Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
File:                     sL_SyF5redRg5mDPlmTe5V3MyMw.mft (raw, json)
Hash identifier:          DdzNoiYPy2Q8tbT7SlrxI13DXomD3G4/pvDkw7zMrBk=
Subject key identifier:   04:42:0F:FE:91:C5:F7:0E:7A:35:15:9F:C0:D4:7F:DD:6F:13:49:21
Authority key identifier: B0:BF:D2:C8:5E:6B:79:D4:60:E6:60:CF:96:64:DE:E5:5D:CC:C8:CC
Certificate issuer:       /CN=b0bfd2c85e6b79d460e660cf9664dee55dccc8cc
Certificate serial:       0197868F6AEEF97450F2D7B651C49FBF2C9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
Manifest number:          0E73
Signing time:             Thu 19 Jun 2025 05:00:35 +0000
Manifest this update:     Thu 19 Jun 2025 05:00:35 +0000
Manifest next update:     Fri 20 Jun 2025 05:00:35 +0000
Files and hashes:         1: eFmnxR7CyMxvye5-XXcMbfaAVOw.roa (hash: pZJwNCYo3S0mBXNLEIKEUXn/lY7t5TEifbuRPldd2yI=)
                          2: oJDEzXr7gr-7eZ1rexTjd4c8Ul8.roa (hash: xZTw5KYNf4Du9zIJjL5q6os9uQVggXiruo8qaJQJCvQ=)
                          3: pGZsGJVmFoYhAv5VAkXf67JcN-w.roa (hash: /j9DfbiG7O3qG1GtbIDXzJ4rJWqS+jSuNHHJIbaeKpc=)
                          4: sL_SyF5redRg5mDPlmTe5V3MyMw.crl (hash: Q3D7R0fS9r0D/j3on5WMcxEaxlWY4876VgsK5M7vqcw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:86:8f:6a:ee:f9:74:50:f2:d7:b6:51:c4:9f:bf:2c:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0bfd2c85e6b79d460e660cf9664dee55dccc8cc
        Validity
            Not Before: Jun 19 05:00:35 2025 GMT
            Not After : Jun 20 05:00:35 2025 GMT
        Subject: CN=04420ffe91c5f70e7a35159fc0d47fdd6f134921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:05:38:9c:e4:f0:b3:98:9f:ee:b0:5d:f6:48:
                    dd:7b:5d:dc:49:e6:64:cc:b0:e9:7e:72:45:08:8e:
                    3b:ac:bc:fb:a2:06:b1:17:ca:ae:0d:0a:d9:38:b9:
                    1e:79:2e:c3:a9:ae:07:aa:4a:a8:b7:43:46:de:cd:
                    69:9d:d3:bf:62:41:f2:1a:25:ef:80:91:a2:b9:df:
                    94:14:73:42:7d:65:99:89:f0:df:0f:5a:e3:07:68:
                    0e:19:af:a8:02:36:36:04:70:b6:58:4b:72:28:da:
                    dd:a7:f6:c7:35:39:6e:32:94:51:dd:6f:65:eb:3a:
                    f9:a1:37:db:10:8f:5d:1d:60:1c:cf:38:95:2a:05:
                    f2:75:c5:5a:69:e1:7f:3c:73:a1:bd:65:5d:7e:38:
                    1a:d9:74:2d:31:fd:5c:ec:ed:94:6c:6d:db:6f:88:
                    37:6d:ae:72:cb:bc:24:5c:78:8f:9d:bc:a8:81:86:
                    ed:dd:11:9e:08:9a:1d:1f:db:a6:e8:a3:4a:32:7b:
                    db:a8:94:53:5a:8e:8a:83:74:0a:3d:c2:5b:93:02:
                    4f:41:cb:a0:da:3c:71:cb:2e:13:74:fe:be:32:14:
                    ff:c1:8e:e7:97:dd:c5:64:b4:8e:6c:72:c6:09:0f:
                    fe:1a:81:a4:6f:82:1c:5d:7d:2c:46:50:33:d3:4e:
                    61:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:42:0F:FE:91:C5:F7:0E:7A:35:15:9F:C0:D4:7F:DD:6F:13:49:21
            X509v3 Authority Key Identifier:
                keyid:B0:BF:D2:C8:5E:6B:79:D4:60:E6:60:CF:96:64:DE:E5:5D:CC:C8:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e8:bc:08:41:29:ba:03:c2:30:1f:d7:0f:fe:a8:2e:a7:e9:1f:
         d5:4d:c0:9c:93:a5:56:f8:f5:24:a1:c0:53:a2:01:f9:20:57:
         be:af:89:f1:e7:18:c1:f6:34:52:f8:ed:1d:dc:91:df:3f:5e:
         0d:94:d4:6d:1e:80:78:a2:01:ec:06:d3:41:7f:c9:b9:f7:ba:
         9b:db:cf:38:fc:4d:de:60:60:dd:d8:f2:05:d4:91:65:34:46:
         92:72:a0:ea:74:1a:8f:fd:ca:98:0b:59:b4:02:83:f4:55:d3:
         8d:61:42:d4:ae:18:ba:ed:a0:99:82:09:59:b4:6b:08:4b:49:
         01:07:e1:e9:26:de:c2:cc:84:b7:3b:55:3d:0d:37:78:d1:da:
         6e:85:64:dc:f2:5f:11:00:55:cb:0f:72:81:88:a7:cd:23:fa:
         c6:d4:0e:27:47:a1:80:25:99:5f:80:b2:a9:4f:1e:06:b8:84:
         cf:fd:07:04:85:6a:8a:c9:2d:16:3a:eb:16:7a:f9:6a:39:bb:
         fc:01:e0:9e:0d:9f:b4:0f:b5:28:66:84:0e:00:ff:45:77:cf:
         27:4d:c1:1b:37:2e:bf:73:ca:15:50:47:84:c8:a8:87:bd:e6:
         a7:c0:04:02:b3:14:e4:f2:aa:13:1f:cb:f3:ba:62:7e:8c:b3:
         7c:fc:d8:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeGj2ru+XRQ8te2UcSfvyyaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYmZkMmM4NWU2Yjc5ZDQ2MGU2NjBjZjk2NjRkZWU1NWRj
Y2M4Y2MwHhcNMjUwNjE5MDUwMDM1WhcNMjUwNjIwMDUwMDM1WjAzMTEwLwYDVQQD
EygwNDQyMGZmZTkxYzVmNzBlN2EzNTE1OWZjMGQ0N2ZkZDZmMTM0OTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgU4nOTws5if7rBd9kjde13cSeZk
zLDpfnJFCI47rLz7ogaxF8quDQrZOLkeeS7Dqa4Hqkqot0NG3s1pndO/YkHyGiXv
gJGiud+UFHNCfWWZifDfD1rjB2gOGa+oAjY2BHC2WEtyKNrdp/bHNTluMpRR3W9l
6zr5oTfbEI9dHWAczziVKgXydcVaaeF/PHOhvWVdfjga2XQtMf1c7O2UbG3bb4g3
ba5yy7wkXHiPnbyogYbt3RGeCJodH9um6KNKMnvbqJRTWo6Kg3QKPcJbkwJPQcug
2jxxyy4TdP6+MhT/wY7nl93FZLSObHLGCQ/+GoGkb4IcXX0sRlAz005hSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFARCD/6RxfcOejUVn8DUf91vE0khMB8GA1UdIwQY
MBaAFLC/0shea3nUYOZgz5Zk3uVdzMjMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0xfU3lGNXJlZFJnNW1EUGxtVGU1VjNNeU13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8yMDNhNTMtMDU4YS00ZDVkLWE3NjEt
ZDM3MTg1NTc1NmMzLzEvc0xfU3lGNXJlZFJnNW1EUGxtVGU1VjNNeU13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8yMDNhNTMtMDU4YS00ZDVkLWE3NjEtZDM3MTg1NTc1NmMz
LzEvc0xfU3lGNXJlZFJnNW1EUGxtVGU1VjNNeU13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6LwIQSm6
A8IwH9cP/qgup+kf1U3AnJOlVvj1JKHAU6IB+SBXvq+J8ecYwfY0UvjtHdyR3z9e
DZTUbR6AeKIB7AbTQX/Jufe6m9vPOPxN3mBg3djyBdSRZTRGknKg6nQaj/3KmAtZ
tAKD9FXTjWFC1K4Yuu2gmYIJWbRrCEtJAQfh6SbewsyEtztVPQ03eNHaboVk3PJf
EQBVyw9ygYinzSP6xtQOJ0ehgCWZX4CyqU8eBriEz/0HBIVqisktFjrrFnr5ajm7
/AHgng2ftA+1KGaEDgD/RXfPJ03BGzcuv3PKFVBHhMioh73mp8AEArMU5PKqEx/L
87pifoyzfPzYxA==
-----END CERTIFICATE-----
Generated at Thu Jun 19 11:09:37 2025 by rpki-client