfFj+7by1tYAt2TJ
tQ5SfBsiIL00wkZyF76OxcrJnMYXnQ/Q3Fonq1My+pYZ+1vD4VI8lJUD+wp2RRg9
9Hpz2Iajy7nHgnJJWiDAqSifxMGJke77Kq3EYcL8W/fanKUD2Olah4XFVg8+YK57
U6E+a/Czse7ICnDNA8tXZddLLxv38xTOwaBREgujLEnioAfGq+4DGGRwzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCWDdbhFFXV7sc8uOWVv3rLFYGcyMB8GA1UdIwQY
MBaAFO8sXEth14r5mMzpt8NXvPz0GBpMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3l4Y1MySFhpdm1Zek9tM3cxZThfUFFZR2t3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82N2RmMWMtYzllMS00YzViLWI2NDAt
OGNjYzE5NTJlYjRmLzEvN3l4Y1MySFhpdm1Zek9tM3cxZThfUFFZR2t3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS82N2RmMWMtYzllMS00YzViLWI2NDAtOGNjYzE5NTJlYjRm
LzEvN3l4Y1MySFhpdm1Zek9tM3cxZThfUFFZR2t3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI8PZc6DG
n1gSeZQdlaizuW7Uk4nZUGEZmXPqzPBIvUkQPLTf09qJWRHT6bgY/chOXotxFYfN
0dxrSrLLJEBlQ9O3tcWlMXBXtwx/Svq2BlowJSc6c8+Siip/sPwJ4zHi9b4Kqolu
G8bGSHZWVGEZPvvdPigGhja49jAHh7sUBPAbPL9icmsBe6JX5crmAMAG5uEmHl6S
iYIg0qADazY4BweSI/ipnsxdRpk/m3xbkvY4/l0phYl2+WhJwjwJLxlYxX4WQfzF
QeCW0P7uZWZn7I0/eob7pt+1wjsejjc0HPjbjd2i/734fhz/xfhHf1lgcJUbZzKS
Hq2Bcx3y+Omulw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:13 2025 by rpki-client