Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
File:                     cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft (raw, json)
Hash identifier:          7s4XsZP5+OG/01AehlQJ2C2t/lSiTYb6e/jwZB+1FdI=
Subject key identifier:   2C:60:46:E7:47:89:77:74:AE:0F:A4:47:56:39:C3:72:D3:6C:C3:35
Authority key identifier: 70:F5:D9:EE:EF:A3:05:AE:CA:EE:31:E6:FC:B4:E2:23:21:B2:80:4A
Certificate issuer:       /CN=70f5d9eeefa305aecaee31e6fcb4e22321b2804a
Certificate serial:       01976EF541324E66E469FFEEA588D15D5C40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
Manifest number:          1590
Signing time:             Sat 14 Jun 2025 15:00:56 +0000
Manifest this update:     Sat 14 Jun 2025 15:00:56 +0000
Manifest next update:     Sun 15 Jun 2025 15:00:56 +0000
Files and hashes:         1: 16PMvyBjwLMgKpIOkxrHYliD-08.roa (hash: Y3LQq9IlsGjKrSV01GWpHO25wmy0HId5ENMWGwyBnEU=)
                          2: cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl (hash: m11tIqBS/voM9Jea4Bp2hlINkeo9/cdKGmHMLRUxLNw=)
                          3: jgcslWHmygjkRIS6MtfzGhZ40MU.roa (hash: sDmrr8zpKt5WpBGAECM7NZQll745IxQeWlqllvJtGkM=)
                          4: nikcVRLPEkpjmj22Ziw5gbk7U3I.roa (hash: MneHYx5l45SiPBky73Uw5AM8Oy5u1LgkSXDWT7ZAv/c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:f5:41:32:4e:66:e4:69:ff:ee:a5:88:d1:5d:5c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70f5d9eeefa305aecaee31e6fcb4e22321b2804a
        Validity
            Not Before: Jun 14 15:00:56 2025 GMT
            Not After : Jun 15 15:00:56 2025 GMT
        Subject: CN=2c6046e747897774ae0fa4475639c372d36cc335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:dd:4c:16:60:ed:1a:9c:7d:3d:f3:03:b1:6e:
                    6e:11:a2:f8:df:f0:d8:ab:4e:63:65:12:84:8d:13:
                    5a:88:c0:b2:7a:df:ad:f5:b0:99:ca:d5:94:dc:06:
                    79:58:93:74:a9:9b:6f:ca:2b:a3:ee:bb:80:0d:2b:
                    0b:61:bf:cb:47:77:c8:a2:26:a0:15:c7:de:10:3d:
                    08:56:f0:d0:04:83:3e:e7:e2:09:5d:9e:2d:91:a3:
                    3f:a2:3d:81:7d:ce:e3:3b:92:cb:0d:c6:a0:9a:49:
                    55:49:a6:dc:a1:a3:ee:16:a5:1b:57:b6:6e:f0:86:
                    3b:f7:6b:b0:37:47:58:61:c9:2b:59:6d:e3:34:72:
                    ec:75:85:85:f6:b7:30:25:20:a4:2a:87:96:c5:47:
                    7d:86:67:91:9a:5a:e2:5e:05:b5:5d:4f:96:e3:4e:
                    da:43:47:76:51:aa:8f:3d:8b:48:e6:b5:3e:85:65:
                    6e:d3:b0:9b:f8:55:2b:30:61:17:53:7f:1e:a7:98:
                    a5:1b:e2:ef:48:51:3d:e2:48:3e:94:14:9c:6a:9a:
                    d7:63:57:c1:6f:f6:c9:a5:4b:69:55:ee:c0:91:dc:
                    f1:79:20:58:6f:18:ac:c6:eb:1b:5b:3c:3a:a4:8d:
                    34:6a:ef:d1:b0:22:70:cb:32:9c:bd:0b:10:0c:86:
                    b7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:60:46:E7:47:89:77:74:AE:0F:A4:47:56:39:C3:72:D3:6C:C3:35
            X509v3 Authority Key Identifier:
                keyid:70:F5:D9:EE:EF:A3:05:AE:CA:EE:31:E6:FC:B4:E2:23:21:B2:80:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:0c:dd:df:d8:77:1d:97:d3:c1:4a:cb:86:c0:65:2b:04:6b:
         6b:56:4d:4f:bc:17:1b:56:4f:39:b9:47:81:b2:39:04:34:d5:
         87:24:7b:e0:43:fe:48:ad:42:d4:56:b8:c9:88:f7:86:ab:41:
         3a:f6:93:63:67:6f:61:fc:13:77:6a:1a:a7:06:53:12:1c:f7:
         f7:6d:13:65:06:89:88:57:c2:1b:ae:00:18:4e:40:dc:d1:97:
         70:22:5e:8c:f2:ce:cd:f6:53:35:4b:39:7a:1c:19:2e:25:eb:
         ce:38:47:c9:e2:9e:b3:4f:6b:b7:52:25:78:60:51:ab:b5:03:
         e7:cc:ca:0e:ff:5e:32:2b:1a:cf:7e:56:7e:91:16:1f:43:e1:
         a3:09:82:b9:6a:4e:61:b2:3e:ac:23:0f:f3:bf:6a:ae:b3:f7:
         c5:45:0d:58:91:6a:2f:8f:7e:8c:7e:da:5b:43:0c:83:0e:7b:
         90:41:e9:f4:f2:00:80:af:75:cf:0e:12:20:82:2d:eb:90:48:
         d9:e0:e6:2e:30:50:db:47:43:64:fc:8b:12:d8:38:a2:36:4e:
         cc:11:ca:06:8a:3b:d3:a9:8d:8e:0c:7a:17:22:cb:a6:b1:f5:
         8c:e3:bc:c6:1a:e3:be:5b:c6:02:b9:2d:fe:ec:a6:b6:94:32:
         f8:5e:50:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdu9UEyTmbkaf/upYjRXVxAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZjVkOWVlZWZhMzA1YWVjYWVlMzFlNmZjYjRlMjIzMjFi
MjgwNGEwHhcNMjUwNjE0MTUwMDU2WhcNMjUwNjE1MTUwMDU2WjAzMTEwLwYDVQQD
EygyYzYwNDZlNzQ3ODk3Nzc0YWUwZmE0NDc1NjM5YzM3MmQzNmNjMzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApt1MFmDtGpx9PfMDsW5uEaL43/DY
q05jZRKEjRNaiMCyet+t9bCZytWU3AZ5WJN0qZtvyiuj7ruADSsLYb/LR3fIoiag
FcfeED0IVvDQBIM+5+IJXZ4tkaM/oj2Bfc7jO5LLDcagmklVSabcoaPuFqUbV7Zu
8IY792uwN0dYYckrWW3jNHLsdYWF9rcwJSCkKoeWxUd9hmeRmlriXgW1XU+W407a
Q0d2UaqPPYtI5rU+hWVu07Cb+FUrMGEXU38ep5ilG+LvSFE94kg+lBScaprXY1fB
b/bJpUtpVe7AkdzxeSBYbxisxusbWzw6pI00au/RsCJwyzKcvQsQDIa3mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxgRudHiXd0rg+kR1Y5w3LTbMM1MB8GA1UdIwQY
MBaAFHD12e7vowWuyu4x5vy04iMhsoBKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1BYWjd1LWpCYTdLN2pIbV9MVGlJeUd5Z0VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xNDAxMDUtZTQ2Mi00OGQyLWE1OGYt
YTU3MDM1NzkyZTU3LzEvY1BYWjd1LWpCYTdLN2pIbV9MVGlJeUd5Z0VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8xNDAxMDUtZTQ2Mi00OGQyLWE1OGYtYTU3MDM1NzkyZTU3
LzEvY1BYWjd1LWpCYTdLN2pIbV9MVGlJeUd5Z0VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAigzd39h3
HZfTwUrLhsBlKwRra1ZNT7wXG1ZPOblHgbI5BDTVhyR74EP+SK1C1Fa4yYj3hqtB
OvaTY2dvYfwTd2oapwZTEhz3920TZQaJiFfCG64AGE5A3NGXcCJejPLOzfZTNUs5
ehwZLiXrzjhHyeKes09rt1IleGBRq7UD58zKDv9eMisaz35WfpEWH0PhowmCuWpO
YbI+rCMP879qrrP3xUUNWJFqL49+jH7aW0MMgw57kEHp9PIAgK91zw4SIIIt65BI
2eDmLjBQ20dDZPyLEtg4ojZOzBHKBoo706mNjgx6FyLLprH1jOO8xhrjvlvGArkt
/uymtpQy+F5QZw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:27:22 2025 by rpki-client