Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft
File:                     svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft (raw, json)
Hash identifier:          axRfsDYTOtVUI2X4DPBtHYdePJc+P/Y8Rk7GNETrADc=
Subject key identifier:   8D:94:44:37:29:28:1B:4D:5D:DE:FB:28:D2:91:37:18:49:82:EE:A4
Authority key identifier: B2:FB:A3:56:18:6C:1D:C5:03:1C:2F:B2:0B:C6:35:49:1F:87:86:37
Certificate issuer:       /CN=b2fba356186c1dc5031c2fb20bc635491f878637
Certificate serial:       0198499C05C4E5B5F36B573A301D679B3BFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/svujVhhsHcUDHC-yC8Y1SR-Hhjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft
Manifest number:          0F94
Signing time:             Sun 27 Jul 2025 02:00:18 +0000
Manifest this update:     Sun 27 Jul 2025 02:00:18 +0000
Manifest next update:     Mon 28 Jul 2025 02:00:18 +0000
Files and hashes:         1: 4QP14L9LxP1FDJDVa3DI94blGWY.roa (hash: bLtR0ptcRwZJ4yJiejffUukpQF+MAsqc3I6CXZQZA40=)
                          2: svujVhhsHcUDHC-yC8Y1SR-Hhjc.crl (hash: 6NLCGLbPoDv3UzXj5dcrwsEHfIRyYjiw5ZEBikdBW18=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/svujVhhsHcUDHC-yC8Y1SR-Hhjc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 02:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:9c:05:c4:e5:b5:f3:6b:57:3a:30:1d:67:9b:3b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2fba356186c1dc5031c2fb20bc635491f878637
        Validity
            Not Before: Jul 27 02:00:18 2025 GMT
            Not After : Jul 28 02:00:18 2025 GMT
        Subject: CN=8d94443729281b4d5ddefb28d29137184982eea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ec:31:fa:3c:84:c2:ff:ff:6c:e6:72:f0:29:
                    da:8b:7c:f9:fc:38:af:7a:98:d1:71:ac:98:5b:ca:
                    b7:e9:fa:59:98:a0:88:bf:e8:7d:ae:cd:9c:07:7b:
                    a8:67:47:46:04:25:83:71:a9:7f:19:63:cb:79:51:
                    72:de:bf:f4:1d:2c:f6:c3:9b:f2:f8:cc:36:3a:ef:
                    dc:0c:68:3a:44:92:9d:9d:26:ea:ef:42:42:51:6f:
                    a2:a0:05:91:ee:0b:23:d3:c3:0e:0b:aa:31:5f:0b:
                    08:63:05:10:48:f0:e5:6e:a2:7b:6b:e1:97:51:ce:
                    59:bc:9f:86:76:66:45:1d:3d:d3:63:27:1e:86:38:
                    c6:52:5e:52:62:dc:23:a0:40:6c:fb:06:b7:c4:3b:
                    4b:78:0a:a6:16:56:72:76:45:a9:bd:6c:1d:b5:1a:
                    e1:9b:ca:51:03:bb:03:89:ab:37:d5:3c:c6:64:86:
                    91:31:22:09:cc:0d:61:9d:d8:69:45:07:8b:8e:55:
                    93:ff:8b:00:57:67:8d:49:a1:ec:cc:07:58:b3:83:
                    1b:0b:9b:1b:1c:f9:72:08:f8:6b:26:5f:bd:af:68:
                    53:52:d1:27:85:cf:39:88:be:ed:46:2f:3c:5c:01:
                    0e:bd:2b:20:41:1f:36:7b:bb:0b:6f:c1:b1:7b:10:
                    bf:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:94:44:37:29:28:1B:4D:5D:DE:FB:28:D2:91:37:18:49:82:EE:A4
            X509v3 Authority Key Identifier:
                keyid:B2:FB:A3:56:18:6C:1D:C5:03:1C:2F:B2:0B:C6:35:49:1F:87:86:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svujVhhsHcUDHC-yC8Y1SR-Hhjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:e8:84:91:e0:75:47:bb:49:c5:89:cc:a5:f1:44:1a:ed:20:
         49:de:cc:74:80:aa:ae:ef:07:2d:a9:15:2a:e4:04:88:06:9e:
         0c:fd:af:4b:41:37:20:bd:f7:b4:16:c9:c8:cc:61:bd:7a:d6:
         98:0c:20:bb:17:ce:b9:08:2a:a1:b1:4e:97:2f:7d:21:fd:f2:
         36:92:af:af:89:84:af:b5:d0:48:74:2e:53:b9:6f:35:d2:0a:
         b0:f2:00:96:7b:65:8d:81:f5:4d:9b:e2:a3:af:0b:36:f1:26:
         95:80:1c:66:1d:84:0c:ba:d8:96:1e:2f:bd:b7:cb:38:c9:55:
         64:ec:76:5d:e4:d1:af:33:40:1c:b7:9c:92:04:94:c6:77:27:
         25:e9:2b:f6:b4:1e:54:ee:f9:13:7e:6a:74:fc:1b:4a:5b:75:
         2a:c3:02:41:4c:5f:3f:94:d2:56:f9:cc:c4:fb:5e:7a:52:32:
         dd:d9:0b:af:70:6e:95:62:d3:09:e5:a0:92:1d:8f:0f:6e:c5:
         43:07:59:19:1c:4f:c2:04:67:e8:98:9a:c0:8b:e9:9a:9a:54:
         18:bc:85:db:f7:a4:72:e2:a8:1d:82:f2:57:16:05:6b:22:3a:
         40:d1:f1:25:16:0c:91:2c:af:a4:bd:4b:12:dd:c3:67:ec:ae:
         3f:e0:29:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJnAXE5bXza1c6MB1nmzv/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZmJhMzU2MTg2YzFkYzUwMzFjMmZiMjBiYzYzNTQ5MWY4
Nzg2MzcwHhcNMjUwNzI3MDIwMDE4WhcNMjUwNzI4MDIwMDE4WjAzMTEwLwYDVQQD
Eyg4ZDk0NDQzNzI5MjgxYjRkNWRkZWZiMjhkMjkxMzcxODQ5ODJlZWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOwx+jyEwv//bOZy8Cnai3z5/Div
epjRcayYW8q36fpZmKCIv+h9rs2cB3uoZ0dGBCWDcal/GWPLeVFy3r/0HSz2w5vy
+Mw2Ou/cDGg6RJKdnSbq70JCUW+ioAWR7gsj08MOC6oxXwsIYwUQSPDlbqJ7a+GX
Uc5ZvJ+GdmZFHT3TYycehjjGUl5SYtwjoEBs+wa3xDtLeAqmFlZydkWpvWwdtRrh
m8pRA7sDias31TzGZIaRMSIJzA1hndhpRQeLjlWT/4sAV2eNSaHszAdYs4MbC5sb
HPlyCPhrJl+9r2hTUtEnhc85iL7tRi88XAEOvSsgQR82e7sLb8GxexC/rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2URDcpKBtNXd77KNKRNxhJgu6kMB8GA1UdIwQY
MBaAFLL7o1YYbB3FAxwvsgvGNUkfh4Y3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3Z1alZoaHNIY1VESEMteUM4WTFTUi1IaGpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82YThmMGMtNTdhMy00NDk2LTlmOWUt
Mjg2NTNjYzEyMzY4LzEvc3Z1alZoaHNIY1VESEMteUM4WTFTUi1IaGpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My82YThmMGMtNTdhMy00NDk2LTlmOWUtMjg2NTNjYzEyMzY4
LzEvc3Z1alZoaHNIY1VESEMteUM4WTFTUi1IaGpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMuiEkeB1
R7tJxYnMpfFEGu0gSd7MdICqru8HLakVKuQEiAaeDP2vS0E3IL33tBbJyMxhvXrW
mAwguxfOuQgqobFOly99If3yNpKvr4mEr7XQSHQuU7lvNdIKsPIAlntljYH1TZvi
o68LNvEmlYAcZh2EDLrYlh4vvbfLOMlVZOx2XeTRrzNAHLeckgSUxncnJekr9rQe
VO75E35qdPwbSlt1KsMCQUxfP5TSVvnMxPteelIy3dkLr3BulWLTCeWgkh2PD27F
QwdZGRxPwgRn6JiawIvpmppUGLyF2/ekcuKoHYLyVxYFayI6QNHxJRYMkSyvpL1L
Et3DZ+yuP+ApEg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:01:19 2025 by rpki-client