Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
File:                     iiQuCntgz9644OA_-a7DPlq30sg.mft (raw, json)
Hash identifier:          JUxmxrotL1zUR6845dEkUm5KFAgrVwglZ0nEGzAzbTk=
Subject key identifier:   50:6A:EA:C8:A1:1C:75:4D:48:20:B7:16:60:0E:4C:A7:26:7A:B2:B3
Authority key identifier: 8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8
Certificate issuer:       /CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8
Certificate serial:       019855DF7DFE990AB77BE90E0496EB2A0A3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
Manifest number:          0A15
Signing time:             Tue 29 Jul 2025 11:09:26 +0000
Manifest this update:     Tue 29 Jul 2025 11:09:26 +0000
Manifest next update:     Wed 30 Jul 2025 11:09:26 +0000
Files and hashes:         1: iiQuCntgz9644OA_-a7DPlq30sg.crl (hash: gCPeiBJXx4yyx40yLqe+GogKas1dOrTHi+8xylzdErg=)
                          2: siJjmLBZP9diFC7BYX9p7SQAfZw.roa (hash: Gsh0pNObMeNVow5ebFzkqw16IE2NyBLNNUC8IDCqBag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Jul 2025 08:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:55:df:7d:fe:99:0a:b7:7b:e9:0e:04:96:eb:2a:0a:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8
        Validity
            Not Before: Jul 29 11:09:26 2025 GMT
            Not After : Jul 30 11:09:26 2025 GMT
        Subject: CN=506aeac8a11c754d4820b716600e4ca7267ab2b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fb:d2:3e:57:76:79:fa:99:fa:04:7c:e6:a5:
                    06:32:7e:0c:8e:94:fd:c3:c7:17:43:e4:cc:4c:f8:
                    58:19:10:a0:4b:86:99:1e:91:01:45:bc:b2:09:d6:
                    1a:86:e5:cd:d7:7b:c0:cc:ad:67:cd:87:c5:51:82:
                    29:02:03:7a:2e:22:82:e1:e5:a2:f7:d4:cc:02:9d:
                    12:64:d5:17:ba:9f:a2:e9:24:c9:40:03:a9:96:8e:
                    f6:91:50:82:e7:5b:d7:29:a3:92:cf:4a:60:a3:ad:
                    5e:9e:f5:c9:ae:99:50:4e:c2:e6:88:33:f6:51:cf:
                    6b:3a:d6:64:e0:00:f8:a5:82:ab:a1:dc:f7:5e:96:
                    e5:05:b2:80:53:1b:c4:c1:a2:f0:b7:14:79:8f:c6:
                    4f:f7:69:eb:46:0d:cf:28:ec:16:d2:86:0c:24:ea:
                    ef:2f:ce:8a:bd:3d:85:72:23:68:1e:10:ca:98:f5:
                    9f:b5:9c:2a:0e:a5:c8:2f:a3:dc:c9:5e:e6:20:74:
                    bf:c4:d1:69:f2:12:36:fe:70:ca:9d:8d:ea:c5:9f:
                    9b:a2:18:15:bf:a3:70:0b:0e:17:38:75:57:33:5d:
                    44:e9:a9:7e:56:94:bc:dd:59:f6:7e:0e:42:41:57:
                    a6:50:2c:76:66:2c:49:96:34:20:90:2b:78:01:d1:
                    a1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:6A:EA:C8:A1:1C:75:4D:48:20:B7:16:60:0E:4C:A7:26:7A:B2:B3
            X509v3 Authority Key Identifier:
                keyid:8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:b7:b8:a2:f2:8f:72:de:49:63:e0:38:c3:f0:fb:ce:6f:2c:
         7b:b4:04:12:3c:15:6c:21:4b:b7:d1:57:9e:4f:9a:b1:8f:be:
         ae:9c:8e:da:c0:bb:5e:a5:e2:3b:1c:b9:d6:33:18:31:92:95:
         90:29:05:56:7b:62:8c:da:8b:0d:c9:88:18:fa:a0:49:e9:44:
         7d:a2:08:d8:7e:b0:22:69:69:5b:2a:81:57:44:b3:e1:2d:af:
         a2:eb:4a:14:33:28:a7:c0:fb:86:40:8a:84:3c:c1:c1:76:33:
         33:aa:7b:8d:c5:f4:ed:99:32:08:1e:42:30:b9:80:f4:0c:de:
         8f:25:1d:d5:31:98:45:c2:2b:4d:1a:d3:87:de:8c:b1:8a:04:
         65:59:70:56:b9:fd:95:70:7a:31:e8:8e:85:b8:c5:a0:eb:26:
         5b:4d:d9:86:28:4a:d6:4b:3e:37:14:b2:14:be:69:4a:12:13:
         a5:9e:e6:ae:8c:6d:82:13:f7:ae:56:13:b6:9b:86:b7:89:a8:
         ff:66:bb:9a:44:b9:5b:28:4f:2a:3d:03:46:39:9d:32:84:ec:
         a5:58:90:93:30:cc:bd:48:75:f7:c3:30:93:11:5b:d8:bd:46:
         93:35:15:db:ba:33:e7:0a:9d:cd:d0:77:46:05:87:23:4a:8a:
         59:05:bf:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhV333+mQq3e+kOBJbrKgo+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMjQyZTBhN2I2MGNmZGViOGUwZTAzZmY5YWVjMzNlNWFi
N2QyYzgwHhcNMjUwNzI5MTEwOTI2WhcNMjUwNzMwMTEwOTI2WjAzMTEwLwYDVQQD
Eyg1MDZhZWFjOGExMWM3NTRkNDgyMGI3MTY2MDBlNGNhNzI2N2FiMmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvvSPld2efqZ+gR85qUGMn4MjpT9
w8cXQ+TMTPhYGRCgS4aZHpEBRbyyCdYahuXN13vAzK1nzYfFUYIpAgN6LiKC4eWi
99TMAp0SZNUXup+i6STJQAOplo72kVCC51vXKaOSz0pgo61envXJrplQTsLmiDP2
Uc9rOtZk4AD4pYKrodz3XpblBbKAUxvEwaLwtxR5j8ZP92nrRg3PKOwW0oYMJOrv
L86KvT2FciNoHhDKmPWftZwqDqXIL6PcyV7mIHS/xNFp8hI2/nDKnY3qxZ+bohgV
v6NwCw4XOHVXM11E6al+VpS83Vn2fg5CQVemUCx2ZixJljQgkCt4AdGh8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFBq6sihHHVNSCC3FmAOTKcmerKzMB8GA1UdIwQY
MBaAFIokLgp7YM/euODgP/muwz5at9LIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWlRdUNudGd6OTY0NE9BXy1hN0RQbHEzMHNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi83YmQwZTktYWJlMS00YTc0LTg5NTUt
OGE4ZDRjNjkxOGI0LzEvaWlRdUNudGd6OTY0NE9BXy1hN0RQbHEzMHNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi83YmQwZTktYWJlMS00YTc0LTg5NTUtOGE4ZDRjNjkxOGI0
LzEvaWlRdUNudGd6OTY0NE9BXy1hN0RQbHEzMHNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ7e4ovKP
ct5JY+A4w/D7zm8se7QEEjwVbCFLt9FXnk+asY++rpyO2sC7XqXiOxy51jMYMZKV
kCkFVntijNqLDcmIGPqgSelEfaII2H6wImlpWyqBV0Sz4S2voutKFDMop8D7hkCK
hDzBwXYzM6p7jcX07ZkyCB5CMLmA9AzejyUd1TGYRcIrTRrTh96MsYoEZVlwVrn9
lXB6MeiOhbjFoOsmW03ZhihK1ks+NxSyFL5pShITpZ7mroxtghP3rlYTtpuGt4mo
/2a7mkS5WyhPKj0DRjmdMoTspViQkzDMvUh198MwkxFb2L1GkzUV27oz5wqdzdB3
RgWHI0qKWQW/Sw==
-----END CERTIFICATE-----
Generated at Tue Jul 29 14:38:58 2025 by rpki-client