Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft
File:                     x_BLeLLu35mO3VzB6IZxyNEPGGU.mft (raw, json)
Hash identifier:          xXsv/NkecT5pI7HBwHNWCMZSLvU1MUNmY2QDr25KmYI=
Subject key identifier:   1D:19:F2:D6:E6:D8:C3:FB:3C:16:3A:5F:AA:8C:11:F6:44:22:E6:63
Authority key identifier: C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65
Certificate issuer:       /CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865
Certificate serial:       01984B8A3A1A0188113370F8FC212DF56AB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft
Manifest number:          0EA3
Signing time:             Sun 27 Jul 2025 11:00:06 +0000
Manifest this update:     Sun 27 Jul 2025 11:00:06 +0000
Manifest next update:     Mon 28 Jul 2025 11:00:06 +0000
Files and hashes:         1: 1XXADw1Gi3IFHlfT4TGbyZ0Lb48.roa (hash: wqsUGKMXa3a0bqJDEXOb2Eoz6FNnYl15/F+MOCWnVUU=)
                          2: cztvIRkmsCPXq2-H_4GpkaNyzII.roa (hash: wGz2hIDGmVI+VZFGQswcvNseSHozmizv0NMUMTJqa4c=)
                          3: pw4ID0JvUCs01Bso4I7b8aQC3Kk.roa (hash: 4UmrNvYonno/HoHy5PiUXCmAjmZg7PWwKoiEqb2kwD0=)
                          4: x_BLeLLu35mO3VzB6IZxyNEPGGU.crl (hash: WQvBwXV/pNdGkvjRYVjYC12VEBjOG8XH4OEZVmobHLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 09:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:8a:3a:1a:01:88:11:33:70:f8:fc:21:2d:f5:6a:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865
        Validity
            Not Before: Jul 27 11:00:06 2025 GMT
            Not After : Jul 28 11:00:06 2025 GMT
        Subject: CN=1d19f2d6e6d8c3fb3c163a5faa8c11f64422e663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fd:a7:63:d7:e2:c0:c3:b5:00:61:bc:80:47:
                    20:f5:ac:8c:98:81:c4:83:55:03:42:b3:a8:1c:1f:
                    0b:62:ca:91:3e:be:b1:d2:bb:40:e6:b4:09:e3:5c:
                    7f:bd:c7:7d:00:da:f9:65:75:e0:cd:fa:6e:89:5d:
                    86:09:6c:ba:10:11:8a:b0:db:f0:e4:5d:1c:c4:07:
                    85:95:bd:17:7c:22:20:d0:fc:16:04:a0:4a:bd:80:
                    53:d1:7f:21:36:61:2f:d2:04:cd:eb:fd:8e:2b:5d:
                    28:28:58:49:53:fa:f6:e7:2d:a6:b3:39:40:f2:16:
                    fe:98:27:53:38:2a:f7:bb:c8:47:09:a0:ce:11:87:
                    4c:f8:ec:97:91:a0:cd:89:b7:9e:92:c2:42:45:52:
                    54:64:2b:d6:c1:7f:44:b4:01:55:f1:60:8b:26:7e:
                    52:c0:05:4e:5a:72:fe:63:b7:5a:31:c8:d5:03:ba:
                    04:b5:62:cb:65:59:c9:94:58:ae:e8:42:dc:9e:9d:
                    c5:87:8a:46:bb:fe:69:9e:6f:d0:b8:ed:aa:2b:1e:
                    48:9a:36:a4:00:c2:db:45:01:eb:cb:2a:24:05:44:
                    aa:2d:57:17:68:ee:33:78:31:b4:39:10:d9:3a:06:
                    5d:74:a7:bf:6c:25:1b:ca:db:4b:1f:40:2a:19:83:
                    73:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:19:F2:D6:E6:D8:C3:FB:3C:16:3A:5F:AA:8C:11:F6:44:22:E6:63
            X509v3 Authority Key Identifier:
                keyid:C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:26:39:14:d1:c4:74:b6:43:0d:fd:cf:9b:49:c5:86:88:f9:
         ea:6d:53:26:72:ae:c6:68:27:d6:b5:24:52:90:c3:4f:01:df:
         bc:0e:14:ee:f7:c7:5d:eb:47:aa:55:82:84:9e:c1:cf:e8:23:
         db:d5:8f:a6:46:ac:a6:95:3e:ea:1c:4d:2c:05:0f:22:03:83:
         fe:1b:9e:fb:ab:ba:39:fd:d8:61:ee:f7:a2:98:99:86:69:f3:
         6f:cc:4d:04:af:63:42:61:c5:63:34:78:4a:79:ad:97:0c:c7:
         3a:40:8b:b2:ac:1f:60:a4:55:26:79:ac:3a:e3:77:9c:94:c2:
         11:a0:61:c8:a5:e1:93:45:d0:94:7d:75:69:72:19:32:57:40:
         1b:73:b3:30:ae:1c:32:bb:1f:63:ef:f3:7e:0a:62:61:ad:e0:
         80:55:fd:7f:7f:91:6b:3a:14:67:e5:8c:fa:c7:77:66:15:f5:
         b0:5b:79:75:66:ee:d9:28:27:98:16:c7:70:e8:47:95:af:49:
         26:42:50:96:6d:fa:c1:d6:7a:18:82:cc:10:a3:3b:eb:f7:e8:
         cc:76:06:ec:5d:7f:a7:8f:70:b0:1c:04:0c:ac:6b:fc:7b:d1:
         dd:aa:8c:6e:85:5c:3f:31:bc:b8:bb:6f:b3:8a:5e:f5:a4:44:
         a7:fb:84:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLijoaAYgRM3D4/CEt9Wq2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZjA0Yjc4YjJlZWRmOTk4ZWRkNWNjMWU4ODY3MWM4ZDEw
ZjE4NjUwHhcNMjUwNzI3MTEwMDA2WhcNMjUwNzI4MTEwMDA2WjAzMTEwLwYDVQQD
EygxZDE5ZjJkNmU2ZDhjM2ZiM2MxNjNhNWZhYThjMTFmNjQ0MjJlNjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/2nY9fiwMO1AGG8gEcg9ayMmIHE
g1UDQrOoHB8LYsqRPr6x0rtA5rQJ41x/vcd9ANr5ZXXgzfpuiV2GCWy6EBGKsNvw
5F0cxAeFlb0XfCIg0PwWBKBKvYBT0X8hNmEv0gTN6/2OK10oKFhJU/r25y2mszlA
8hb+mCdTOCr3u8hHCaDOEYdM+OyXkaDNibeeksJCRVJUZCvWwX9EtAFV8WCLJn5S
wAVOWnL+Y7daMcjVA7oEtWLLZVnJlFiu6ELcnp3Fh4pGu/5pnm/QuO2qKx5Imjak
AMLbRQHryyokBUSqLVcXaO4zeDG0ORDZOgZddKe/bCUbyttLH0AqGYNzzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0Z8tbm2MP7PBY6X6qMEfZEIuZjMB8GA1UdIwQY
MBaAFMfwS3iy7t+Zjt1cweiGccjRDxhlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveF9CTGVMTHUzNW1PM1Z6QjZJWnh5TkVQR0dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80NzM5MjQtNmY5OS00NzNkLWEwNzct
ZjQzNzgzOTA5NWQxLzEveF9CTGVMTHUzNW1PM1Z6QjZJWnh5TkVQR0dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy80NzM5MjQtNmY5OS00NzNkLWEwNzctZjQzNzgzOTA5NWQx
LzEveF9CTGVMTHUzNW1PM1Z6QjZJWnh5TkVQR0dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeSY5FNHE
dLZDDf3Pm0nFhoj56m1TJnKuxmgn1rUkUpDDTwHfvA4U7vfHXetHqlWChJ7Bz+gj
29WPpkasppU+6hxNLAUPIgOD/hue+6u6Of3YYe73opiZhmnzb8xNBK9jQmHFYzR4
SnmtlwzHOkCLsqwfYKRVJnmsOuN3nJTCEaBhyKXhk0XQlH11aXIZMldAG3OzMK4c
MrsfY+/zfgpiYa3ggFX9f3+RazoUZ+WM+sd3ZhX1sFt5dWbu2SgnmBbHcOhHla9J
JkJQlm36wdZ6GILMEKM76/fozHYG7F1/p49wsBwEDKxr/HvR3aqMboVcPzG8uLtv
s4pe9aREp/uEgg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 18:40:49 2025 by rpki-client