Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
File:                     l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft (raw, json)
Hash identifier:          ek/bBzS5NjMHhJpyil2w9NZ3hok3Dj/IY2J6XaSLi5Q=
Subject key identifier:   64:80:30:25:93:CB:6B:A4:BD:46:F8:CD:C9:DD:9B:75:C6:77:D2:C0
Authority key identifier: 97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
Certificate issuer:       /CN=977bfd99d35116f9c644194c36d9b646f73127c6
Certificate serial:       01988F904691D1855A64CE4BC0D2C25C71D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
Manifest number:          13E6
Signing time:             Sat 09 Aug 2025 16:00:53 +0000
Manifest this update:     Sat 09 Aug 2025 16:00:53 +0000
Manifest next update:     Sun 10 Aug 2025 16:00:53 +0000
Files and hashes:         1: GmVe1_dUtE2thDPnKTTodQa1WTk.roa (hash: +YHOaXQXUcLXYGboOZLBoqiMUEPBTb2ggQGekMwXWOE=)
                          2: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl (hash: TPYG7kRnePhbiNUx3c1C7tHrLBe5endbr3l/+3SN2y0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8f:90:46:91:d1:85:5a:64:ce:4b:c0:d2:c2:5c:71:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=977bfd99d35116f9c644194c36d9b646f73127c6
        Validity
            Not Before: Aug  9 16:00:53 2025 GMT
            Not After : Aug 10 16:00:53 2025 GMT
        Subject: CN=6480302593cb6ba4bd46f8cdc9dd9b75c677d2c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:15:78:90:c2:db:e7:b9:85:1c:4c:a4:7d:9e:
                    0e:85:da:64:7b:92:3e:aa:0a:eb:c6:f8:2e:67:2c:
                    94:30:84:23:10:f9:98:7a:df:98:d4:62:13:dc:f7:
                    31:90:3d:75:6a:30:1e:e1:ca:bb:cb:be:b9:5f:60:
                    4d:81:c1:d7:91:27:ab:3f:7d:c4:0c:c8:7d:09:2d:
                    63:7d:5b:2c:4c:f9:f0:4d:af:a5:d9:4d:6a:e0:03:
                    aa:b8:b5:10:bc:9e:04:f1:56:85:30:be:00:5c:00:
                    16:a3:6c:4a:fb:2d:70:9f:50:d6:9b:9a:de:f6:d6:
                    57:1f:fa:de:71:53:85:cf:7e:8f:97:97:95:5d:4d:
                    89:12:95:b3:b3:b2:20:58:a5:84:74:8a:68:8d:cc:
                    c0:30:fb:2e:a8:23:35:1e:bc:fc:de:8b:11:93:20:
                    82:0d:4d:11:53:f6:55:48:3d:47:86:b6:bb:21:ce:
                    54:9b:1a:92:a8:78:f8:2e:0d:c0:26:a0:4b:cb:87:
                    30:70:09:ef:1a:67:ff:63:a7:fe:c0:ec:2c:2b:60:
                    79:48:7c:7e:40:6f:6c:92:1f:dc:8f:b9:05:bf:05:
                    86:50:28:df:70:1c:00:05:af:00:09:81:73:d0:e0:
                    2b:6c:99:e7:2e:5c:db:14:ef:90:5b:97:c6:ef:ec:
                    62:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:80:30:25:93:CB:6B:A4:BD:46:F8:CD:C9:DD:9B:75:C6:77:D2:C0
            X509v3 Authority Key Identifier:
                keyid:97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:e3:b6:b1:bf:dc:b7:4a:b0:01:3e:f9:fc:2e:93:d7:f4:6f:
         bf:6e:54:0a:0d:c2:99:b4:59:11:0f:77:e7:45:8d:f7:22:ee:
         64:55:61:f5:18:96:19:68:06:94:1b:7a:35:de:df:6e:48:3e:
         61:e7:67:00:3b:7d:a2:44:fb:34:ea:47:3b:18:a3:16:07:8b:
         e2:d8:e7:e1:74:bc:61:67:93:16:4e:0a:2f:58:3f:c6:a2:d4:
         7f:2a:4f:bb:45:c6:90:32:a8:e7:6c:43:5d:19:1b:bd:d1:81:
         23:c4:df:22:62:8b:f2:93:d8:3e:f2:e1:e9:55:3b:3c:55:c5:
         83:3a:fe:57:aa:e8:96:4f:a4:ac:71:16:44:7c:b9:e9:db:fd:
         16:64:7e:31:b1:b2:9a:66:b9:60:b1:60:e6:95:6f:96:08:0a:
         76:8a:41:ab:2b:86:db:cc:45:d9:55:57:58:3d:4e:9e:15:db:
         37:9b:ef:64:d9:c5:2c:4a:ed:50:e8:7c:76:ff:4a:1b:3c:99:
         5f:6c:04:d7:ee:87:9e:b3:4d:05:64:4f:d6:cb:1f:cf:7b:82:
         71:d0:63:be:8c:de:ad:1a:c0:dc:81:74:d9:08:51:70:da:7f:
         ad:d8:46:6f:b9:46:b7:fb:35:73:b3:ae:90:9b:65:d1:74:a8:
         86:fc:5e:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiPkEaR0YVaZM5LwNLCXHHZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3N2JmZDk5ZDM1MTE2ZjljNjQ0MTk0YzM2ZDliNjQ2Zjcz
MTI3YzYwHhcNMjUwODA5MTYwMDUzWhcNMjUwODEwMTYwMDUzWjAzMTEwLwYDVQQD
Eyg2NDgwMzAyNTkzY2I2YmE0YmQ0NmY4Y2RjOWRkOWI3NWM2NzdkMmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxV4kMLb57mFHEykfZ4Ohdpke5I+
qgrrxvguZyyUMIQjEPmYet+Y1GIT3PcxkD11ajAe4cq7y765X2BNgcHXkSerP33E
DMh9CS1jfVssTPnwTa+l2U1q4AOquLUQvJ4E8VaFML4AXAAWo2xK+y1wn1DWm5re
9tZXH/recVOFz36Pl5eVXU2JEpWzs7IgWKWEdIpojczAMPsuqCM1Hrz83osRkyCC
DU0RU/ZVSD1Hhra7Ic5UmxqSqHj4Lg3AJqBLy4cwcAnvGmf/Y6f+wOwsK2B5SHx+
QG9skh/cj7kFvwWGUCjfcBwABa8ACYFz0OArbJnnLlzbFO+QW5fG7+xi2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGSAMCWTy2ukvUb4zcndm3XGd9LAMB8GA1UdIwQY
MBaAFJd7/ZnTURb5xkQZTDbZtkb3MSfGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDN2OW1kTlJGdm5HUkJsTU50bTJSdmN4SjhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9iNjc4ZjUtNTU3ZC00YjVkLWFhNTAt
OWE0ZmYwMTM3MDEyLzEvbDN2OW1kTlJGdm5HUkJsTU50bTJSdmN4SjhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9iNjc4ZjUtNTU3ZC00YjVkLWFhNTAtOWE0ZmYwMTM3MDEy
LzEvbDN2OW1kTlJGdm5HUkJsTU50bTJSdmN4SjhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2uO2sb/c
t0qwAT75/C6T1/Rvv25UCg3CmbRZEQ9350WN9yLuZFVh9RiWGWgGlBt6Nd7fbkg+
YednADt9okT7NOpHOxijFgeL4tjn4XS8YWeTFk4KL1g/xqLUfypPu0XGkDKo52xD
XRkbvdGBI8TfImKL8pPYPvLh6VU7PFXFgzr+V6rolk+krHEWRHy56dv9FmR+MbGy
mma5YLFg5pVvlggKdopBqyuG28xF2VVXWD1OnhXbN5vvZNnFLErtUOh8dv9KGzyZ
X2wE1+6HnrNNBWRP1ssfz3uCcdBjvozerRrA3IF02QhRcNp/rdhGb7lGt/s1c7Ou
kJtl0XSohvxeVQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 23:18:07 2025 by rpki-client