Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
File:                     De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft (raw, json)
Hash identifier:          W70/U8uRmMMVXBynBCvm6eVD4Y+v+ub3DTcWNyXs41M=
Subject key identifier:   2A:B6:F7:7D:9F:33:24:0E:D3:B0:85:F9:E2:29:13:71:57:46:84:46
Authority key identifier: 0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4
Certificate issuer:       /CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4
Certificate serial:       0199180A9D5C36EB45A1008D9F2A5A4B80C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
Manifest number:          0A59
Signing time:             Fri 05 Sep 2025 04:02:52 +0000
Manifest this update:     Fri 05 Sep 2025 04:02:52 +0000
Manifest next update:     Sat 06 Sep 2025 04:02:52 +0000
Files and hashes:         1: 7XdSGfevcJJsevy7fOceWvja7nc.roa (hash: 738FMMf7Atyvq/JMYg2GIhaCbgWHQKUbxrDxkyANCA8=)
                          2: De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl (hash: /Q999r/g70CxJlIeq/crQuxo+I1Odi62CzgZcgP08Es=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 01:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:18:0a:9d:5c:36:eb:45:a1:00:8d:9f:2a:5a:4b:80:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4
        Validity
            Not Before: Sep  5 04:02:52 2025 GMT
            Not After : Sep  6 04:02:52 2025 GMT
        Subject: CN=2ab6f77d9f33240ed3b085f9e229137157468446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f9:d1:5e:15:5f:c1:b4:6b:b4:5f:ce:c0:56:
                    f3:d0:cd:d5:1d:a2:84:7d:a6:40:4c:59:a0:7a:bf:
                    64:10:2a:08:01:04:d2:c0:a1:1b:d2:8a:e8:06:f0:
                    c3:a1:23:16:00:cc:56:7d:e5:fd:0c:61:0a:7e:08:
                    68:0a:11:c9:03:5a:40:e8:af:78:3f:52:7a:9e:7f:
                    22:d9:a1:f6:ba:9b:61:06:b1:72:67:fe:ae:f3:e7:
                    7c:5b:fc:ee:b8:ec:99:f3:e8:a6:6b:4b:49:a9:7d:
                    63:9c:1d:34:68:6a:94:da:3e:1d:1f:1f:54:09:6f:
                    03:cc:e3:d7:dd:65:16:54:e8:45:17:01:4a:1d:b3:
                    c3:47:45:c9:37:1b:61:ed:52:23:37:8d:63:9a:0a:
                    99:31:6d:23:e6:41:01:45:8e:61:37:0b:b2:26:b7:
                    83:19:37:ca:f6:04:ef:dd:fc:3f:5b:48:4e:01:5a:
                    63:4f:08:cf:a5:0a:c2:07:85:5d:72:36:2d:7f:c8:
                    3a:45:b3:7f:51:13:8b:8c:ea:21:a2:b0:cd:ad:4a:
                    d1:24:24:9f:ff:38:8a:11:89:16:18:1d:ed:75:ee:
                    90:89:2e:7a:26:22:e3:0c:a0:a5:58:12:71:c6:40:
                    d5:4e:19:bd:9a:ed:81:1c:de:83:9c:23:96:48:b9:
                    22:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B6:F7:7D:9F:33:24:0E:D3:B0:85:F9:E2:29:13:71:57:46:84:46
            X509v3 Authority Key Identifier:
                keyid:0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:da:a7:91:92:74:bb:c3:f2:33:77:42:ff:d6:10:1b:0b:74:
         81:47:29:59:61:cd:ee:d0:43:3b:6c:d2:11:e7:71:2a:57:28:
         2e:c3:df:9d:47:99:c1:b6:ee:e8:d0:e4:e5:a2:03:2a:47:4c:
         94:0b:3f:55:8b:75:4c:41:a8:87:57:ad:c9:3f:83:af:ce:6f:
         dd:6c:3e:6f:9f:7e:28:3a:21:06:36:e1:5b:18:c8:db:0d:f7:
         e7:59:c6:47:e3:5c:46:42:5d:cc:86:92:4c:a1:54:c3:91:b3:
         19:96:c0:36:4c:69:79:48:43:fe:80:50:8b:a3:fd:27:24:89:
         f7:98:7e:dc:a8:4f:78:fe:60:56:7a:f8:3e:e9:e7:b7:78:df:
         26:89:d3:4f:40:2c:bb:58:db:af:6d:ea:b9:c1:a7:da:63:b0:
         79:77:24:d7:16:bf:99:b5:db:dc:e0:ee:c3:c3:6b:0a:c9:1b:
         40:c0:f5:20:7d:7b:3a:e1:f0:30:df:40:cf:97:6c:3d:64:d0:
         5e:ad:4f:8a:fa:e5:bd:46:50:ff:5d:1c:70:57:6e:22:f3:f6:
         4a:a2:5a:9a:ea:99:a2:0e:e4:b7:c6:f3:cc:de:d8:a5:f1:a9:
         55:b7:56:54:d1:1c:15:08:83:e3:80:c1:6d:df:71:ab:04:2b:
         01:78:10:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkYCp1cNutFoQCNnypaS4DFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZWQ2NmQyYzVhNDkzYTA5NTM0MzU3ZTVjYTI2ZjAzZDFh
NGRkZDQwHhcNMjUwOTA1MDQwMjUyWhcNMjUwOTA2MDQwMjUyWjAzMTEwLwYDVQQD
EygyYWI2Zjc3ZDlmMzMyNDBlZDNiMDg1ZjllMjI5MTM3MTU3NDY4NDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/nRXhVfwbRrtF/OwFbz0M3VHaKE
faZATFmger9kECoIAQTSwKEb0oroBvDDoSMWAMxWfeX9DGEKfghoChHJA1pA6K94
P1J6nn8i2aH2upthBrFyZ/6u8+d8W/zuuOyZ8+ima0tJqX1jnB00aGqU2j4dHx9U
CW8DzOPX3WUWVOhFFwFKHbPDR0XJNxth7VIjN41jmgqZMW0j5kEBRY5hNwuyJreD
GTfK9gTv3fw/W0hOAVpjTwjPpQrCB4VdcjYtf8g6RbN/UROLjOohorDNrUrRJCSf
/ziKEYkWGB3tde6QiS56JiLjDKClWBJxxkDVThm9mu2BHN6DnCOWSLkiwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCq2932fMyQO07CF+eIpE3FXRoRGMB8GA1UdIwQY
MBaAFA3tZtLFpJOglTQ1flyibwPRpN3UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGUxbTBzV2trNkNWTkRWLVhLSnZBOUdrM2RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kOWNjNWItZjg2OC00M2ZlLTljNWMt
MzdiOTZmZmJhNzZhLzEvRGUxbTBzV2trNkNWTkRWLVhLSnZBOUdrM2RRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9kOWNjNWItZjg2OC00M2ZlLTljNWMtMzdiOTZmZmJhNzZh
LzEvRGUxbTBzV2trNkNWTkRWLVhLSnZBOUdrM2RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbdqnkZJ0
u8PyM3dC/9YQGwt0gUcpWWHN7tBDO2zSEedxKlcoLsPfnUeZwbbu6NDk5aIDKkdM
lAs/VYt1TEGoh1etyT+Dr85v3Ww+b59+KDohBjbhWxjI2w3351nGR+NcRkJdzIaS
TKFUw5GzGZbANkxpeUhD/oBQi6P9JySJ95h+3KhPeP5gVnr4Punnt3jfJonTT0As
u1jbr23qucGn2mOweXck1xa/mbXb3ODuw8NrCskbQMD1IH17OuHwMN9Az5dsPWTQ
Xq1PivrlvUZQ/10ccFduIvP2SqJamuqZog7kt8bzzN7YpfGpVbdWVNEcFQiD44DB
bd9xqwQrAXgQoQ==
-----END CERTIFICATE-----
Generated at Fri Sep 5 07:33:08 2025 by rpki-client