Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
File:                     l3C_I3XVm6gamVXAei8KIyZLYag.mft (raw, json)
Hash identifier:          XyPKl/NSYcVLqCiTg6yw1B+/euyhK5dtHDrATEJJSfE=
Subject key identifier:   C2:1C:5E:20:3F:18:33:A5:A4:BB:14:81:E4:A5:2D:70:94:2B:9E:21
Authority key identifier: 97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8
Certificate issuer:       /CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8
Certificate serial:       0197700779E5805A54FC36BD6AA9D08A2EAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
Manifest number:          073E
Signing time:             Sat 14 Jun 2025 20:00:27 +0000
Manifest this update:     Sat 14 Jun 2025 20:00:27 +0000
Manifest next update:     Sun 15 Jun 2025 20:00:27 +0000
Files and hashes:         1: 1cgE3uMD9UQj0N9D1NwFutRDIfE.roa (hash: sz+QlLmzVk2yB4VM7ft/t4trcbfch70ucXLho0/P3wo=)
                          2: Ps7ItdcqBOZwFy7JAglhbkmvgec.roa (hash: Yq/VfNMV/+Kg/XB3DpV+ctEtAUoBDR8xyYarG7XLgw4=)
                          3: l3C_I3XVm6gamVXAei8KIyZLYag.crl (hash: CLN4Wo9u9PXbNbJ10M5A1i4heLr6wf1yIXUZ47DYa0w=)
                          4: nn8N_U11uSgPsYKzqfF8emHLewY.roa (hash: UE2WeYKjsQLQDIQ6fpdM8tvgC0pZW+64uPlpd0Qrdgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:07:79:e5:80:5a:54:fc:36:bd:6a:a9:d0:8a:2e:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8
        Validity
            Not Before: Jun 14 20:00:27 2025 GMT
            Not After : Jun 15 20:00:27 2025 GMT
        Subject: CN=c21c5e203f1833a5a4bb1481e4a52d70942b9e21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8e:dd:39:de:44:65:f4:f4:b2:a3:e1:35:1a:
                    a8:0b:17:ce:38:33:fa:f2:4f:9a:e6:9a:3f:e8:59:
                    e0:8e:48:96:65:83:71:e1:d9:a5:d1:f9:71:be:f0:
                    40:c1:88:59:e5:de:25:cc:af:05:17:61:f5:22:f0:
                    9a:70:56:2b:20:53:3b:65:f6:f2:ce:39:41:12:91:
                    7d:2d:59:0a:3d:ff:90:3f:53:b5:65:f9:88:83:a2:
                    43:19:92:4f:5f:f0:c9:ab:25:fb:cf:d6:c6:33:10:
                    fb:ed:7d:2b:b9:ae:11:97:96:c1:86:07:83:5a:6c:
                    eb:27:57:5d:31:b9:69:6a:bc:19:aa:35:40:c2:b9:
                    ad:a5:e0:82:c5:dd:d2:1f:58:69:c9:99:00:ea:1c:
                    ee:2f:05:5c:0d:4c:de:3d:01:2d:20:59:dc:fb:04:
                    4c:ba:ae:7a:60:c5:a6:33:11:56:fe:b8:9a:f0:22:
                    bd:b4:29:88:b0:78:01:71:74:ef:26:e8:ac:05:ed:
                    6a:90:2f:03:61:82:43:30:35:59:47:39:61:18:02:
                    3d:c8:ff:03:9d:77:ee:96:4c:e6:98:9d:66:34:fd:
                    7d:f7:7a:ed:4e:f5:ef:54:9a:f1:c6:45:7e:9b:64:
                    f9:b0:23:77:3f:31:c7:1a:74:44:79:29:1d:13:c0:
                    52:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:1C:5E:20:3F:18:33:A5:A4:BB:14:81:E4:A5:2D:70:94:2B:9E:21
            X509v3 Authority Key Identifier:
                keyid:97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:87:af:49:d6:c3:42:81:a1:71:d3:20:3e:8d:c2:e5:42:89:
         64:11:73:f2:aa:3f:42:e7:35:aa:36:71:31:37:8d:62:3e:79:
         cb:4f:36:6f:1a:39:80:9b:7f:88:5c:59:70:5d:86:89:6f:5f:
         12:6a:e4:a8:4e:34:f0:b8:63:ab:ae:44:28:fd:5f:71:65:aa:
         48:52:4f:9e:d9:10:11:47:fd:80:fb:5b:b3:38:5d:63:61:a9:
         f3:bb:92:f5:85:fe:19:e4:97:c2:32:72:f8:d0:64:28:cd:2e:
         36:2a:a1:de:2c:3a:ff:6b:77:26:66:21:06:f6:59:d1:29:85:
         60:ba:3c:e3:90:b6:2e:84:4f:c4:e4:e0:2e:56:9f:12:36:b3:
         66:3f:82:1a:1e:1f:5c:9f:1d:02:85:6d:4b:79:16:99:41:d8:
         e6:e3:cd:2a:be:91:b4:94:d1:6a:de:b1:e2:e8:12:b5:d8:73:
         2f:a1:3f:d3:dc:25:64:53:1e:19:56:44:67:c2:e0:d7:1a:46:
         82:f1:d9:a0:7b:5c:62:88:81:7a:f3:aa:85:86:46:0b:c4:1c:
         78:ff:db:54:d5:02:78:4b:f2:38:09:ef:4d:d6:79:ed:95:40:
         6b:20:27:8e:9e:e8:a7:e1:f5:25:3a:21:11:8e:4a:f6:5e:cb:
         68:73:f1:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwB3nlgFpU/Da9aqnQii6uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NzBiZjIzNzVkNTliYTgxYTk5NTVjMDdhMmYwYTIzMjY0
YjYxYTgwHhcNMjUwNjE0MjAwMDI3WhcNMjUwNjE1MjAwMDI3WjAzMTEwLwYDVQQD
EyhjMjFjNWUyMDNmMTgzM2E1YTRiYjE0ODFlNGE1MmQ3MDk0MmI5ZTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwo7dOd5EZfT0sqPhNRqoCxfOODP6
8k+a5po/6FngjkiWZYNx4dml0flxvvBAwYhZ5d4lzK8FF2H1IvCacFYrIFM7Zfby
zjlBEpF9LVkKPf+QP1O1ZfmIg6JDGZJPX/DJqyX7z9bGMxD77X0rua4Rl5bBhgeD
WmzrJ1ddMblparwZqjVAwrmtpeCCxd3SH1hpyZkA6hzuLwVcDUzePQEtIFnc+wRM
uq56YMWmMxFW/ria8CK9tCmIsHgBcXTvJuisBe1qkC8DYYJDMDVZRzlhGAI9yP8D
nXfulkzmmJ1mNP1993rtTvXvVJrxxkV+m2T5sCN3PzHHGnREeSkdE8BSLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMIcXiA/GDOlpLsUgeSlLXCUK54hMB8GA1UdIwQY
MBaAFJdwvyN11ZuoGplVwHovCiMmS2GoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDNDX0kzWFZtNmdhbVZYQWVpOEtJeVpMWWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9iZWVmMmYtZWM1YS00OWZmLTk3NWIt
OGQzNGY1NTc4MjJhLzEvbDNDX0kzWFZtNmdhbVZYQWVpOEtJeVpMWWFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9iZWVmMmYtZWM1YS00OWZmLTk3NWItOGQzNGY1NTc4MjJh
LzEvbDNDX0kzWFZtNmdhbVZYQWVpOEtJeVpMWWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR4evSdbD
QoGhcdMgPo3C5UKJZBFz8qo/Quc1qjZxMTeNYj55y082bxo5gJt/iFxZcF2GiW9f
EmrkqE408Lhjq65EKP1fcWWqSFJPntkQEUf9gPtbszhdY2Gp87uS9YX+GeSXwjJy
+NBkKM0uNiqh3iw6/2t3JmYhBvZZ0SmFYLo845C2LoRPxOTgLlafEjazZj+CGh4f
XJ8dAoVtS3kWmUHY5uPNKr6RtJTRat6x4ugStdhzL6E/09wlZFMeGVZEZ8Lg1xpG
gvHZoHtcYoiBevOqhYZGC8QceP/bVNUCeEvyOAnvTdZ57ZVAayAnjp7op+H1JToh
EY5K9l7LaHPxFA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:23:29 2025 by rpki-client