Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft
File:                     1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft (raw, json)
Hash identifier:          +hLSGvHRRZfAOQuwumfUNosbicUJtVWmC/CaOoMZ08k=
Subject key identifier:   02:62:9F:10:84:44:78:61:2A:38:21:F7:14:B5:1A:D7:53:7D:B0:AD
Authority key identifier: D4:07:47:14:14:2F:83:97:01:48:FA:B0:EC:3E:21:17:C3:93:C4:91
Certificate issuer:       /CN=d4074714142f83970148fab0ec3e2117c393c491
Certificate serial:       0197696184BA16A5D424BAFDB63DC91E678D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft
Manifest number:          018D
Signing time:             Fri 13 Jun 2025 13:01:27 +0000
Manifest this update:     Fri 13 Jun 2025 13:01:27 +0000
Manifest next update:     Sat 14 Jun 2025 13:01:27 +0000
Files and hashes:         1: 1AdHFBQvg5cBSPqw7D4hF8OTxJE.crl (hash: eUWCfbyFOJD0sbvz6M5wCKVKrTMHQajysRVDgM3LY+8=)
                          2: 1HxfapABCT9f2Gi5FEEd5TTonAI.roa (hash: r74LeOGcVT48Sbc9JuiH8jNwqtPW9xH2+O8jIbbYSCU=)
                          3: T2c08RYIJ-aF9KcWXtGkde8-Pdk.roa (hash: ugT57+pZzDU4gTFn9+sLNI0YDzkT+2i3eEwIihTAs/U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:61:84:ba:16:a5:d4:24:ba:fd:b6:3d:c9:1e:67:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4074714142f83970148fab0ec3e2117c393c491
        Validity
            Not Before: Jun 13 13:01:27 2025 GMT
            Not After : Jun 14 13:01:27 2025 GMT
        Subject: CN=02629f10844478612a3821f714b51ad7537db0ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c0:17:96:d1:7c:4b:15:ac:e5:fe:5a:de:9c:
                    2c:87:2f:34:be:b9:af:ff:cf:b2:15:21:a3:2b:54:
                    95:14:cc:e1:22:63:1e:7f:79:7c:ff:48:3e:a5:36:
                    4d:fb:e4:f8:e8:c1:ac:09:f8:5c:12:3b:5e:55:e8:
                    e5:85:6a:e9:47:bf:bd:5d:31:41:04:a9:37:35:77:
                    eb:eb:e0:80:0e:0b:dc:32:3a:00:9a:96:37:aa:5f:
                    90:4b:ea:41:0b:ea:ee:22:60:5c:c8:53:63:05:e9:
                    84:36:2e:4f:a9:40:2e:f4:b4:61:c2:1a:fc:c8:48:
                    6d:4f:d3:2d:15:8c:6f:16:d3:6e:a4:d2:1d:df:80:
                    c9:0c:2b:ef:91:a9:f8:e0:af:db:6b:4a:3c:be:4b:
                    fc:f6:af:6b:a7:bb:34:d3:fc:1a:3c:35:1c:88:21:
                    81:e7:5d:a9:fa:af:a2:2d:3d:0c:68:fd:3b:5b:5f:
                    09:07:91:25:0a:d1:ce:fd:97:ee:43:94:21:c9:6b:
                    31:53:bf:03:27:ee:db:41:ff:05:f0:72:05:60:cc:
                    6a:01:cd:8e:6f:86:a2:5d:53:47:54:49:92:d2:e4:
                    e6:e7:8f:3e:d0:5f:6a:10:eb:78:17:5e:fb:73:96:
                    1c:1d:2c:65:e6:16:dc:89:f2:7b:63:df:42:56:7c:
                    21:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:62:9F:10:84:44:78:61:2A:38:21:F7:14:B5:1A:D7:53:7D:B0:AD
            X509v3 Authority Key Identifier:
                keyid:D4:07:47:14:14:2F:83:97:01:48:FA:B0:EC:3E:21:17:C3:93:C4:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:da:68:5d:b3:2a:09:21:a8:59:64:9e:2c:43:5f:ab:4d:93:
         fb:6a:30:fd:df:22:3a:f8:23:da:56:e2:dd:df:ea:26:10:b1:
         05:8d:f2:86:11:17:0e:b9:fe:d7:ff:98:05:bb:2e:48:3e:0b:
         02:b8:9d:72:a6:7b:a1:bf:ae:c9:d4:4c:18:9e:d6:6a:65:af:
         33:44:2f:a4:ae:86:cb:70:bd:3e:c8:45:77:dd:f6:51:49:05:
         a5:67:e1:6d:b8:48:57:a5:40:6b:b1:75:bb:df:19:73:cf:52:
         fd:51:39:fd:57:45:54:8a:fa:9e:0e:0e:62:7e:25:d9:d3:d4:
         6e:5b:4d:7f:b4:4e:6a:c7:be:6a:e1:a4:80:d7:6a:24:fa:78:
         ff:10:fa:77:ab:aa:c7:3c:67:7e:40:a5:68:f0:42:5f:3a:6a:
         27:31:46:01:8c:c4:c2:33:33:fc:0d:6f:69:20:cd:c3:6e:1f:
         09:bb:b1:5c:c4:d2:2a:76:40:0d:3e:d1:b8:70:44:92:73:6a:
         eb:7a:e6:23:3b:d2:99:d3:36:87:c3:80:4a:c7:c7:7c:e1:35:
         a0:94:3a:24:e7:a7:db:b6:7b:1d:af:0e:3f:b3:5f:bf:56:e5:
         b9:3a:93:c3:00:20:ae:44:9c:a3:fc:53:f2:b3:40:02:21:1d:
         8f:fc:b3:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpYYS6FqXUJLr9tj3JHmeNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MDc0NzE0MTQyZjgzOTcwMTQ4ZmFiMGVjM2UyMTE3YzM5
M2M0OTEwHhcNMjUwNjEzMTMwMTI3WhcNMjUwNjE0MTMwMTI3WjAzMTEwLwYDVQQD
EygwMjYyOWYxMDg0NDQ3ODYxMmEzODIxZjcxNGI1MWFkNzUzN2RiMGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMAXltF8SxWs5f5a3pwshy80vrmv
/8+yFSGjK1SVFMzhImMef3l8/0g+pTZN++T46MGsCfhcEjteVejlhWrpR7+9XTFB
BKk3NXfr6+CADgvcMjoAmpY3ql+QS+pBC+ruImBcyFNjBemENi5PqUAu9LRhwhr8
yEhtT9MtFYxvFtNupNId34DJDCvvkan44K/ba0o8vkv89q9rp7s00/waPDUciCGB
512p+q+iLT0MaP07W18JB5ElCtHO/ZfuQ5QhyWsxU78DJ+7bQf8F8HIFYMxqAc2O
b4aiXVNHVEmS0uTm548+0F9qEOt4F177c5YcHSxl5hbcifJ7Y99CVnwhNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJinxCERHhhKjgh9xS1GtdTfbCtMB8GA1UdIwQY
MBaAFNQHRxQUL4OXAUj6sOw+IRfDk8SRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUFkSEZCUXZnNWNCU1BxdzdENGhGOE9UeEpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9hMWZmNGMtYTU4Zi00ZWUzLTk4ZTkt
ZDc5Y2UyZGVlYTcwLzEvMUFkSEZCUXZnNWNCU1BxdzdENGhGOE9UeEpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9hMWZmNGMtYTU4Zi00ZWUzLTk4ZTktZDc5Y2UyZGVlYTcw
LzEvMUFkSEZCUXZnNWNCU1BxdzdENGhGOE9UeEpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArdpoXbMq
CSGoWWSeLENfq02T+2ow/d8iOvgj2lbi3d/qJhCxBY3yhhEXDrn+1/+YBbsuSD4L
AridcqZ7ob+uydRMGJ7WamWvM0QvpK6Gy3C9PshFd932UUkFpWfhbbhIV6VAa7F1
u98Zc89S/VE5/VdFVIr6ng4OYn4l2dPUbltNf7ROase+auGkgNdqJPp4/xD6d6uq
xzxnfkClaPBCXzpqJzFGAYzEwjMz/A1vaSDNw24fCbuxXMTSKnZADT7RuHBEknNq
63rmIzvSmdM2h8OASsfHfOE1oJQ6JOen27Z7Ha8OP7Nfv1bluTqTwwAgrkSco/xT
8rNAAiEdj/yzcw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 18:58:59 2025 by rpki-client