Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft
File:                     9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft (raw, json)
Hash identifier:          EP6UIYETbjP7Rp0BCdw9FMKWQ3RD/sY1wwVNgZLKlLg=
Subject key identifier:   4E:88:46:D2:4F:EC:8E:E5:08:A4:D6:28:82:09:F2:E0:74:D4:B8:43
Authority key identifier: F7:3C:DC:67:51:D7:C5:90:73:E4:B7:06:40:2D:36:91:AF:09:08:6F
Certificate issuer:       /CN=f73cdc6751d7c59073e4b706402d3691af09086f
Certificate serial:       0197722D0EA093A6FE83DB9CEF64A0A2C813
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft
Manifest number:          14EF
Signing time:             Sun 15 Jun 2025 06:00:44 +0000
Manifest this update:     Sun 15 Jun 2025 06:00:44 +0000
Manifest next update:     Mon 16 Jun 2025 06:00:44 +0000
Files and hashes:         1: 0YWWGLY2ws5dEm_54FSQZ1sndS4.roa (hash: NrM8b8iTRjQj/SggeT540k8LBz4kUfRyQupPzxIyzNo=)
                          2: 9zzcZ1HXxZBz5LcGQC02ka8JCG8.crl (hash: TcLKNiemoqDGrIJwxsnmmqX4E7v4kayAzL2JxjdXb/4=)
                          3: QvYuctjlOUmpEgpvzgB4c1se_Qc.roa (hash: eYNoK8Wy+9Zr1JqWLRbHBLeE5t+d/AXQdx/gVhz5wA0=)
                          4: SgIFzdX6JcgyEvIi1tU7tEpqzs0.roa (hash: p6RL3L68zCciLtwZlC4lGEQ9Tf1FF1+MJetEEftOp98=)
                          5: WC5kYAaNv3dBMoN7rOV1Dk7R1Eo.roa (hash: IM898uPAV6VmuESMyy3MG48B0cB42EspCAHOuXpg7Io=)
                          6: wW0iKtg9bPCx0wfkjNfecHkB2Ck.roa (hash: UM3eZveIrytl53yxFS6AdW4CNHF0JEQaT47qsF3G7tI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:72:2d:0e:a0:93:a6:fe:83:db:9c:ef:64:a0:a2:c8:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f73cdc6751d7c59073e4b706402d3691af09086f
        Validity
            Not Before: Jun 15 06:00:44 2025 GMT
            Not After : Jun 16 06:00:44 2025 GMT
        Subject: CN=4e8846d24fec8ee508a4d6288209f2e074d4b843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:46:20:75:29:b6:a6:ab:20:3f:4d:95:5f:2f:
                    a6:8f:9d:cf:7a:2f:9b:0c:13:2e:39:80:09:db:97:
                    a3:57:9e:99:77:80:3d:01:45:be:54:f8:90:75:4e:
                    23:ce:07:83:e7:c2:18:68:e0:62:9d:44:ce:bc:33:
                    59:c8:df:50:c0:53:d3:ae:83:63:84:98:19:bb:e1:
                    de:52:ef:a4:9c:42:21:76:6c:88:f5:8b:1e:71:01:
                    b5:3a:d8:5d:3c:79:fc:4c:62:51:51:64:21:11:e8:
                    8f:84:08:86:51:b6:02:e2:db:2a:d0:71:29:c5:48:
                    da:53:77:41:56:5a:df:98:d8:09:6e:2c:cd:08:9d:
                    d5:21:3a:9b:a3:16:48:9f:39:8f:51:3b:30:a3:98:
                    68:35:14:0a:82:82:9d:ad:f6:bc:73:b5:60:3a:df:
                    b7:6b:9c:63:c9:d6:6b:7c:ba:ab:62:00:b3:6e:bb:
                    b7:e1:0c:48:fa:a1:20:0f:b5:75:60:b8:dc:5a:a1:
                    e0:53:5a:9e:4f:af:51:f1:5e:e6:4e:0c:e8:a8:d5:
                    ad:44:46:36:81:e5:b6:62:2b:f2:0e:ac:9e:b4:5f:
                    de:7f:9b:24:9b:55:fc:0f:15:3e:6c:5a:14:3c:a8:
                    0b:90:bf:72:97:24:20:e0:2f:9e:bc:7d:73:66:d9:
                    8d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:88:46:D2:4F:EC:8E:E5:08:A4:D6:28:82:09:F2:E0:74:D4:B8:43
            X509v3 Authority Key Identifier:
                keyid:F7:3C:DC:67:51:D7:C5:90:73:E4:B7:06:40:2D:36:91:AF:09:08:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:14:3a:51:08:7a:06:59:3d:78:09:1b:c5:cf:8a:ef:17:14:
         85:7e:c9:3d:80:45:23:2d:56:96:b1:65:1f:2f:b6:0c:c0:11:
         ab:05:da:0c:37:db:31:1f:ed:06:da:0f:a0:b6:7e:0e:d6:48:
         c0:a6:8f:51:c6:d4:d6:84:a1:2f:28:4b:dc:b8:37:9c:06:e6:
         cd:d7:5e:7c:e6:a0:4a:89:bb:1e:22:2e:a8:10:50:55:c4:0c:
         26:7c:e2:ed:1f:4f:34:f9:ca:0c:07:46:0f:2e:dd:57:0c:9e:
         28:a6:ae:ef:bf:42:4e:0f:5f:a4:ab:70:cd:37:4b:44:04:4f:
         2e:4a:42:48:f3:80:c5:b4:a1:58:bd:23:36:38:68:35:93:c2:
         ac:7c:aa:33:48:a5:ff:7c:d0:c2:ae:29:13:cd:f6:dd:e7:3d:
         bc:89:8a:17:c4:97:da:18:45:65:65:5f:a6:20:d4:f0:9e:13:
         d3:16:83:6c:86:18:e3:f2:a5:c7:d8:5e:64:be:3d:14:c2:58:
         ac:2c:7d:1c:9c:75:0e:b7:5e:f2:9d:c4:69:54:33:1b:55:48:
         79:e6:04:c2:80:aa:68:82:c6:63:0e:16:5c:0d:69:04:c4:a3:
         c8:d4:31:16:b0:9c:32:69:ee:c5:4b:88:1a:3f:6b:55:4e:37:
         65:2b:cd:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdyLQ6gk6b+g9uc72SgosgTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3M2NkYzY3NTFkN2M1OTA3M2U0YjcwNjQwMmQzNjkxYWYw
OTA4NmYwHhcNMjUwNjE1MDYwMDQ0WhcNMjUwNjE2MDYwMDQ0WjAzMTEwLwYDVQQD
Eyg0ZTg4NDZkMjRmZWM4ZWU1MDhhNGQ2Mjg4MjA5ZjJlMDc0ZDRiODQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskYgdSm2pqsgP02VXy+mj53Pei+b
DBMuOYAJ25ejV56Zd4A9AUW+VPiQdU4jzgeD58IYaOBinUTOvDNZyN9QwFPTroNj
hJgZu+HeUu+knEIhdmyI9YsecQG1OthdPHn8TGJRUWQhEeiPhAiGUbYC4tsq0HEp
xUjaU3dBVlrfmNgJbizNCJ3VITqboxZInzmPUTswo5hoNRQKgoKdrfa8c7VgOt+3
a5xjydZrfLqrYgCzbru34QxI+qEgD7V1YLjcWqHgU1qeT69R8V7mTgzoqNWtREY2
geW2YivyDqyetF/ef5skm1X8DxU+bFoUPKgLkL9ylyQg4C+evH1zZtmNDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE6IRtJP7I7lCKTWKIIJ8uB01LhDMB8GA1UdIwQY
MBaAFPc83GdR18WQc+S3BkAtNpGvCQhvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXp6Y1oxSFh4WkJ6NUxjR1FDMDJrYThKQ0c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS84NTUwMDItZDgyMy00MWZlLThmOWEt
NzE4ZmQxOTVjNWViLzEvOXp6Y1oxSFh4WkJ6NUxjR1FDMDJrYThKQ0c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS84NTUwMDItZDgyMy00MWZlLThmOWEtNzE4ZmQxOTVjNWVi
LzEvOXp6Y1oxSFh4WkJ6NUxjR1FDMDJrYThKQ0c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbBQ6UQh6
Blk9eAkbxc+K7xcUhX7JPYBFIy1WlrFlHy+2DMARqwXaDDfbMR/tBtoPoLZ+DtZI
wKaPUcbU1oShLyhL3Lg3nAbmzddefOagSom7HiIuqBBQVcQMJnzi7R9PNPnKDAdG
Dy7dVwyeKKau779CTg9fpKtwzTdLRARPLkpCSPOAxbShWL0jNjhoNZPCrHyqM0il
/3zQwq4pE8323ec9vImKF8SX2hhFZWVfpiDU8J4T0xaDbIYY4/Klx9heZL49FMJY
rCx9HJx1Drde8p3EaVQzG1VIeeYEwoCqaILGYw4WXA1pBMSjyNQxFrCcMmnuxUuI
Gj9rVU43ZSvNKQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:43:21 2025 by rpki-client