Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft
File:                     _uG-QL1MEKAseDca8xPU59o9RKE.mft (raw, json)
Hash identifier:          XDyBl/1MHocdJrMnEz8HwEhMXRymrPBQZouxtMZGKW4=
Subject key identifier:   DD:20:EE:E0:21:82:3A:02:CF:B4:C9:D3:28:7A:54:D2:6B:1C:A8:D9
Authority key identifier: FE:E1:BE:40:BD:4C:10:A0:2C:78:37:1A:F3:13:D4:E7:DA:3D:44:A1
Certificate issuer:       /CN=fee1be40bd4c10a02c78371af313d4e7da3d44a1
Certificate serial:       01976EBE18FB26249FC5C092D86A42CD98F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_uG-QL1MEKAseDca8xPU59o9RKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft
Manifest number:          085C
Signing time:             Sat 14 Jun 2025 14:00:41 +0000
Manifest this update:     Sat 14 Jun 2025 14:00:41 +0000
Manifest next update:     Sun 15 Jun 2025 14:00:41 +0000
Files and hashes:         1: _uG-QL1MEKAseDca8xPU59o9RKE.crl (hash: I5KhQdRh/HJOmdjH2PWRt17O6X6PoUN3o5W48sVQoVo=)
                          2: iCr5oYGEZyOApm19IeGXneZ8Nck.roa (hash: J3nYb+wykQAlDMqhpN3eQPaOUzevZQuJ9bBWTRwBP/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_uG-QL1MEKAseDca8xPU59o9RKE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:be:18:fb:26:24:9f:c5:c0:92:d8:6a:42:cd:98:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fee1be40bd4c10a02c78371af313d4e7da3d44a1
        Validity
            Not Before: Jun 14 14:00:41 2025 GMT
            Not After : Jun 15 14:00:41 2025 GMT
        Subject: CN=dd20eee021823a02cfb4c9d3287a54d26b1ca8d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9c:71:87:53:6e:88:b8:4a:f0:f3:a2:11:e5:
                    af:55:a7:52:1a:72:46:2a:02:a6:0a:5c:bf:cd:3e:
                    3c:a4:96:1f:ef:a7:9d:01:b0:0f:84:a6:fe:dc:ca:
                    e0:d8:15:f2:53:6a:70:f9:2a:ec:ba:2c:82:58:4a:
                    46:58:37:f5:79:4d:b9:2b:ea:8f:aa:15:5a:f8:cf:
                    d8:c1:5e:8e:77:ab:20:89:82:ed:40:ec:5c:26:24:
                    e5:39:49:75:b2:aa:87:ce:ae:d2:44:e1:ae:d9:c1:
                    16:61:20:97:cf:95:03:66:8e:f6:76:47:19:30:68:
                    ee:5c:ca:82:66:43:95:30:b0:93:e7:4c:ef:98:4c:
                    27:9d:1c:9d:90:86:c4:60:5a:8b:ad:5b:8b:e9:7c:
                    d9:07:b4:4c:2c:4d:10:7d:14:0b:4e:5f:0d:1f:bb:
                    c0:12:67:64:ac:3a:16:55:29:5b:05:72:f9:9f:07:
                    3f:25:f8:fc:98:99:8f:60:c3:22:98:a0:5f:a6:44:
                    d6:53:2e:52:0f:32:24:e1:82:00:20:5c:b8:ca:4b:
                    1f:3c:6a:b4:25:01:03:19:d9:8c:56:69:be:8c:85:
                    e7:e7:97:30:3f:2c:b7:34:34:9d:68:a5:9c:a8:bb:
                    9a:23:dc:d9:23:03:f0:8d:d2:a1:88:c3:3e:24:27:
                    9c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:20:EE:E0:21:82:3A:02:CF:B4:C9:D3:28:7A:54:D2:6B:1C:A8:D9
            X509v3 Authority Key Identifier:
                keyid:FE:E1:BE:40:BD:4C:10:A0:2C:78:37:1A:F3:13:D4:E7:DA:3D:44:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_uG-QL1MEKAseDca8xPU59o9RKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:64:d6:d3:5e:c4:fe:6b:0e:07:b2:9f:bd:13:f1:ff:15:c6:
         a7:85:5a:62:f2:88:e3:a9:71:31:01:11:28:7e:80:9a:3d:61:
         b5:f2:c2:f9:39:bd:93:b3:63:7c:6b:c8:d7:74:b0:89:16:a3:
         5d:ac:fa:5e:54:e9:ad:d5:b4:97:90:3f:6e:6c:7a:15:73:57:
         dc:4b:6a:3b:88:91:54:46:37:94:03:23:8f:d5:b5:09:6d:3c:
         f0:17:2f:49:9f:f0:08:82:82:f6:36:77:bc:67:96:47:07:d1:
         09:46:a9:fa:99:df:15:bb:9b:05:57:f4:fb:93:da:bc:d8:7e:
         dd:13:4d:9e:fe:ac:c3:02:eb:fa:64:5d:f4:62:6a:29:30:8d:
         ab:f6:4e:29:36:e1:0d:cf:18:8e:bb:76:d5:00:c7:5e:04:48:
         4b:07:2d:46:c5:74:ff:c3:9f:3b:1b:0e:91:95:f5:0b:fc:84:
         ce:29:04:33:39:0f:fd:10:96:3e:8f:26:28:e1:57:b4:0f:a3:
         01:6d:b1:75:b4:ba:1c:a0:c5:d1:22:79:79:70:93:7b:84:25:
         90:3e:12:68:99:a8:2f:c1:1e:58:e8:9c:0f:18:d5:7d:66:d5:
         55:ad:a7:23:83:4a:35:7c:c6:22:6c:47:89:91:76:4e:41:fd:
         28:db:a9:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduvhj7JiSfxcCS2GpCzZjyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlZTFiZTQwYmQ0YzEwYTAyYzc4MzcxYWYzMTNkNGU3ZGEz
ZDQ0YTEwHhcNMjUwNjE0MTQwMDQxWhcNMjUwNjE1MTQwMDQxWjAzMTEwLwYDVQQD
EyhkZDIwZWVlMDIxODIzYTAyY2ZiNGM5ZDMyODdhNTRkMjZiMWNhOGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pxxh1NuiLhK8POiEeWvVadSGnJG
KgKmCly/zT48pJYf76edAbAPhKb+3Mrg2BXyU2pw+SrsuiyCWEpGWDf1eU25K+qP
qhVa+M/YwV6Od6sgiYLtQOxcJiTlOUl1sqqHzq7SROGu2cEWYSCXz5UDZo72dkcZ
MGjuXMqCZkOVMLCT50zvmEwnnRydkIbEYFqLrVuL6XzZB7RMLE0QfRQLTl8NH7vA
EmdkrDoWVSlbBXL5nwc/Jfj8mJmPYMMimKBfpkTWUy5SDzIk4YIAIFy4yksfPGq0
JQEDGdmMVmm+jIXn55cwPyy3NDSdaKWcqLuaI9zZIwPwjdKhiMM+JCecrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0g7uAhgjoCz7TJ0yh6VNJrHKjZMB8GA1UdIwQY
MBaAFP7hvkC9TBCgLHg3GvMT1OfaPUShMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3VHLVFMMU1FS0FzZURjYTh4UFU1OW85UktFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yZDI1NzAtYWI5MS00YzI3LTljYjMt
NWZkNzE2ZDY3ZTRjLzEvX3VHLVFMMU1FS0FzZURjYTh4UFU1OW85UktFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8yZDI1NzAtYWI5MS00YzI3LTljYjMtNWZkNzE2ZDY3ZTRj
LzEvX3VHLVFMMU1FS0FzZURjYTh4UFU1OW85UktFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqWTW017E
/msOB7KfvRPx/xXGp4VaYvKI46lxMQERKH6Amj1htfLC+Tm9k7NjfGvI13SwiRaj
Xaz6XlTprdW0l5A/bmx6FXNX3EtqO4iRVEY3lAMjj9W1CW088BcvSZ/wCIKC9jZ3
vGeWRwfRCUap+pnfFbubBVf0+5PavNh+3RNNnv6swwLr+mRd9GJqKTCNq/ZOKTbh
Dc8Yjrt21QDHXgRISwctRsV0/8OfOxsOkZX1C/yEzikEMzkP/RCWPo8mKOFXtA+j
AW2xdbS6HKDF0SJ5eXCTe4QlkD4SaJmoL8EeWOicDxjVfWbVVa2nI4NKNXzGImxH
iZF2TkH9KNup0g==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:52:57 2025 by rpki-client