Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft
File:                     75S8y9TC4P-PeqsEXhSjEfOy-f4.mft (raw, json)
Hash identifier:          nAIyRXw7ASUuP1ppfywncp6zlzEH/U4X2N1vWBeD8YQ=
Subject key identifier:   EC:25:24:92:2D:B4:D9:69:DD:DB:6B:94:FE:35:72:DD:50:CC:75:CD
Authority key identifier: EF:94:BC:CB:D4:C2:E0:FF:8F:7A:AB:04:5E:14:A3:11:F3:B2:F9:FE
Certificate issuer:       /CN=ef94bccbd4c2e0ff8f7aab045e14a311f3b2f9fe
Certificate serial:       0198534475548FC2347451ED177AF4E44CBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft
Manifest number:          01F8
Signing time:             Mon 28 Jul 2025 23:00:51 +0000
Manifest this update:     Mon 28 Jul 2025 23:00:51 +0000
Manifest next update:     Tue 29 Jul 2025 23:00:51 +0000
Files and hashes:         1: 75S8y9TC4P-PeqsEXhSjEfOy-f4.crl (hash: /73Mwt+uhX3v+dtBOPSoXdipLG/XgTKm+9g/CcwP/Eg=)
                          2: x_UGYHPi4KGbhasIbcCsyLRrLvc.roa (hash: TZUXAFaKqC1GafLAz2qnfFwZj2ZE2C3Lq2YMTRrQmKk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:44:75:54:8f:c2:34:74:51:ed:17:7a:f4:e4:4c:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef94bccbd4c2e0ff8f7aab045e14a311f3b2f9fe
        Validity
            Not Before: Jul 28 23:00:51 2025 GMT
            Not After : Jul 29 23:00:51 2025 GMT
        Subject: CN=ec2524922db4d969dddb6b94fe3572dd50cc75cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8d:88:62:d3:02:1a:01:ec:5c:25:8e:4e:1b:
                    fd:ad:c4:53:47:9c:10:33:f0:d3:c8:f7:e4:8b:94:
                    ed:5c:00:dd:0b:7d:cd:e0:b8:18:59:15:ff:0d:77:
                    2b:45:99:f1:6a:79:91:40:e8:1d:a7:36:09:74:53:
                    bf:6f:3c:91:ff:b0:1d:c0:b2:4e:eb:db:56:d4:ca:
                    8f:a3:da:b9:25:ff:67:0e:3e:82:1d:01:95:e7:00:
                    a6:3f:64:03:76:18:e1:46:f2:bf:c1:d9:bc:d7:d9:
                    a6:07:fe:7a:01:21:d5:27:94:38:41:ec:c1:90:de:
                    19:98:57:76:1c:c9:5d:c0:a9:b2:45:0e:eb:42:f3:
                    8b:c2:37:d6:ef:3d:96:d5:cd:3b:30:ba:23:75:dc:
                    50:ad:e3:86:2d:f3:69:5a:5b:a8:55:b2:cb:fd:66:
                    84:e6:03:1b:9e:0c:9e:6e:67:4e:08:0c:63:65:88:
                    ef:79:ee:14:20:58:50:72:54:db:15:28:f7:4a:13:
                    6f:fe:96:c0:81:83:8b:5f:59:5c:72:ec:ab:fe:06:
                    c1:9e:bd:5d:1e:73:4f:ca:f9:0a:58:a0:2d:be:f7:
                    56:14:03:9a:f8:f9:e9:44:cf:55:3a:d9:e0:24:e7:
                    87:ec:e2:f3:ff:4f:be:6f:69:02:b3:9b:a2:1b:98:
                    b5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:25:24:92:2D:B4:D9:69:DD:DB:6B:94:FE:35:72:DD:50:CC:75:CD
            X509v3 Authority Key Identifier:
                keyid:EF:94:BC:CB:D4:C2:E0:FF:8F:7A:AB:04:5E:14:A3:11:F3:B2:F9:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:1b:d8:66:e6:4d:4e:11:fa:92:88:5b:10:5e:78:c5:4c:42:
         02:e7:7c:f3:72:17:74:69:a7:80:c3:47:af:32:0e:71:c8:c8:
         24:26:3e:cc:54:e0:f3:da:be:e8:40:77:33:23:b6:6d:5a:aa:
         0c:7a:42:87:81:67:4c:e3:c1:ea:26:7e:8f:86:e9:09:9e:cd:
         6b:00:e9:62:17:1e:8b:3b:f5:63:54:ca:5a:68:87:12:63:bb:
         7d:ce:8a:17:91:16:d0:85:a2:26:a1:15:33:9d:62:ab:31:d2:
         3b:cb:a8:84:70:3c:97:49:bc:8c:1a:7a:cf:8d:0f:72:cb:4e:
         6f:cb:76:f9:67:6c:0c:c2:25:46:98:85:1c:91:5b:ef:9a:8b:
         c8:a2:5d:64:f0:1f:02:f6:df:cb:52:2c:8a:55:be:d7:88:47:
         a8:78:b8:b3:31:9a:7f:45:2e:e3:f9:64:09:c7:92:ca:54:83:
         49:bc:83:77:f2:3e:b8:6c:81:bd:1e:01:ff:b5:41:31:5f:44:
         69:33:0d:e6:3b:d5:47:d3:e0:3f:a0:34:21:d8:fd:6b:b9:c1:
         a9:f7:d5:bf:25:88:8b:27:cd:5a:29:38:40:91:43:03:47:2b:
         24:d9:ea:39:a6:61:b2:14:14:f0:5e:a8:40:d7:b1:f4:c5:61:
         17:e3:ba:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTRHVUj8I0dFHtF3r05Ey9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmOTRiY2NiZDRjMmUwZmY4ZjdhYWIwNDVlMTRhMzExZjNi
MmY5ZmUwHhcNMjUwNzI4MjMwMDUxWhcNMjUwNzI5MjMwMDUxWjAzMTEwLwYDVQQD
EyhlYzI1MjQ5MjJkYjRkOTY5ZGRkYjZiOTRmZTM1NzJkZDUwY2M3NWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA142IYtMCGgHsXCWOThv9rcRTR5wQ
M/DTyPfki5TtXADdC33N4LgYWRX/DXcrRZnxanmRQOgdpzYJdFO/bzyR/7AdwLJO
69tW1MqPo9q5Jf9nDj6CHQGV5wCmP2QDdhjhRvK/wdm819mmB/56ASHVJ5Q4QezB
kN4ZmFd2HMldwKmyRQ7rQvOLwjfW7z2W1c07MLojddxQreOGLfNpWluoVbLL/WaE
5gMbngyebmdOCAxjZYjvee4UIFhQclTbFSj3ShNv/pbAgYOLX1lccuyr/gbBnr1d
HnNPyvkKWKAtvvdWFAOa+PnpRM9VOtngJOeH7OLz/0++b2kCs5uiG5i1RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwlJJIttNlp3dtrlP41ct1QzHXNMB8GA1UdIwQY
MBaAFO+UvMvUwuD/j3qrBF4UoxHzsvn+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzVTOHk5VEM0UC1QZXFzRVhoU2pFZk95LWY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iZWMyNTMtOWMyOS00NzhjLTk3MTEt
Y2I2M2Q2ZmJiZmM3LzEvNzVTOHk5VEM0UC1QZXFzRVhoU2pFZk95LWY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9iZWMyNTMtOWMyOS00NzhjLTk3MTEtY2I2M2Q2ZmJiZmM3
LzEvNzVTOHk5VEM0UC1QZXFzRVhoU2pFZk95LWY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhxvYZuZN
ThH6kohbEF54xUxCAud883IXdGmngMNHrzIOccjIJCY+zFTg89q+6EB3MyO2bVqq
DHpCh4FnTOPB6iZ+j4bpCZ7NawDpYhceizv1Y1TKWmiHEmO7fc6KF5EW0IWiJqEV
M51iqzHSO8uohHA8l0m8jBp6z40PcstOb8t2+WdsDMIlRpiFHJFb75qLyKJdZPAf
Avbfy1IsilW+14hHqHi4szGaf0Uu4/lkCceSylSDSbyDd/I+uGyBvR4B/7VBMV9E
aTMN5jvVR9PgP6A0Idj9a7nBqffVvyWIiyfNWik4QJFDA0crJNnqOaZhshQU8F6o
QNex9MVhF+O6uQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:40:32 2025 by rpki-client