Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/e-PtIuC3exUP9AoZrhVu2PHiXLU.mft
File:                     e-PtIuC3exUP9AoZrhVu2PHiXLU.mft (raw, json)
Hash identifier:          NfD5ORcARvwmYAG4nGroQZHXe9Z0rR5J0TQH31FU4+Q=
Subject key identifier:   15:0A:2A:14:51:D5:67:1F:7F:70:C8:56:B0:55:E9:11:76:E1:C0:43
Authority key identifier: 7B:E3:ED:22:E0:B7:7B:15:0F:F4:0A:19:AE:15:6E:D8:F1:E2:5C:B5
Certificate issuer:       /CN=7be3ed22e0b77b150ff40a19ae156ed8f1e25cb5
Certificate serial:       01984776E31D7AB75C838872862AAB5AF692
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e-PtIuC3exUP9AoZrhVu2PHiXLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/e-PtIuC3exUP9AoZrhVu2PHiXLU.mft
Manifest number:          01F7
Signing time:             Sat 26 Jul 2025 16:00:30 +0000
Manifest this update:     Sat 26 Jul 2025 16:00:30 +0000
Manifest next update:     Sun 27 Jul 2025 16:00:30 +0000
Files and hashes:         1: DkFI2i-dlKroiwNlcRZFWrwEfrM.roa (hash: 76hQqASVIsJqZKgr5XULRIU+pRNehE/+md2mz6/TprA=)
                          2: e-PtIuC3exUP9AoZrhVu2PHiXLU.crl (hash: 2XLsS0O4VIqgDcpvjDPYY15KUu43Lg5bUqXFwrWWIiY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/e-PtIuC3exUP9AoZrhVu2PHiXLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/e-PtIuC3exUP9AoZrhVu2PHiXLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e-PtIuC3exUP9AoZrhVu2PHiXLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:76:e3:1d:7a:b7:5c:83:88:72:86:2a:ab:5a:f6:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7be3ed22e0b77b150ff40a19ae156ed8f1e25cb5
        Validity
            Not Before: Jul 26 16:00:30 2025 GMT
            Not After : Jul 27 16:00:30 2025 GMT
        Subject: CN=150a2a1451d5671f7f70c856b055e91176e1c043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:50:bd:e1:e5:ae:46:82:74:69:e4:1a:e6:81:
                    9c:5e:6d:da:3b:9b:91:ad:4d:0d:17:5b:1d:5c:dd:
                    f7:e8:54:d8:93:da:a5:5f:d2:07:66:c0:be:11:91:
                    06:66:4d:5c:a7:25:cb:ef:cf:29:fe:5f:d3:2a:39:
                    86:e9:c3:28:ba:0f:09:af:c0:2c:3f:8f:d3:6a:4d:
                    43:6e:10:7c:29:da:91:d0:9a:2a:5d:df:dd:bf:55:
                    6f:16:11:4a:d6:3a:e2:87:12:26:9f:d0:93:96:da:
                    6d:86:5b:10:09:ef:2f:4d:75:41:cd:28:c3:e8:95:
                    1b:4b:9c:15:44:c0:19:39:46:59:c2:97:22:2a:89:
                    11:b7:6c:15:fe:33:8b:63:83:e1:63:dc:f9:18:ce:
                    2d:99:6e:58:2b:bb:25:ad:ad:d6:0b:5f:00:5d:85:
                    0c:1c:b3:2a:cb:db:22:45:e4:f5:25:b9:bb:af:48:
                    9a:77:8f:95:de:31:69:49:9c:3e:27:85:1a:0c:c7:
                    ce:63:32:3f:5f:75:23:da:e3:1a:6e:47:66:37:da:
                    50:61:24:ac:59:00:55:50:84:f8:1e:5e:f4:45:ce:
                    7a:9b:93:70:db:3a:60:db:24:1c:dc:e2:ab:10:35:
                    c7:08:26:ae:2a:8c:05:0a:7d:96:65:88:08:f6:d9:
                    e9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:0A:2A:14:51:D5:67:1F:7F:70:C8:56:B0:55:E9:11:76:E1:C0:43
            X509v3 Authority Key Identifier:
                keyid:7B:E3:ED:22:E0:B7:7B:15:0F:F4:0A:19:AE:15:6E:D8:F1:E2:5C:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-PtIuC3exUP9AoZrhVu2PHiXLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/e-PtIuC3exUP9AoZrhVu2PHiXLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/e-PtIuC3exUP9AoZrhVu2PHiXLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:0a:a5:2e:67:30:b0:72:cf:35:02:27:82:9f:82:a8:d0:21:
         63:d0:f2:80:ec:fc:3f:81:ad:a6:42:b9:82:8c:23:2b:ce:13:
         43:14:d9:27:e3:ea:20:08:05:32:b3:e6:fe:ab:18:e7:66:01:
         59:bc:cf:55:df:d9:5b:42:fc:46:f3:8e:3f:10:57:43:fe:16:
         01:4c:5a:b7:6c:a7:17:e9:54:90:de:d8:8a:ea:df:9f:3a:d0:
         b0:fa:97:b8:dc:52:c1:6d:77:08:67:ce:63:d8:a2:29:74:bc:
         42:25:b6:8c:98:60:5c:2c:55:a3:89:8b:c5:d2:9a:79:b1:36:
         f1:73:0f:f8:21:c5:c7:75:3d:04:00:5d:f5:92:68:df:39:d8:
         f6:83:2c:c1:ee:02:4c:11:20:8a:fa:54:4f:34:b5:11:36:b2:
         45:e1:2c:c2:19:0f:ad:74:94:95:a0:da:88:7b:61:c7:71:68:
         18:f9:64:23:89:c8:77:59:ab:fc:61:4e:4b:d4:93:a8:3b:9c:
         34:08:7b:9a:eb:3a:19:ed:19:24:99:87:cd:8f:ee:a5:a2:0e:
         28:de:b0:df:85:8d:ec:d7:92:c4:ac:04:0c:d6:79:10:38:c2:
         30:b3:17:05:fd:ef:86:34:c9:5f:af:fc:e3:03:47:57:05:3e:
         bf:ec:5c:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHduMderdcg4hyhiqrWvaSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiZTNlZDIyZTBiNzdiMTUwZmY0MGExOWFlMTU2ZWQ4ZjFl
MjVjYjUwHhcNMjUwNzI2MTYwMDMwWhcNMjUwNzI3MTYwMDMwWjAzMTEwLwYDVQQD
EygxNTBhMmExNDUxZDU2NzFmN2Y3MGM4NTZiMDU1ZTkxMTc2ZTFjMDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1C94eWuRoJ0aeQa5oGcXm3aO5uR
rU0NF1sdXN336FTYk9qlX9IHZsC+EZEGZk1cpyXL788p/l/TKjmG6cMoug8Jr8As
P4/Tak1DbhB8KdqR0JoqXd/dv1VvFhFK1jrihxImn9CTltpthlsQCe8vTXVBzSjD
6JUbS5wVRMAZOUZZwpciKokRt2wV/jOLY4PhY9z5GM4tmW5YK7slra3WC18AXYUM
HLMqy9siReT1Jbm7r0iad4+V3jFpSZw+J4UaDMfOYzI/X3Uj2uMabkdmN9pQYSSs
WQBVUIT4Hl70Rc56m5Nw2zpg2yQc3OKrEDXHCCauKowFCn2WZYgI9tnpjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBUKKhRR1Wcff3DIVrBV6RF24cBDMB8GA1UdIwQY
MBaAFHvj7SLgt3sVD/QKGa4Vbtjx4ly1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZS1QdEl1QzNleFVQOUFvWnJoVnUyUEhpWExVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9iNDUwYWYtMjA5MS00ZWYyLWI1ZjUt
MmI3YzFlZGYxMTZhLzEvZS1QdEl1QzNleFVQOUFvWnJoVnUyUEhpWExVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9iNDUwYWYtMjA5MS00ZWYyLWI1ZjUtMmI3YzFlZGYxMTZh
LzEvZS1QdEl1QzNleFVQOUFvWnJoVnUyUEhpWExVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATwqlLmcw
sHLPNQIngp+CqNAhY9DygOz8P4GtpkK5gowjK84TQxTZJ+PqIAgFMrPm/qsY52YB
WbzPVd/ZW0L8RvOOPxBXQ/4WAUxat2ynF+lUkN7YiurfnzrQsPqXuNxSwW13CGfO
Y9iiKXS8QiW2jJhgXCxVo4mLxdKaebE28XMP+CHFx3U9BABd9ZJo3znY9oMswe4C
TBEgivpUTzS1ETayReEswhkPrXSUlaDaiHthx3FoGPlkI4nId1mr/GFOS9STqDuc
NAh7mus6Ge0ZJJmHzY/upaIOKN6w34WN7NeSxKwEDNZ5EDjCMLMXBf3vhjTJX6/8
4wNHVwU+v+xcPg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 21:11:14 2025 by rpki-client