Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
File:                     AhaSppUBf7XEv4wjgHjzA9j78Ic.mft (raw, json)
Hash identifier:          bmS48yZsS/Ei/pKcMYVTxmtBa271fJChWOgFrzAuyiM=
Subject key identifier:   C9:2C:44:03:50:61:EE:8D:2E:99:7A:F7:64:E5:D0:83:C1:58:52:5E
Authority key identifier: 02:16:92:A6:95:01:7F:B5:C4:BF:8C:23:80:78:F3:03:D8:FB:F0:87
Certificate issuer:       /CN=021692a695017fb5c4bf8c238078f303d8fbf087
Certificate serial:       01984B552DF39F2B0D130E00F03F8EEF559E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
Manifest number:          15FE
Signing time:             Sun 27 Jul 2025 10:02:10 +0000
Manifest this update:     Sun 27 Jul 2025 10:02:10 +0000
Manifest next update:     Mon 28 Jul 2025 10:02:10 +0000
Files and hashes:         1: AhaSppUBf7XEv4wjgHjzA9j78Ic.crl (hash: 08DfmIsAtzXtJHjvy/vWsnks054zFxHFmM/ADv8ZDYg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:55:2d:f3:9f:2b:0d:13:0e:00:f0:3f:8e:ef:55:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=021692a695017fb5c4bf8c238078f303d8fbf087
        Validity
            Not Before: Jul 27 10:02:10 2025 GMT
            Not After : Jul 28 10:02:10 2025 GMT
        Subject: CN=c92c44035061ee8d2e997af764e5d083c158525e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:28:6a:b2:07:7c:2c:d1:f9:12:ba:c0:3b:a7:
                    b4:7f:29:89:44:34:92:83:2e:fb:73:d4:5b:c3:54:
                    7e:cb:b4:80:5f:56:5b:32:6e:c1:39:7d:72:7e:d9:
                    50:1c:f8:a6:28:5a:7b:11:f3:22:cb:a6:13:87:95:
                    1d:e7:86:9a:c3:fa:13:90:1f:e2:c6:4d:05:09:64:
                    a6:20:15:84:80:4b:ac:15:73:9e:06:05:9a:42:09:
                    fc:e1:4b:bd:7b:3a:ae:30:8f:ba:73:cf:5a:f9:08:
                    b7:26:0a:20:77:78:8d:bc:7b:1c:d9:6b:e8:fb:4c:
                    86:69:f4:58:43:a1:b1:f1:b4:21:37:92:23:d5:06:
                    21:88:87:11:bb:3f:3b:1a:60:78:c0:a3:74:50:7c:
                    1d:9e:f5:41:ef:e2:4d:e3:23:ee:d1:ed:e6:29:a2:
                    40:72:3c:83:3e:14:da:0f:40:74:4f:6e:83:06:ef:
                    33:39:73:6a:10:29:7d:44:b0:87:55:0b:84:16:7d:
                    bf:1e:93:a0:13:95:fe:a5:60:ff:09:7c:dc:74:c4:
                    7c:48:ff:25:08:1f:3d:eb:be:dc:e4:97:27:b8:99:
                    17:4d:7a:36:f4:c7:22:8b:f0:70:29:70:e6:60:b9:
                    c3:8a:09:50:f9:76:cc:9d:22:90:5f:98:14:49:ee:
                    63:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:2C:44:03:50:61:EE:8D:2E:99:7A:F7:64:E5:D0:83:C1:58:52:5E
            X509v3 Authority Key Identifier:
                keyid:02:16:92:A6:95:01:7F:B5:C4:BF:8C:23:80:78:F3:03:D8:FB:F0:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:76:22:39:e3:8c:99:a1:bf:a1:36:3e:38:26:72:c9:11:ac:
         56:2d:f5:16:85:e0:7b:ea:74:e3:e0:9b:1e:66:8e:9d:e2:7e:
         0f:d0:c7:bd:d6:06:93:dd:d7:e4:84:4c:1e:a8:9a:7a:0c:50:
         39:35:05:24:c7:91:2a:ca:d8:97:e1:ec:a3:d3:af:c9:36:ec:
         bc:d8:dc:4a:2f:31:13:1f:a7:61:b0:fb:68:5c:e5:9d:f2:80:
         77:5c:5b:72:da:df:16:3e:16:2a:36:52:dd:37:43:01:66:72:
         b0:9c:6f:ca:b6:19:f0:08:50:31:f4:cf:d5:ed:2a:b5:7b:00:
         a5:5c:b7:88:a2:aa:c9:b6:8e:44:54:a9:da:d5:fc:e5:12:c3:
         de:1c:bb:de:55:be:74:bd:7d:51:21:92:d5:03:d0:94:c3:03:
         37:80:de:1a:4e:3a:c8:01:b6:b0:c3:81:d9:9b:56:ba:76:f7:
         30:31:bd:71:9f:84:f7:c1:7f:ad:27:ff:d1:10:d5:47:c6:c1:
         36:29:b9:da:ed:6d:d8:0a:06:41:fc:61:a8:c1:47:ab:69:6a:
         76:66:59:72:1a:00:2b:8b:14:07:2e:75:33:18:90:39:83:96:
         c7:3f:9c:e1:cd:4f:34:8a:2c:90:af:5b:9f:70:af:9d:aa:4e:
         67:89:a5:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLVS3znysNEw4A8D+O71WeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMTY5MmE2OTUwMTdmYjVjNGJmOGMyMzgwNzhmMzAzZDhm
YmYwODcwHhcNMjUwNzI3MTAwMjEwWhcNMjUwNzI4MTAwMjEwWjAzMTEwLwYDVQQD
EyhjOTJjNDQwMzUwNjFlZThkMmU5OTdhZjc2NGU1ZDA4M2MxNTg1MjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Shqsgd8LNH5ErrAO6e0fymJRDSS
gy77c9Rbw1R+y7SAX1ZbMm7BOX1yftlQHPimKFp7EfMiy6YTh5Ud54aaw/oTkB/i
xk0FCWSmIBWEgEusFXOeBgWaQgn84Uu9ezquMI+6c89a+Qi3Jgogd3iNvHsc2Wvo
+0yGafRYQ6Gx8bQhN5Ij1QYhiIcRuz87GmB4wKN0UHwdnvVB7+JN4yPu0e3mKaJA
cjyDPhTaD0B0T26DBu8zOXNqECl9RLCHVQuEFn2/HpOgE5X+pWD/CXzcdMR8SP8l
CB89677c5JcnuJkXTXo29Mcii/BwKXDmYLnDiglQ+XbMnSKQX5gUSe5jDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMksRANQYe6NLpl692Tl0IPBWFJeMB8GA1UdIwQY
MBaAFAIWkqaVAX+1xL+MI4B48wPY+/CHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWhhU3BwVUJmN1hFdjR3amdIanpBOWo3OEljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8xM2JlZDUtOGQzNC00ZDNkLThlMDUt
NDhkMjVjMGE0OTVmLzEvQWhhU3BwVUJmN1hFdjR3amdIanpBOWo3OEljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8xM2JlZDUtOGQzNC00ZDNkLThlMDUtNDhkMjVjMGE0OTVm
LzEvQWhhU3BwVUJmN1hFdjR3amdIanpBOWo3OEljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeHYiOeOM
maG/oTY+OCZyyRGsVi31FoXge+p04+CbHmaOneJ+D9DHvdYGk93X5IRMHqiaegxQ
OTUFJMeRKsrYl+Hso9OvyTbsvNjcSi8xEx+nYbD7aFzlnfKAd1xbctrfFj4WKjZS
3TdDAWZysJxvyrYZ8AhQMfTP1e0qtXsApVy3iKKqybaORFSp2tX85RLD3hy73lW+
dL19USGS1QPQlMMDN4DeGk46yAG2sMOB2ZtWunb3MDG9cZ+E98F/rSf/0RDVR8bB
Nim52u1t2AoGQfxhqMFHq2lqdmZZchoAK4sUBy51MxiQOYOWxz+c4c1PNIoskK9b
n3CvnapOZ4mlyQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:35:28 2025 by rpki-client