Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.mft
File:                     7zfEgGNj6qbTQ68i4Di-rS4YtPQ.mft (raw, json)
Hash identifier:          NNaB4GgVuNDV9RZIErN5xrDI7GFsSG6cl83vCb6KUhc=
Subject key identifier:   8D:C3:D1:96:18:99:DD:A3:4A:71:99:87:16:89:61:1E:00:58:96:F6
Authority key identifier: EF:37:C4:80:63:63:EA:A6:D3:43:AF:22:E0:38:BE:AD:2E:18:B4:F4
Certificate issuer:       /CN=ef37c4806363eaa6d343af22e038bead2e18b4f4
Certificate serial:       019921E77EEE9751786F1215705D6162CC48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.mft
Manifest number:          11F2
Signing time:             Sun 07 Sep 2025 02:00:43 +0000
Manifest this update:     Sun 07 Sep 2025 02:00:43 +0000
Manifest next update:     Mon 08 Sep 2025 02:00:43 +0000
Files and hashes:         1: 7zfEgGNj6qbTQ68i4Di-rS4YtPQ.crl (hash: IDBRVIsKZK2LJR2+/wK121aP+XVGw44UgNXs2NpHOqo=)
                          2: Kg5-kVb-CT-Szk4qOylrOgMLHdQ.roa (hash: 7y1Phnt9QqKkLbO9DEolnM5Y/dYlEmphmiuZ26bJCXU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 02:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:e7:7e:ee:97:51:78:6f:12:15:70:5d:61:62:cc:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef37c4806363eaa6d343af22e038bead2e18b4f4
        Validity
            Not Before: Sep  7 02:00:43 2025 GMT
            Not After : Sep  8 02:00:43 2025 GMT
        Subject: CN=8dc3d1961899dda34a7199871689611e005896f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:42:b8:69:49:67:bb:18:b7:a9:67:79:74:5a:
                    95:03:47:f7:4d:27:9f:8c:f8:84:32:78:c3:78:85:
                    43:27:db:87:af:e1:5c:0e:29:7e:f3:a2:16:80:ff:
                    76:e3:00:64:f0:ca:56:ca:2e:f9:9d:bb:63:7e:4b:
                    80:03:24:94:66:2d:73:13:45:04:df:6b:88:8a:84:
                    af:08:04:b6:74:d5:be:06:2e:f5:c2:ec:0d:c4:88:
                    08:52:40:78:d9:2c:c2:c0:99:f4:8f:d8:be:46:1c:
                    ae:35:c0:6f:0f:61:e4:5a:3a:27:7f:d2:1c:96:c0:
                    8d:27:a5:d8:ec:c8:f1:4f:0d:89:41:f6:45:68:9b:
                    50:ab:b0:7d:f9:0a:7d:3e:79:0e:bb:d7:7a:21:03:
                    93:bd:b9:71:27:38:7c:d3:12:26:7d:f9:b8:5f:3a:
                    9b:5e:aa:45:3a:e7:6e:1f:32:f2:b6:7b:bb:a5:dd:
                    71:11:43:d9:95:b8:71:fa:cb:40:58:91:5c:10:1f:
                    da:b3:ec:c1:f2:75:1a:45:7e:9d:65:90:15:bc:34:
                    fc:b9:52:f0:86:82:b2:24:50:dc:1b:66:28:7c:6f:
                    b2:cd:79:fd:27:97:ad:38:2c:ca:0f:f6:5f:70:60:
                    39:b2:17:d4:79:37:36:29:f1:a5:ad:71:df:70:30:
                    95:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C3:D1:96:18:99:DD:A3:4A:71:99:87:16:89:61:1E:00:58:96:F6
            X509v3 Authority Key Identifier:
                keyid:EF:37:C4:80:63:63:EA:A6:D3:43:AF:22:E0:38:BE:AD:2E:18:B4:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:cf:cc:11:73:ae:13:d0:eb:4b:88:99:47:5a:de:7a:e2:65:
         48:b8:68:e2:f3:a6:97:f5:e3:94:90:fb:4e:7f:05:46:01:15:
         45:49:a3:c2:66:3e:5b:64:b0:40:d8:e3:4d:a7:6c:17:4a:30:
         24:fa:1c:d0:7a:5f:cc:73:aa:38:ed:ec:e8:8d:a2:85:85:b4:
         ab:32:df:d7:bc:7f:04:59:eb:32:2f:45:6f:d8:a7:85:d7:52:
         5d:36:59:ad:64:25:6d:07:ee:30:67:44:10:14:e8:84:b5:21:
         b8:68:63:63:65:71:9b:b2:f0:2a:8d:37:5c:c4:a8:7f:2d:ab:
         ed:cf:d3:bb:2e:13:71:7e:09:b5:3a:83:bb:3f:dc:aa:a8:08:
         6c:16:7f:76:7d:b0:7b:bf:be:7c:6a:b1:5e:a5:f0:8a:c3:17:
         ae:73:50:fe:c4:44:b9:1d:8d:92:ff:40:b6:7e:7e:cf:62:fc:
         2e:2e:ef:64:97:05:d1:e0:76:25:f7:61:24:4a:56:33:1d:0c:
         32:77:fb:52:31:b5:70:3f:78:24:c9:7e:f7:22:1f:3e:fc:1e:
         6c:91:5d:5c:85:57:e3:3c:6c:4f:22:0f:4d:eb:8e:db:ab:bb:
         97:c5:d9:29:12:5d:3f:c2:16:8b:e8:25:fb:60:fb:2b:af:3d:
         8b:aa:02:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkh537ul1F4bxIVcF1hYsxIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMzdjNDgwNjM2M2VhYTZkMzQzYWYyMmUwMzhiZWFkMmUx
OGI0ZjQwHhcNMjUwOTA3MDIwMDQzWhcNMjUwOTA4MDIwMDQzWjAzMTEwLwYDVQQD
Eyg4ZGMzZDE5NjE4OTlkZGEzNGE3MTk5ODcxNjg5NjExZTAwNTg5NmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikK4aUlnuxi3qWd5dFqVA0f3TSef
jPiEMnjDeIVDJ9uHr+FcDil+86IWgP924wBk8MpWyi75nbtjfkuAAySUZi1zE0UE
32uIioSvCAS2dNW+Bi71wuwNxIgIUkB42SzCwJn0j9i+RhyuNcBvD2HkWjonf9Ic
lsCNJ6XY7MjxTw2JQfZFaJtQq7B9+Qp9PnkOu9d6IQOTvblxJzh80xImffm4Xzqb
XqpFOuduHzLytnu7pd1xEUPZlbhx+stAWJFcEB/as+zB8nUaRX6dZZAVvDT8uVLw
hoKyJFDcG2YofG+yzXn9J5etOCzKD/ZfcGA5shfUeTc2KfGlrXHfcDCVowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3D0ZYYmd2jSnGZhxaJYR4AWJb2MB8GA1UdIwQY
MBaAFO83xIBjY+qm00OvIuA4vq0uGLT0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3pmRWdHTmo2cWJUUTY4aTREaS1yUzRZdFBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9jNjBhOTItOGMwYi00MDdhLWIyMDMt
YWNiY2M2Y2ZkN2UzLzEvN3pmRWdHTmo2cWJUUTY4aTREaS1yUzRZdFBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9jNjBhOTItOGMwYi00MDdhLWIyMDMtYWNiY2M2Y2ZkN2Uz
LzEvN3pmRWdHTmo2cWJUUTY4aTREaS1yUzRZdFBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvc/MEXOu
E9DrS4iZR1reeuJlSLho4vOml/XjlJD7Tn8FRgEVRUmjwmY+W2SwQNjjTadsF0ow
JPoc0HpfzHOqOO3s6I2ihYW0qzLf17x/BFnrMi9Fb9inhddSXTZZrWQlbQfuMGdE
EBTohLUhuGhjY2Vxm7LwKo03XMSofy2r7c/Tuy4TcX4JtTqDuz/cqqgIbBZ/dn2w
e7++fGqxXqXwisMXrnNQ/sREuR2Nkv9Atn5+z2L8Li7vZJcF0eB2JfdhJEpWMx0M
Mnf7UjG1cD94JMl+9yIfPvwebJFdXIVX4zxsTyIPTeuO26u7l8XZKRJdP8IWi+gl
+2D7K689i6oCGg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:31 2025 by rpki-client