Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.mft
File:                     U3mVYEU9z0rzH5sqQM0ji4RXxd4.mft (raw, json)
Hash identifier:          w47bExPLXOGEN9X50+kmFrCMWPrXtU3HWfRdNvZ5m5k=
Subject key identifier:   C1:6D:B0:41:B9:8F:EE:10:5D:A1:64:18:C0:36:F6:C3:92:0C:8F:CA
Authority key identifier: 53:79:95:60:45:3D:CF:4A:F3:1F:9B:2A:40:CD:23:8B:84:57:C5:DE
Certificate issuer:       /CN=53799560453dcf4af31f9b2a40cd238b8457c5de
Certificate serial:       0198477717B754B0C4560A3B80CB72C85224
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U3mVYEU9z0rzH5sqQM0ji4RXxd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.mft
Manifest number:          0A34
Signing time:             Sat 26 Jul 2025 16:00:43 +0000
Manifest this update:     Sat 26 Jul 2025 16:00:43 +0000
Manifest next update:     Sun 27 Jul 2025 16:00:43 +0000
Files and hashes:         1: GPBna_IoKKdQyaNksGJT2yWTCj4.roa (hash: TAihNlvs0SdUgl2vxovWMBnyUqa0RWqHLKo09+4ZR88=)
                          2: U3mVYEU9z0rzH5sqQM0ji4RXxd4.crl (hash: vopUy8bgVN2YyCyq8sbbVqVZmBPZDdC91fozYdOnC34=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U3mVYEU9z0rzH5sqQM0ji4RXxd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:77:17:b7:54:b0:c4:56:0a:3b:80:cb:72:c8:52:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53799560453dcf4af31f9b2a40cd238b8457c5de
        Validity
            Not Before: Jul 26 16:00:43 2025 GMT
            Not After : Jul 27 16:00:43 2025 GMT
        Subject: CN=c16db041b98fee105da16418c036f6c3920c8fca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:03:85:35:5c:86:5d:2e:37:09:a1:14:cd:5a:
                    08:d7:09:83:a8:10:61:f5:4c:c4:f2:eb:a9:1a:07:
                    3f:bb:5c:28:b7:69:7f:40:a4:41:2b:80:10:63:09:
                    d3:7b:3b:69:0f:02:76:96:7a:6e:b8:27:50:49:85:
                    c1:33:aa:47:f8:78:85:ce:17:c1:33:bd:ce:75:6a:
                    22:d1:aa:8c:db:04:cf:8d:42:93:4e:f0:3a:43:c5:
                    4f:15:0b:4b:3e:25:28:5d:f1:a0:83:55:96:c3:bc:
                    ea:43:6c:d7:bc:5f:78:2e:1f:5e:f0:ff:e8:5f:b7:
                    80:51:ab:83:09:db:4f:09:3f:05:d6:b1:f6:6d:74:
                    34:5e:55:20:12:74:bd:e4:4c:17:f1:ef:b6:0d:af:
                    eb:66:55:c9:da:95:44:30:6a:3c:26:b3:84:ef:cf:
                    7c:ba:ed:0f:a2:f3:3f:5a:34:ba:cf:65:b2:6a:fa:
                    7f:ef:7c:19:be:be:be:e8:75:40:05:97:f0:33:10:
                    87:50:69:01:80:c9:9a:ab:f4:7d:cb:75:c4:2f:45:
                    bf:97:0e:77:6f:52:ed:76:11:b7:35:3a:4a:5d:16:
                    56:cb:09:c9:8f:58:fd:1b:91:91:2d:95:4d:78:01:
                    6d:a3:07:3d:78:6c:8c:2d:16:58:89:91:0e:70:12:
                    e4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:6D:B0:41:B9:8F:EE:10:5D:A1:64:18:C0:36:F6:C3:92:0C:8F:CA
            X509v3 Authority Key Identifier:
                keyid:53:79:95:60:45:3D:CF:4A:F3:1F:9B:2A:40:CD:23:8B:84:57:C5:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3mVYEU9z0rzH5sqQM0ji4RXxd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:b2:7e:40:43:cf:0b:27:0d:3c:2e:77:dc:20:22:e7:e2:14:
         cf:e2:8d:60:dd:3c:7f:f4:5f:35:36:3e:78:97:96:1f:45:2c:
         5f:f7:98:25:17:ee:d5:6c:df:64:6c:e8:c9:73:53:48:aa:4f:
         4d:29:a6:f4:46:33:c7:c9:d2:7b:bd:b0:a6:64:28:51:a0:dd:
         6a:d6:19:03:5c:f7:c6:bb:74:41:fd:f2:96:9a:e6:69:7c:6c:
         83:84:38:60:8c:b4:87:c7:60:1e:37:38:21:6c:da:35:10:83:
         11:c8:dd:bc:02:93:83:8b:3b:84:31:2e:33:b8:f6:44:95:05:
         57:c0:f9:60:eb:b6:c0:7c:59:9d:b4:26:27:1c:86:99:e2:1c:
         f8:b0:ae:6d:89:d4:bb:25:81:9d:74:17:23:a7:e9:af:61:c3:
         d3:54:a7:a3:ee:b0:0c:c1:69:9e:18:b7:12:d6:60:08:f7:b4:
         ac:51:c4:6c:03:06:3a:0e:f1:cb:53:e0:c3:80:37:0f:23:f8:
         b3:9b:9a:94:b7:18:46:66:76:62:68:9b:33:3f:f9:41:17:97:
         16:6e:09:2c:dc:dc:f1:dd:49:ad:12:35:c8:8a:d6:f6:19:2b:
         8c:0b:7c:ca:df:a9:c5:3e:72:04:c1:f0:ae:ba:d9:00:7e:37:
         28:54:85:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHdxe3VLDEVgo7gMtyyFIkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNzk5NTYwNDUzZGNmNGFmMzFmOWIyYTQwY2QyMzhiODQ1
N2M1ZGUwHhcNMjUwNzI2MTYwMDQzWhcNMjUwNzI3MTYwMDQzWjAzMTEwLwYDVQQD
EyhjMTZkYjA0MWI5OGZlZTEwNWRhMTY0MThjMDM2ZjZjMzkyMGM4ZmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAOFNVyGXS43CaEUzVoI1wmDqBBh
9UzE8uupGgc/u1wot2l/QKRBK4AQYwnTeztpDwJ2lnpuuCdQSYXBM6pH+HiFzhfB
M73OdWoi0aqM2wTPjUKTTvA6Q8VPFQtLPiUoXfGgg1WWw7zqQ2zXvF94Lh9e8P/o
X7eAUauDCdtPCT8F1rH2bXQ0XlUgEnS95EwX8e+2Da/rZlXJ2pVEMGo8JrOE7898
uu0PovM/WjS6z2Wyavp/73wZvr6+6HVABZfwMxCHUGkBgMmaq/R9y3XEL0W/lw53
b1LtdhG3NTpKXRZWywnJj1j9G5GRLZVNeAFtowc9eGyMLRZYiZEOcBLkrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFtsEG5j+4QXaFkGMA29sOSDI/KMB8GA1UdIwQY
MBaAFFN5lWBFPc9K8x+bKkDNI4uEV8XeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTNtVllFVTl6MHJ6SDVzcVFNMGppNFJYeGQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9kODc3MWEtZTc1My00MDZjLWExZDgt
MzlhYjc3YjgzM2VhLzEvVTNtVllFVTl6MHJ6SDVzcVFNMGppNFJYeGQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9kODc3MWEtZTc1My00MDZjLWExZDgtMzlhYjc3YjgzM2Vh
LzEvVTNtVllFVTl6MHJ6SDVzcVFNMGppNFJYeGQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgLJ+QEPP
CycNPC533CAi5+IUz+KNYN08f/RfNTY+eJeWH0UsX/eYJRfu1WzfZGzoyXNTSKpP
TSmm9EYzx8nSe72wpmQoUaDdatYZA1z3xrt0Qf3ylprmaXxsg4Q4YIy0h8dgHjc4
IWzaNRCDEcjdvAKTg4s7hDEuM7j2RJUFV8D5YOu2wHxZnbQmJxyGmeIc+LCubYnU
uyWBnXQXI6fpr2HD01Sno+6wDMFpnhi3EtZgCPe0rFHEbAMGOg7xy1Pgw4A3DyP4
s5ualLcYRmZ2YmibMz/5QReXFm4JLNzc8d1JrRI1yIrW9hkrjAt8yt+pxT5yBMHw
rrrZAH43KFSFWA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:08:48 2025 by rpki-client