Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
File:                     O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft (raw, json)
Hash identifier:          YuYKPYdJNicpHE/jCrHzw8F3/Qs9P+U9GYBtXMtyrhk=
Subject key identifier:   76:8C:BE:B2:45:AB:DC:AA:58:1E:D8:6A:D7:02:C8:55:A8:19:29:2F
Authority key identifier: 3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96
Certificate issuer:       /CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
Certificate serial:       019842F4FEAC717479858A7391504D39443E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
Manifest number:          0208
Signing time:             Fri 25 Jul 2025 19:00:08 +0000
Manifest this update:     Fri 25 Jul 2025 19:00:08 +0000
Manifest next update:     Sat 26 Jul 2025 19:00:08 +0000
Files and hashes:         1: O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl (hash: yhqUT7Cw2Mf0XYkVtd6hI6tZwF7MOPuq2yDNCN2VaxU=)
                          2: f0dwYiFEnOu3_JgUSzuAzEREF1g.roa (hash: finZQb06qlnebE/7uJEc9oVyw8NWrlEdleXzIM/XsmQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 17:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:42:f4:fe:ac:71:74:79:85:8a:73:91:50:4d:39:44:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
        Validity
            Not Before: Jul 25 19:00:08 2025 GMT
            Not After : Jul 26 19:00:08 2025 GMT
        Subject: CN=768cbeb245abdcaa581ed86ad702c855a819292f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:25:da:d5:1d:fd:e2:23:4e:0e:51:4b:41:65:
                    65:46:72:ad:05:b8:c7:41:af:9d:a2:fa:c7:cc:cb:
                    27:48:dc:ca:ad:d6:fd:1b:c0:6a:64:80:3c:05:bd:
                    b3:35:ec:75:38:e0:6c:6f:4e:c7:7b:75:f9:be:da:
                    29:a8:38:4d:41:70:57:3b:8a:f9:21:4d:3f:d2:34:
                    1e:0c:bf:95:34:b9:fb:1d:7c:a5:e5:e2:8c:c9:d2:
                    09:88:46:de:09:ba:2b:07:fa:3d:dc:24:d9:13:d5:
                    2f:06:37:5d:bc:c2:67:cf:f7:04:32:b8:18:2e:4b:
                    97:bf:fb:a6:88:28:53:01:b6:a3:ad:2b:f4:e1:6b:
                    2b:c4:5b:72:50:6e:1e:97:ee:20:66:3c:88:28:16:
                    8d:a2:91:a2:5c:c1:c1:64:ca:c6:01:05:51:40:4e:
                    64:f0:be:27:dd:a5:6b:cf:bb:6a:a3:20:10:a8:c3:
                    d7:40:03:c2:d2:a4:14:31:7d:0b:90:c8:b2:a4:ad:
                    70:e1:b2:24:b2:95:6a:ab:63:d9:a7:bf:b2:a8:48:
                    da:cf:f8:2d:8d:f8:9b:fc:02:02:90:db:a3:2c:d6:
                    55:14:38:5d:0b:1a:5c:dd:93:7c:65:55:fe:75:ec:
                    40:e5:f5:f9:b8:24:e6:04:7f:fd:ef:12:e2:a8:2c:
                    d9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:8C:BE:B2:45:AB:DC:AA:58:1E:D8:6A:D7:02:C8:55:A8:19:29:2F
            X509v3 Authority Key Identifier:
                keyid:3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:61:16:71:5a:12:d2:36:97:a3:ba:21:05:34:c2:b4:7f:47:
         7d:68:d4:7d:0a:c6:f8:99:a3:41:48:18:df:01:f5:84:b5:05:
         6f:1c:3f:03:98:8a:63:96:fa:0c:c7:ec:7b:d2:7b:1b:fc:0b:
         0a:ef:dd:2e:20:7d:3e:fe:ad:89:11:28:7f:67:a7:aa:3b:e4:
         13:ec:8d:3b:3e:31:b8:4a:d6:5b:44:7b:c2:08:34:35:17:24:
         d2:cb:a1:c1:51:05:e7:6a:b4:c0:1a:24:10:ef:9a:7c:94:32:
         76:43:23:ce:ad:1e:65:42:a2:be:30:bb:9c:54:87:3b:89:25:
         c1:89:aa:29:4e:27:82:73:51:1c:6d:90:42:c6:ee:2e:c5:a3:
         d1:01:9c:a9:3c:47:fc:49:9f:ba:bb:f3:7d:d2:29:42:10:83:
         02:fd:8f:c1:f6:5c:f5:2c:38:57:7b:d5:a7:84:1e:e2:c9:13:
         4b:62:64:75:e0:41:24:be:ba:11:ef:95:d3:23:3c:b8:f7:30:
         d2:2c:19:4d:f7:cd:21:fa:9d:38:03:cf:a4:a6:23:34:59:98:
         51:21:a9:2d:5a:96:0a:0e:77:a7:4e:21:cf:e7:9a:8c:97:e7:
         ad:0b:98:3d:ac:ec:26:aa:bf:60:91:9f:ab:ea:dc:f4:e4:0e:
         47:03:4b:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhC9P6scXR5hYpzkVBNOUQ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNThlYjU4YjVjNjFhMjNkMGYyNDY2YzVjZDczY2U5ZWM5
NjViOTYwHhcNMjUwNzI1MTkwMDA4WhcNMjUwNzI2MTkwMDA4WjAzMTEwLwYDVQQD
Eyg3NjhjYmViMjQ1YWJkY2FhNTgxZWQ4NmFkNzAyYzg1NWE4MTkyOTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyXa1R394iNODlFLQWVlRnKtBbjH
Qa+dovrHzMsnSNzKrdb9G8BqZIA8Bb2zNex1OOBsb07He3X5vtopqDhNQXBXO4r5
IU0/0jQeDL+VNLn7HXyl5eKMydIJiEbeCborB/o93CTZE9UvBjddvMJnz/cEMrgY
LkuXv/umiChTAbajrSv04WsrxFtyUG4el+4gZjyIKBaNopGiXMHBZMrGAQVRQE5k
8L4n3aVrz7tqoyAQqMPXQAPC0qQUMX0LkMiypK1w4bIkspVqq2PZp7+yqEjaz/gt
jfib/AICkNujLNZVFDhdCxpc3ZN8ZVX+dexA5fX5uCTmBH/97xLiqCzZbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHaMvrJFq9yqWB7YatcCyFWoGSkvMB8GA1UdIwQY
MBaAFDtY61i1xhoj0PJGbFzXPOnslluWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzFqcldMWEdHaVBROGtac1hOYzg2ZXlXVzVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9mMmUxNTAtM2U5ZS00ZjE4LWE1M2Qt
NzJhYzc5ZDdiYjA5LzEvTzFqcldMWEdHaVBROGtac1hOYzg2ZXlXVzVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9mMmUxNTAtM2U5ZS00ZjE4LWE1M2QtNzJhYzc5ZDdiYjA5
LzEvTzFqcldMWEdHaVBROGtac1hOYzg2ZXlXVzVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY2EWcVoS
0jaXo7ohBTTCtH9HfWjUfQrG+JmjQUgY3wH1hLUFbxw/A5iKY5b6DMfse9J7G/wL
Cu/dLiB9Pv6tiREof2enqjvkE+yNOz4xuErWW0R7wgg0NRck0suhwVEF52q0wBok
EO+afJQydkMjzq0eZUKivjC7nFSHO4klwYmqKU4ngnNRHG2QQsbuLsWj0QGcqTxH
/EmfurvzfdIpQhCDAv2PwfZc9Sw4V3vVp4Qe4skTS2JkdeBBJL66Ee+V0yM8uPcw
0iwZTffNIfqdOAPPpKYjNFmYUSGpLVqWCg53p04hz+eajJfnrQuYPazsJqq/YJGf
q+rc9OQORwNLOA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:18:11 2025 by rpki-client