Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/8f5e59-7f71-4cf2-a619-3f0295eee951/1/fgdwhBDMdkNEuM-k8-NopeJStlA.mft
File:                     fgdwhBDMdkNEuM-k8-NopeJStlA.mft (raw, json)
Hash identifier:          u2UYcJPgC+tVDRhc/BGyO5/lHNJB8o2fHWTpB6YtbIM=
Subject key identifier:   80:B6:45:44:D6:2E:87:47:A1:E2:D5:F7:2E:C8:D3:C7:C6:51:83:EC
Authority key identifier: 7E:07:70:84:10:CC:76:43:44:B8:CF:A4:F3:E3:68:A5:E2:52:B6:50
Certificate issuer:       /CN=7e07708410cc764344b8cfa4f3e368a5e252b650
Certificate serial:       019848533065053EA591EAE143589F5559D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fgdwhBDMdkNEuM-k8-NopeJStlA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/8f5e59-7f71-4cf2-a619-3f0295eee951/1/fgdwhBDMdkNEuM-k8-NopeJStlA.mft
Manifest number:          0A27
Signing time:             Sat 26 Jul 2025 20:01:07 +0000
Manifest this update:     Sat 26 Jul 2025 20:01:07 +0000
Manifest next update:     Sun 27 Jul 2025 20:01:07 +0000
Files and hashes:         1: fgdwhBDMdkNEuM-k8-NopeJStlA.crl (hash: VUcVTz0oMN/1jOYL5yUeeL6SylUyShjnh9ab7VPWdrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/8f5e59-7f71-4cf2-a619-3f0295eee951/1/fgdwhBDMdkNEuM-k8-NopeJStlA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/8f5e59-7f71-4cf2-a619-3f0295eee951/1/fgdwhBDMdkNEuM-k8-NopeJStlA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fgdwhBDMdkNEuM-k8-NopeJStlA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:53:30:65:05:3e:a5:91:ea:e1:43:58:9f:55:59:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e07708410cc764344b8cfa4f3e368a5e252b650
        Validity
            Not Before: Jul 26 20:01:07 2025 GMT
            Not After : Jul 27 20:01:07 2025 GMT
        Subject: CN=80b64544d62e8747a1e2d5f72ec8d3c7c65183ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c8:87:36:7b:2a:5f:72:7a:f2:bd:bb:74:61:
                    05:83:91:65:f4:38:b2:33:cd:fe:21:d8:e0:c4:96:
                    a5:03:50:3c:70:ff:7b:44:00:b1:d8:a6:55:51:a9:
                    e0:66:9f:1a:35:cc:01:62:c2:74:d3:ca:ac:cd:f7:
                    07:f1:a0:30:ea:15:28:cf:2a:d0:7f:c3:d3:f5:a7:
                    fd:f2:dd:7f:9a:95:f4:10:84:a5:67:de:2b:45:85:
                    85:0d:8d:13:c1:4c:b5:39:d4:6a:0a:87:78:22:63:
                    38:38:d7:7a:8e:6a:f6:ee:4e:58:01:40:5e:c3:3e:
                    3c:66:e0:d7:49:5f:87:a0:43:d5:f9:11:f2:1d:6c:
                    d8:03:13:14:16:8c:3f:1d:2f:37:41:62:d6:c7:08:
                    d2:cd:6b:38:31:1e:98:5e:6c:f0:d2:45:6a:c6:29:
                    8c:8e:1b:5a:b1:80:0f:d8:0e:ff:52:ab:a6:07:e0:
                    df:2f:4a:ed:64:b4:a6:62:21:1f:96:25:93:67:94:
                    18:d5:13:b6:f2:64:35:0b:d9:31:c8:b3:e9:3d:4a:
                    e8:70:85:44:ab:e8:8b:a5:4b:5e:a5:1c:89:9d:e2:
                    b6:3b:22:c3:6b:c4:41:3d:42:42:78:4a:14:be:d2:
                    92:c9:38:ed:c9:8a:3a:01:74:06:63:09:f5:dd:86:
                    58:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B6:45:44:D6:2E:87:47:A1:E2:D5:F7:2E:C8:D3:C7:C6:51:83:EC
            X509v3 Authority Key Identifier:
                keyid:7E:07:70:84:10:CC:76:43:44:B8:CF:A4:F3:E3:68:A5:E2:52:B6:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgdwhBDMdkNEuM-k8-NopeJStlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8f5e59-7f71-4cf2-a619-3f0295eee951/1/fgdwhBDMdkNEuM-k8-NopeJStlA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8f5e59-7f71-4cf2-a619-3f0295eee951/1/fgdwhBDMdkNEuM-k8-NopeJStlA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:80:69:89:ed:ac:49:12:4c:7e:1f:ef:7e:f8:b3:38:a4:a1:
         0f:6c:4d:94:ff:0d:23:5a:01:e5:da:4c:b3:39:86:7e:60:97:
         67:a1:a0:61:3c:11:84:9d:77:4a:c9:40:9f:0d:d1:3b:a6:75:
         74:5a:79:dc:c5:79:07:38:5a:89:b7:d5:69:50:19:c8:a2:08:
         6e:78:46:f2:20:41:80:3a:02:8a:35:6f:08:7d:9f:f3:30:26:
         4c:1f:fa:3a:74:14:3d:c1:9d:27:41:ab:55:4a:32:fd:40:82:
         ee:6d:f4:57:6f:5e:bb:78:ac:bc:b3:7b:25:b4:2d:0a:9c:4e:
         23:4f:f3:50:82:68:23:e9:c8:4f:65:7e:de:b7:ef:7d:12:d4:
         23:14:15:73:4c:62:78:3e:72:c5:16:b3:c9:52:b8:bb:f8:10:
         77:fe:0d:b9:c2:42:68:1a:e0:9b:eb:57:a4:82:46:af:05:3d:
         23:e5:15:d0:ea:31:92:89:7f:40:9e:5c:47:3d:15:03:26:58:
         8f:25:e4:f1:e1:ca:c5:3c:6f:af:eb:97:d3:23:cc:6e:f9:b5:
         7d:28:dc:27:f3:0e:6c:73:68:d3:93:2a:1a:85:bd:a2:32:5b:
         27:a5:e3:df:cd:96:a8:d0:e9:14:21:42:35:80:51:2a:c2:8d:
         5f:68:4e:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIUzBlBT6lkerhQ1ifVVnSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMDc3MDg0MTBjYzc2NDM0NGI4Y2ZhNGYzZTM2OGE1ZTI1
MmI2NTAwHhcNMjUwNzI2MjAwMTA3WhcNMjUwNzI3MjAwMTA3WjAzMTEwLwYDVQQD
Eyg4MGI2NDU0NGQ2MmU4NzQ3YTFlMmQ1ZjcyZWM4ZDNjN2M2NTE4M2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjciHNnsqX3J68r27dGEFg5Fl9Diy
M83+IdjgxJalA1A8cP97RACx2KZVUangZp8aNcwBYsJ008qszfcH8aAw6hUozyrQ
f8PT9af98t1/mpX0EISlZ94rRYWFDY0TwUy1OdRqCod4ImM4ONd6jmr27k5YAUBe
wz48ZuDXSV+HoEPV+RHyHWzYAxMUFow/HS83QWLWxwjSzWs4MR6YXmzw0kVqximM
jhtasYAP2A7/UqumB+DfL0rtZLSmYiEfliWTZ5QY1RO28mQ1C9kxyLPpPUrocIVE
q+iLpUtepRyJneK2OyLDa8RBPUJCeEoUvtKSyTjtyYo6AXQGYwn13YZYPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIC2RUTWLodHoeLV9y7I08fGUYPsMB8GA1UdIwQY
MBaAFH4HcIQQzHZDRLjPpPPjaKXiUrZQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmdkd2hCRE1ka05FdU0tazgtTm9wZUpTdGxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS84ZjVlNTktN2Y3MS00Y2YyLWE2MTkt
M2YwMjk1ZWVlOTUxLzEvZmdkd2hCRE1ka05FdU0tazgtTm9wZUpTdGxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS84ZjVlNTktN2Y3MS00Y2YyLWE2MTktM2YwMjk1ZWVlOTUx
LzEvZmdkd2hCRE1ka05FdU0tazgtTm9wZUpTdGxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARIBpie2s
SRJMfh/vfvizOKShD2xNlP8NI1oB5dpMszmGfmCXZ6GgYTwRhJ13SslAnw3RO6Z1
dFp53MV5BzhaibfVaVAZyKIIbnhG8iBBgDoCijVvCH2f8zAmTB/6OnQUPcGdJ0Gr
VUoy/UCC7m30V29eu3isvLN7JbQtCpxOI0/zUIJoI+nIT2V+3rfvfRLUIxQVc0xi
eD5yxRazyVK4u/gQd/4NucJCaBrgm+tXpIJGrwU9I+UV0Ooxkol/QJ5cRz0VAyZY
jyXk8eHKxTxvr+uX0yPMbvm1fSjcJ/MObHNo05MqGoW9ojJbJ6Xj382WqNDpFCFC
NYBRKsKNX2hOUw==
-----END CERTIFICATE-----