Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft
File:                     7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft (raw, json)
Hash identifier:          0p+Y0Cr5s7iSKqxpk9UDu1plGzHKoCCg4bL4m54sxvM=
Subject key identifier:   9A:0F:2D:72:90:69:08:A1:D4:9E:66:8F:0C:64:D4:92:FC:5A:61:F3
Authority key identifier: ED:FF:0A:B2:56:62:75:7A:FB:83:16:75:31:92:96:F6:3D:98:9B:69
Certificate issuer:       /CN=edff0ab25662757afb831675319296f63d989b69
Certificate serial:       0198499C62C24B7837B8081FF95A2DA5FE46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft
Manifest number:          1600
Signing time:             Sun 27 Jul 2025 02:00:42 +0000
Manifest this update:     Sun 27 Jul 2025 02:00:42 +0000
Manifest next update:     Mon 28 Jul 2025 02:00:42 +0000
Files and hashes:         1: 7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl (hash: 8fWVW9/EaaEwvZ79LLzyimYqyeDwIwzx8JXnjSNMCNM=)
                          2: HKJ58z8cHDMRoWp61kiI8qNU6_s.roa (hash: xkG+rFTXCO8KSFj1Ggdwhiil4ktc9BxAHUA4oj/CQxc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:9c:62:c2:4b:78:37:b8:08:1f:f9:5a:2d:a5:fe:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edff0ab25662757afb831675319296f63d989b69
        Validity
            Not Before: Jul 27 02:00:42 2025 GMT
            Not After : Jul 28 02:00:42 2025 GMT
        Subject: CN=9a0f2d72906908a1d49e668f0c64d492fc5a61f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:67:7c:59:4f:5d:6c:99:dc:6b:0d:b5:12:58:
                    26:0b:92:2b:9c:a9:b7:bb:c3:52:95:d3:15:77:7b:
                    76:cc:4b:d0:2c:8a:52:32:3a:32:f8:d9:3c:19:1c:
                    04:0e:d7:20:c8:c5:82:d3:37:c3:e9:d6:7f:b1:9a:
                    e7:33:8d:7a:c7:f2:78:58:72:e0:51:3b:dc:d3:1b:
                    cc:38:a1:bb:4b:c6:7a:67:ea:84:33:ca:fc:00:e9:
                    72:47:91:9a:05:8d:10:30:69:96:8f:26:b6:e6:93:
                    1c:df:18:55:7d:bc:6e:03:67:9e:60:09:c6:dd:2a:
                    c6:eb:e0:65:79:3c:e9:04:7d:70:6d:22:8b:b8:3f:
                    dc:da:c3:10:47:a2:a2:9c:03:36:66:20:03:1f:a7:
                    79:3e:33:a4:aa:d8:46:13:29:07:03:21:de:7e:13:
                    23:a7:67:6a:5b:b1:e3:77:fe:28:13:8e:09:bd:57:
                    4d:b2:4c:ae:3e:3a:a1:fc:aa:0f:5a:13:b3:80:d8:
                    19:a9:d9:f3:26:d3:85:a4:9e:6f:e8:2a:c7:82:ae:
                    0a:4f:7b:21:32:1c:68:ef:f6:37:3a:69:70:3c:02:
                    ae:12:65:d3:66:e0:82:d6:65:5b:68:6c:d3:25:52:
                    56:9c:22:1c:a4:49:91:fe:9a:df:69:92:db:3c:a1:
                    97:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:0F:2D:72:90:69:08:A1:D4:9E:66:8F:0C:64:D4:92:FC:5A:61:F3
            X509v3 Authority Key Identifier:
                keyid:ED:FF:0A:B2:56:62:75:7A:FB:83:16:75:31:92:96:F6:3D:98:9B:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:66:68:f2:70:76:c9:0b:a7:96:e6:c1:f0:bd:41:36:26:c7:
         7d:4a:61:b1:60:fe:5d:bb:7b:34:7c:55:40:6f:a7:b7:93:53:
         41:c8:6a:26:59:30:0f:87:43:b2:dd:d9:2d:69:92:66:56:ff:
         04:9b:a1:b0:c6:33:dc:f9:84:66:8d:c5:f9:4b:d7:d0:46:07:
         02:51:91:59:49:2d:92:2d:23:94:5e:37:16:3c:c1:77:64:69:
         2b:aa:9e:d7:f8:f7:ba:bb:ba:f9:44:f0:be:3f:cc:37:f7:05:
         e7:d8:ea:69:c7:ce:c8:94:7e:89:7c:dc:fc:02:22:66:42:06:
         5a:11:c1:d6:37:72:18:65:9a:30:df:53:7b:16:b6:67:17:b3:
         95:46:b9:71:09:17:e6:f2:93:34:74:ca:20:3d:bc:3c:01:3f:
         36:88:17:d6:cc:82:93:5f:7b:ea:10:61:15:f8:e2:ce:4f:2e:
         77:c3:25:2a:d3:12:64:78:b7:3d:2e:d9:0d:ce:d2:a0:b3:82:
         c5:88:e1:01:98:cf:c6:4a:be:ad:83:9f:d3:b5:7a:fb:d0:ec:
         15:25:5a:c8:f4:35:23:e2:31:e3:3a:d6:94:e7:57:78:e4:27:
         a6:c0:82:39:b2:e7:c5:1f:0c:0c:0f:6b:cd:a6:6c:1d:f1:b8:
         69:ce:5b:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJnGLCS3g3uAgf+Votpf5GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZmYwYWIyNTY2Mjc1N2FmYjgzMTY3NTMxOTI5NmY2M2Q5
ODliNjkwHhcNMjUwNzI3MDIwMDQyWhcNMjUwNzI4MDIwMDQyWjAzMTEwLwYDVQQD
Eyg5YTBmMmQ3MjkwNjkwOGExZDQ5ZTY2OGYwYzY0ZDQ5MmZjNWE2MWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0md8WU9dbJncaw21ElgmC5IrnKm3
u8NSldMVd3t2zEvQLIpSMjoy+Nk8GRwEDtcgyMWC0zfD6dZ/sZrnM416x/J4WHLg
UTvc0xvMOKG7S8Z6Z+qEM8r8AOlyR5GaBY0QMGmWjya25pMc3xhVfbxuA2eeYAnG
3SrG6+BleTzpBH1wbSKLuD/c2sMQR6KinAM2ZiADH6d5PjOkqthGEykHAyHefhMj
p2dqW7Hjd/4oE44JvVdNskyuPjqh/KoPWhOzgNgZqdnzJtOFpJ5v6CrHgq4KT3sh
Mhxo7/Y3OmlwPAKuEmXTZuCC1mVbaGzTJVJWnCIcpEmR/prfaZLbPKGXRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJoPLXKQaQih1J5mjwxk1JL8WmHzMB8GA1UdIwQY
MBaAFO3/CrJWYnV6+4MWdTGSlvY9mJtpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2Y4S3NsWmlkWHI3Z3haMU1aS1c5ajJZbTJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9lMmQ3MjktYmE5ZS00NzIzLWEzNjgt
NjQ0YmZkY2ViOWY2LzEvN2Y4S3NsWmlkWHI3Z3haMU1aS1c5ajJZbTJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9lMmQ3MjktYmE5ZS00NzIzLWEzNjgtNjQ0YmZkY2ViOWY2
LzEvN2Y4S3NsWmlkWHI3Z3haMU1aS1c5ajJZbTJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGGZo8nB2
yQunlubB8L1BNibHfUphsWD+Xbt7NHxVQG+nt5NTQchqJlkwD4dDst3ZLWmSZlb/
BJuhsMYz3PmEZo3F+UvX0EYHAlGRWUktki0jlF43FjzBd2RpK6qe1/j3uru6+UTw
vj/MN/cF59jqacfOyJR+iXzc/AIiZkIGWhHB1jdyGGWaMN9Texa2ZxezlUa5cQkX
5vKTNHTKID28PAE/NogX1syCk1976hBhFfjizk8ud8MlKtMSZHi3PS7ZDc7SoLOC
xYjhAZjPxkq+rYOf07V6+9DsFSVayPQ1I+Ix4zrWlOdXeOQnpsCCObLnxR8MDA9r
zaZsHfG4ac5b2w==
-----END CERTIFICATE-----
Generated at Sun Jul 27 03:08:32 2025 by rpki-client