Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
File:                     7Y3fghIIo3DjpbfvjNR5fPxXdII.mft (raw, json)
Hash identifier:          JCyzZrL9L5C6TRoBTZd1rurn6+wpK8l78DXQ5kaMEH4=
Subject key identifier:   B8:74:91:B2:3A:36:9D:0A:16:92:9E:FA:42:76:37:1C:EA:BC:B9:BF
Authority key identifier: ED:8D:DF:82:12:08:A3:70:E3:A5:B7:EF:8C:D4:79:7C:FC:57:74:82
Certificate issuer:       /CN=ed8ddf821208a370e3a5b7ef8cd4797cfc577482
Certificate serial:       01984776BF6695243D59C86A5EABED882978
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
Manifest number:          0C80
Signing time:             Sat 26 Jul 2025 16:00:21 +0000
Manifest this update:     Sat 26 Jul 2025 16:00:21 +0000
Manifest next update:     Sun 27 Jul 2025 16:00:21 +0000
Files and hashes:         1: 7Y3fghIIo3DjpbfvjNR5fPxXdII.crl (hash: RKBbJ3zGSM6PIlrpbkkYMxRDjMNRzy4t4ti2QnAJh6w=)
                          2: DurnQ3dAzPxoCUXWiroCcReHID8.roa (hash: k2ck5I6D1NKufGijk0qz5B1og8UdirayVzhgWYYPrYw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:76:bf:66:95:24:3d:59:c8:6a:5e:ab:ed:88:29:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed8ddf821208a370e3a5b7ef8cd4797cfc577482
        Validity
            Not Before: Jul 26 16:00:21 2025 GMT
            Not After : Jul 27 16:00:21 2025 GMT
        Subject: CN=b87491b23a369d0a16929efa4276371ceabcb9bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:20:47:55:57:9e:da:d6:c9:b4:fd:09:d4:1d:
                    7d:a0:a0:94:65:c1:24:78:c2:b8:b1:44:b8:52:4d:
                    0c:ac:f2:93:c4:32:59:51:1c:ca:00:3b:52:7e:62:
                    a4:fb:87:5b:3a:7e:aa:6b:89:cc:b6:a9:2c:9b:50:
                    49:c2:aa:5f:d1:b2:cc:44:2f:58:1c:d9:98:79:7a:
                    96:fa:ca:16:f2:d9:d9:a2:3f:cc:c1:30:e9:58:5c:
                    a1:57:b9:1b:46:5f:18:bd:4e:f9:76:41:94:4a:cd:
                    3d:e3:d6:b2:b4:81:b8:06:d8:da:93:c0:2f:5c:d4:
                    06:92:66:a6:52:60:1d:ea:eb:50:53:1a:7a:d2:73:
                    9d:91:f1:42:8a:5b:61:72:23:81:f9:39:11:86:09:
                    53:fd:f9:fc:bc:82:19:ab:b8:e0:84:88:d1:73:c1:
                    9b:40:63:4d:ac:69:89:61:5c:4a:64:f5:bd:f9:17:
                    44:f9:53:d6:72:60:55:7a:bc:fe:6e:7b:f3:9f:a1:
                    dc:6c:d2:71:60:c9:ab:56:41:76:d4:af:3f:77:31:
                    21:f1:d8:96:d2:46:82:0b:32:32:66:67:6f:98:19:
                    05:8f:d5:f2:35:8a:0e:78:6c:9c:69:b7:67:0f:31:
                    68:d7:c5:a9:77:6d:70:5c:31:70:68:4d:d2:d8:e6:
                    bc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:74:91:B2:3A:36:9D:0A:16:92:9E:FA:42:76:37:1C:EA:BC:B9:BF
            X509v3 Authority Key Identifier:
                keyid:ED:8D:DF:82:12:08:A3:70:E3:A5:B7:EF:8C:D4:79:7C:FC:57:74:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:64:b8:e2:08:ac:4d:28:10:f1:8d:11:8c:07:ce:4a:53:36:
         39:16:a5:30:f1:d5:99:85:9c:83:44:e3:b0:bf:f6:1b:1d:e4:
         1b:d9:cb:ef:3c:7a:5c:04:1b:77:1d:a5:38:fc:fe:a6:20:0a:
         d2:76:4d:5c:7d:20:89:ee:c8:7e:7c:39:76:5c:48:01:ba:9a:
         0e:c1:4f:96:37:d5:be:88:8e:2e:52:90:7f:d9:71:1b:20:1d:
         ff:ad:57:7f:65:08:93:38:57:d8:04:b4:ee:11:c3:25:72:2f:
         b2:43:40:67:89:e8:35:aa:78:81:d6:8f:52:34:0a:29:16:93:
         0d:2d:b7:b3:5a:12:7a:75:79:33:51:da:0c:ca:89:69:a6:ae:
         27:6a:98:c2:17:f4:68:02:b6:95:29:e7:ab:b7:85:33:89:f1:
         7d:42:36:80:ad:4f:40:35:74:70:4b:1c:0d:91:51:91:42:ec:
         b4:43:a3:18:a7:ae:eb:a5:39:79:0a:aa:2b:75:04:af:5a:d4:
         94:a1:42:f7:d2:00:8f:84:ce:09:e4:36:89:e6:05:5a:de:f2:
         b1:26:c7:db:f0:cc:a0:7f:85:27:2b:da:f6:eb:7d:b9:19:68:
         47:28:38:17:cc:99:13:5d:7c:10:e7:bd:33:0a:8b:fc:19:d2:
         63:91:16:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHdr9mlSQ9WchqXqvtiCl4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkOGRkZjgyMTIwOGEzNzBlM2E1YjdlZjhjZDQ3OTdjZmM1
Nzc0ODIwHhcNMjUwNzI2MTYwMDIxWhcNMjUwNzI3MTYwMDIxWjAzMTEwLwYDVQQD
EyhiODc0OTFiMjNhMzY5ZDBhMTY5MjllZmE0Mjc2MzcxY2VhYmNiOWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CBHVVee2tbJtP0J1B19oKCUZcEk
eMK4sUS4Uk0MrPKTxDJZURzKADtSfmKk+4dbOn6qa4nMtqksm1BJwqpf0bLMRC9Y
HNmYeXqW+soW8tnZoj/MwTDpWFyhV7kbRl8YvU75dkGUSs0949aytIG4Btjak8Av
XNQGkmamUmAd6utQUxp60nOdkfFCilthciOB+TkRhglT/fn8vIIZq7jghIjRc8Gb
QGNNrGmJYVxKZPW9+RdE+VPWcmBVerz+bnvzn6HcbNJxYMmrVkF21K8/dzEh8diW
0kaCCzIyZmdvmBkFj9XyNYoOeGycabdnDzFo18Wpd21wXDFwaE3S2Oa8lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLh0kbI6Np0KFpKe+kJ2NxzqvLm/MB8GA1UdIwQY
MBaAFO2N34ISCKNw46W374zUeXz8V3SCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1kzZmdoSUlvM0RqcGJmdmpOUjVmUHhYZElJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9hODMxODQtNWZjNS00NzI0LWJhZWMt
ZTlkODFlM2Q4YjU0LzEvN1kzZmdoSUlvM0RqcGJmdmpOUjVmUHhYZElJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9hODMxODQtNWZjNS00NzI0LWJhZWMtZTlkODFlM2Q4YjU0
LzEvN1kzZmdoSUlvM0RqcGJmdmpOUjVmUHhYZElJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfmS44gis
TSgQ8Y0RjAfOSlM2ORalMPHVmYWcg0TjsL/2Gx3kG9nL7zx6XAQbdx2lOPz+piAK
0nZNXH0gie7Ifnw5dlxIAbqaDsFPljfVvoiOLlKQf9lxGyAd/61Xf2UIkzhX2AS0
7hHDJXIvskNAZ4noNap4gdaPUjQKKRaTDS23s1oSenV5M1HaDMqJaaauJ2qYwhf0
aAK2lSnnq7eFM4nxfUI2gK1PQDV0cEscDZFRkULstEOjGKeu66U5eQqqK3UEr1rU
lKFC99IAj4TOCeQ2ieYFWt7ysSbH2/DMoH+FJyva9ut9uRloRyg4F8yZE118EOe9
MwqL/BnSY5EWYQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 23:53:40 2025 by rpki-client