Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
File:                     NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft (raw, json)
Hash identifier:          6MGlxo2iL6b/NSf2O3hwbfSiZi77qLHAQJflu7Ai11M=
Subject key identifier:   9B:05:1A:00:FC:72:36:78:1B:81:2A:B7:88:F4:08:16:BF:79:DA:F7
Authority key identifier: 34:8F:D9:77:CC:BE:7B:B9:6D:3C:0F:31:74:C9:95:1B:F8:70:FE:B0
Certificate issuer:       /CN=348fd977ccbe7bb96d3c0f3174c9951bf870feb0
Certificate serial:       01984965F5F2A25A71A6BB40E2D27F4A9610
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
Manifest number:          1600
Signing time:             Sun 27 Jul 2025 01:01:15 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:15 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:15 +0000
Files and hashes:         1: NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl (hash: 2TiFXBunSFJ6fXqEt0q5CyE8k6/GmZ1lxd2kfa+kF5A=)
                          2: ZxlhkpSeT22co3ElobaCavDtI1I.roa (hash: RsOVTQimQxoF2zeQAP5zv2htNZo2elUQhLdSPHG+MC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:f5:f2:a2:5a:71:a6:bb:40:e2:d2:7f:4a:96:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=348fd977ccbe7bb96d3c0f3174c9951bf870feb0
        Validity
            Not Before: Jul 27 01:01:15 2025 GMT
            Not After : Jul 28 01:01:15 2025 GMT
        Subject: CN=9b051a00fc7236781b812ab788f40816bf79daf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:45:93:6b:1b:5c:6b:7f:a8:e7:36:d5:0c:15:
                    e9:aa:01:4b:5f:34:73:fb:8d:32:b6:7e:ad:0d:b3:
                    f7:7a:ca:d5:7b:a5:62:7b:77:b4:f1:47:ac:aa:7c:
                    26:61:b5:75:22:3e:f6:1c:17:89:7e:68:a9:45:6d:
                    81:4a:e0:bd:6a:6e:31:2e:fc:8c:40:b6:c6:de:20:
                    0e:70:ac:66:e7:44:1f:c6:73:be:50:aa:75:b4:f4:
                    2f:45:a3:42:71:b3:4c:ab:c8:6d:1a:b7:08:28:1a:
                    fb:80:6b:96:fb:8a:35:eb:41:fa:5c:1c:35:5b:2c:
                    9c:50:58:20:cd:9c:c8:d5:0f:60:fb:d6:8b:3c:53:
                    4e:5c:18:25:f8:0c:10:1d:64:cc:f6:76:78:60:ec:
                    60:01:ee:27:5c:4d:9b:cf:5c:64:d5:d7:db:94:70:
                    1e:5f:ea:23:44:bb:b3:63:96:e2:ca:3c:c2:5a:98:
                    35:f7:6e:79:03:2c:df:97:48:8d:9a:e2:05:f0:e4:
                    fb:ba:f4:32:78:de:e1:46:df:47:ce:56:6e:df:e3:
                    34:85:bb:61:6c:47:c4:5e:9a:8a:bd:04:28:90:02:
                    f6:2b:83:d7:cd:99:bc:0f:00:8a:1d:64:a1:48:ec:
                    4a:13:f9:cf:d6:2f:4f:bb:ee:66:46:c0:36:57:e1:
                    28:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:05:1A:00:FC:72:36:78:1B:81:2A:B7:88:F4:08:16:BF:79:DA:F7
            X509v3 Authority Key Identifier:
                keyid:34:8F:D9:77:CC:BE:7B:B9:6D:3C:0F:31:74:C9:95:1B:F8:70:FE:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:ad:1e:d1:59:1c:4b:4c:e7:4e:4f:f0:b8:a3:8d:25:41:20:
         ec:ae:7a:af:9a:a9:8a:47:67:1e:71:e8:42:9f:a4:23:3b:3e:
         12:8f:d4:d3:ae:32:f2:31:52:10:91:f4:8f:3a:a8:c3:fa:92:
         c7:28:c6:c0:da:93:e5:67:d7:16:3f:70:4d:fc:13:54:13:3d:
         f7:57:51:d9:31:d5:7d:58:e9:d6:ca:18:0a:32:60:6a:0b:53:
         ec:86:6a:44:da:a4:a0:db:6b:e3:be:96:56:e4:9d:e4:9f:91:
         6c:64:40:cb:a0:4e:2b:99:71:f2:7f:b6:10:62:1f:69:62:cb:
         c1:09:1c:3b:1a:bb:ba:86:78:5a:92:a2:2d:6d:cd:3d:ee:32:
         9c:97:af:dc:54:32:9a:6f:ab:aa:82:0f:00:93:7b:85:34:fc:
         c8:32:ab:21:5b:35:9e:61:a4:52:5f:03:67:4d:36:ca:7b:f4:
         b9:11:26:8f:ed:1e:09:a6:9c:9a:4c:60:1d:a1:9d:34:4e:64:
         09:f3:39:34:8a:7f:50:66:d0:54:4c:62:1c:1c:36:ca:fc:e8:
         d8:3e:54:fe:3f:9f:39:22:a1:bd:c9:29:c6:d9:7d:bf:33:18:
         6b:39:03:f0:f3:df:b9:a6:46:e2:a9:a3:67:1f:fe:c5:26:82:
         f6:e9:45:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZfXyolpxprtA4tJ/SpYQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OGZkOTc3Y2NiZTdiYjk2ZDNjMGYzMTc0Yzk5NTFiZjg3
MGZlYjAwHhcNMjUwNzI3MDEwMTE1WhcNMjUwNzI4MDEwMTE1WjAzMTEwLwYDVQQD
Eyg5YjA1MWEwMGZjNzIzNjc4MWI4MTJhYjc4OGY0MDgxNmJmNzlkYWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEWTaxtca3+o5zbVDBXpqgFLXzRz
+40ytn6tDbP3esrVe6Vie3e08UesqnwmYbV1Ij72HBeJfmipRW2BSuC9am4xLvyM
QLbG3iAOcKxm50QfxnO+UKp1tPQvRaNCcbNMq8htGrcIKBr7gGuW+4o160H6XBw1
WyycUFggzZzI1Q9g+9aLPFNOXBgl+AwQHWTM9nZ4YOxgAe4nXE2bz1xk1dfblHAe
X+ojRLuzY5biyjzCWpg19255Ayzfl0iNmuIF8OT7uvQyeN7hRt9HzlZu3+M0hbth
bEfEXpqKvQQokAL2K4PXzZm8DwCKHWShSOxKE/nP1i9Pu+5mRsA2V+EoVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJsFGgD8cjZ4G4Eqt4j0CBa/edr3MB8GA1UdIwQY
MBaAFDSP2XfMvnu5bTwPMXTJlRv4cP6wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTklfWmQ4eS1lN2x0UEE4eGRNbVZHX2h3X3JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8wZGY4MDgtNzQ3My00N2IxLTgxN2Yt
YmU3NzBlMWU2YzEzLzEvTklfWmQ4eS1lN2x0UEE4eGRNbVZHX2h3X3JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8wZGY4MDgtNzQ3My00N2IxLTgxN2YtYmU3NzBlMWU2YzEz
LzEvTklfWmQ4eS1lN2x0UEE4eGRNbVZHX2h3X3JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA260e0Vkc
S0znTk/wuKONJUEg7K56r5qpikdnHnHoQp+kIzs+Eo/U064y8jFSEJH0jzqow/qS
xyjGwNqT5WfXFj9wTfwTVBM991dR2THVfVjp1soYCjJgagtT7IZqRNqkoNtr476W
VuSd5J+RbGRAy6BOK5lx8n+2EGIfaWLLwQkcOxq7uoZ4WpKiLW3NPe4ynJev3FQy
mm+rqoIPAJN7hTT8yDKrIVs1nmGkUl8DZ002ynv0uREmj+0eCaacmkxgHaGdNE5k
CfM5NIp/UGbQVExiHBw2yvzo2D5U/j+fOSKhvckpxtl9vzMYazkD8PPfuaZG4qmj
Zx/+xSaC9ulFrg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:36:08 2025 by rpki-client