Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft
File:                     mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft (raw, json)
Hash identifier:          Dl7wCXPr37x/Cq7sDPA2/iKoE0vsZxjZh+sUohQPLlQ=
Subject key identifier:   97:9C:93:70:48:5C:F8:A2:EE:D6:0D:D4:19:B0:62:BA:75:68:8D:9A
Authority key identifier: 9A:70:04:FD:BC:1D:9E:3A:3C:1E:7E:06:59:1A:CA:4B:94:B6:C2:F8
Certificate issuer:       /CN=9a7004fdbc1d9e3a3c1e7e06591aca4b94b6c2f8
Certificate serial:       019777537DAA9906A4C71BDECA74B0771998
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft
Manifest number:          CF
Signing time:             Mon 16 Jun 2025 06:00:49 +0000
Manifest this update:     Mon 16 Jun 2025 06:00:49 +0000
Manifest next update:     Tue 17 Jun 2025 06:00:49 +0000
Files and hashes:         1: W8iTYjU2Evc2p5yDOFlKPLpAZr0.roa (hash: +1HDTD3+F6qn6zfwt9WbeLBT9ppZuriPW/cOhjwp96g=)
                          2: mnAE_bwdnjo8Hn4GWRrKS5S2wvg.crl (hash: h5OLwRQX/cdb0l/ip2qhOeO8FDxo/qh5Bgzm91XJYwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:77:53:7d:aa:99:06:a4:c7:1b:de:ca:74:b0:77:19:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a7004fdbc1d9e3a3c1e7e06591aca4b94b6c2f8
        Validity
            Not Before: Jun 16 06:00:49 2025 GMT
            Not After : Jun 17 06:00:49 2025 GMT
        Subject: CN=979c9370485cf8a2eed60dd419b062ba75688d9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d1:a2:95:29:54:58:03:13:55:7d:f9:a6:50:
                    05:d5:cf:8e:20:54:da:84:6e:ad:00:d9:d7:22:c0:
                    b6:c0:c8:30:09:58:23:c6:8f:5e:8c:46:95:bc:dc:
                    b9:93:77:94:1d:d8:7b:fb:a1:a9:7a:c4:74:65:d4:
                    dc:00:05:29:18:f3:2b:ba:04:99:24:91:88:4a:fe:
                    fe:de:17:1c:ab:61:bd:cb:55:1f:af:99:04:22:c3:
                    8e:ca:89:7c:21:44:91:8a:fa:48:65:c6:30:e0:35:
                    e9:81:c4:3f:5c:91:38:89:40:bb:c0:41:39:38:69:
                    a5:5d:eb:b9:90:81:a5:80:e9:e7:c2:e2:78:66:a0:
                    a1:96:69:4c:23:5d:e9:5e:88:ec:fb:d8:0d:3b:e3:
                    dd:98:29:c5:8f:f8:8a:27:9b:39:c4:d9:d0:09:d2:
                    f3:40:3e:6e:13:14:41:75:78:a4:0f:2e:1c:b9:95:
                    90:f5:32:76:68:68:24:fc:51:3c:4f:9d:d7:4d:90:
                    ee:0d:b4:7b:5a:df:a2:3f:50:51:70:e2:06:5b:99:
                    a9:01:80:c8:71:9b:5d:fc:07:33:80:eb:14:42:ae:
                    6d:3d:98:1e:26:34:12:b5:41:7a:dd:2b:14:d3:66:
                    63:fc:d2:66:47:42:1f:08:32:02:ac:dc:c6:71:56:
                    bd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:9C:93:70:48:5C:F8:A2:EE:D6:0D:D4:19:B0:62:BA:75:68:8D:9A
            X509v3 Authority Key Identifier:
                keyid:9A:70:04:FD:BC:1D:9E:3A:3C:1E:7E:06:59:1A:CA:4B:94:B6:C2:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:f1:be:bf:fe:4c:7a:61:ce:3e:f0:be:37:9a:08:0c:12:2c:
         27:1b:ff:9a:ed:24:ce:b7:39:30:8a:d3:a6:ca:ff:83:de:a6:
         40:f4:e4:b8:ad:78:9f:ff:49:b7:ac:92:93:89:5c:c5:1e:84:
         3c:5d:4e:5e:4c:20:31:a5:f8:47:8e:5c:29:d4:63:f6:3e:44:
         dc:ec:b0:1a:cb:58:3d:8c:55:89:3a:05:ec:52:f8:cd:92:4c:
         ce:be:48:f7:6e:9d:9b:35:e5:13:e8:03:aa:16:32:c0:af:8d:
         21:70:d5:c2:28:82:0a:ed:9b:d6:7f:fa:ea:5c:4a:e3:4a:25:
         49:b8:b7:fc:1e:8d:35:34:38:dd:56:40:98:55:7f:3c:55:3d:
         73:50:70:d5:3b:75:c0:78:be:23:df:9d:fa:96:29:e8:8a:c6:
         79:f8:8f:60:f6:53:3e:03:82:11:8e:bd:da:5f:f7:0f:52:36:
         2d:eb:be:be:4e:ee:6d:37:05:e5:14:38:90:4b:f1:ab:5a:03:
         b6:ad:1e:36:f3:56:5d:00:03:39:c0:8d:15:8c:ae:1d:05:f4:
         92:13:52:55:63:25:f1:ee:5a:a1:5d:4a:92:76:cc:f5:df:32:
         75:04:24:9b:29:93:2a:6b:b3:d1:15:02:c8:35:a1:65:08:35:
         7c:de:b0:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd3U32qmQakxxveynSwdxmYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNzAwNGZkYmMxZDllM2EzYzFlN2UwNjU5MWFjYTRiOTRi
NmMyZjgwHhcNMjUwNjE2MDYwMDQ5WhcNMjUwNjE3MDYwMDQ5WjAzMTEwLwYDVQQD
Eyg5NzljOTM3MDQ4NWNmOGEyZWVkNjBkZDQxOWIwNjJiYTc1Njg4ZDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNGilSlUWAMTVX35plAF1c+OIFTa
hG6tANnXIsC2wMgwCVgjxo9ejEaVvNy5k3eUHdh7+6GpesR0ZdTcAAUpGPMrugSZ
JJGISv7+3hccq2G9y1Ufr5kEIsOOyol8IUSRivpIZcYw4DXpgcQ/XJE4iUC7wEE5
OGmlXeu5kIGlgOnnwuJ4ZqChlmlMI13pXojs+9gNO+PdmCnFj/iKJ5s5xNnQCdLz
QD5uExRBdXikDy4cuZWQ9TJ2aGgk/FE8T53XTZDuDbR7Wt+iP1BRcOIGW5mpAYDI
cZtd/AczgOsUQq5tPZgeJjQStUF63SsU02Zj/NJmR0IfCDICrNzGcVa95wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJeck3BIXPii7tYN1BmwYrp1aI2aMB8GA1UdIwQY
MBaAFJpwBP28HZ46PB5+BlkaykuUtsL4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW5BRV9id2Ruam84SG40R1dScktTNVMyd3ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9mY2E4MWQtMzhhNS00YzMyLWIxNjMt
YjdmYTM5M2RiMWQxLzEvbW5BRV9id2Ruam84SG40R1dScktTNVMyd3ZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9mY2E4MWQtMzhhNS00YzMyLWIxNjMtYjdmYTM5M2RiMWQx
LzEvbW5BRV9id2Ruam84SG40R1dScktTNVMyd3ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR/G+v/5M
emHOPvC+N5oIDBIsJxv/mu0kzrc5MIrTpsr/g96mQPTkuK14n/9Jt6ySk4lcxR6E
PF1OXkwgMaX4R45cKdRj9j5E3OywGstYPYxViToF7FL4zZJMzr5I926dmzXlE+gD
qhYywK+NIXDVwiiCCu2b1n/66lxK40olSbi3/B6NNTQ43VZAmFV/PFU9c1Bw1Tt1
wHi+I9+d+pYp6IrGefiPYPZTPgOCEY692l/3D1I2Leu+vk7ubTcF5RQ4kEvxq1oD
tq0eNvNWXQADOcCNFYyuHQX0khNSVWMl8e5aoV1KknbM9d8ydQQkmymTKmuz0RUC
yDWhZQg1fN6w1A==
-----END CERTIFICATE-----
Generated at Mon Jun 16 14:53:17 2025 by rpki-client