Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft
File:                     1-c0pgMHHi89rubgKB5IFiwvK7Us.mft (raw, json)
Hash identifier:          NKTjTlfGIBITu/eL9w1RXYiel/7OAz8TlygLhICIkP4=
Subject key identifier:   C0:92:82:57:CD:66:55:73:8A:15:ED:DF:FE:8F:CA:7E:8E:9A:1A:40
Authority key identifier: F9:CD:29:80:C1:C7:8B:CF:6B:B9:B8:0A:07:92:05:8B:0B:CA:ED:4B
Certificate issuer:       /CN=f9cd2980c1c78bcf6bb9b80a0792058b0bcaed4b
Certificate serial:       019848F769F7BB43C7AB17D42FBD4DC0A6AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft
Manifest number:          15BF
Signing time:             Sat 26 Jul 2025 23:00:30 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:30 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:30 +0000
Files and hashes:         1: 1-c0pgMHHi89rubgKB5IFiwvK7Us.crl (hash: kMZX9wGqkp+Xo519YCF2dz7jnuNuYcXG8npwCnWESnY=)
                          2: DBBkmAjtiZvJk178YbVOfqGzI3Y.roa (hash: 8eJVP5XAdO67of9omWg+boW49giOURgUcnG9ZjC9lgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:69:f7:bb:43:c7:ab:17:d4:2f:bd:4d:c0:a6:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9cd2980c1c78bcf6bb9b80a0792058b0bcaed4b
        Validity
            Not Before: Jul 26 23:00:30 2025 GMT
            Not After : Jul 27 23:00:30 2025 GMT
        Subject: CN=c0928257cd6655738a15eddffe8fca7e8e9a1a40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fa:92:d9:a0:50:49:ee:4a:4f:0a:42:25:e6:
                    e2:71:55:90:72:3a:00:52:b3:fe:d6:12:9a:1b:1a:
                    68:ee:69:f6:25:ad:f1:d7:d0:81:00:56:f8:da:ad:
                    69:85:65:7f:47:f2:2f:4e:54:96:c1:0f:9d:1a:95:
                    ab:41:78:09:33:ce:7d:ac:c2:46:86:45:0c:e5:2e:
                    be:c0:6d:5e:b0:84:95:ab:38:15:46:86:62:c1:26:
                    ae:f8:14:b5:2b:9a:1f:29:b8:38:26:c4:27:a9:51:
                    eb:d5:ef:64:14:36:90:e6:63:b0:51:5d:7a:6b:63:
                    66:eb:de:96:2c:7b:e6:51:42:bc:68:a7:02:19:03:
                    d9:22:7a:ac:b5:a1:99:ba:24:33:0b:71:8b:e0:e7:
                    a6:1f:3d:db:06:3c:cf:8f:05:56:6f:a4:46:33:71:
                    a7:20:e7:57:b3:48:8b:7a:57:ca:4b:43:9b:68:52:
                    ff:8a:2e:ce:3d:e0:6d:d1:80:a8:3b:43:74:b8:fc:
                    eb:38:e8:3d:d4:8e:0d:68:33:53:a9:27:4d:94:79:
                    e7:a1:61:c1:f3:76:d9:35:38:1e:b7:85:42:05:13:
                    99:a4:17:d7:8d:83:6b:94:40:2c:d2:e2:24:4a:27:
                    91:1c:3d:b7:a9:84:5a:81:83:c8:2d:dd:08:a7:ed:
                    dc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:92:82:57:CD:66:55:73:8A:15:ED:DF:FE:8F:CA:7E:8E:9A:1A:40
            X509v3 Authority Key Identifier:
                keyid:F9:CD:29:80:C1:C7:8B:CF:6B:B9:B8:0A:07:92:05:8B:0B:CA:ED:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:d6:1e:26:f9:4c:1f:77:29:93:08:70:04:1e:ac:49:59:3c:
         24:e4:dc:47:c6:16:bb:b9:f8:d4:3e:ec:3c:f5:05:64:bc:fe:
         53:45:ca:f0:1a:8e:dd:ae:2f:7d:6e:b4:46:59:11:9f:46:60:
         a2:3b:4a:56:85:1a:76:17:67:42:8e:7a:49:1f:eb:c0:57:05:
         95:c7:56:4a:e3:77:d4:8c:fd:8e:db:bd:67:31:bc:cf:6b:e2:
         4e:dd:40:94:23:39:c2:d6:73:f6:54:86:6b:da:88:a8:04:55:
         2b:4d:41:e3:dd:de:7a:6f:ec:04:41:db:71:55:ba:6e:a7:69:
         af:ac:c2:32:ce:01:58:c7:4c:1a:55:cd:43:4f:e0:81:cc:80:
         3e:cc:0e:5c:51:dc:a5:f8:4e:4e:9e:0a:a9:96:d3:51:f4:92:
         45:2b:ba:4e:a3:ea:03:24:bf:58:0c:b7:c7:3f:67:31:78:1a:
         cc:33:a1:a6:a2:ba:fc:8d:75:eb:af:76:8d:4a:bc:47:71:37:
         80:bc:6f:e0:1f:4b:b5:3b:23:0d:47:d4:82:dc:9c:3f:1f:e8:
         d0:49:16:e9:2d:89:da:a9:01:4f:c4:d7:fe:fe:53:96:c1:29:
         4a:01:d9:18:e0:37:e4:4d:5a:6e:a2:02:41:cd:58:7d:da:c0:
         9c:e7:66:69
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZhI92n3u0PHqxfUL71NwKatMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5Y2QyOTgwYzFjNzhiY2Y2YmI5YjgwYTA3OTIwNThiMGJj
YWVkNGIwHhcNMjUwNzI2MjMwMDMwWhcNMjUwNzI3MjMwMDMwWjAzMTEwLwYDVQQD
EyhjMDkyODI1N2NkNjY1NTczOGExNWVkZGZmZThmY2E3ZThlOWExYTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvqS2aBQSe5KTwpCJebicVWQcjoA
UrP+1hKaGxpo7mn2Ja3x19CBAFb42q1phWV/R/IvTlSWwQ+dGpWrQXgJM859rMJG
hkUM5S6+wG1esISVqzgVRoZiwSau+BS1K5ofKbg4JsQnqVHr1e9kFDaQ5mOwUV16
a2Nm696WLHvmUUK8aKcCGQPZInqstaGZuiQzC3GL4OemHz3bBjzPjwVWb6RGM3Gn
IOdXs0iLelfKS0ObaFL/ii7OPeBt0YCoO0N0uPzrOOg91I4NaDNTqSdNlHnnoWHB
83bZNTget4VCBROZpBfXjYNrlEAs0uIkSieRHD23qYRagYPILd0Ip+3ccwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMCSglfNZlVzihXt3/6Pyn6OmhpAMB8GA1UdIwQY
MBaAFPnNKYDBx4vPa7m4CgeSBYsLyu1LMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1jMHBnTUhIaTg5cnViZ0tCNUlGaXd2SzdVcy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzIvYzg3OTdiLTAyZTAtNDcxOC1iZGZk
LTA5MjljYmNkYjdhYS8xLzEtYzBwZ01ISGk4OXJ1YmdLQjVJRml3dks3VXMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzcyL2M4Nzk3Yi0wMmUwLTQ3MTgtYmRmZC0wOTI5Y2JjZGI3
YWEvMS8xLWMwcGdNSEhpODlydWJnS0I1SUZpd3ZLN1VzLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqtYe
JvlMH3cpkwhwBB6sSVk8JOTcR8YWu7n41D7sPPUFZLz+U0XK8BqO3a4vfW60RlkR
n0ZgojtKVoUadhdnQo56SR/rwFcFlcdWSuN31Iz9jtu9ZzG8z2viTt1AlCM5wtZz
9lSGa9qIqARVK01B493eem/sBEHbcVW6bqdpr6zCMs4BWMdMGlXNQ0/ggcyAPswO
XFHcpfhOTp4KqZbTUfSSRSu6TqPqAyS/WAy3xz9nMXgazDOhpqK6/I116692jUq8
R3E3gLxv4B9LtTsjDUfUgtycPx/o0EkW6S2J2qkBT8TX/v5TlsEpSgHZGOA35E1a
bqICQc1YfdrAnOdmaQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 01:56:37 2025 by rpki-client