Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.mft
File:                     ng3k8mJ16l_C8jyLTX4G1ys7c8c.mft (raw, json)
Hash identifier:          oFIvCP1NgsudsZV7dbPq8KojQ5PkScoEn7OFyCW+eTs=
Subject key identifier:   2C:45:E2:DA:86:79:88:C7:29:D6:04:D5:AB:6D:D8:B2:AD:96:B4:CD
Authority key identifier: 9E:0D:E4:F2:62:75:EA:5F:C2:F2:3C:8B:4D:7E:06:D7:2B:3B:73:C7
Certificate issuer:       /CN=9e0de4f26275ea5fc2f23c8b4d7e06d72b3b73c7
Certificate serial:       019922554CDBAD09863A8B528F57A74A92EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ng3k8mJ16l_C8jyLTX4G1ys7c8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.mft
Manifest number:          07CA
Signing time:             Sun 07 Sep 2025 04:00:39 +0000
Manifest this update:     Sun 07 Sep 2025 04:00:39 +0000
Manifest next update:     Mon 08 Sep 2025 04:00:39 +0000
Files and hashes:         1: ng3k8mJ16l_C8jyLTX4G1ys7c8c.crl (hash: zaAnlCcvkBo0qPtVVQn8MLI6sd/UTrZg4Q1vPx77mKM=)
                          2: z5plCbvdkup7MxI7T8lBnb_bFXc.roa (hash: gJ70ebUSb97tS8RCU2JGa9RBjyi3gQiPSVEBaoEhFFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ng3k8mJ16l_C8jyLTX4G1ys7c8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:4c:db:ad:09:86:3a:8b:52:8f:57:a7:4a:92:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e0de4f26275ea5fc2f23c8b4d7e06d72b3b73c7
        Validity
            Not Before: Sep  7 04:00:39 2025 GMT
            Not After : Sep  8 04:00:39 2025 GMT
        Subject: CN=2c45e2da867988c729d604d5ab6dd8b2ad96b4cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f9:4b:d5:88:19:79:1c:c6:87:af:f9:6a:a8:
                    97:a2:6f:0d:71:b0:ba:0f:c1:7f:48:85:19:1b:40:
                    49:4a:b8:07:21:05:c4:08:8f:15:08:87:68:33:9b:
                    45:5f:25:b2:07:b9:70:ac:e6:88:5c:58:98:b4:52:
                    67:5b:17:3c:bb:de:92:28:f2:fc:88:21:ba:0b:57:
                    62:03:4a:52:1b:87:fe:e5:e4:2d:02:ce:ab:79:08:
                    2d:94:3b:ba:3f:4d:54:91:bd:5a:75:8d:28:0c:d1:
                    5b:bc:49:75:35:98:92:cb:f3:00:0f:b0:70:ae:be:
                    66:1b:c7:33:f1:10:2d:c2:b9:65:6f:71:28:cc:b1:
                    56:17:8c:25:97:f6:e5:92:19:86:81:56:cb:38:1d:
                    32:94:58:d0:6a:8f:bf:a5:55:ec:ff:33:68:bb:fb:
                    91:3e:0c:f8:2a:4b:65:cb:14:3b:7f:81:dd:26:06:
                    6a:12:20:a0:08:4e:7a:af:67:81:7b:d1:a8:f7:71:
                    3f:3d:6a:9d:a6:7d:42:12:c3:79:00:34:b1:91:39:
                    a5:1e:7d:b5:03:ea:f6:fa:2a:1d:1e:bd:f7:3f:31:
                    c3:81:cd:60:22:7e:b4:25:fe:9f:04:1d:03:33:52:
                    48:91:82:2b:1e:b6:fc:61:9f:c3:ee:29:df:e6:62:
                    d6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:45:E2:DA:86:79:88:C7:29:D6:04:D5:AB:6D:D8:B2:AD:96:B4:CD
            X509v3 Authority Key Identifier:
                keyid:9E:0D:E4:F2:62:75:EA:5F:C2:F2:3C:8B:4D:7E:06:D7:2B:3B:73:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ng3k8mJ16l_C8jyLTX4G1ys7c8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:fd:81:80:2d:73:bd:0f:dc:01:f0:f2:96:fc:de:8c:ac:f7:
         f9:21:62:e5:8c:45:ed:02:3a:cd:9b:3e:12:54:65:68:7f:0f:
         2e:4c:70:9c:c1:90:28:e3:5d:db:2e:0b:90:f4:33:5f:2d:1c:
         f4:51:c2:f1:c5:2f:87:92:6e:bb:52:de:6f:24:b3:db:ae:e2:
         ee:c6:5c:0f:7a:c6:dc:d3:cf:eb:94:a4:bd:c2:7e:8e:ea:fa:
         b4:0a:b4:ab:e9:fb:a0:62:1b:b9:74:54:fb:ab:17:73:5e:7b:
         d3:70:ba:48:a8:02:85:bc:8b:f6:f9:fa:4d:b1:93:4b:31:ed:
         bd:61:39:57:c6:9a:70:a3:e1:72:9d:24:00:d2:60:35:b4:b1:
         15:21:6d:de:ea:b1:51:6a:9f:e2:78:82:e3:68:06:92:e4:91:
         bd:b9:03:cb:2c:b9:f6:42:b4:1e:0f:c2:0a:5c:a5:3b:fb:f3:
         9e:1b:ef:27:91:cd:d3:bf:33:b9:51:9e:20:d7:8a:94:d6:f3:
         f9:1b:a1:9c:64:e6:85:f1:89:a1:00:43:c4:3a:a3:32:8f:39:
         62:e4:8d:32:22:46:de:72:c8:98:31:cd:f8:4f:65:1b:72:6e:
         39:a6:9d:bb:50:d4:f6:81:b5:55:f1:43:94:07:d6:ca:61:25:
         29:30:29:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVUzbrQmGOotSj1enSpLrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMGRlNGYyNjI3NWVhNWZjMmYyM2M4YjRkN2UwNmQ3MmIz
YjczYzcwHhcNMjUwOTA3MDQwMDM5WhcNMjUwOTA4MDQwMDM5WjAzMTEwLwYDVQQD
EygyYzQ1ZTJkYTg2Nzk4OGM3MjlkNjA0ZDVhYjZkZDhiMmFkOTZiNGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPlL1YgZeRzGh6/5aqiXom8NcbC6
D8F/SIUZG0BJSrgHIQXECI8VCIdoM5tFXyWyB7lwrOaIXFiYtFJnWxc8u96SKPL8
iCG6C1diA0pSG4f+5eQtAs6reQgtlDu6P01Ukb1adY0oDNFbvEl1NZiSy/MAD7Bw
rr5mG8cz8RAtwrllb3EozLFWF4wll/blkhmGgVbLOB0ylFjQao+/pVXs/zNou/uR
Pgz4KktlyxQ7f4HdJgZqEiCgCE56r2eBe9Go93E/PWqdpn1CEsN5ADSxkTmlHn21
A+r2+iodHr33PzHDgc1gIn60Jf6fBB0DM1JIkYIrHrb8YZ/D7inf5mLWRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxF4tqGeYjHKdYE1att2LKtlrTNMB8GA1UdIwQY
MBaAFJ4N5PJidepfwvI8i01+BtcrO3PHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmczazhtSjE2bF9DOGp5TFRYNEcxeXM3YzhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lYWM5OTctY2UxZS00NTliLTk0MzYt
ZWQ3MDY3Zjk4N2Q5LzEvbmczazhtSjE2bF9DOGp5TFRYNEcxeXM3YzhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9lYWM5OTctY2UxZS00NTliLTk0MzYtZWQ3MDY3Zjk4N2Q5
LzEvbmczazhtSjE2bF9DOGp5TFRYNEcxeXM3YzhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG/2BgC1z
vQ/cAfDylvzejKz3+SFi5YxF7QI6zZs+ElRlaH8PLkxwnMGQKONd2y4LkPQzXy0c
9FHC8cUvh5Juu1LebySz267i7sZcD3rG3NPP65SkvcJ+jur6tAq0q+n7oGIbuXRU
+6sXc15703C6SKgChbyL9vn6TbGTSzHtvWE5V8aacKPhcp0kANJgNbSxFSFt3uqx
UWqf4niC42gGkuSRvbkDyyy59kK0Hg/CClylO/vznhvvJ5HN078zuVGeINeKlNbz
+RuhnGTmhfGJoQBDxDqjMo85YuSNMiJG3nLImDHN+E9lG3JuOaadu1DU9oG1VfFD
lAfWymElKTApDw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:20 2025 by rpki-client