Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
File:                     9oXcPBRGS4xAgXUl2aJUtO06ijo.mft (raw, json)
Hash identifier:          k7WrUN+wUziSzppSiRh/uc/XyaRIgrL4pd3QS3WX92I=
Subject key identifier:   57:BD:BA:FE:BB:89:92:66:6B:CD:AD:C6:54:5F:9F:EC:DD:9E:4E:CF
Authority key identifier: F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A
Certificate issuer:       /CN=f685dc3c14464b8c40817525d9a254b4ed3a8a3a
Certificate serial:       019827474FC9376C7532F14462B7F1F75FBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
Manifest number:          49
Signing time:             Sun 20 Jul 2025 10:00:41 +0000
Manifest this update:     Sun 20 Jul 2025 10:00:41 +0000
Manifest next update:     Mon 21 Jul 2025 10:00:41 +0000
Files and hashes:         1: 9oXcPBRGS4xAgXUl2aJUtO06ijo.crl (hash: qakyYc+3COxtcUyQDZFHGWmRnISo12cuN+yBe4qJGEw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 10:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:27:47:4f:c9:37:6c:75:32:f1:44:62:b7:f1:f7:5f:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f685dc3c14464b8c40817525d9a254b4ed3a8a3a
        Validity
            Not Before: Jul 20 10:00:41 2025 GMT
            Not After : Jul 21 10:00:41 2025 GMT
        Subject: CN=57bdbafebb8992666bcdadc6545f9fecdd9e4ecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e6:75:75:60:00:cf:2f:a4:39:02:34:0a:51:
                    05:ee:a2:10:c0:de:3c:5a:31:b8:c3:cf:04:70:bf:
                    e9:2d:0c:e7:fb:25:d0:68:e4:0e:3d:a8:b2:0e:40:
                    b0:c0:ee:fe:72:66:a3:7f:1f:08:6a:9c:80:7a:8b:
                    5e:99:f1:aa:22:25:ef:c9:c4:5b:4d:de:92:00:fd:
                    4d:0e:58:13:94:1c:4c:55:7d:de:62:99:ff:58:9d:
                    2e:80:b1:13:14:4b:03:05:1e:fb:be:49:81:07:cb:
                    5b:49:9a:2d:aa:aa:d9:2a:fc:08:e8:ab:01:b4:4c:
                    01:ed:3e:6c:77:d8:3a:d5:b8:4e:7e:87:8b:06:2c:
                    ad:af:97:4d:d0:63:70:1f:c4:e1:2d:ce:a5:f5:ef:
                    9d:ae:a6:df:2b:81:3f:19:84:45:84:e3:ce:c2:9d:
                    d6:11:c5:9a:98:4b:32:05:ee:09:ea:b9:ba:94:83:
                    cb:ae:e0:73:6b:b1:b2:08:19:d5:76:2a:64:bb:41:
                    a9:80:98:37:33:bb:1f:5d:76:2b:29:bc:df:67:22:
                    d8:01:92:22:70:44:c3:55:0e:a7:37:3c:ef:00:5c:
                    70:55:7e:0f:13:19:50:2a:49:28:70:60:de:e4:a3:
                    c8:4d:f3:dc:d6:bd:d8:d7:77:6e:09:21:de:84:03:
                    b7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:BD:BA:FE:BB:89:92:66:6B:CD:AD:C6:54:5F:9F:EC:DD:9E:4E:CF
            X509v3 Authority Key Identifier:
                keyid:F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:e4:f5:6b:f8:49:e4:28:46:ab:25:14:7a:bc:d1:04:a9:03:
         15:36:b8:9a:33:8a:5f:e0:18:dd:ab:f8:f9:27:c2:9e:bc:01:
         b6:e8:b3:d8:5f:62:4b:ce:d4:f1:1c:7f:70:1e:34:d1:fa:9c:
         3d:06:cf:6d:a4:62:8f:6b:a5:a0:78:cd:eb:8b:95:4b:5c:bb:
         52:d4:4b:d5:3e:69:a6:4a:b0:5e:c4:8e:c7:be:3c:93:93:a1:
         9c:03:66:70:00:71:b0:07:22:b9:62:bc:00:ef:aa:5c:b4:4e:
         22:96:59:5e:36:0c:8b:11:fe:b7:35:3d:9d:78:33:b8:4b:21:
         c5:5f:b5:32:00:10:f7:a0:5a:91:5f:f8:a7:ea:62:c9:cd:66:
         43:97:7a:c6:f4:5d:e0:d4:be:1a:80:af:27:86:06:56:53:a9:
         c8:5b:9c:16:c1:98:3e:78:90:2d:ff:0c:c0:40:5a:3a:9c:c1:
         ac:72:70:3c:4a:d7:1f:93:5e:cc:12:18:57:2c:d0:79:ca:84:
         0b:ce:5e:42:d3:83:70:8e:37:2b:7b:60:a4:31:f5:3f:ad:fe:
         a9:4a:d5:59:0a:85:42:25:51:9c:8f:60:76:72:e1:13:d8:1f:
         a9:25:f0:17:1d:26:2c:c5:f2:2b:70:2f:69:2f:36:b2:28:35:
         71:ca:54:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgnR0/JN2x1MvFEYrfx91+7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ODVkYzNjMTQ0NjRiOGM0MDgxNzUyNWQ5YTI1NGI0ZWQz
YThhM2EwHhcNMjUwNzIwMTAwMDQxWhcNMjUwNzIxMTAwMDQxWjAzMTEwLwYDVQQD
Eyg1N2JkYmFmZWJiODk5MjY2NmJjZGFkYzY1NDVmOWZlY2RkOWU0ZWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeZ1dWAAzy+kOQI0ClEF7qIQwN48
WjG4w88EcL/pLQzn+yXQaOQOPaiyDkCwwO7+cmajfx8IapyAeotemfGqIiXvycRb
Td6SAP1NDlgTlBxMVX3eYpn/WJ0ugLETFEsDBR77vkmBB8tbSZotqqrZKvwI6KsB
tEwB7T5sd9g61bhOfoeLBiytr5dN0GNwH8ThLc6l9e+drqbfK4E/GYRFhOPOwp3W
EcWamEsyBe4J6rm6lIPLruBza7GyCBnVdipku0GpgJg3M7sfXXYrKbzfZyLYAZIi
cETDVQ6nNzzvAFxwVX4PExlQKkkocGDe5KPITfPc1r3Y13duCSHehAO3hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFe9uv67iZJma82txlRfn+zdnk7PMB8GA1UdIwQY
MBaAFPaF3DwURkuMQIF1JdmiVLTtOoo6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOW9YY1BCUkdTNHhBZ1hVbDJhSlV0TzA2aWpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8yMDQyNzUtYTM2OC00MzFiLThmZjYt
ZWI2N2Y4ZTYzMmI4LzEvOW9YY1BCUkdTNHhBZ1hVbDJhSlV0TzA2aWpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8yMDQyNzUtYTM2OC00MzFiLThmZjYtZWI2N2Y4ZTYzMmI4
LzEvOW9YY1BCUkdTNHhBZ1hVbDJhSlV0TzA2aWpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl+T1a/hJ
5ChGqyUUerzRBKkDFTa4mjOKX+AY3av4+SfCnrwBtuiz2F9iS87U8Rx/cB400fqc
PQbPbaRij2uloHjN64uVS1y7UtRL1T5ppkqwXsSOx748k5OhnANmcABxsAciuWK8
AO+qXLROIpZZXjYMixH+tzU9nXgzuEshxV+1MgAQ96BakV/4p+piyc1mQ5d6xvRd
4NS+GoCvJ4YGVlOpyFucFsGYPniQLf8MwEBaOpzBrHJwPErXH5NezBIYVyzQecqE
C85eQtODcI43K3tgpDH1P63+qUrVWQqFQiVRnI9gdnLhE9gfqSXwFx0mLMXyK3Av
aS82sig1ccpUPg==
-----END CERTIFICATE-----
Generated at Sun Jul 20 17:20:12 2025 by rpki-client