Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.mft
File:                     sx9k3lYY91wZ31E5U_ZGmHngh3M.mft (raw, json)
Hash identifier:          KjeorNRTX12bx7EYKOKH64OmIQyMJ3RWDcDwfP2bFiw=
Subject key identifier:   0D:AB:A3:A8:CF:4A:9E:13:F5:DF:00:A8:58:97:E4:AE:87:8F:48:EE
Authority key identifier: B3:1F:64:DE:56:18:F7:5C:19:DF:51:39:53:F6:46:98:79:E0:87:73
Certificate issuer:       /CN=b31f64de5618f75c19df513953f6469879e08773
Certificate serial:       01977E9EB28DB654FB0E8318AD775C5409E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sx9k3lYY91wZ31E5U_ZGmHngh3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.mft
Manifest number:          0383
Signing time:             Tue 17 Jun 2025 16:00:18 +0000
Manifest this update:     Tue 17 Jun 2025 16:00:18 +0000
Manifest next update:     Wed 18 Jun 2025 16:00:18 +0000
Files and hashes:         1: UakAn5yyBqPOSEIfTXfDNciKFEs.roa (hash: btkptULyCnT6MWQIHbySDipzPG0rdTy55cYQICbq99M=)
                          2: sx9k3lYY91wZ31E5U_ZGmHngh3M.crl (hash: jfe69YRAjFKF1w6fMxyA3fHlhJvIlw3uzfREcao+QXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sx9k3lYY91wZ31E5U_ZGmHngh3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 13:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7e:9e:b2:8d:b6:54:fb:0e:83:18:ad:77:5c:54:09:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b31f64de5618f75c19df513953f6469879e08773
        Validity
            Not Before: Jun 17 16:00:18 2025 GMT
            Not After : Jun 18 16:00:18 2025 GMT
        Subject: CN=0daba3a8cf4a9e13f5df00a85897e4ae878f48ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fa:f8:06:e2:1c:c6:1c:91:b9:2a:37:60:03:
                    34:b8:5a:b8:5e:c5:65:4e:6d:a6:a7:63:84:5b:e7:
                    34:9f:61:14:9d:28:93:68:c6:93:58:65:f1:2a:3c:
                    3e:ec:4f:b0:eb:db:29:77:57:50:19:93:96:28:81:
                    97:15:2d:af:9c:cc:df:30:eb:f5:00:ea:21:61:cd:
                    10:c4:ca:76:66:5d:94:30:97:94:f4:e6:94:5a:04:
                    79:56:df:a8:f7:d6:8c:0b:ab:b2:42:9d:64:ca:54:
                    f2:43:12:62:d5:45:2f:88:35:19:ee:1d:5e:df:0e:
                    fa:d6:c2:b7:83:37:47:31:d1:2f:33:8e:89:05:ef:
                    14:53:24:87:c6:7a:b5:52:d3:9a:87:ff:a1:6d:8e:
                    00:e8:6e:7a:c4:2d:b3:69:d1:75:f8:2a:51:fa:f1:
                    38:fd:44:bd:cd:73:f6:c3:7e:36:a3:82:f5:c3:ac:
                    10:26:cb:0b:9f:80:6b:f5:c3:88:2c:ac:d8:1c:29:
                    db:41:83:7c:4e:84:d5:d3:2d:ba:0f:ae:35:07:d0:
                    ea:c9:d5:29:a1:ee:ad:16:98:0a:91:e3:29:b6:2f:
                    6d:d3:0a:00:e0:07:61:ae:58:37:57:c0:5e:db:69:
                    ee:63:d2:de:aa:79:53:8a:93:4f:c0:de:5c:9b:59:
                    4c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:AB:A3:A8:CF:4A:9E:13:F5:DF:00:A8:58:97:E4:AE:87:8F:48:EE
            X509v3 Authority Key Identifier:
                keyid:B3:1F:64:DE:56:18:F7:5C:19:DF:51:39:53:F6:46:98:79:E0:87:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx9k3lYY91wZ31E5U_ZGmHngh3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:d7:1e:4f:d1:bf:3c:62:8b:ba:97:a1:eb:3c:5f:bf:60:28:
         56:08:61:b0:51:a0:d2:52:11:22:84:e1:1b:5f:4b:f9:c8:a1:
         cf:2d:8e:a7:fc:c0:28:c1:da:23:8e:f2:b4:d9:10:36:0a:a2:
         d7:49:45:32:30:85:d2:d0:c5:b0:18:1f:31:4e:30:31:86:62:
         e8:e9:e5:60:ab:61:ff:f3:db:a9:03:b9:c3:e7:99:2a:f4:04:
         0b:05:3b:e5:6f:c2:c7:92:c0:99:37:06:5a:0c:d3:13:67:1c:
         d8:a9:3e:30:a0:aa:fc:39:44:9e:cb:f1:3b:d2:06:7f:30:15:
         1d:17:58:aa:f0:15:51:f9:b8:ac:75:6b:72:3a:f5:13:3b:60:
         9e:53:c4:ff:aa:16:c9:65:32:48:d5:17:26:c6:2e:2f:80:76:
         a0:ac:3b:4d:d4:1e:50:de:3a:33:5f:7b:b1:4f:d7:38:39:c3:
         27:ac:d8:1a:d6:8a:bb:ab:a8:5f:89:19:c5:08:bc:c2:88:39:
         0a:26:2c:ea:1e:d6:ad:19:f2:e5:1f:8f:f5:de:63:12:9a:80:
         4e:36:6f:66:9b:d4:a5:c2:22:26:f9:12:4a:74:56:e9:7c:0a:
         3e:00:b8:3c:0e:58:22:8c:44:6a:e1:f1:72:c4:ee:68:c1:98:
         c3:11:97:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd+nrKNtlT7DoMYrXdcVAnmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMWY2NGRlNTYxOGY3NWMxOWRmNTEzOTUzZjY0Njk4Nzll
MDg3NzMwHhcNMjUwNjE3MTYwMDE4WhcNMjUwNjE4MTYwMDE4WjAzMTEwLwYDVQQD
EygwZGFiYTNhOGNmNGE5ZTEzZjVkZjAwYTg1ODk3ZTRhZTg3OGY0OGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvr4BuIcxhyRuSo3YAM0uFq4XsVl
Tm2mp2OEW+c0n2EUnSiTaMaTWGXxKjw+7E+w69spd1dQGZOWKIGXFS2vnMzfMOv1
AOohYc0QxMp2Zl2UMJeU9OaUWgR5Vt+o99aMC6uyQp1kylTyQxJi1UUviDUZ7h1e
3w761sK3gzdHMdEvM46JBe8UUySHxnq1UtOah/+hbY4A6G56xC2zadF1+CpR+vE4
/US9zXP2w342o4L1w6wQJssLn4Br9cOILKzYHCnbQYN8ToTV0y26D641B9DqydUp
oe6tFpgKkeMpti9t0woA4Adhrlg3V8Be22nuY9LeqnlTipNPwN5cm1lM9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2ro6jPSp4T9d8AqFiX5K6Hj0juMB8GA1UdIwQY
MBaAFLMfZN5WGPdcGd9ROVP2Rph54IdzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3g5azNsWVk5MXdaMzFFNVVfWkdtSG5naDNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zZmEwMDctZjM0NC00NjdlLWI3MTIt
MWNjZTViNThmOGUzLzEvc3g5azNsWVk5MXdaMzFFNVVfWkdtSG5naDNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8zZmEwMDctZjM0NC00NjdlLWI3MTItMWNjZTViNThmOGUz
LzEvc3g5azNsWVk5MXdaMzFFNVVfWkdtSG5naDNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADNceT9G/
PGKLupeh6zxfv2AoVghhsFGg0lIRIoThG19L+cihzy2Op/zAKMHaI47ytNkQNgqi
10lFMjCF0tDFsBgfMU4wMYZi6OnlYKth//PbqQO5w+eZKvQECwU75W/Cx5LAmTcG
WgzTE2cc2Kk+MKCq/DlEnsvxO9IGfzAVHRdYqvAVUfm4rHVrcjr1EztgnlPE/6oW
yWUySNUXJsYuL4B2oKw7TdQeUN46M197sU/XODnDJ6zYGtaKu6uoX4kZxQi8wog5
CiYs6h7WrRny5R+P9d5jEpqATjZvZpvUpcIiJvkSSnRW6XwKPgC4PA5YIoxEauHx
csTuaMGYwxGX6A==
-----END CERTIFICATE-----
Generated at Tue Jun 17 21:02:06 2025 by rpki-client