Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
File:                     CAdgG8REIsjSOjzXK_6hu_KgVjo.mft (raw, json)
Hash identifier:          FAyGpnzFoKfrqlJzujAxgx7gQVgDHXwEWC6tvq6TO+E=
Subject key identifier:   7B:A2:09:8B:36:F8:BA:73:CC:12:72:70:10:C2:9A:73:5C:1E:AD:E1
Authority key identifier: 08:07:60:1B:C4:44:22:C8:D2:3A:3C:D7:2B:FE:A1:BB:F2:A0:56:3A
Certificate issuer:       /CN=0807601bc44422c8d23a3cd72bfea1bbf2a0563a
Certificate serial:       0198496688B03B4723E94B747274309D8D7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
Manifest number:          1601
Signing time:             Sun 27 Jul 2025 01:01:53 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:53 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:53 +0000
Files and hashes:         1: 3O8SjjWsPfLABa3jrVc6djhtyEs.roa (hash: HeQvLqUlnnayNmN/r7cxXFLVXADWQxZs3mFygr2LMHc=)
                          2: CAdgG8REIsjSOjzXK_6hu_KgVjo.crl (hash: Qbvbq4JMglP5PyAjF3IiAbTuaPodHQ1FOqvL48La9l8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:88:b0:3b:47:23:e9:4b:74:72:74:30:9d:8d:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0807601bc44422c8d23a3cd72bfea1bbf2a0563a
        Validity
            Not Before: Jul 27 01:01:53 2025 GMT
            Not After : Jul 28 01:01:53 2025 GMT
        Subject: CN=7ba2098b36f8ba73cc12727010c29a735c1eade1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1e:58:03:7f:c6:15:c0:ff:58:6a:b2:45:26:
                    e7:ec:7e:22:28:2b:a9:8f:22:b2:82:ba:fa:ce:5d:
                    c8:80:6a:78:fe:f1:d7:d9:a1:f1:26:e6:5b:3f:40:
                    d2:d9:72:96:6c:7a:57:1e:44:14:a2:b0:6e:0d:83:
                    eb:6a:f5:e5:fa:14:98:36:f2:b4:b1:17:bf:23:47:
                    54:83:ad:be:e3:8d:14:c9:85:e3:e1:dd:77:fc:65:
                    f5:4a:84:0b:39:16:9c:ee:0f:5e:38:fb:b8:40:d8:
                    1a:56:9f:29:d3:34:cf:06:bb:3c:6f:18:dc:97:d3:
                    ba:b9:b8:32:ad:d9:6b:e8:d5:c0:5b:8d:ce:e6:55:
                    17:42:56:f3:0d:8c:b0:f2:e0:05:8e:40:9c:57:8b:
                    88:f0:7d:da:77:49:1c:5b:ac:60:ad:ad:96:cd:0f:
                    f8:54:5c:79:d5:64:12:99:cb:66:e0:5f:3b:bc:1d:
                    71:d4:dc:f3:7f:02:ec:0d:5d:fe:70:47:13:a3:91:
                    d0:df:dd:14:17:5e:1e:4c:d9:41:11:f8:65:9c:62:
                    91:41:02:5c:94:3e:37:1b:e5:71:7c:9c:4b:fe:5b:
                    4c:c5:2c:aa:a4:57:b7:1a:f3:e4:2e:37:f7:80:6f:
                    1d:86:e6:0a:52:fd:cd:e9:48:53:fd:f1:79:80:8c:
                    e7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A2:09:8B:36:F8:BA:73:CC:12:72:70:10:C2:9A:73:5C:1E:AD:E1
            X509v3 Authority Key Identifier:
                keyid:08:07:60:1B:C4:44:22:C8:D2:3A:3C:D7:2B:FE:A1:BB:F2:A0:56:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:2a:3d:9a:9b:15:1d:29:ea:20:ec:23:b2:b5:9c:18:f8:67:
         23:f8:cd:11:d4:3a:31:83:b9:cc:07:99:1e:5f:d5:27:cf:f2:
         85:8f:b7:3d:9b:13:7a:28:2c:46:cd:5a:87:54:66:55:ff:bd:
         73:51:a7:1d:bd:36:50:47:98:86:5c:25:f4:33:6c:95:14:5b:
         31:3b:4a:08:f6:3f:d0:78:d4:44:b5:ef:53:4f:cc:ac:e3:95:
         da:b7:59:f3:19:b5:c0:bd:6f:ad:a0:57:39:7b:06:7d:46:b0:
         11:8b:01:65:6e:ee:a2:6b:3a:d1:f0:d4:f4:a2:3b:23:d2:61:
         02:b5:ec:0a:71:d6:71:78:0f:d6:a1:0a:16:b8:50:7c:86:5f:
         b5:fc:c4:a2:f8:8c:c9:62:a8:04:56:9f:c2:81:45:05:76:ee:
         d3:d2:9b:d4:16:b9:e5:31:b5:e0:94:15:89:a1:8c:0d:63:03:
         d6:b2:dc:29:88:39:43:a5:ce:7b:f7:7e:17:5d:dd:ec:2c:73:
         b4:7d:7c:f1:24:bf:fe:d7:33:74:7c:7e:65:0e:ca:dd:64:b2:
         b2:f8:23:90:44:87:3c:7f:1e:71:3a:fa:25:a2:8b:eb:53:df:
         20:2d:88:45:f7:7c:2a:97:45:36:84:82:6c:54:34:02:74:6a:
         12:5c:89:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZoiwO0cj6Ut0cnQwnY17MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MDc2MDFiYzQ0NDIyYzhkMjNhM2NkNzJiZmVhMWJiZjJh
MDU2M2EwHhcNMjUwNzI3MDEwMTUzWhcNMjUwNzI4MDEwMTUzWjAzMTEwLwYDVQQD
Eyg3YmEyMDk4YjM2ZjhiYTczY2MxMjcyNzAxMGMyOWE3MzVjMWVhZGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh5YA3/GFcD/WGqyRSbn7H4iKCup
jyKygrr6zl3IgGp4/vHX2aHxJuZbP0DS2XKWbHpXHkQUorBuDYPravXl+hSYNvK0
sRe/I0dUg62+440UyYXj4d13/GX1SoQLORac7g9eOPu4QNgaVp8p0zTPBrs8bxjc
l9O6ubgyrdlr6NXAW43O5lUXQlbzDYyw8uAFjkCcV4uI8H3ad0kcW6xgra2WzQ/4
VFx51WQSmctm4F87vB1x1NzzfwLsDV3+cEcTo5HQ390UF14eTNlBEfhlnGKRQQJc
lD43G+VxfJxL/ltMxSyqpFe3GvPkLjf3gG8dhuYKUv3N6UhT/fF5gIznoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHuiCYs2+LpzzBJycBDCmnNcHq3hMB8GA1UdIwQY
MBaAFAgHYBvERCLI0jo81yv+obvyoFY6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0FkZ0c4UkVJc2pTT2p6WEtfNmh1X0tnVmpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8xODI2MjEtY2M5OS00Mzg1LTkzNjgt
NWQ2MWZlMjYzMWQwLzEvQ0FkZ0c4UkVJc2pTT2p6WEtfNmh1X0tnVmpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8xODI2MjEtY2M5OS00Mzg1LTkzNjgtNWQ2MWZlMjYzMWQw
LzEvQ0FkZ0c4UkVJc2pTT2p6WEtfNmh1X0tnVmpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjio9mpsV
HSnqIOwjsrWcGPhnI/jNEdQ6MYO5zAeZHl/VJ8/yhY+3PZsTeigsRs1ah1RmVf+9
c1GnHb02UEeYhlwl9DNslRRbMTtKCPY/0HjURLXvU0/MrOOV2rdZ8xm1wL1vraBX
OXsGfUawEYsBZW7uoms60fDU9KI7I9JhArXsCnHWcXgP1qEKFrhQfIZftfzEoviM
yWKoBFafwoFFBXbu09Kb1Ba55TG14JQViaGMDWMD1rLcKYg5Q6XOe/d+F13d7Cxz
tH188SS//tczdHx+ZQ7K3WSysvgjkESHPH8ecTr6JaKL61PfIC2IRfd8KpdFNoSC
bFQ0AnRqElyJmA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:16:02 2025 by rpki-client