Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
File:                     Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft (raw, json)
Hash identifier:          moIYrxQVxGp73f0Rr21ZoVsB1KZc0DcA63+/TPZCVP8=
Subject key identifier:   1E:EC:F2:71:32:71:75:C7:1A:29:2B:3D:96:EF:F8:BA:7D:58:E2:98
Authority key identifier: 09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
Certificate issuer:       /CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Certificate serial:       01984EC2E1867C75F924E24A2A16DD7C5FA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
Manifest number:          074C
Signing time:             Mon 28 Jul 2025 02:00:51 +0000
Manifest this update:     Mon 28 Jul 2025 02:00:51 +0000
Manifest next update:     Tue 29 Jul 2025 02:00:51 +0000
Files and hashes:         1: 5OdHvHOcZkrao-9cj9p2twVtXj0.roa (hash: XE/cbPsbZGNTjgltCjh6PwbFsSQa/FeH5vMG4ogZQBU=)
                          2: BxevXOZBdFUOOljteOuO-Rxt-CY.roa (hash: 3iKh9PQRS6dYBM+vLpV5Vh4W7QUExMRDQ5j2EO0fnVo=)
                          3: Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl (hash: EWITwvL1jnPmzju3qYdXBPtRA9d09HamCth1QUKp5js=)
                          4: dxDHiWZSI0UaIHekmjGJ3sxW6wY.roa (hash: miwDVBoTIblNIC6j43ewfXiSRHSZo0go2veqU8bISQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 02:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4e:c2:e1:86:7c:75:f9:24:e2:4a:2a:16:dd:7c:5f:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
        Validity
            Not Before: Jul 28 02:00:51 2025 GMT
            Not After : Jul 29 02:00:51 2025 GMT
        Subject: CN=1eecf271327175c71a292b3d96eff8ba7d58e298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ab:5d:8d:a4:d4:eb:7b:79:a3:6a:56:9e:c3:
                    e2:df:3d:b7:ff:7f:03:33:ba:1b:6f:43:27:03:df:
                    b7:ad:f9:d6:6a:b3:d3:54:66:0c:a2:5d:ba:fb:f0:
                    49:98:8c:bf:0f:27:7a:be:ff:ff:e1:54:0c:d2:29:
                    d7:dd:16:af:7c:e1:ed:1b:1f:17:88:a1:7b:b0:7e:
                    26:b2:79:e4:36:69:a1:63:c2:05:92:16:5b:69:bb:
                    e6:eb:de:f2:ca:dd:8c:a5:e0:0d:f0:17:b5:d3:84:
                    18:bd:c9:e0:c5:ff:f0:5d:3f:5e:ba:aa:a7:d8:3d:
                    e2:52:b8:c1:56:26:78:e3:dc:d7:15:2f:9c:97:f9:
                    df:17:64:f3:71:31:de:f8:39:ad:d6:4d:b1:04:2d:
                    e4:91:55:cb:1f:b7:1d:91:d9:b5:b1:bf:65:f0:5b:
                    30:71:1f:d5:e9:76:63:90:ab:21:9d:49:1c:35:bc:
                    20:fd:e6:2e:24:02:3d:e6:b8:da:0c:69:df:91:6a:
                    ab:42:0d:a9:c0:81:23:b2:02:36:59:aa:31:0a:02:
                    6d:04:89:de:f4:db:2c:77:c0:cf:72:fe:14:7b:34:
                    17:36:d3:27:6c:3f:75:dd:ee:0a:aa:d7:6d:87:7e:
                    09:d4:93:0c:c8:70:7e:96:f8:20:eb:a1:f8:50:1e:
                    e9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:EC:F2:71:32:71:75:C7:1A:29:2B:3D:96:EF:F8:BA:7D:58:E2:98
            X509v3 Authority Key Identifier:
                keyid:09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:34:ad:7d:87:3d:15:d2:7e:a1:66:bc:cd:5c:70:9a:0c:68:
         6a:2b:15:5c:2c:8e:db:0d:d6:79:74:d6:d9:e0:de:fd:d2:3c:
         67:75:5e:89:fa:64:fe:3d:bc:4c:94:4c:37:8b:f1:c9:3b:9d:
         fd:cd:6b:1b:4c:96:61:16:1a:33:97:19:7b:68:b9:e2:f9:f3:
         1d:3d:d6:af:9a:eb:3b:94:5c:94:ef:f0:e8:35:ee:cf:43:0c:
         08:b1:96:91:8c:94:c0:94:ad:0e:4a:e9:c1:03:94:af:77:54:
         47:8a:37:e9:18:71:de:59:cc:f9:53:f4:a1:22:80:a6:ee:61:
         27:ae:33:97:98:68:67:d6:f9:a0:24:bc:00:95:74:bb:6d:12:
         42:31:9f:6a:77:e0:02:c1:4f:f7:5a:e2:3c:e1:88:4d:ac:4a:
         75:5e:6a:b5:b8:ff:ba:be:2e:88:81:6b:7a:63:f6:96:29:c5:
         a3:05:12:57:5b:bc:96:15:1e:f6:f0:e9:8c:0b:21:e0:63:8d:
         98:f6:e8:67:1a:7b:43:a2:a8:8b:dd:51:1f:78:b4:3c:00:c7:
         46:7c:ad:d7:12:57:10:b0:4e:b2:03:42:08:64:4d:7a:97:06:
         1e:ab:8e:bd:67:06:75:92:5b:16:66:1a:c1:f7:06:a2:25:9a:
         6a:b5:45:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhOwuGGfHX5JOJKKhbdfF+mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZWU3ZWUwZjc1YjcxNjRhYzc1OTYxOTdjN2YxMjFkNmZj
YTE1NzYwHhcNMjUwNzI4MDIwMDUxWhcNMjUwNzI5MDIwMDUxWjAzMTEwLwYDVQQD
EygxZWVjZjI3MTMyNzE3NWM3MWEyOTJiM2Q5NmVmZjhiYTdkNThlMjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuatdjaTU63t5o2pWnsPi3z23/38D
M7obb0MnA9+3rfnWarPTVGYMol26+/BJmIy/Dyd6vv//4VQM0inX3RavfOHtGx8X
iKF7sH4msnnkNmmhY8IFkhZbabvm697yyt2MpeAN8Be104QYvcngxf/wXT9euqqn
2D3iUrjBViZ449zXFS+cl/nfF2TzcTHe+Dmt1k2xBC3kkVXLH7cdkdm1sb9l8Fsw
cR/V6XZjkKshnUkcNbwg/eYuJAI95rjaDGnfkWqrQg2pwIEjsgI2WaoxCgJtBIne
9Nssd8DPcv4UezQXNtMnbD913e4Kqtdth34J1JMMyHB+lvgg66H4UB7pawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7s8nEycXXHGikrPZbv+Lp9WOKYMB8GA1UdIwQY
MBaAFAnufuD3W3FkrHWWGXx/Eh1vyhV2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2U1LTRQZGJjV1NzZFpZWmZIOFNIV19LRlhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kYmU1MGEtMmNhMS00MzYyLWI1ZTct
NjY4M2M4ZmM5ZTViLzEvQ2U1LTRQZGJjV1NzZFpZWmZIOFNIV19LRlhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9kYmU1MGEtMmNhMS00MzYyLWI1ZTctNjY4M2M4ZmM5ZTVi
LzEvQ2U1LTRQZGJjV1NzZFpZWmZIOFNIV19LRlhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbTStfYc9
FdJ+oWa8zVxwmgxoaisVXCyO2w3WeXTW2eDe/dI8Z3Veifpk/j28TJRMN4vxyTud
/c1rG0yWYRYaM5cZe2i54vnzHT3Wr5rrO5RclO/w6DXuz0MMCLGWkYyUwJStDkrp
wQOUr3dUR4o36Rhx3lnM+VP0oSKApu5hJ64zl5hoZ9b5oCS8AJV0u20SQjGfanfg
AsFP91riPOGITaxKdV5qtbj/ur4uiIFremP2linFowUSV1u8lhUe9vDpjAsh4GON
mPboZxp7Q6Koi91RH3i0PADHRnyt1xJXELBOsgNCCGRNepcGHquOvWcGdZJbFmYa
wfcGoiWaarVFvA==
-----END CERTIFICATE-----
Generated at Mon Jul 28 10:12:00 2025 by rpki-client