Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft
File:                     MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft (raw, json)
Hash identifier:          IIEVrVPqnH3Im9xa14KJLsbvbwRRljaJkXBDB1r/YdY=
Subject key identifier:   B7:80:78:21:23:56:4B:DE:30:EB:D8:EE:E4:D7:5F:F3:BA:B1:BC:F7
Authority key identifier: 33:0B:C8:FD:94:9E:65:1D:93:28:5C:CB:C1:DA:13:39:3B:78:33:05
Certificate issuer:       /CN=330bc8fd949e651d93285ccbc1da13393b783305
Certificate serial:       01984889BB56125C7EF311271CA20248F2CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft
Manifest number:          0FF8
Signing time:             Sat 26 Jul 2025 21:00:42 +0000
Manifest this update:     Sat 26 Jul 2025 21:00:42 +0000
Manifest next update:     Sun 27 Jul 2025 21:00:42 +0000
Files and hashes:         1: MwvI_ZSeZR2TKFzLwdoTOTt4MwU.crl (hash: J1mH520TAlRvzQayzHdOuCQmg4BeCljQhWP45Y8SjGs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:89:bb:56:12:5c:7e:f3:11:27:1c:a2:02:48:f2:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=330bc8fd949e651d93285ccbc1da13393b783305
        Validity
            Not Before: Jul 26 21:00:42 2025 GMT
            Not After : Jul 27 21:00:42 2025 GMT
        Subject: CN=b780782123564bde30ebd8eee4d75ff3bab1bcf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:65:55:13:57:99:26:ba:84:19:87:98:0b:91:
                    b7:91:75:a1:8c:b2:f0:56:b4:7b:9a:28:02:28:48:
                    f3:7e:1d:eb:a5:69:fc:49:a8:b9:f8:6f:ca:38:05:
                    6d:31:b1:ef:5f:7a:26:ba:40:32:00:c9:2a:2f:ce:
                    93:81:cb:34:57:16:2a:24:c1:ae:fb:29:d3:28:e8:
                    49:57:bd:2a:6d:19:4c:1d:52:f1:dc:90:53:88:83:
                    36:26:0d:8a:1a:67:52:fc:6b:63:97:f3:07:86:29:
                    1f:9e:3e:dc:ae:c7:15:80:4b:50:15:43:69:e8:84:
                    a0:ce:1e:f8:5e:57:5a:81:f0:63:71:a6:46:f4:91:
                    c2:4e:10:41:f6:94:c5:d8:80:ed:7b:14:cc:08:ba:
                    73:d7:b5:07:2d:73:6c:95:aa:86:6d:d7:0f:ff:e8:
                    fb:f0:ce:15:ff:31:55:18:63:bb:c3:d4:d0:64:6f:
                    71:5d:21:a5:8d:6c:86:39:8d:fc:7f:af:7d:19:da:
                    59:30:91:94:f7:04:e5:b9:34:6e:ea:47:43:0b:50:
                    bd:79:1b:b3:21:9e:f3:60:86:32:37:6b:d3:08:24:
                    ba:fd:ef:31:88:d8:4f:63:5e:87:c0:a9:e5:1c:8d:
                    72:aa:46:2a:4c:f8:b3:2f:f8:c4:6c:83:7e:69:1b:
                    41:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:80:78:21:23:56:4B:DE:30:EB:D8:EE:E4:D7:5F:F3:BA:B1:BC:F7
            X509v3 Authority Key Identifier:
                keyid:33:0B:C8:FD:94:9E:65:1D:93:28:5C:CB:C1:DA:13:39:3B:78:33:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:ae:f8:38:1c:6f:64:45:6b:9f:07:f2:f3:a1:0d:db:0a:26:
         5f:46:e0:96:22:0c:e5:f7:a5:98:ea:7b:b3:af:c7:e3:24:e8:
         4b:64:cd:15:5d:5b:1c:04:97:5a:d6:0a:4d:36:8e:10:c3:35:
         54:f3:d8:6b:38:69:09:04:1c:bd:53:aa:00:c1:69:6d:af:53:
         5a:e1:9a:be:4d:3b:1a:e8:8d:01:c0:ea:9c:f5:b2:e0:5e:1a:
         82:22:c1:e4:39:9e:2f:d9:70:25:b3:47:f3:e5:97:f7:5b:86:
         a6:2d:4d:bd:0f:25:b9:54:d8:bc:76:32:27:de:8e:ab:43:ad:
         ae:34:07:b4:10:82:08:48:62:1b:4a:69:29:e3:7a:0b:1c:45:
         f9:bb:05:e1:dd:bc:fa:30:5a:50:6f:ff:9f:91:4f:99:4b:9b:
         60:76:b6:01:83:71:2d:8b:a5:b8:8b:b0:a7:7c:50:4c:82:bd:
         b1:49:5d:3a:3b:6f:1c:ca:1c:f5:07:46:05:8c:25:cd:64:de:
         dd:ea:f3:b9:7c:f9:d2:fb:98:64:db:f0:a8:96:b4:96:fe:c5:
         3f:2b:55:21:d3:f0:12:45:d3:0b:65:0b:96:46:4c:43:3b:c8:
         84:af:50:22:cb:84:52:91:f9:a2:7a:99:43:85:a1:50:f7:c2:
         03:35:e1:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIibtWElx+8xEnHKICSPLNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMGJjOGZkOTQ5ZTY1MWQ5MzI4NWNjYmMxZGExMzM5M2I3
ODMzMDUwHhcNMjUwNzI2MjEwMDQyWhcNMjUwNzI3MjEwMDQyWjAzMTEwLwYDVQQD
EyhiNzgwNzgyMTIzNTY0YmRlMzBlYmQ4ZWVlNGQ3NWZmM2JhYjFiY2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymVVE1eZJrqEGYeYC5G3kXWhjLLw
VrR7migCKEjzfh3rpWn8Sai5+G/KOAVtMbHvX3omukAyAMkqL86Tgcs0VxYqJMGu
+ynTKOhJV70qbRlMHVLx3JBTiIM2Jg2KGmdS/Gtjl/MHhikfnj7crscVgEtQFUNp
6ISgzh74XldagfBjcaZG9JHCThBB9pTF2IDtexTMCLpz17UHLXNslaqGbdcP/+j7
8M4V/zFVGGO7w9TQZG9xXSGljWyGOY38f699GdpZMJGU9wTluTRu6kdDC1C9eRuz
IZ7zYIYyN2vTCCS6/e8xiNhPY16HwKnlHI1yqkYqTPizL/jEbIN+aRtBowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLeAeCEjVkveMOvY7uTXX/O6sbz3MB8GA1UdIwQY
MBaAFDMLyP2UnmUdkyhcy8HaEzk7eDMFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXd2SV9aU2VaUjJUS0Z6THdkb1RPVHQ0TXdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi80NjYxNWMtYTdkZi00MjViLTk1OTAt
ZDIxZTE0M2Y3NWIyLzEvTXd2SV9aU2VaUjJUS0Z6THdkb1RPVHQ0TXdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi80NjYxNWMtYTdkZi00MjViLTk1OTAtZDIxZTE0M2Y3NWIy
LzEvTXd2SV9aU2VaUjJUS0Z6THdkb1RPVHQ0TXdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUa74OBxv
ZEVrnwfy86EN2womX0bgliIM5felmOp7s6/H4yToS2TNFV1bHASXWtYKTTaOEMM1
VPPYazhpCQQcvVOqAMFpba9TWuGavk07GuiNAcDqnPWy4F4agiLB5DmeL9lwJbNH
8+WX91uGpi1NvQ8luVTYvHYyJ96Oq0OtrjQHtBCCCEhiG0ppKeN6CxxF+bsF4d28
+jBaUG//n5FPmUubYHa2AYNxLYuluIuwp3xQTIK9sUldOjtvHMoc9QdGBYwlzWTe
3erzuXz50vuYZNvwqJa0lv7FPytVIdPwEkXTC2ULlkZMQzvIhK9QIsuEUpH5onqZ
Q4WhUPfCAzXh9g==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:28:16 2025 by rpki-client