Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft
File:                     gU7b0ZY0y7kaDS2v11nUyafne3o.mft (raw, json)
Hash identifier:          DJXoIZk/3fp2AxE9V11+cjw6eBeWXAzbbtY5nLQliZs=
Subject key identifier:   42:47:E5:85:45:9F:6A:C1:D5:AE:F4:6D:FC:6A:60:87:9B:B2:A7:91
Authority key identifier: 81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A
Certificate issuer:       /CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
Certificate serial:       01984889B7C2DBE037ADF22D5C236AE386EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft
Manifest number:          1603
Signing time:             Sat 26 Jul 2025 21:00:41 +0000
Manifest this update:     Sat 26 Jul 2025 21:00:41 +0000
Manifest next update:     Sun 27 Jul 2025 21:00:41 +0000
Files and hashes:         1: _ZGs7yyYUfcWFHaeoN_irFYY-Fs.roa (hash: k/ZQQ+Kv/qHUrbi6eDGukQ6+rynVgaxf2EU7N8rlEaQ=)
                          2: gU7b0ZY0y7kaDS2v11nUyafne3o.crl (hash: kOcwXGeuhCH2rbxN3ARJZ4OX4uomjM1wvL87is3FKHc=)
                          3: xpTRCuHlYWLPipg1pf1wuJHDIPg.roa (hash: 8yVx7sKih/ir7FZHTNGaky/UBkdstIszyQkTRTd/9nQ=)
                          4: ywM-ydmbzESoETxNsRnDQ6bbYxg.roa (hash: GmNC6UbYgSd9tbGR+GgvLCmczbY/RBGea7VtxVomphs=)
                          5: zticNdKOcKpGZ7y9nSwo2z1Ata4.roa (hash: 8+4soy6gmx5EG7p1nRpzUiPyWHyd7/QxOctDatWj2cE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:89:b7:c2:db:e0:37:ad:f2:2d:5c:23:6a:e3:86:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
        Validity
            Not Before: Jul 26 21:00:41 2025 GMT
            Not After : Jul 27 21:00:41 2025 GMT
        Subject: CN=4247e585459f6ac1d5aef46dfc6a60879bb2a791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ed:d1:cd:53:c9:d1:c8:0d:6b:a8:7e:1c:70:
                    cc:07:9c:3f:85:24:13:8a:31:01:ca:0c:bd:70:1d:
                    49:ba:0e:a7:53:a7:8f:3f:73:60:66:3e:fd:7f:3f:
                    6e:63:6c:4b:32:50:98:90:c6:cc:1c:e7:d3:09:5d:
                    c0:04:7c:09:52:b4:6a:ab:a7:e9:6e:c6:2e:d8:16:
                    78:7f:07:14:a0:ba:73:74:e1:c1:30:10:3d:88:65:
                    f2:18:9a:3f:da:54:e3:9d:de:13:18:37:8f:bf:52:
                    bf:79:f2:c6:ba:c3:19:df:01:2f:ba:2c:c6:92:60:
                    c9:9a:29:bb:28:b4:73:b2:db:f4:7e:22:60:fc:22:
                    ab:8c:fb:2f:f3:dc:84:60:57:45:0f:ec:97:af:8c:
                    01:81:44:82:b1:bf:d3:b6:33:e6:1b:a4:5e:c1:a7:
                    5c:68:c1:1b:10:60:0b:71:09:ad:60:37:cd:88:99:
                    63:cb:be:d7:df:ef:ec:53:73:fe:60:1f:de:3b:b2:
                    b0:ba:96:88:00:15:0f:10:42:4d:1f:7f:71:e2:b1:
                    77:d0:ea:a0:bc:5f:7e:32:f3:3e:80:69:f6:bb:3e:
                    d6:43:67:96:63:3b:93:5f:d8:53:23:95:12:94:96:
                    7c:47:f5:81:22:18:33:64:1c:00:91:f7:e6:48:5c:
                    df:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:47:E5:85:45:9F:6A:C1:D5:AE:F4:6D:FC:6A:60:87:9B:B2:A7:91
            X509v3 Authority Key Identifier:
                keyid:81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:b4:d1:7d:cb:86:e9:2f:c7:f5:b5:1a:b5:45:57:51:26:6f:
         d4:7e:90:33:1d:c0:19:9f:ab:f3:95:a2:b8:05:93:57:e9:70:
         e5:7e:d8:1e:55:75:6c:80:ee:80:cf:75:e8:eb:37:b5:ea:cd:
         85:bf:c7:94:bd:ea:48:72:9b:25:78:01:cc:0e:84:02:b4:92:
         0a:9f:1d:f5:83:3c:01:50:75:81:24:1f:d2:98:fe:f2:51:a8:
         40:f5:1c:7f:22:47:5c:dd:ca:db:76:14:80:83:21:75:35:32:
         75:62:98:a6:ba:73:9a:34:64:a7:65:c8:0a:e0:2f:ca:4e:75:
         a4:54:61:eb:c8:37:83:59:4f:f1:26:12:41:f4:d1:02:96:bb:
         eb:9a:a5:fc:2e:ec:85:2e:8b:3c:58:45:b5:f3:cc:82:4a:74:
         b0:dd:8d:16:69:9a:40:43:15:da:c2:90:bb:63:7c:82:6a:dc:
         bc:f3:78:f0:38:2f:ce:57:42:f0:81:fb:f6:25:87:1c:dd:4f:
         6b:a7:4c:49:f6:3b:eb:42:d8:f4:27:19:58:76:14:7b:57:92:
         95:ad:95:48:78:4b:c8:00:35:97:50:e3:b6:4d:9c:c0:86:d0:
         5f:74:cd:0f:c0:75:46:35:e4:99:6b:96:8c:35:14:6c:82:9a:
         d8:73:59:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIibfC2+A3rfItXCNq44buMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNGVkYmQxOTYzNGNiYjkxYTBkMmRhZmQ3NTlkNGM5YTdl
NzdiN2EwHhcNMjUwNzI2MjEwMDQxWhcNMjUwNzI3MjEwMDQxWjAzMTEwLwYDVQQD
Eyg0MjQ3ZTU4NTQ1OWY2YWMxZDVhZWY0NmRmYzZhNjA4NzliYjJhNzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+3RzVPJ0cgNa6h+HHDMB5w/hSQT
ijEBygy9cB1Jug6nU6ePP3NgZj79fz9uY2xLMlCYkMbMHOfTCV3ABHwJUrRqq6fp
bsYu2BZ4fwcUoLpzdOHBMBA9iGXyGJo/2lTjnd4TGDePv1K/efLGusMZ3wEvuizG
kmDJmim7KLRzstv0fiJg/CKrjPsv89yEYFdFD+yXr4wBgUSCsb/TtjPmG6Rewadc
aMEbEGALcQmtYDfNiJljy77X3+/sU3P+YB/eO7KwupaIABUPEEJNH39x4rF30Oqg
vF9+MvM+gGn2uz7WQ2eWYzuTX9hTI5USlJZ8R/WBIhgzZBwAkffmSFzf+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJH5YVFn2rB1a70bfxqYIebsqeRMB8GA1UdIwQY
MBaAFIFO29GWNMu5Gg0tr9dZ1Mmn53t6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1U3YjBaWTB5N2thRFMydjExblV5YWZuZTNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9lODJkZTktMjVmNC00NjZlLTljMGMt
YzA4OTk3YTdhMDhmLzEvZ1U3YjBaWTB5N2thRFMydjExblV5YWZuZTNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9lODJkZTktMjVmNC00NjZlLTljMGMtYzA4OTk3YTdhMDhm
LzEvZ1U3YjBaWTB5N2thRFMydjExblV5YWZuZTNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfrTRfcuG
6S/H9bUatUVXUSZv1H6QMx3AGZ+r85WiuAWTV+lw5X7YHlV1bIDugM916Os3terN
hb/HlL3qSHKbJXgBzA6EArSSCp8d9YM8AVB1gSQf0pj+8lGoQPUcfyJHXN3K23YU
gIMhdTUydWKYprpzmjRkp2XICuAvyk51pFRh68g3g1lP8SYSQfTRApa765ql/C7s
hS6LPFhFtfPMgkp0sN2NFmmaQEMV2sKQu2N8gmrcvPN48DgvzldC8IH79iWHHN1P
a6dMSfY760LY9CcZWHYUe1eSla2VSHhLyAA1l1Djtk2cwIbQX3TND8B1RjXkmWuW
jDUUbIKa2HNZ+g==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:16:05 2025 by rpki-client