Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.mft
File:                     5NMqPhi4TuPFTjT6Z9xo7xnSt7M.mft (raw, json)
Hash identifier:          bqbgOoNLyM6veMfCez0p8Vd1h+9SuInN3ZMlS/mYqDw=
Subject key identifier:   CA:DB:5D:CB:73:75:8D:47:FD:F2:F4:09:FE:8F:08:CA:04:9A:CF:CE
Authority key identifier: E4:D3:2A:3E:18:B8:4E:E3:C5:4E:34:FA:67:DC:68:EF:19:D2:B7:B3
Certificate issuer:       /CN=e4d32a3e18b84ee3c54e34fa67dc68ef19d2b7b3
Certificate serial:       01984B554E4385B319A261E3214628AEFF7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.mft
Manifest number:          0915
Signing time:             Sun 27 Jul 2025 10:02:18 +0000
Manifest this update:     Sun 27 Jul 2025 10:02:18 +0000
Manifest next update:     Mon 28 Jul 2025 10:02:18 +0000
Files and hashes:         1: 5NMqPhi4TuPFTjT6Z9xo7xnSt7M.crl (hash: L9wriTalaC94Ro99SaUSq7KN/l+zmwYstHZsCG0FnLc=)
                          2: 6xUnoc1wAnSrf2dpU2UTzibFAZU.roa (hash: tiXyyLUhxSiIfoFFtQDRMAVp44XARQDTShxLyIGBRKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:55:4e:43:85:b3:19:a2:61:e3:21:46:28:ae:ff:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4d32a3e18b84ee3c54e34fa67dc68ef19d2b7b3
        Validity
            Not Before: Jul 27 10:02:18 2025 GMT
            Not After : Jul 28 10:02:18 2025 GMT
        Subject: CN=cadb5dcb73758d47fdf2f409fe8f08ca049acfce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:41:3b:aa:fc:89:d7:b8:30:b3:bd:49:ee:26:
                    23:0d:33:91:a8:f1:91:52:33:75:5b:ac:19:44:10:
                    e4:4c:db:2f:4d:fd:c1:d0:8b:a4:d6:f3:3e:7c:89:
                    03:19:a1:3d:ce:7c:22:a0:78:50:24:9a:87:ed:18:
                    9e:7f:4b:27:fc:51:d8:16:b3:45:d9:79:fe:91:f2:
                    7d:b7:0d:76:b5:6c:e8:cc:3e:a0:5d:ff:6b:d5:3f:
                    75:73:45:d4:d9:c2:c0:96:56:99:3e:06:b0:5c:00:
                    4a:fb:19:49:88:a2:f6:b9:72:24:bd:89:b1:68:56:
                    62:2a:81:72:a7:40:1a:46:78:3f:66:ac:f3:f5:38:
                    48:5c:c8:c5:bb:a2:db:e2:96:e8:12:35:00:34:00:
                    6a:86:a4:a9:75:96:2b:ab:bc:9b:d8:f5:dc:c2:ad:
                    b4:b4:7e:57:06:de:be:f6:de:51:d5:76:3d:f1:c5:
                    d8:35:9d:b5:35:cd:91:8e:39:80:54:d3:54:00:60:
                    58:9d:1d:9a:15:a2:35:21:ba:74:44:31:63:4e:e8:
                    bf:4d:4d:b9:2f:22:cd:0e:26:69:02:4a:7f:e8:f4:
                    3d:0d:d2:0d:4b:50:62:39:6b:a5:6e:a0:91:3a:67:
                    cf:4c:72:d6:f9:a6:09:94:56:98:b6:a3:29:20:6d:
                    09:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:DB:5D:CB:73:75:8D:47:FD:F2:F4:09:FE:8F:08:CA:04:9A:CF:CE
            X509v3 Authority Key Identifier:
                keyid:E4:D3:2A:3E:18:B8:4E:E3:C5:4E:34:FA:67:DC:68:EF:19:D2:B7:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:13:96:ff:b6:f1:ef:f8:47:2f:90:b0:f9:2d:96:7e:3f:32:
         21:90:7d:53:59:29:e6:bd:bb:4d:b4:75:a1:36:4a:a4:ce:7b:
         cf:4a:5e:94:8b:24:66:e4:d1:b8:95:7a:28:47:63:2b:08:f5:
         0c:67:9a:f7:f3:37:f8:ae:0b:ae:9a:83:89:fe:c9:7f:ac:61:
         1c:bc:6e:bc:bc:1f:4c:4d:ea:2a:37:ec:d3:7e:3e:56:2b:48:
         48:4b:d0:91:db:2e:99:05:00:63:05:50:1c:85:ee:c5:b0:77:
         56:99:8d:4e:bb:fd:2d:f0:dc:c4:a3:6f:58:3e:13:de:c8:38:
         48:33:07:08:e3:22:e5:fe:9f:a7:44:73:40:bb:57:2b:5a:8a:
         39:31:cc:81:10:86:3c:c2:e9:a8:97:39:46:41:56:ca:9f:be:
         b1:5e:4d:8b:81:52:d3:b1:93:5e:2b:a6:54:a7:46:22:00:dd:
         91:7c:42:ca:01:9c:89:74:d6:fe:5a:04:c4:fb:4a:43:5f:49:
         3a:6a:79:26:17:06:38:97:74:2d:87:ba:96:26:19:7b:95:26:
         46:94:cf:21:05:c7:5e:91:01:e4:bf:24:cd:22:3b:15:95:d1:
         86:ab:0d:e0:19:85:db:fb:15:21:ec:a5:25:20:b7:1a:f8:d6:
         cc:4c:59:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLVU5DhbMZomHjIUYorv98MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZDMyYTNlMThiODRlZTNjNTRlMzRmYTY3ZGM2OGVmMTlk
MmI3YjMwHhcNMjUwNzI3MTAwMjE4WhcNMjUwNzI4MTAwMjE4WjAzMTEwLwYDVQQD
EyhjYWRiNWRjYjczNzU4ZDQ3ZmRmMmY0MDlmZThmMDhjYTA0OWFjZmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0E7qvyJ17gws71J7iYjDTORqPGR
UjN1W6wZRBDkTNsvTf3B0Iuk1vM+fIkDGaE9znwioHhQJJqH7Rief0sn/FHYFrNF
2Xn+kfJ9tw12tWzozD6gXf9r1T91c0XU2cLAllaZPgawXABK+xlJiKL2uXIkvYmx
aFZiKoFyp0AaRng/Zqzz9ThIXMjFu6Lb4pboEjUANABqhqSpdZYrq7yb2PXcwq20
tH5XBt6+9t5R1XY98cXYNZ21Nc2RjjmAVNNUAGBYnR2aFaI1Ibp0RDFjTui/TU25
LyLNDiZpAkp/6PQ9DdINS1BiOWulbqCROmfPTHLW+aYJlFaYtqMpIG0JEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMrbXctzdY1H/fL0Cf6PCMoEms/OMB8GA1UdIwQY
MBaAFOTTKj4YuE7jxU40+mfcaO8Z0rezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU5NcVBoaTRUdVBGVGpUNlo5eG83eG5TdDdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9lMDM4MDgtZDJkYi00MGQ5LTgxZjQt
ODdjMmU4ZjM5MTRlLzEvNU5NcVBoaTRUdVBGVGpUNlo5eG83eG5TdDdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9lMDM4MDgtZDJkYi00MGQ5LTgxZjQtODdjMmU4ZjM5MTRl
LzEvNU5NcVBoaTRUdVBGVGpUNlo5eG83eG5TdDdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANROW/7bx
7/hHL5Cw+S2Wfj8yIZB9U1kp5r27TbR1oTZKpM57z0pelIskZuTRuJV6KEdjKwj1
DGea9/M3+K4LrpqDif7Jf6xhHLxuvLwfTE3qKjfs034+VitISEvQkdsumQUAYwVQ
HIXuxbB3VpmNTrv9LfDcxKNvWD4T3sg4SDMHCOMi5f6fp0RzQLtXK1qKOTHMgRCG
PMLpqJc5RkFWyp++sV5Ni4FS07GTXiumVKdGIgDdkXxCygGciXTW/loExPtKQ19J
Omp5JhcGOJd0LYe6liYZe5UmRpTPIQXHXpEB5L8kzSI7FZXRhqsN4BmF2/sVIeyl
JSC3GvjWzExZIg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:38:25 2025 by rpki-client