Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.mft
File:                     MryjKc1OJWX_DRPoNVpuxMwXlOE.mft (raw, json)
Hash identifier:          vlgg5sSPleeT1LWb7poMjBKQ2fjxncnqDGisxOnOcGo=
Subject key identifier:   83:E7:F1:BD:F9:C2:E2:49:0A:AE:92:A7:10:41:BC:FF:92:63:CF:01
Authority key identifier: 32:BC:A3:29:CD:4E:25:65:FF:0D:13:E8:35:5A:6E:C4:CC:17:94:E1
Certificate issuer:       /CN=32bca329cd4e2565ff0d13e8355a6ec4cc1794e1
Certificate serial:       019776E6868F629599968683626CA096B985
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MryjKc1OJWX_DRPoNVpuxMwXlOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.mft
Manifest number:          0C47
Signing time:             Mon 16 Jun 2025 04:01:48 +0000
Manifest this update:     Mon 16 Jun 2025 04:01:48 +0000
Manifest next update:     Tue 17 Jun 2025 04:01:48 +0000
Files and hashes:         1: EY9B7xHMl-Tku1EaPiHTMSJd4UY.roa (hash: fngf8eQs7Bwu0pM4j6i0WPj4gj/7hDrn6NltGJxnSqw=)
                          2: MryjKc1OJWX_DRPoNVpuxMwXlOE.crl (hash: eXjjWdrAosV03S4fO5wU7NGiGnEIRRlDlLszcdi+NVw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MryjKc1OJWX_DRPoNVpuxMwXlOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:76:e6:86:8f:62:95:99:96:86:83:62:6c:a0:96:b9:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32bca329cd4e2565ff0d13e8355a6ec4cc1794e1
        Validity
            Not Before: Jun 16 04:01:48 2025 GMT
            Not After : Jun 17 04:01:48 2025 GMT
        Subject: CN=83e7f1bdf9c2e2490aae92a71041bcff9263cf01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:31:75:7b:b4:69:ff:86:60:b1:24:9b:85:04:
                    f4:18:fa:d5:e3:79:ee:e5:bf:24:f5:64:f9:80:93:
                    01:52:29:30:ba:5d:2e:49:a9:e6:40:11:be:22:0a:
                    07:db:49:94:22:ed:33:64:37:a4:fb:48:b1:e1:3b:
                    15:bd:b4:3a:1c:c6:43:83:4d:15:6d:ae:03:72:25:
                    25:59:4b:fe:8f:fa:c8:82:86:08:a1:80:24:48:f7:
                    44:9d:db:38:fb:2d:cb:43:9e:ba:08:91:f2:1b:35:
                    36:0a:7e:3b:07:d6:e7:81:5c:58:d8:9f:dc:1d:6c:
                    c9:6d:66:ed:b6:4a:24:9e:9f:b5:b6:93:af:fb:fb:
                    32:9c:f9:0c:40:0d:f4:de:ae:ee:28:04:be:39:2b:
                    5e:44:1c:c2:84:bd:49:7f:ee:ec:6a:f3:c0:7a:39:
                    bf:1c:ca:61:49:22:21:89:ba:6f:f3:17:bf:04:d8:
                    84:dc:b5:4d:9d:cd:b2:7b:40:c8:44:88:1d:96:6a:
                    d1:33:d1:d3:a0:c2:1a:f5:e3:5f:f3:16:50:ab:ab:
                    2f:92:f1:43:16:3f:52:24:49:f7:3a:2c:6e:da:36:
                    20:eb:c1:de:ff:d7:f6:b9:d1:cb:47:27:51:cc:da:
                    e7:90:9b:ff:66:b3:a4:62:b8:19:ff:24:22:12:ba:
                    95:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E7:F1:BD:F9:C2:E2:49:0A:AE:92:A7:10:41:BC:FF:92:63:CF:01
            X509v3 Authority Key Identifier:
                keyid:32:BC:A3:29:CD:4E:25:65:FF:0D:13:E8:35:5A:6E:C4:CC:17:94:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MryjKc1OJWX_DRPoNVpuxMwXlOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:78:62:6c:af:ce:fe:af:2d:67:dc:9b:b0:14:84:15:38:10:
         2b:5f:2f:43:d0:cd:0a:ea:92:f3:47:d1:63:7a:39:8e:a0:4c:
         f6:23:d1:43:eb:36:df:7a:cd:0d:3e:72:0d:ed:c1:7f:a9:b9:
         1e:df:41:2c:32:35:f1:79:a2:db:88:ad:9b:5e:b7:10:b6:a5:
         eb:80:60:44:93:9b:d2:2c:48:82:45:70:18:34:32:08:4c:a5:
         34:e6:68:63:2c:0d:51:9c:2e:89:ee:8a:fa:b0:e5:50:f5:20:
         e2:99:69:0c:26:51:60:0a:9b:83:8e:26:d4:ce:43:82:5b:b5:
         d5:88:56:26:aa:50:83:ce:8c:81:1f:21:31:f4:3c:7c:91:50:
         3b:42:85:ed:98:df:2f:ce:9f:86:85:ba:76:be:e5:87:1d:79:
         41:f1:27:d2:c0:4f:e4:6b:79:b0:a0:f8:2f:f8:4d:bc:1a:91:
         aa:a1:8b:ce:ec:01:53:86:80:65:de:76:d4:12:19:0e:52:c2:
         09:ef:51:35:bf:27:d1:51:69:c8:dd:16:f8:87:4f:27:41:e1:
         13:27:5b:e1:43:1d:0e:8a:d6:19:c3:88:c1:b4:5d:51:e5:82:
         5e:9a:54:b3:18:6e:ad:97:a2:d5:ff:94:de:b1:90:8f:0b:56:
         ab:34:05:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd25oaPYpWZloaDYmyglrmFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyYmNhMzI5Y2Q0ZTI1NjVmZjBkMTNlODM1NWE2ZWM0Y2Mx
Nzk0ZTEwHhcNMjUwNjE2MDQwMTQ4WhcNMjUwNjE3MDQwMTQ4WjAzMTEwLwYDVQQD
Eyg4M2U3ZjFiZGY5YzJlMjQ5MGFhZTkyYTcxMDQxYmNmZjkyNjNjZjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujF1e7Rp/4ZgsSSbhQT0GPrV43nu
5b8k9WT5gJMBUikwul0uSanmQBG+IgoH20mUIu0zZDek+0ix4TsVvbQ6HMZDg00V
ba4DciUlWUv+j/rIgoYIoYAkSPdEnds4+y3LQ566CJHyGzU2Cn47B9bngVxY2J/c
HWzJbWbttkoknp+1tpOv+/synPkMQA303q7uKAS+OSteRBzChL1Jf+7savPAejm/
HMphSSIhibpv8xe/BNiE3LVNnc2ye0DIRIgdlmrRM9HToMIa9eNf8xZQq6svkvFD
Fj9SJEn3Oixu2jYg68He/9f2udHLRydRzNrnkJv/ZrOkYrgZ/yQiErqVHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPn8b35wuJJCq6SpxBBvP+SY88BMB8GA1UdIwQY
MBaAFDK8oynNTiVl/w0T6DVabsTMF5ThMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXJ5aktjMU9KV1hfRFJQb05WcHV4TXdYbE9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9iZDhjZjYtMWRiOC00YWMwLThkZDYt
MTdiZTQxN2U5NGRjLzEvTXJ5aktjMU9KV1hfRFJQb05WcHV4TXdYbE9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9iZDhjZjYtMWRiOC00YWMwLThkZDYtMTdiZTQxN2U5NGRj
LzEvTXJ5aktjMU9KV1hfRFJQb05WcHV4TXdYbE9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY3hibK/O
/q8tZ9ybsBSEFTgQK18vQ9DNCuqS80fRY3o5jqBM9iPRQ+s233rNDT5yDe3Bf6m5
Ht9BLDI18Xmi24itm163ELal64BgRJOb0ixIgkVwGDQyCEylNOZoYywNUZwuie6K
+rDlUPUg4plpDCZRYAqbg44m1M5Dglu11YhWJqpQg86MgR8hMfQ8fJFQO0KF7Zjf
L86fhoW6dr7lhx15QfEn0sBP5Gt5sKD4L/hNvBqRqqGLzuwBU4aAZd521BIZDlLC
Ce9RNb8n0VFpyN0W+IdPJ0HhEydb4UMdDorWGcOIwbRdUeWCXppUsxhurZei1f+U
3rGQjwtWqzQFiQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 07:53:23 2025 by rpki-client