Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
File:                     4I4Xp4G2QRmjpjVwACVPW3lbDag.mft (raw, json)
Hash identifier:          nFqIfr6CHThhh5BWo9kXFjE5eXhQEi3rBDwncNf3pAQ=
Subject key identifier:   42:D0:BC:95:04:AD:FE:D3:8A:96:D1:53:97:C5:6D:E6:86:91:F9:F9
Authority key identifier: E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8
Certificate issuer:       /CN=e08e17a781b64119a3a6357000254f5b795b0da8
Certificate serial:       01984852E799332014CF7EEBB32CBF9215FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
Manifest number:          15FF
Signing time:             Sat 26 Jul 2025 20:00:49 +0000
Manifest this update:     Sat 26 Jul 2025 20:00:49 +0000
Manifest next update:     Sun 27 Jul 2025 20:00:49 +0000
Files and hashes:         1: 4I4Xp4G2QRmjpjVwACVPW3lbDag.crl (hash: 5cyyY0cGSSVg5RMhpnG9uAh8Ps/lfBi6fdQO75VqF/4=)
                          2: pJOGzrT_mgxPYsaglIaSM0kIw4Y.roa (hash: Ut0Tk0l/Yu9pyhP6CIl9TJN11JVJBhwd7Wz1zOCHBnA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:52:e7:99:33:20:14:cf:7e:eb:b3:2c:bf:92:15:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e08e17a781b64119a3a6357000254f5b795b0da8
        Validity
            Not Before: Jul 26 20:00:49 2025 GMT
            Not After : Jul 27 20:00:49 2025 GMT
        Subject: CN=42d0bc9504adfed38a96d15397c56de68691f9f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:64:1e:9c:e4:77:bd:4a:d7:e2:e1:77:fd:25:
                    5a:19:96:a3:bc:ab:c1:e9:8e:6f:e9:60:ac:b2:a1:
                    6d:18:bb:96:9a:8e:6f:5e:23:8e:6d:99:18:b0:5d:
                    b3:7e:e0:97:b0:2b:2f:2b:ba:03:64:85:17:42:b2:
                    85:79:57:70:fd:23:34:df:78:4a:74:cb:d5:72:c9:
                    f2:7f:a4:15:6e:88:fe:c2:d2:89:49:0c:6a:ec:12:
                    91:ce:5b:81:b5:ae:0f:76:fb:a6:a9:8e:4e:d0:d9:
                    e7:24:0a:d0:82:52:a6:90:7c:8c:23:5e:ba:a0:d4:
                    62:df:05:54:f9:ef:b7:78:c5:e9:3c:a9:3a:4a:4b:
                    d5:42:d8:09:6a:e3:31:47:cf:a8:c0:83:71:08:39:
                    f4:b7:29:1a:e3:0e:88:cc:9b:67:0d:89:63:78:8f:
                    43:e4:c4:65:a4:7e:ab:68:a4:f6:1b:59:f4:2a:19:
                    4c:33:f8:d3:b7:d8:e8:31:c4:08:dd:36:01:96:4f:
                    3d:2a:06:fb:cf:e7:9a:fa:bb:a3:8e:34:42:bf:39:
                    93:1f:e2:29:a9:38:ff:a9:c1:0e:fe:1b:53:3e:ca:
                    a0:63:1b:a1:87:25:3b:1c:e9:fe:7c:5f:2d:49:20:
                    54:3e:b3:91:87:88:0d:55:a3:8f:d1:34:b4:4c:8c:
                    ba:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:D0:BC:95:04:AD:FE:D3:8A:96:D1:53:97:C5:6D:E6:86:91:F9:F9
            X509v3 Authority Key Identifier:
                keyid:E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:e8:3e:f8:24:57:5b:f7:73:07:68:4f:3a:0f:ef:af:02:be:
         d7:e1:ea:88:29:cb:60:e4:4e:35:17:36:f4:ff:77:07:11:09:
         51:10:01:80:6a:1c:4e:0c:ad:81:6b:4c:6e:f0:ef:b9:fd:7f:
         e1:43:9a:59:b5:fe:48:ac:be:82:64:68:23:68:1a:2b:51:cb:
         1f:28:b4:9e:70:c0:bb:30:7f:92:68:15:2d:2e:91:47:0a:70:
         55:c7:0f:d0:9a:f4:b1:35:33:a3:ea:a2:a1:82:2c:27:7d:fe:
         43:fa:38:87:33:b5:0f:a2:dd:86:b2:db:80:8c:67:07:08:4f:
         24:f0:07:5d:7a:85:0d:fb:c2:07:c0:cd:f1:20:42:b6:ad:dc:
         98:84:c2:c1:a5:b8:3a:b5:b2:17:70:b1:16:64:53:a0:0d:bb:
         5e:50:29:77:c8:e0:cd:18:7b:a8:dc:df:ca:ba:78:9b:9d:66:
         3a:13:18:66:6c:ad:55:a1:17:c8:65:da:4b:a7:3f:f5:e8:79:
         5d:85:ff:f0:cb:f3:6b:55:e2:db:7c:12:e9:ef:fe:2f:37:22:
         82:84:20:40:81:2a:56:be:f4:56:8f:40:1a:e7:ce:f7:1e:19:
         23:65:31:f1:d4:bc:a7:9f:b3:e4:c3:15:66:f0:39:50:4c:4f:
         ee:4f:7c:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIUueZMyAUz37rsyy/khX8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwOGUxN2E3ODFiNjQxMTlhM2E2MzU3MDAwMjU0ZjViNzk1
YjBkYTgwHhcNMjUwNzI2MjAwMDQ5WhcNMjUwNzI3MjAwMDQ5WjAzMTEwLwYDVQQD
Eyg0MmQwYmM5NTA0YWRmZWQzOGE5NmQxNTM5N2M1NmRlNjg2OTFmOWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2QenOR3vUrX4uF3/SVaGZajvKvB
6Y5v6WCssqFtGLuWmo5vXiOObZkYsF2zfuCXsCsvK7oDZIUXQrKFeVdw/SM033hK
dMvVcsnyf6QVboj+wtKJSQxq7BKRzluBta4PdvumqY5O0NnnJArQglKmkHyMI166
oNRi3wVU+e+3eMXpPKk6SkvVQtgJauMxR8+owINxCDn0tyka4w6IzJtnDYljeI9D
5MRlpH6raKT2G1n0KhlMM/jTt9joMcQI3TYBlk89Kgb7z+ea+rujjjRCvzmTH+Ip
qTj/qcEO/htTPsqgYxuhhyU7HOn+fF8tSSBUPrORh4gNVaOP0TS0TIy6lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELQvJUErf7TipbRU5fFbeaGkfn5MB8GA1UdIwQY
MBaAFOCOF6eBtkEZo6Y1cAAlT1t5Ww2oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEk0WHA0RzJRUm1qcGpWd0FDVlBXM2xiRGFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hMTQwMjAtMWJmYi00MTMzLWFmY2Ut
ZDVlNDVmMmNhODc5LzEvNEk0WHA0RzJRUm1qcGpWd0FDVlBXM2xiRGFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9hMTQwMjAtMWJmYi00MTMzLWFmY2UtZDVlNDVmMmNhODc5
LzEvNEk0WHA0RzJRUm1qcGpWd0FDVlBXM2xiRGFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQug++CRX
W/dzB2hPOg/vrwK+1+HqiCnLYORONRc29P93BxEJURABgGocTgytgWtMbvDvuf1/
4UOaWbX+SKy+gmRoI2gaK1HLHyi0nnDAuzB/kmgVLS6RRwpwVccP0Jr0sTUzo+qi
oYIsJ33+Q/o4hzO1D6LdhrLbgIxnBwhPJPAHXXqFDfvCB8DN8SBCtq3cmITCwaW4
OrWyF3CxFmRToA27XlApd8jgzRh7qNzfyrp4m51mOhMYZmytVaEXyGXaS6c/9eh5
XYX/8Mvza1Xi23wS6e/+LzcigoQgQIEqVr70Vo9AGufO9x4ZI2Ux8dS8p5+z5MMV
ZvA5UExP7k98SQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:17:44 2025 by rpki-client