Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft
File:                     t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft (raw, json)
Hash identifier:          OPrH9VeyTrx9U1JmgMnbLwBzZPxqDlbxZz8xW1BMbo8=
Subject key identifier:   0C:DA:D0:EC:A5:93:90:12:60:3E:DD:37:D5:21:02:5B:48:29:05:EF
Authority key identifier: B7:92:D7:EC:F3:B4:5C:49:38:F0:5B:B9:05:1C:5A:89:72:9D:D4:41
Certificate issuer:       /CN=b792d7ecf3b45c4938f05bb9051c5a89729dd441
Certificate serial:       019847E4D2449CC3256949615A0EBB7284D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t5LX7PO0XEk48Fu5BRxaiXKd1EE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft
Manifest number:          0C95
Signing time:             Sat 26 Jul 2025 18:00:34 +0000
Manifest this update:     Sat 26 Jul 2025 18:00:34 +0000
Manifest next update:     Sun 27 Jul 2025 18:00:34 +0000
Files and hashes:         1: t5LX7PO0XEk48Fu5BRxaiXKd1EE.crl (hash: vaJNwx5VAK4GdiBhMSa9fFv+2PKEty5KSVFBptvcGCw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t5LX7PO0XEk48Fu5BRxaiXKd1EE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:e4:d2:44:9c:c3:25:69:49:61:5a:0e:bb:72:84:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b792d7ecf3b45c4938f05bb9051c5a89729dd441
        Validity
            Not Before: Jul 26 18:00:34 2025 GMT
            Not After : Jul 27 18:00:34 2025 GMT
        Subject: CN=0cdad0eca5939012603edd37d521025b482905ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4e:c1:63:99:33:e2:d8:83:08:94:23:4f:36:
                    da:e3:43:e9:dc:3c:8f:9e:7c:17:07:66:d9:cc:40:
                    c3:d2:51:53:bb:46:70:4e:ff:72:4b:83:4d:cf:60:
                    9c:ca:14:65:83:f9:2f:75:fd:d9:49:a6:ce:eb:4e:
                    74:a5:2e:58:32:3b:a3:60:00:d4:8b:f2:b1:68:1a:
                    13:4f:87:51:27:81:9b:1a:1b:b2:60:ee:29:d1:64:
                    ad:1c:dc:61:e5:ee:c1:75:b5:6d:9b:05:1e:be:20:
                    3b:84:c1:16:5a:ce:bf:63:ed:ed:e0:1c:6f:21:e9:
                    d1:d4:0a:9c:f1:fc:95:c1:7b:4f:a3:05:8a:e7:89:
                    cf:8b:31:f6:2d:8d:07:b2:6c:74:f8:84:dc:e8:83:
                    84:c2:a5:95:06:f9:07:ae:86:2e:7b:40:b3:47:32:
                    c1:64:19:c4:6c:19:d4:d1:db:13:fa:34:28:2e:5a:
                    72:f6:52:b3:0d:cd:1d:d7:3f:45:d6:f9:9a:f5:8a:
                    00:7d:48:2b:c8:54:ad:19:6a:05:f9:a4:86:dc:2e:
                    65:4f:d0:12:af:c9:49:a4:d8:ac:a9:5d:c4:27:83:
                    8c:d1:5d:ec:5e:91:d6:94:62:bf:10:c1:9b:4e:07:
                    d0:db:5f:43:be:54:ae:c7:31:fa:a7:20:83:48:86:
                    8b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:DA:D0:EC:A5:93:90:12:60:3E:DD:37:D5:21:02:5B:48:29:05:EF
            X509v3 Authority Key Identifier:
                keyid:B7:92:D7:EC:F3:B4:5C:49:38:F0:5B:B9:05:1C:5A:89:72:9D:D4:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5LX7PO0XEk48Fu5BRxaiXKd1EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:f7:fd:88:97:b3:1f:39:78:34:6b:7e:7a:f8:09:cd:52:9f:
         cf:4a:5b:73:61:5c:c2:96:43:c3:4d:a4:cc:ea:0c:c3:0e:70:
         fb:a2:55:7c:b1:30:0c:c6:63:e9:4c:0b:f6:42:dc:1f:44:d5:
         39:00:7e:df:95:f8:ed:fe:ce:80:c8:dc:93:80:02:4b:7e:ef:
         f4:76:35:f2:b8:12:51:3e:f3:39:8c:81:85:f0:e1:9c:c1:4b:
         e1:f3:fc:19:cb:a2:62:7c:8f:b7:41:19:a5:3d:91:fc:02:e1:
         71:14:8d:63:76:ca:29:65:2c:f0:65:b0:bd:38:5c:a4:6c:a9:
         b1:0f:e0:38:e9:c1:ca:aa:03:64:ef:03:b7:da:db:36:b7:9c:
         92:6c:f2:51:2e:55:9d:89:86:c6:ba:ce:2f:79:e8:81:93:eb:
         b1:03:fc:24:1a:de:f1:3e:88:13:1c:a3:b9:f8:57:b1:ca:02:
         44:3e:85:45:a4:d4:64:79:2a:29:34:7a:9d:c5:11:60:d5:33:
         d7:08:58:08:69:9c:a3:5d:52:e9:f4:9c:98:3b:c6:f4:b4:7c:
         81:45:55:b5:ad:8a:16:8d:68:04:14:eb:57:6b:39:6d:e0:f3:
         1c:6e:33:1d:e3:c5:14:39:a1:ab:19:5e:4c:00:19:0a:8f:71:
         d5:d6:40:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhH5NJEnMMlaUlhWg67coTQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3OTJkN2VjZjNiNDVjNDkzOGYwNWJiOTA1MWM1YTg5NzI5
ZGQ0NDEwHhcNMjUwNzI2MTgwMDM0WhcNMjUwNzI3MTgwMDM0WjAzMTEwLwYDVQQD
EygwY2RhZDBlY2E1OTM5MDEyNjAzZWRkMzdkNTIxMDI1YjQ4MjkwNWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2U7BY5kz4tiDCJQjTzba40Pp3DyP
nnwXB2bZzEDD0lFTu0ZwTv9yS4NNz2CcyhRlg/kvdf3ZSabO6050pS5YMjujYADU
i/KxaBoTT4dRJ4GbGhuyYO4p0WStHNxh5e7BdbVtmwUeviA7hMEWWs6/Y+3t4Bxv
IenR1Aqc8fyVwXtPowWK54nPizH2LY0Hsmx0+ITc6IOEwqWVBvkHroYue0CzRzLB
ZBnEbBnU0dsT+jQoLlpy9lKzDc0d1z9F1vma9YoAfUgryFStGWoF+aSG3C5lT9AS
r8lJpNisqV3EJ4OM0V3sXpHWlGK/EMGbTgfQ219DvlSuxzH6pyCDSIaLJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAza0Oylk5ASYD7dN9UhAltIKQXvMB8GA1UdIwQY
MBaAFLeS1+zztFxJOPBbuQUcWolyndRBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDVMWDdQTzBYRWs0OEZ1NUJSeGFpWEtkMUVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9iMDVlNjItY2FjMi00MmY5LTllZjYt
YTMyNTQ5MjMyNTIwLzEvdDVMWDdQTzBYRWs0OEZ1NUJSeGFpWEtkMUVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9iMDVlNjItY2FjMi00MmY5LTllZjYtYTMyNTQ5MjMyNTIw
LzEvdDVMWDdQTzBYRWs0OEZ1NUJSeGFpWEtkMUVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2Pf9iJez
Hzl4NGt+evgJzVKfz0pbc2FcwpZDw02kzOoMww5w+6JVfLEwDMZj6UwL9kLcH0TV
OQB+35X47f7OgMjck4ACS37v9HY18rgSUT7zOYyBhfDhnMFL4fP8GcuiYnyPt0EZ
pT2R/ALhcRSNY3bKKWUs8GWwvThcpGypsQ/gOOnByqoDZO8Dt9rbNreckmzyUS5V
nYmGxrrOL3nogZPrsQP8JBre8T6IExyjufhXscoCRD6FRaTUZHkqKTR6ncURYNUz
1whYCGmco11S6fScmDvG9LR8gUVVta2KFo1oBBTrV2s5beDzHG4zHePFFDmhqxle
TAAZCo9x1dZAXA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:22:06 2025 by rpki-client