Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft
File:                     cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft (raw, json)
Hash identifier:          9EwF7B+pLzpNiVYpROWnRAg/PwVkb+603RvNPNaxj4U=
Subject key identifier:   03:F1:5C:9D:CC:DC:18:A0:72:32:62:B2:66:83:24:4A:36:43:65:8A
Authority key identifier: 70:48:08:58:FD:EE:A1:92:4A:B8:C6:2E:C3:FC:73:2D:34:02:0A:9D
Certificate issuer:       /CN=70480858fdeea1924ab8c62ec3fc732d34020a9d
Certificate serial:       0198D5F1D6C162F53C9E24C8F6D1C6DA8E71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft
Manifest number:          041E
Signing time:             Sat 23 Aug 2025 08:00:52 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:52 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:52 +0000
Files and hashes:         1: cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl (hash: /g38IwILZVmUBmsn8QJSvYzretOcdMLOnCGNmnKzpL0=)
                          2: zNpNQl9NSaLChe4B635hRjw02-o.roa (hash: ukOTTrydtQmkqVzRSGtZSX72LHto0GmqblImsbLdsZo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:d6:c1:62:f5:3c:9e:24:c8:f6:d1:c6:da:8e:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70480858fdeea1924ab8c62ec3fc732d34020a9d
        Validity
            Not Before: Aug 23 08:00:52 2025 GMT
            Not After : Aug 24 08:00:52 2025 GMT
        Subject: CN=03f15c9dccdc18a0723262b26683244a3643658a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:de:2e:c6:65:e2:e9:7c:4b:75:9a:94:c3:1a:
                    06:bc:c7:af:4f:48:6c:84:0e:88:a8:c2:3f:a8:1c:
                    ce:11:24:98:14:fe:be:0a:9f:19:21:fc:6a:c7:87:
                    99:ac:fc:0b:89:fb:4e:58:b6:ba:40:ac:e8:76:d3:
                    4b:30:cc:ea:c6:03:22:84:87:ca:e9:1c:5a:39:47:
                    ff:27:83:62:46:31:37:db:dd:de:22:a2:49:18:63:
                    1f:b7:c6:e0:e0:be:bc:7c:48:1c:19:f0:3d:a3:83:
                    b6:af:df:60:c9:d2:76:4f:a1:39:66:46:3e:22:7e:
                    5e:a6:7a:f5:6e:c2:ae:b3:16:20:57:4d:94:3d:52:
                    cd:63:76:8e:ad:32:6d:4f:ca:a0:f2:dd:48:3f:a8:
                    be:69:8b:9b:6c:af:30:59:ac:4b:40:ed:18:85:ec:
                    c9:96:16:34:7e:bc:a1:cf:86:bd:7e:38:c2:db:cb:
                    ee:be:84:e9:07:4f:44:0b:d9:17:ce:2e:a5:ee:2e:
                    a6:aa:e3:6e:cb:06:22:f3:6d:c8:9a:3e:f3:dc:f0:
                    b1:9c:7a:8b:f5:3d:6f:9a:a3:4b:c1:52:be:a8:1c:
                    09:e0:c1:b1:a0:f6:e4:d3:f4:4d:c1:7c:22:81:da:
                    a1:a1:32:49:03:4e:3e:12:7f:8e:21:93:e8:0d:e7:
                    d2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F1:5C:9D:CC:DC:18:A0:72:32:62:B2:66:83:24:4A:36:43:65:8A
            X509v3 Authority Key Identifier:
                keyid:70:48:08:58:FD:EE:A1:92:4A:B8:C6:2E:C3:FC:73:2D:34:02:0A:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:d5:36:7c:92:93:f5:b3:43:85:73:55:87:40:b1:6e:a7:f4:
         28:9d:76:40:3a:fa:65:87:c2:51:25:ab:eb:8e:9e:ef:b1:5a:
         ec:60:68:3c:f6:76:c3:b2:02:5f:1b:72:42:b6:3a:93:a1:6f:
         b5:43:40:fd:fc:ec:07:c6:2f:27:9c:9f:0f:8f:b3:98:01:5e:
         4f:54:8c:e5:c5:a7:ef:15:53:15:38:24:b2:ef:9e:41:b8:af:
         5f:ee:36:da:ea:eb:68:e8:d3:57:33:db:44:d0:60:a3:17:46:
         33:ef:0b:9a:a1:d2:c8:ac:27:99:05:ea:10:42:33:7c:78:02:
         a0:35:60:ab:38:89:e6:4e:0e:01:cb:13:53:1b:c7:b6:0d:b6:
         33:19:f7:46:bc:28:49:f2:61:7c:89:de:88:b3:2c:70:1e:4c:
         70:96:c3:54:75:9e:eb:7f:0b:0b:50:1d:c2:e2:ea:ca:57:a7:
         c6:c3:d7:b1:cf:6b:a8:f6:ba:15:aa:a8:7f:57:b6:46:3f:02:
         37:ff:b4:1b:f5:99:1f:f9:e6:1f:32:d8:77:9f:56:69:e2:99:
         ce:fd:c6:4f:dd:0e:53:7a:92:4c:ef:95:98:47:93:45:f3:fa:
         03:21:89:a2:5c:1b:40:87:ee:db:0f:58:91:dc:d0:0a:45:b1:
         a4:de:02:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8dbBYvU8niTI9tHG2o5xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNDgwODU4ZmRlZWExOTI0YWI4YzYyZWMzZmM3MzJkMzQw
MjBhOWQwHhcNMjUwODIzMDgwMDUyWhcNMjUwODI0MDgwMDUyWjAzMTEwLwYDVQQD
EygwM2YxNWM5ZGNjZGMxOGEwNzIzMjYyYjI2NjgzMjQ0YTM2NDM2NThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArd4uxmXi6XxLdZqUwxoGvMevT0hs
hA6IqMI/qBzOESSYFP6+Cp8ZIfxqx4eZrPwLiftOWLa6QKzodtNLMMzqxgMihIfK
6RxaOUf/J4NiRjE3293eIqJJGGMft8bg4L68fEgcGfA9o4O2r99gydJ2T6E5ZkY+
In5epnr1bsKusxYgV02UPVLNY3aOrTJtT8qg8t1IP6i+aYubbK8wWaxLQO0YhezJ
lhY0fryhz4a9fjjC28vuvoTpB09EC9kXzi6l7i6mquNuywYi823Imj7z3PCxnHqL
9T1vmqNLwVK+qBwJ4MGxoPbk0/RNwXwigdqhoTJJA04+En+OIZPoDefSYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPxXJ3M3BigcjJismaDJEo2Q2WKMB8GA1UdIwQY
MBaAFHBICFj97qGSSrjGLsP8cy00AgqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0VnSVdQM3VvWkpLdU1ZdXdfeHpMVFFDQ3AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kNDk2OGMtMzk2MS00MzgyLWFmZTct
Y2EyOGQ5OTYyNDQ2LzEvY0VnSVdQM3VvWkpLdU1ZdXdfeHpMVFFDQ3AwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9kNDk2OGMtMzk2MS00MzgyLWFmZTctY2EyOGQ5OTYyNDQ2
LzEvY0VnSVdQM3VvWkpLdU1ZdXdfeHpMVFFDQ3AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACtU2fJKT
9bNDhXNVh0Cxbqf0KJ12QDr6ZYfCUSWr646e77Fa7GBoPPZ2w7ICXxtyQrY6k6Fv
tUNA/fzsB8YvJ5yfD4+zmAFeT1SM5cWn7xVTFTgksu+eQbivX+422urraOjTVzPb
RNBgoxdGM+8LmqHSyKwnmQXqEEIzfHgCoDVgqziJ5k4OAcsTUxvHtg22Mxn3Rrwo
SfJhfIneiLMscB5McJbDVHWe638LC1AdwuLqylenxsPXsc9rqPa6Faqof1e2Rj8C
N/+0G/WZH/nmHzLYd59WaeKZzv3GT90OU3qSTO+VmEeTRfP6AyGJolwbQIfu2w9Y
kdzQCkWxpN4CiQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:28 2025 by rpki-client