Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
File:                     lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft (raw, json)
Hash identifier:          P+atfyLE9fZYwxGnp6xSxx2ioxpznGnrk+/KkFR33PM=
Subject key identifier:   61:44:7F:8A:48:EC:2F:F3:19:1E:D9:02:D4:EA:26:C9:33:63:1D:0A
Authority key identifier: 95:52:46:B1:B6:5C:95:04:62:59:C2:24:8C:1D:30:6F:F1:35:B9:84
Certificate issuer:       /CN=955246b1b65c95046259c2248c1d306ff135b984
Certificate serial:       019769CECF15A83403BD269CD089A368B891
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
Manifest number:          10D1
Signing time:             Fri 13 Jun 2025 15:00:50 +0000
Manifest this update:     Fri 13 Jun 2025 15:00:50 +0000
Manifest next update:     Sat 14 Jun 2025 15:00:50 +0000
Files and hashes:         1: d62eL6CZy4sqfG2HJBBtw2_a_Xo.roa (hash: VQJVLEqVpBvW0EhwHp75V7iW+dHN3GO38t078QYSo/g=)
                          2: lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl (hash: TMpc4P81+kTVQ8WdVyjCE5BUdQPPgOm25D/e4jjMgjI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:ce:cf:15:a8:34:03:bd:26:9c:d0:89:a3:68:b8:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=955246b1b65c95046259c2248c1d306ff135b984
        Validity
            Not Before: Jun 13 15:00:50 2025 GMT
            Not After : Jun 14 15:00:50 2025 GMT
        Subject: CN=61447f8a48ec2ff3191ed902d4ea26c933631d0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c4:b5:2d:6c:3e:a3:a6:aa:5d:54:fb:c5:33:
                    f9:1b:f0:5a:53:78:66:ca:82:91:e7:ed:c5:c5:19:
                    0f:66:71:9a:0b:cb:94:6f:a2:c2:3e:f0:19:ce:dd:
                    ee:e1:dc:9f:7b:5c:22:c1:f4:be:a0:13:c0:8a:ba:
                    6b:86:42:e0:d2:36:fe:d8:ca:03:f0:6b:58:6f:cf:
                    ac:a3:6d:de:32:ce:8a:54:43:d0:eb:96:51:df:1f:
                    a0:97:9e:db:54:01:00:8b:40:42:01:d4:a1:aa:cc:
                    db:41:02:3d:06:af:c2:8e:28:a2:2b:4e:e4:1d:98:
                    6d:74:d0:b7:1d:fa:1e:a1:0c:a7:1b:55:82:61:63:
                    d0:ea:69:e8:10:cd:91:bb:8a:d9:77:a6:37:53:5e:
                    64:77:93:ae:0b:35:81:3e:79:93:b1:b9:26:cc:6b:
                    e6:7e:6c:f0:4b:21:31:60:45:25:15:1e:2f:7c:f8:
                    77:6f:fd:3d:65:c2:d4:06:1e:eb:52:e2:e8:2a:d7:
                    83:00:2e:0f:be:ff:56:79:ba:31:6d:90:56:f8:a9:
                    9f:be:bd:0c:f4:bb:29:50:92:73:bd:e5:c9:3e:44:
                    51:53:73:e7:53:ac:21:f3:4b:c7:d0:cd:05:e1:d8:
                    27:9a:13:ea:ad:ce:3d:50:43:3b:94:dd:29:de:4b:
                    50:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:44:7F:8A:48:EC:2F:F3:19:1E:D9:02:D4:EA:26:C9:33:63:1D:0A
            X509v3 Authority Key Identifier:
                keyid:95:52:46:B1:B6:5C:95:04:62:59:C2:24:8C:1D:30:6F:F1:35:B9:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:7a:3b:99:e9:f9:73:b6:d6:8e:f2:5a:ce:42:b6:95:18:09:
         d7:c1:ed:5f:06:b0:49:8b:f2:c9:e0:0d:de:3d:fc:82:7c:4e:
         d5:b6:f8:1b:4f:a1:54:91:f3:02:b2:fd:9b:6f:52:4a:55:80:
         71:43:29:91:42:18:2f:a5:02:85:8f:ce:29:50:c3:89:fd:8d:
         72:b8:80:95:14:06:7d:e2:38:00:8d:03:95:e7:4e:d3:c3:d8:
         4f:e6:57:b2:18:56:02:81:3c:43:55:6a:a4:ad:39:73:44:34:
         23:e4:0a:ec:a8:f0:7e:9f:4d:3d:54:90:ae:fb:c8:8d:1f:1f:
         93:c0:d5:01:d9:db:50:83:88:39:78:d8:72:06:d3:7f:d8:8e:
         75:d6:1c:16:de:6d:af:9a:4b:d6:5e:6b:70:a8:f0:2f:b5:20:
         80:40:33:ce:d0:82:45:ec:e6:73:4e:ac:90:4d:9d:18:a6:e2:
         8a:de:18:75:18:5c:44:70:c5:a3:20:6a:bc:b5:73:8d:b1:e6:
         69:65:80:b3:29:68:ed:ee:2f:44:36:9d:97:9a:1e:61:20:d7:
         d0:e0:c3:6b:c5:12:f8:e2:d8:cb:a7:75:ac:91:68:24:d5:79:
         3c:33:96:69:5f:19:26:2f:e9:73:d1:bc:9b:f5:6e:91:bd:a7:
         b6:00:66:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpzs8VqDQDvSac0ImjaLiRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NTI0NmIxYjY1Yzk1MDQ2MjU5YzIyNDhjMWQzMDZmZjEz
NWI5ODQwHhcNMjUwNjEzMTUwMDUwWhcNMjUwNjE0MTUwMDUwWjAzMTEwLwYDVQQD
Eyg2MTQ0N2Y4YTQ4ZWMyZmYzMTkxZWQ5MDJkNGVhMjZjOTMzNjMxZDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8S1LWw+o6aqXVT7xTP5G/BaU3hm
yoKR5+3FxRkPZnGaC8uUb6LCPvAZzt3u4dyfe1wiwfS+oBPAirprhkLg0jb+2MoD
8GtYb8+so23eMs6KVEPQ65ZR3x+gl57bVAEAi0BCAdShqszbQQI9Bq/CjiiiK07k
HZhtdNC3HfoeoQynG1WCYWPQ6mnoEM2Ru4rZd6Y3U15kd5OuCzWBPnmTsbkmzGvm
fmzwSyExYEUlFR4vfPh3b/09ZcLUBh7rUuLoKteDAC4Pvv9WeboxbZBW+Kmfvr0M
9LspUJJzveXJPkRRU3PnU6wh80vH0M0F4dgnmhPqrc49UEM7lN0p3ktQUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFEf4pI7C/zGR7ZAtTqJskzYx0KMB8GA1UdIwQY
MBaAFJVSRrG2XJUEYlnCJIwdMG/xNbmEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFZKR3NiWmNsUVJpV2NJa2pCMHdiX0UxdVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9hN2M4ZDAtYzkyZC00NWQwLTkxYTMt
MjhjMjJhYmYwOGQwLzEvbFZKR3NiWmNsUVJpV2NJa2pCMHdiX0UxdVlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9hN2M4ZDAtYzkyZC00NWQwLTkxYTMtMjhjMjJhYmYwOGQw
LzEvbFZKR3NiWmNsUVJpV2NJa2pCMHdiX0UxdVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY3o7men5
c7bWjvJazkK2lRgJ18HtXwawSYvyyeAN3j38gnxO1bb4G0+hVJHzArL9m29SSlWA
cUMpkUIYL6UChY/OKVDDif2NcriAlRQGfeI4AI0DledO08PYT+ZXshhWAoE8Q1Vq
pK05c0Q0I+QK7Kjwfp9NPVSQrvvIjR8fk8DVAdnbUIOIOXjYcgbTf9iOddYcFt5t
r5pL1l5rcKjwL7UggEAzztCCRezmc06skE2dGKbiit4YdRhcRHDFoyBqvLVzjbHm
aWWAsylo7e4vRDadl5oeYSDX0ODDa8US+OLYy6d1rJFoJNV5PDOWaV8ZJi/pc9G8
m/Vukb2ntgBmJw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:17:25 2025 by rpki-client