Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft
File:                     Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft (raw, json)
Hash identifier:          2kwV5GcGmLcnntXidatvnS0RFSdNGlzq8wUGpm6kCQc=
Subject key identifier:   50:F1:FF:F1:7E:5D:55:82:F3:12:F1:1D:E2:56:8A:62:89:EE:11:C1
Authority key identifier: 11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
Certificate issuer:       /CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Certificate serial:       019952D40AD77257C36999188D0A748D2E10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft
Manifest number:          119E
Signing time:             Tue 16 Sep 2025 14:00:52 +0000
Manifest this update:     Tue 16 Sep 2025 14:00:52 +0000
Manifest next update:     Wed 17 Sep 2025 14:00:52 +0000
Files and hashes:         1: Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl (hash: HkRh1/5Ty2UTfKgKq3dW7EYw/S/rJC60GKhcHVR5h5M=)
                          2: HfwZH-0Lv6Ty3b-JyanUXRcRv4M.roa (hash: tXi7iyniS0PtgxKru69nf5MitATyW1mHStve5TknjLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Sep 2025 13:46:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:52:d4:0a:d7:72:57:c3:69:99:18:8d:0a:74:8d:2e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11dd0ebff5ba38a8758b794d04d62905194a3266
        Validity
            Not Before: Sep 16 14:00:52 2025 GMT
            Not After : Sep 17 14:00:52 2025 GMT
        Subject: CN=50f1fff17e5d5582f312f11de2568a6289ee11c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c9:3e:e4:60:b9:b9:7e:66:bd:69:a0:6a:c0:
                    36:3a:0e:0c:61:21:3f:11:25:f9:71:b1:bf:8d:7d:
                    43:fd:9d:e6:06:04:05:16:6f:70:82:da:e8:a2:7c:
                    b3:30:9d:e9:92:be:ef:8d:06:d0:1d:cf:3d:74:40:
                    2f:11:db:15:fe:52:0e:36:c3:62:3b:d9:55:36:d6:
                    f6:20:df:a9:5b:c0:21:bd:8e:76:fb:66:eb:2b:64:
                    89:32:31:22:65:01:bd:86:09:ec:1d:89:70:f6:26:
                    6e:fe:3d:c6:31:b4:a7:6b:48:35:20:7d:f2:f2:1d:
                    05:54:8b:cb:d6:28:3b:8f:1d:e5:de:66:62:ad:f1:
                    b9:11:84:f1:68:00:99:77:e2:50:41:cc:ab:85:e0:
                    02:33:e8:4e:de:3c:d7:1b:7a:43:e6:b4:73:6c:3f:
                    78:dc:11:e6:81:59:dd:5b:65:ff:af:92:10:3b:f8:
                    50:70:96:81:b3:d7:4c:d2:ad:af:2f:64:80:bf:9d:
                    3a:ea:4b:06:dc:e3:aa:fa:07:2b:2a:e9:7c:c1:ff:
                    a7:2a:03:57:26:d1:ce:b9:9a:64:f0:50:04:6a:90:
                    7e:61:2b:de:1b:2e:bd:39:f2:47:21:98:a6:1a:b7:
                    ea:ce:bb:5b:54:68:06:7c:2a:82:f9:f7:30:02:41:
                    3d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F1:FF:F1:7E:5D:55:82:F3:12:F1:1D:E2:56:8A:62:89:EE:11:C1
            X509v3 Authority Key Identifier:
                keyid:11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:c2:05:c6:69:c9:e7:43:63:ae:7f:34:c7:17:c5:02:35:87:
         79:59:65:ac:4e:c2:71:6e:49:c2:2f:80:de:2c:98:99:90:6b:
         8a:b1:01:2d:fd:d7:46:3e:d1:a1:80:fe:cf:04:34:8c:11:6c:
         27:ae:c6:9e:5f:7e:11:dd:b4:f6:ea:56:f4:88:90:ce:ab:14:
         dd:e8:a4:f2:bd:49:94:93:56:5c:d2:8e:c6:e9:e6:fb:52:da:
         ac:f2:c2:14:59:06:50:2c:cc:bc:fc:5f:3f:70:86:f6:54:8d:
         82:1a:16:16:3a:d7:7e:76:18:07:d7:1f:e2:03:2e:a9:bc:fc:
         c8:45:77:e6:6b:8e:6e:33:24:c1:1f:d0:43:79:fc:a5:c7:b6:
         ca:21:e4:9c:7e:09:89:90:35:64:92:f0:cf:20:a8:0b:7d:75:
         62:68:03:1d:5c:30:2b:d9:1f:82:36:72:5c:08:ed:e1:2d:8e:
         f4:54:8b:f1:77:04:e2:56:73:5e:1e:c8:56:9f:34:80:7a:08:
         60:b5:6d:de:1d:90:b5:7d:45:9f:2c:87:3e:bf:e7:f9:3a:d5:
         f2:f0:25:20:e3:eb:27:82:7d:c9:24:77:3f:16:63:26:13:35:
         e7:46:3e:73:2f:6f:6d:35:8c:a2:e3:53:08:66:84:27:ad:23:
         d1:91:6c:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlS1ArXclfDaZkYjQp0jS4QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZGQwZWJmZjViYTM4YTg3NThiNzk0ZDA0ZDYyOTA1MTk0
YTMyNjYwHhcNMjUwOTE2MTQwMDUyWhcNMjUwOTE3MTQwMDUyWjAzMTEwLwYDVQQD
Eyg1MGYxZmZmMTdlNWQ1NTgyZjMxMmYxMWRlMjU2OGE2Mjg5ZWUxMWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssk+5GC5uX5mvWmgasA2Og4MYSE/
ESX5cbG/jX1D/Z3mBgQFFm9wgtroonyzMJ3pkr7vjQbQHc89dEAvEdsV/lIONsNi
O9lVNtb2IN+pW8AhvY52+2brK2SJMjEiZQG9hgnsHYlw9iZu/j3GMbSna0g1IH3y
8h0FVIvL1ig7jx3l3mZirfG5EYTxaACZd+JQQcyrheACM+hO3jzXG3pD5rRzbD94
3BHmgVndW2X/r5IQO/hQcJaBs9dM0q2vL2SAv5066ksG3OOq+gcrKul8wf+nKgNX
JtHOuZpk8FAEapB+YSveGy69OfJHIZimGrfqzrtbVGgGfCqC+fcwAkE9xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFDx//F+XVWC8xLxHeJWimKJ7hHBMB8GA1UdIwQY
MBaAFBHdDr/1ujiodYt5TQTWKQUZSjJmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWQwT3ZfVzZPS2gxaTNsTkJOWXBCUmxLTW1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9hNjZhMjktNTFjYy00YmE5LTg4NGYt
ZjE3NjEzZWE0OWU3LzEvRWQwT3ZfVzZPS2gxaTNsTkJOWXBCUmxLTW1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9hNjZhMjktNTFjYy00YmE5LTg4NGYtZjE3NjEzZWE0OWU3
LzEvRWQwT3ZfVzZPS2gxaTNsTkJOWXBCUmxLTW1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAecIFxmnJ
50Njrn80xxfFAjWHeVllrE7CcW5Jwi+A3iyYmZBrirEBLf3XRj7RoYD+zwQ0jBFs
J67Gnl9+Ed209upW9IiQzqsU3eik8r1JlJNWXNKOxunm+1LarPLCFFkGUCzMvPxf
P3CG9lSNghoWFjrXfnYYB9cf4gMuqbz8yEV35muObjMkwR/QQ3n8pce2yiHknH4J
iZA1ZJLwzyCoC311YmgDHVwwK9kfgjZyXAjt4S2O9FSL8XcE4lZzXh7IVp80gHoI
YLVt3h2QtX1FnyyHPr/n+TrV8vAlIOPrJ4J9ySR3PxZjJhM150Y+cy9vbTWMouNT
CGaEJ60j0ZFsNQ==
-----END CERTIFICATE-----
Generated at Tue Sep 16 16:57:30 2025 by rpki-client