Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
File:                     IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft (raw, json)
Hash identifier:          +E3Bl0fog8kzpbogpO+mjL2G5Miyjb9x9C3i5vXWSRg=
Subject key identifier:   3D:C6:AD:38:9F:F5:2D:14:A8:E9:48:EE:52:D1:5C:E4:D0:AF:EA:E4
Authority key identifier: 22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03
Certificate issuer:       /CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003
Certificate serial:       01976D3DF2C9F012CEE5A87BC8A617CFBFB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
Manifest number:          0A25
Signing time:             Sat 14 Jun 2025 07:01:05 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:05 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:05 +0000
Files and hashes:         1: 7cHudsbhVZHbppHTF_ntQT5LGaE.roa (hash: gjOnvh/cfHW6KLD8KAndHZd6PiXGNmxJ/xbLzRraSmM=)
                          2: IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl (hash: P83TM12vh82cpZVUPCzMEyiW5P4evJ5DDdD/NpgD3d4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3d:f2:c9:f0:12:ce:e5:a8:7b:c8:a6:17:cf:bf:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003
        Validity
            Not Before: Jun 14 07:01:05 2025 GMT
            Not After : Jun 15 07:01:05 2025 GMT
        Subject: CN=3dc6ad389ff52d14a8e948ee52d15ce4d0afeae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ac:af:cd:9a:26:af:7b:18:fc:c0:e3:8e:03:
                    ff:7d:96:a5:54:81:f4:a2:7a:21:fd:25:dc:5c:ed:
                    37:bb:4c:0b:9d:98:8c:c5:7d:d4:3b:0f:d5:d4:66:
                    01:11:14:f0:85:e9:de:24:9a:1a:e8:9a:34:b5:07:
                    76:19:96:44:90:73:b1:98:85:09:07:5b:f0:c2:a2:
                    c3:a2:68:f8:d5:52:e4:36:bd:b7:04:d2:b2:6b:d3:
                    2c:a7:3c:f1:15:3d:28:12:02:14:c4:d6:e3:e9:77:
                    d1:d0:3d:2c:bb:12:df:95:50:76:42:2c:63:02:1b:
                    7c:ea:cd:df:ec:12:70:4a:a8:11:ea:7f:bf:7a:b9:
                    5a:2c:24:c2:55:ee:73:5d:4d:a7:17:64:8e:ec:10:
                    fb:0b:1b:51:21:9f:60:41:99:20:1c:ba:47:af:1e:
                    e7:5c:19:80:4f:1b:d8:52:fc:9d:74:ae:1f:45:07:
                    7a:7f:d3:63:05:16:33:26:e2:9d:79:4d:8e:ef:ac:
                    cf:b1:d8:b9:a6:c2:db:27:a3:a0:84:a3:cd:af:ea:
                    ca:9a:31:30:2d:11:27:19:d0:87:74:62:52:17:6e:
                    d7:7c:52:d7:7b:f5:5f:c8:92:11:1e:a5:5f:2d:0a:
                    e4:d0:37:54:fc:0c:04:d2:cd:61:88:c4:0a:3f:27:
                    1e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C6:AD:38:9F:F5:2D:14:A8:E9:48:EE:52:D1:5C:E4:D0:AF:EA:E4
            X509v3 Authority Key Identifier:
                keyid:22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:a6:9e:ea:79:dc:8a:fe:91:18:75:5a:5b:29:8b:60:30:65:
         b7:b4:76:55:dd:60:78:ee:b6:94:7b:2e:e2:4a:22:18:75:66:
         a5:9e:42:00:ca:74:67:95:f6:00:f7:d7:9e:53:85:a5:26:da:
         d5:75:b5:11:86:2a:eb:4a:8d:7a:53:7b:94:5d:67:9b:37:84:
         b2:b7:c5:61:f2:63:35:4e:ed:6f:cc:8e:60:df:8f:2c:e2:05:
         78:21:30:3f:97:2b:d4:99:60:ff:00:77:8d:ea:6c:88:a1:bd:
         e7:23:6f:c9:6b:de:14:08:09:91:87:a1:a9:a6:a0:0e:8e:2f:
         7d:6c:6b:a5:87:de:0a:99:09:79:8d:c8:76:5e:c6:2f:92:a7:
         81:6f:74:26:66:b9:85:15:72:09:8b:04:e7:bd:e7:17:c2:de:
         6e:c2:ef:5e:fa:43:38:d9:ee:96:a6:57:47:3e:f7:17:0e:59:
         cb:4e:6c:f0:97:80:b3:14:e4:23:62:d4:c1:6d:fb:ba:3d:58:
         d9:62:e5:e6:03:23:11:46:0b:88:8d:e3:48:cc:31:cb:b1:f7:
         c0:c6:8c:25:dc:53:00:4a:29:4f:4a:6a:05:3e:bf:8b:23:0c:
         fa:c1:46:49:43:a1:6d:f0:17:ba:6f:72:bf:46:b8:e1:fd:5c:
         31:f7:a5:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPfLJ8BLO5ah7yKYXz7+0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyOTJkOTZkZmI2NmNiMTgwNjlkOGJkMTVjOWU5MGNkOTEy
NGYwMDMwHhcNMjUwNjE0MDcwMTA1WhcNMjUwNjE1MDcwMTA1WjAzMTEwLwYDVQQD
EygzZGM2YWQzODlmZjUyZDE0YThlOTQ4ZWU1MmQxNWNlNGQwYWZlYWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArayvzZomr3sY/MDjjgP/fZalVIH0
onoh/SXcXO03u0wLnZiMxX3UOw/V1GYBERTwheneJJoa6Jo0tQd2GZZEkHOxmIUJ
B1vwwqLDomj41VLkNr23BNKya9MspzzxFT0oEgIUxNbj6XfR0D0suxLflVB2Qixj
Aht86s3f7BJwSqgR6n+/erlaLCTCVe5zXU2nF2SO7BD7CxtRIZ9gQZkgHLpHrx7n
XBmATxvYUvyddK4fRQd6f9NjBRYzJuKdeU2O76zPsdi5psLbJ6OghKPNr+rKmjEw
LREnGdCHdGJSF27XfFLXe/VfyJIRHqVfLQrk0DdU/AwE0s1hiMQKPyceUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3GrTif9S0UqOlI7lLRXOTQr+rkMB8GA1UdIwQY
MBaAFCKS2W37ZssYBp2L0VyekM2RJPADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXBMWmJmdG15eGdHbll2UlhKNlF6WkVrOEFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9lNzc0MTItYjBkNy00MTA0LTkyNmEt
OTllZTYxNmNhODViLzEvSXBMWmJmdG15eGdHbll2UlhKNlF6WkVrOEFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9lNzc0MTItYjBkNy00MTA0LTkyNmEtOTllZTYxNmNhODVi
LzEvSXBMWmJmdG15eGdHbll2UlhKNlF6WkVrOEFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvaae6nnc
iv6RGHVaWymLYDBlt7R2Vd1geO62lHsu4koiGHVmpZ5CAMp0Z5X2APfXnlOFpSba
1XW1EYYq60qNelN7lF1nmzeEsrfFYfJjNU7tb8yOYN+PLOIFeCEwP5cr1Jlg/wB3
jepsiKG95yNvyWveFAgJkYehqaagDo4vfWxrpYfeCpkJeY3Idl7GL5KngW90Jma5
hRVyCYsE573nF8LebsLvXvpDONnulqZXRz73Fw5Zy05s8JeAsxTkI2LUwW37uj1Y
2WLl5gMjEUYLiI3jSMwxy7H3wMaMJdxTAEopT0pqBT6/iyMM+sFGSUOhbfAXum9y
v0a44f1cMfelGQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:04:27 2025 by rpki-client