Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
File:                     0elpYhQkgMux04QRdx60_z45g58.mft (raw, json)
Hash identifier:          Dnu3g9Y8/P5JYhENrvqI8HJGR9+gnUwcmkm5Vb6GIfk=
Subject key identifier:   9B:01:94:A4:4B:BA:16:CA:DC:06:5D:CF:FA:F1:85:A3:4C:C5:B1:FC
Authority key identifier: D1:E9:69:62:14:24:80:CB:B1:D3:84:11:77:1E:B4:FF:3E:39:83:9F
Certificate issuer:       /CN=d1e96962142480cbb1d38411771eb4ff3e39839f
Certificate serial:       019922FAB2D64D3502C1C503AE0A463CD832
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
Manifest number:          0AD1
Signing time:             Sun 07 Sep 2025 07:01:19 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:19 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:19 +0000
Files and hashes:         1: 0elpYhQkgMux04QRdx60_z45g58.crl (hash: UH7ub5kSUGZMAD9LyZzgupR26lg2TZNIyHq/aazFQJk=)
                          2: r2i6LbAhlbTcgRsB8rSZkcrF6lU.roa (hash: PJ1IbFsa6xc/CmUBVF12AqCmg0La+qLnFRg5In031II=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:b2:d6:4d:35:02:c1:c5:03:ae:0a:46:3c:d8:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1e96962142480cbb1d38411771eb4ff3e39839f
        Validity
            Not Before: Sep  7 07:01:19 2025 GMT
            Not After : Sep  8 07:01:19 2025 GMT
        Subject: CN=9b0194a44bba16cadc065dcffaf185a34cc5b1fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a4:da:e6:76:92:45:bf:ae:67:a6:19:a4:d5:
                    90:d8:5a:bc:54:c9:6f:ad:46:dc:f2:88:c1:d4:43:
                    54:db:04:52:ee:b9:dd:bb:d6:8f:f4:a4:7b:89:9a:
                    a6:e1:c0:ba:30:bc:2e:ba:39:e8:01:64:20:7f:42:
                    c4:98:24:a4:77:48:b9:2f:3e:12:90:7c:29:b0:41:
                    83:50:09:48:5c:e7:e7:00:3e:e6:9f:84:8d:b8:3c:
                    99:c6:a6:27:a2:ee:4e:29:36:a0:42:08:c7:52:87:
                    8f:b0:f9:05:ff:54:97:e7:a4:92:f9:0f:e1:44:fb:
                    18:2e:18:eb:e9:25:03:83:a6:46:96:5a:9e:8a:b0:
                    4f:0c:88:ca:34:8e:6b:ed:bb:71:2d:fe:fb:6a:8b:
                    d0:9f:df:73:97:ea:1e:21:1e:6c:b2:57:85:15:c8:
                    fd:c7:dc:a7:8e:a7:31:27:bf:f2:37:e4:5d:2f:57:
                    04:26:16:79:b0:bd:65:03:25:d8:58:56:a4:07:70:
                    96:c2:5b:10:81:a0:1f:a7:64:aa:0a:22:0e:eb:be:
                    16:7a:5b:85:40:a5:9e:24:41:cd:e9:c9:b5:e0:4d:
                    2c:9a:47:d8:19:e2:7c:81:a7:37:69:db:bc:3e:b2:
                    4b:1d:7f:cd:b3:3d:31:60:1c:9f:28:61:a2:b8:44:
                    2c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:01:94:A4:4B:BA:16:CA:DC:06:5D:CF:FA:F1:85:A3:4C:C5:B1:FC
            X509v3 Authority Key Identifier:
                keyid:D1:E9:69:62:14:24:80:CB:B1:D3:84:11:77:1E:B4:FF:3E:39:83:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:6b:5e:82:72:50:22:9b:52:15:4f:9e:32:82:5f:c6:ec:1f:
         9c:24:fe:b8:2d:e0:91:f5:94:4f:1c:56:40:46:55:e2:fd:bc:
         b2:82:d5:68:80:93:9b:10:ce:7b:fa:f2:54:d3:87:d3:e7:42:
         b8:e3:f1:77:00:d9:00:7e:38:1c:89:bb:d4:5e:c5:40:77:c9:
         d4:30:ca:7d:3b:3a:67:2b:ef:01:42:fc:3e:4f:51:5a:50:76:
         3b:8d:91:a7:83:a9:96:e6:4c:32:76:3e:c7:4a:2e:27:c8:7b:
         08:79:49:29:1e:f2:d5:89:a0:0a:81:7b:13:03:00:ee:5d:47:
         eb:58:67:c4:6d:1f:9c:9e:bd:ce:0f:84:f7:76:4d:a1:06:88:
         fa:93:dc:48:70:55:59:81:c8:fa:b4:ec:d1:50:d3:1b:15:1f:
         ca:fb:9a:1c:86:f5:1d:f1:a7:d9:d1:cc:a5:6f:38:38:c3:38:
         b4:d7:b1:9c:7a:f6:3d:e7:66:00:f4:9b:06:f3:07:d4:d1:e8:
         a3:cf:ed:52:b1:b1:5b:b6:7e:50:c8:fb:66:39:b4:fe:1c:f6:
         03:e3:ef:3e:a7:24:1b:ef:77:12:91:bd:61:ff:31:2c:41:84:
         a0:a1:ee:f4:4f:be:6e:61:4d:05:ec:61:e7:97:da:49:c2:1d:
         d5:87:13:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+rLWTTUCwcUDrgpGPNgyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZTk2OTYyMTQyNDgwY2JiMWQzODQxMTc3MWViNGZmM2Uz
OTgzOWYwHhcNMjUwOTA3MDcwMTE5WhcNMjUwOTA4MDcwMTE5WjAzMTEwLwYDVQQD
Eyg5YjAxOTRhNDRiYmExNmNhZGMwNjVkY2ZmYWYxODVhMzRjYzViMWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6Ta5naSRb+uZ6YZpNWQ2Fq8VMlv
rUbc8ojB1ENU2wRS7rndu9aP9KR7iZqm4cC6MLwuujnoAWQgf0LEmCSkd0i5Lz4S
kHwpsEGDUAlIXOfnAD7mn4SNuDyZxqYnou5OKTagQgjHUoePsPkF/1SX56SS+Q/h
RPsYLhjr6SUDg6ZGllqeirBPDIjKNI5r7btxLf77aovQn99zl+oeIR5ssleFFcj9
x9ynjqcxJ7/yN+RdL1cEJhZ5sL1lAyXYWFakB3CWwlsQgaAfp2SqCiIO674WeluF
QKWeJEHN6cm14E0smkfYGeJ8gac3adu8PrJLHX/Nsz0xYByfKGGiuEQskwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJsBlKRLuhbK3AZdz/rxhaNMxbH8MB8GA1UdIwQY
MBaAFNHpaWIUJIDLsdOEEXcetP8+OYOfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGVscFloUWtnTXV4MDRRUmR4NjBfejQ1ZzU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yYzc0OTktY2Q0Mi00MzIxLWJjNDAt
ODhmNjQxNjg4ZTBmLzEvMGVscFloUWtnTXV4MDRRUmR4NjBfejQ1ZzU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8yYzc0OTktY2Q0Mi00MzIxLWJjNDAtODhmNjQxNjg4ZTBm
LzEvMGVscFloUWtnTXV4MDRRUmR4NjBfejQ1ZzU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYmtegnJQ
IptSFU+eMoJfxuwfnCT+uC3gkfWUTxxWQEZV4v28soLVaICTmxDOe/ryVNOH0+dC
uOPxdwDZAH44HIm71F7FQHfJ1DDKfTs6ZyvvAUL8Pk9RWlB2O42Rp4OpluZMMnY+
x0ouJ8h7CHlJKR7y1YmgCoF7EwMA7l1H61hnxG0fnJ69zg+E93ZNoQaI+pPcSHBV
WYHI+rTs0VDTGxUfyvuaHIb1HfGn2dHMpW84OMM4tNexnHr2PedmAPSbBvMH1NHo
o8/tUrGxW7Z+UMj7Zjm0/hz2A+PvPqckG+93EpG9Yf8xLEGEoKHu9E++bmFNBexh
55faScId1YcTJg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:38:10 2025 by rpki-client