Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.mft
File:                     4e2SJYT2My2woOpx4XX2ql6NN54.mft (raw, json)
Hash identifier:          UQUbWRzOq0C4g+0k9FQQrSKkH+A5BaZ/Dx+nw9R1LYc=
Subject key identifier:   30:05:6E:3B:30:8F:36:1F:26:6A:F9:B2:7C:47:80:9E:41:CF:6C:7E
Authority key identifier: E1:ED:92:25:84:F6:33:2D:B0:A0:EA:71:E1:75:F6:AA:5E:8D:37:9E
Certificate issuer:       /CN=e1ed922584f6332db0a0ea71e175f6aa5e8d379e
Certificate serial:       019849661A2ADF96FE15B78D2CB3F22192DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4e2SJYT2My2woOpx4XX2ql6NN54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.mft
Manifest number:          0735
Signing time:             Sun 27 Jul 2025 01:01:24 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:24 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:24 +0000
Files and hashes:         1: 4e2SJYT2My2woOpx4XX2ql6NN54.crl (hash: mzUP/q7T0mwgG1RtG7i870cclR/MCKXyXyespSiG2tI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4e2SJYT2My2woOpx4XX2ql6NN54.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:1a:2a:df:96:fe:15:b7:8d:2c:b3:f2:21:92:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ed922584f6332db0a0ea71e175f6aa5e8d379e
        Validity
            Not Before: Jul 27 01:01:24 2025 GMT
            Not After : Jul 28 01:01:24 2025 GMT
        Subject: CN=30056e3b308f361f266af9b27c47809e41cf6c7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b9:b4:d6:92:8b:5a:5e:2b:43:76:a0:af:94:
                    99:00:21:c2:04:c0:6c:16:b1:eb:01:c3:71:78:f9:
                    61:5f:a6:91:42:67:01:af:7e:0a:38:8a:19:17:28:
                    9d:f4:4d:86:71:63:9f:bb:7a:38:a6:2f:93:da:d3:
                    dd:ea:5f:32:79:db:bf:af:b7:58:f1:f4:93:de:f9:
                    ff:c0:01:61:60:73:89:e3:62:7b:89:6a:8b:b6:b9:
                    b0:48:ae:9b:87:2d:6a:e2:4c:ae:5a:29:51:6f:97:
                    85:b8:08:87:55:a7:ee:11:ea:33:85:29:48:5a:42:
                    e5:f9:0c:ee:d1:d4:31:42:1d:a3:18:00:98:9b:f7:
                    52:55:bc:a2:84:65:7d:64:a3:a6:7c:a2:24:14:97:
                    00:c8:94:dd:98:eb:8b:b7:f0:e2:85:e1:83:92:ae:
                    45:71:47:82:0f:44:c3:61:f8:66:ee:88:68:32:2e:
                    76:63:2c:56:05:89:3a:dc:e3:7c:20:d8:7f:3d:02:
                    1c:0e:fd:f5:fc:1a:a7:a0:5f:a5:6a:b9:97:c2:ae:
                    ea:e1:5f:53:02:30:74:90:7f:48:04:18:34:81:5e:
                    27:3b:3b:05:9d:72:94:f5:1c:6f:92:0d:82:10:3b:
                    94:9e:7d:3c:3e:78:5a:88:83:d6:2e:1e:ab:3a:d0:
                    34:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:05:6E:3B:30:8F:36:1F:26:6A:F9:B2:7C:47:80:9E:41:CF:6C:7E
            X509v3 Authority Key Identifier:
                keyid:E1:ED:92:25:84:F6:33:2D:B0:A0:EA:71:E1:75:F6:AA:5E:8D:37:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e2SJYT2My2woOpx4XX2ql6NN54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:8d:69:e6:48:10:21:d9:cc:3c:3a:91:b2:09:fc:a8:bc:2c:
         b8:b2:7d:68:4a:d0:6c:01:62:19:2a:73:53:41:fa:2e:e2:a4:
         fb:6b:f5:1e:9f:0d:54:f4:b5:66:6c:df:85:a8:89:9a:5f:66:
         d7:a6:e5:6c:a9:16:72:08:1c:36:59:86:d4:36:60:03:e6:37:
         fe:4f:c6:e0:cb:31:77:ac:b9:ce:96:c5:b2:33:80:2c:9c:f4:
         b6:24:61:fe:32:64:8b:6f:c3:38:dd:54:d3:a8:be:7a:0e:82:
         9f:b2:02:4d:85:02:71:26:83:c4:bd:09:80:b4:16:b2:52:e9:
         99:92:14:4e:e9:1b:80:3b:9a:3d:15:9f:95:b0:17:8f:bb:a0:
         f7:42:a5:0c:1b:ad:bb:f4:eb:d7:d0:3a:41:a3:9c:a1:65:dc:
         c4:c2:2c:9d:06:e7:e1:e8:81:cc:4c:9d:13:c4:36:52:c6:e9:
         4c:66:e5:a8:92:84:54:72:fd:ad:d6:66:69:29:78:59:02:e0:
         3e:0b:dd:87:c0:e1:a6:91:23:40:20:96:f8:b9:38:1f:c1:a9:
         53:95:c7:82:bf:b3:41:df:81:84:ea:2c:4e:f5:30:67:32:35:
         e5:65:53:4b:33:56:f8:3e:d5:2c:04:49:53:b3:0b:c7:d8:5a:
         f9:72:b5:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZhoq35b+FbeNLLPyIZLdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZWQ5MjI1ODRmNjMzMmRiMGEwZWE3MWUxNzVmNmFhNWU4
ZDM3OWUwHhcNMjUwNzI3MDEwMTI0WhcNMjUwNzI4MDEwMTI0WjAzMTEwLwYDVQQD
EygzMDA1NmUzYjMwOGYzNjFmMjY2YWY5YjI3YzQ3ODA5ZTQxY2Y2YzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrm01pKLWl4rQ3agr5SZACHCBMBs
FrHrAcNxePlhX6aRQmcBr34KOIoZFyid9E2GcWOfu3o4pi+T2tPd6l8yedu/r7dY
8fST3vn/wAFhYHOJ42J7iWqLtrmwSK6bhy1q4kyuWilRb5eFuAiHVafuEeozhSlI
WkLl+Qzu0dQxQh2jGACYm/dSVbyihGV9ZKOmfKIkFJcAyJTdmOuLt/DiheGDkq5F
cUeCD0TDYfhm7ohoMi52YyxWBYk63ON8INh/PQIcDv31/BqnoF+larmXwq7q4V9T
AjB0kH9IBBg0gV4nOzsFnXKU9Rxvkg2CEDuUnn08PnhaiIPWLh6rOtA05QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDAFbjswjzYfJmr5snxHgJ5Bz2x+MB8GA1UdIwQY
MBaAFOHtkiWE9jMtsKDqceF19qpejTeeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGUyU0pZVDJNeTJ3b09weDRYWDJxbDZOTjU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi85NGM0ZDgtNDliZi00N2MzLWI5ZTUt
NGU1NzljNjFhNWI3LzEvNGUyU0pZVDJNeTJ3b09weDRYWDJxbDZOTjU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi85NGM0ZDgtNDliZi00N2MzLWI5ZTUtNGU1NzljNjFhNWI3
LzEvNGUyU0pZVDJNeTJ3b09weDRYWDJxbDZOTjU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO41p5kgQ
IdnMPDqRsgn8qLwsuLJ9aErQbAFiGSpzU0H6LuKk+2v1Hp8NVPS1ZmzfhaiJml9m
16blbKkWcggcNlmG1DZgA+Y3/k/G4Msxd6y5zpbFsjOALJz0tiRh/jJki2/DON1U
06i+eg6Cn7ICTYUCcSaDxL0JgLQWslLpmZIUTukbgDuaPRWflbAXj7ug90KlDBut
u/Tr19A6QaOcoWXcxMIsnQbn4eiBzEydE8Q2UsbpTGblqJKEVHL9rdZmaSl4WQLg
Pgvdh8DhppEjQCCW+Lk4H8GpU5XHgr+zQd+BhOosTvUwZzI15WVTSzNW+D7VLARJ
U7MLx9ha+XK1Gw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:30:41 2025 by rpki-client