Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft
File:                     6oPjDy1vznWmZqLQtja0bsmYocs.mft (raw, json)
Hash identifier:          ZVXLscD1Wlz7yYKDXnhJZQcvgxUC1GkJGOVs2/894Ik=
Subject key identifier:   EB:23:B8:62:E8:D8:AD:D3:4B:F7:8F:F2:E6:78:86:FE:E4:10:42:DF
Authority key identifier: EA:83:E3:0F:2D:6F:CE:75:A6:66:A2:D0:B6:36:B4:6E:C9:98:A1:CB
Certificate issuer:       /CN=ea83e30f2d6fce75a666a2d0b636b46ec998a1cb
Certificate serial:       01977AC2382A1288874ACCEFB930998582C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft
Manifest number:          0DB7
Signing time:             Mon 16 Jun 2025 22:00:38 +0000
Manifest this update:     Mon 16 Jun 2025 22:00:38 +0000
Manifest next update:     Tue 17 Jun 2025 22:00:38 +0000
Files and hashes:         1: 6oPjDy1vznWmZqLQtja0bsmYocs.crl (hash: 8sVSbubR6/WHuQd0mqIgHyE3vH9FAf5cyZteWPWmNC8=)
                          2: okg73byO9ZwK73bf1nHKxWy9BQc.roa (hash: UhLrY21oOL3tD3JEsUSjif+xKx57LK0Vj7G+Yv+lBBQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 21:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7a:c2:38:2a:12:88:87:4a:cc:ef:b9:30:99:85:82:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea83e30f2d6fce75a666a2d0b636b46ec998a1cb
        Validity
            Not Before: Jun 16 22:00:38 2025 GMT
            Not After : Jun 17 22:00:38 2025 GMT
        Subject: CN=eb23b862e8d8add34bf78ff2e67886fee41042df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8d:53:c8:76:c9:42:a4:e2:7c:be:93:72:5c:
                    b4:ed:3f:13:02:d3:17:dd:0c:1e:be:1f:ac:35:4c:
                    3f:1e:ae:4d:c6:fc:9b:dd:bc:63:7c:7e:da:35:fd:
                    65:76:19:9b:4d:e2:1f:0d:88:4b:6a:00:47:61:30:
                    32:cd:8a:70:08:5b:13:08:b9:b6:dd:6d:f2:f1:a0:
                    fe:1d:fe:28:a4:d9:cb:09:4e:80:0d:75:38:7b:6c:
                    9a:62:0d:6f:da:2d:46:c6:46:86:ea:df:f3:f6:1c:
                    2a:5b:f8:cb:2e:2b:a5:66:24:38:08:24:a1:da:5c:
                    cc:a0:bc:a6:0b:ff:26:1b:62:83:e4:65:ae:c0:d2:
                    82:2a:cc:7d:b8:db:a6:da:e2:43:39:21:44:c7:50:
                    0e:a5:83:50:42:5e:84:68:00:7d:1d:7e:0e:95:cc:
                    31:77:56:7d:05:0b:d2:33:bf:8c:27:7b:ce:9f:f7:
                    f0:fd:2f:7a:0f:c8:e9:b5:d9:62:e2:40:9c:94:9d:
                    2b:16:ac:b1:b5:af:20:83:2e:31:4c:97:2c:77:45:
                    5f:0e:6c:35:bc:5c:27:7e:5a:7e:e9:14:e0:4d:17:
                    db:f5:aa:c3:2e:d7:1b:35:78:a2:42:ce:5f:aa:45:
                    12:1a:35:e1:c2:4c:d6:03:c6:9f:24:ab:7a:0d:10:
                    e9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:23:B8:62:E8:D8:AD:D3:4B:F7:8F:F2:E6:78:86:FE:E4:10:42:DF
            X509v3 Authority Key Identifier:
                keyid:EA:83:E3:0F:2D:6F:CE:75:A6:66:A2:D0:B6:36:B4:6E:C9:98:A1:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:b1:d1:f0:27:41:73:b8:df:e8:f6:6e:c0:f3:64:ee:fa:ac:
         5b:0a:d7:98:19:6a:77:b2:96:60:fb:97:25:63:69:25:3d:6c:
         ab:e1:a6:9c:78:fd:90:8e:66:08:9c:fa:70:38:2b:c3:55:51:
         75:cc:92:b1:d7:c1:33:2c:4b:0b:ec:ec:88:6d:6d:b8:d0:ff:
         49:80:20:7a:49:da:f4:f3:44:bb:ab:b3:1e:65:e6:f0:06:76:
         4f:de:b5:d3:5c:dc:0c:67:86:17:e0:d8:79:0b:56:fa:4b:5e:
         e7:41:16:16:b0:16:9f:95:d4:6e:e3:a5:f6:cc:9b:01:08:c0:
         26:05:d0:1e:04:4e:9c:e4:e8:9c:c5:8a:e1:f3:46:15:22:59:
         bf:3b:56:fe:6a:17:8a:97:b2:f0:6d:29:fd:ec:d9:0b:73:84:
         12:c8:39:06:f2:a6:75:29:44:a1:52:4b:cf:5f:e3:48:46:99:
         be:7a:4d:bf:79:9b:69:85:d4:8f:e2:af:49:c4:5b:3f:9d:6b:
         60:85:73:ad:83:31:c2:c4:af:27:e1:4d:74:c1:8a:34:ce:ae:
         f8:1f:8f:2d:8d:d0:39:cd:2e:9e:4f:85:25:c7:67:98:89:3e:
         0e:61:97:46:cc:77:99:9c:69:95:32:cb:03:d9:44:63:c6:ca:
         7a:31:90:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd6wjgqEoiHSszvuTCZhYLGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhODNlMzBmMmQ2ZmNlNzVhNjY2YTJkMGI2MzZiNDZlYzk5
OGExY2IwHhcNMjUwNjE2MjIwMDM4WhcNMjUwNjE3MjIwMDM4WjAzMTEwLwYDVQQD
EyhlYjIzYjg2MmU4ZDhhZGQzNGJmNzhmZjJlNjc4ODZmZWU0MTA0MmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI1TyHbJQqTifL6Tcly07T8TAtMX
3Qwevh+sNUw/Hq5Nxvyb3bxjfH7aNf1ldhmbTeIfDYhLagBHYTAyzYpwCFsTCLm2
3W3y8aD+Hf4opNnLCU6ADXU4e2yaYg1v2i1GxkaG6t/z9hwqW/jLLiulZiQ4CCSh
2lzMoLymC/8mG2KD5GWuwNKCKsx9uNum2uJDOSFEx1AOpYNQQl6EaAB9HX4Olcwx
d1Z9BQvSM7+MJ3vOn/fw/S96D8jptdli4kCclJ0rFqyxta8ggy4xTJcsd0VfDmw1
vFwnflp+6RTgTRfb9arDLtcbNXiiQs5fqkUSGjXhwkzWA8afJKt6DRDpmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOsjuGLo2K3TS/eP8uZ4hv7kEELfMB8GA1UdIwQY
MBaAFOqD4w8tb851pmai0LY2tG7JmKHLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNm9QakR5MXZ6bldtWnFMUXRqYTBic21Zb2NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jNjljNzUtODM5MS00ZDkzLWIzNzgt
M2ZhMTVhMzNmNDI5LzEvNm9QakR5MXZ6bldtWnFMUXRqYTBic21Zb2NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9jNjljNzUtODM5MS00ZDkzLWIzNzgtM2ZhMTVhMzNmNDI5
LzEvNm9QakR5MXZ6bldtWnFMUXRqYTBic21Zb2NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAArHR8CdB
c7jf6PZuwPNk7vqsWwrXmBlqd7KWYPuXJWNpJT1sq+GmnHj9kI5mCJz6cDgrw1VR
dcySsdfBMyxLC+zsiG1tuND/SYAgekna9PNEu6uzHmXm8AZ2T96101zcDGeGF+DY
eQtW+kte50EWFrAWn5XUbuOl9sybAQjAJgXQHgROnOTonMWK4fNGFSJZvztW/moX
ipey8G0p/ezZC3OEEsg5BvKmdSlEoVJLz1/jSEaZvnpNv3mbaYXUj+KvScRbP51r
YIVzrYMxwsSvJ+FNdMGKNM6u+B+PLY3QOc0unk+FJcdnmIk+DmGXRsx3mZxplTLL
A9lEY8bKejGQTA==
-----END CERTIFICATE-----
Generated at Tue Jun 17 01:37:13 2025 by rpki-client