Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
File:                     m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft (raw, json)
Hash identifier:          exMtjXFIYIs10GuvaBPh8oovd/noLYoJyUkER+gDNvg=
Subject key identifier:   87:DF:F5:BC:98:12:C4:2F:B0:8C:70:48:A3:E7:51:4E:80:C7:55:8F
Authority key identifier: 9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D
Certificate issuer:       /CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
Certificate serial:       01977075B16F24586D974C00F479E2144924
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
Manifest number:          1596
Signing time:             Sat 14 Jun 2025 22:00:50 +0000
Manifest this update:     Sat 14 Jun 2025 22:00:50 +0000
Manifest next update:     Sun 15 Jun 2025 22:00:50 +0000
Files and hashes:         1: ZdHbyAuVO2WgpjmgEUV_YXpHBBE.roa (hash: tusTXmTZKYrotber9y7JznlEvfOo5SzY2AbmCw6km5s=)
                          2: m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl (hash: K8o19grAzYw0Nhbz4OG0F6F6WUkbDWS0K5M+6B/l+1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:75:b1:6f:24:58:6d:97:4c:00:f4:79:e2:14:49:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
        Validity
            Not Before: Jun 14 22:00:50 2025 GMT
            Not After : Jun 15 22:00:50 2025 GMT
        Subject: CN=87dff5bc9812c42fb08c7048a3e7514e80c7558f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:75:be:aa:20:c9:d7:64:ab:11:bb:aa:87:19:
                    8b:63:7b:52:67:7f:2a:a3:ad:36:c7:f2:a5:0f:40:
                    bc:99:a5:3a:fe:6f:4c:df:62:c0:06:e4:04:7d:e9:
                    29:2b:03:20:b5:d7:e3:76:0e:a2:23:07:f0:35:49:
                    e4:08:d3:cf:6c:0b:4f:55:f8:43:22:e5:0b:75:20:
                    80:33:8a:cb:bd:5e:84:83:c3:b6:59:36:10:cf:d0:
                    4f:7f:52:ec:f7:29:f1:e2:83:ed:6e:63:d1:80:bd:
                    fb:96:57:16:cc:37:d2:3b:de:e3:ec:22:8b:35:01:
                    8d:f9:52:1b:b6:cd:1c:61:49:82:47:79:ee:ef:78:
                    1c:47:0b:f5:4d:97:58:c8:14:f3:39:47:ae:3f:50:
                    bf:c0:16:a7:f4:bd:dd:ad:fe:f5:98:cf:1c:8d:60:
                    4e:8e:80:70:56:fe:ad:e0:b4:03:86:c1:90:5c:e9:
                    5f:49:c3:0c:03:61:2c:83:8a:51:e6:7c:8c:b3:10:
                    75:be:a3:ac:75:d8:88:6d:f7:0e:8a:4c:db:e6:9e:
                    eb:c1:df:74:0f:bb:6b:f8:97:f8:fd:ae:ef:55:cf:
                    f4:bf:9e:9c:a2:8e:2a:e1:91:7d:44:f7:0f:e7:83:
                    30:db:75:01:ef:72:0d:55:f3:6c:fd:23:12:98:10:
                    4b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:DF:F5:BC:98:12:C4:2F:B0:8C:70:48:A3:E7:51:4E:80:C7:55:8F
            X509v3 Authority Key Identifier:
                keyid:9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:68:2b:49:24:ac:ec:dc:b3:d6:04:58:e4:ad:05:d6:ed:86:
         1d:ad:c9:43:9e:2c:73:13:92:6f:ca:94:7f:ed:5f:0e:39:26:
         b4:35:2f:4a:52:53:3a:8b:a9:3b:dc:75:d3:d4:29:c1:ab:3b:
         86:eb:31:de:ad:fc:24:73:32:8f:45:89:9a:31:bf:13:a8:a8:
         1a:9f:bd:f7:2a:e0:0a:e2:27:f3:15:82:0a:e5:74:88:c1:5a:
         1f:fd:c6:20:28:03:8e:88:6b:0a:76:1e:2e:7c:a3:37:79:1b:
         0e:1b:b2:be:05:73:99:91:68:f7:6e:96:05:02:5f:b8:50:26:
         5c:b9:cf:17:2a:90:de:b9:37:95:47:ba:ac:5a:09:15:e6:5b:
         cd:8e:9a:21:6f:fd:2f:db:e6:7e:ae:25:0c:02:27:fb:c4:53:
         76:f1:30:23:dd:22:f1:b3:1f:6f:96:d7:3e:d5:40:39:12:50:
         0a:6d:70:46:8f:93:ee:50:aa:9d:7f:42:20:3a:29:4c:52:02:
         9c:4b:fa:d0:82:1f:32:ad:27:e2:11:4b:b3:8f:7f:cc:9b:43:
         fe:9c:4e:3a:d0:8a:9c:ae:d7:3b:2d:9a:2c:e1:ad:ad:7a:c2:
         8d:4b:f6:7d:b6:8c:24:ba:ea:3c:b1:ac:80:05:e4:b6:0b:15:
         ec:de:b9:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwdbFvJFhtl0wA9HniFEkkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYmZhNzcyYWFjMjEwN2M5MGNmMjhiMjJiOGQyYWQwNzk3
ZjgzMmQwHhcNMjUwNjE0MjIwMDUwWhcNMjUwNjE1MjIwMDUwWjAzMTEwLwYDVQQD
Eyg4N2RmZjViYzk4MTJjNDJmYjA4YzcwNDhhM2U3NTE0ZTgwYzc1NThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nW+qiDJ12SrEbuqhxmLY3tSZ38q
o602x/KlD0C8maU6/m9M32LABuQEfekpKwMgtdfjdg6iIwfwNUnkCNPPbAtPVfhD
IuULdSCAM4rLvV6Eg8O2WTYQz9BPf1Ls9ynx4oPtbmPRgL37llcWzDfSO97j7CKL
NQGN+VIbts0cYUmCR3nu73gcRwv1TZdYyBTzOUeuP1C/wBan9L3drf71mM8cjWBO
joBwVv6t4LQDhsGQXOlfScMMA2Esg4pR5nyMsxB1vqOsddiIbfcOikzb5p7rwd90
D7tr+Jf4/a7vVc/0v56coo4q4ZF9RPcP54Mw23UB73INVfNs/SMSmBBLpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIff9byYEsQvsIxwSKPnUU6Ax1WPMB8GA1UdIwQY
MBaAFJu/p3KqwhB8kM8osiuNKtB5f4MtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTctbmNxckNFSHlRenlpeUs0MHEwSGxfZ3kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC81NTJjOTQtN2M5OS00Y2RkLTg5MmEt
ZWU5ODI5ZGRhOGJjLzEvbTctbmNxckNFSHlRenlpeUs0MHEwSGxfZ3kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC81NTJjOTQtN2M5OS00Y2RkLTg5MmEtZWU5ODI5ZGRhOGJj
LzEvbTctbmNxckNFSHlRenlpeUs0MHEwSGxfZ3kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYWgrSSSs
7Nyz1gRY5K0F1u2GHa3JQ54scxOSb8qUf+1fDjkmtDUvSlJTOoupO9x109Qpwas7
husx3q38JHMyj0WJmjG/E6ioGp+99yrgCuIn8xWCCuV0iMFaH/3GICgDjohrCnYe
LnyjN3kbDhuyvgVzmZFo926WBQJfuFAmXLnPFyqQ3rk3lUe6rFoJFeZbzY6aIW/9
L9vmfq4lDAIn+8RTdvEwI90i8bMfb5bXPtVAORJQCm1wRo+T7lCqnX9CIDopTFIC
nEv60IIfMq0n4hFLs49/zJtD/pxOOtCKnK7XOy2aLOGtrXrCjUv2fbaMJLrqPLGs
gAXktgsV7N65RQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 03:53:17 2025 by rpki-client