Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft
File:                     6yOl9H7GfpJakkkauZskujcRg_E.mft (raw, json)
Hash identifier:          8R8of/Ra0Soj1QIu9+h/sjDJhz1y4uCaLZvg7rIgd1E=
Subject key identifier:   40:84:B5:B0:19:67:53:3D:90:DD:17:02:38:55:A0:2B:BA:02:CF:AA
Authority key identifier: EB:23:A5:F4:7E:C6:7E:92:5A:92:49:1A:B9:9B:24:BA:37:11:83:F1
Certificate issuer:       /CN=eb23a5f47ec67e925a92491ab99b24ba371183f1
Certificate serial:       0197838E1F1669AB51B98642DCD12E4808B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft
Manifest number:          0864
Signing time:             Wed 18 Jun 2025 15:00:18 +0000
Manifest this update:     Wed 18 Jun 2025 15:00:18 +0000
Manifest next update:     Thu 19 Jun 2025 15:00:18 +0000
Files and hashes:         1: 0_VEKJrftYI-EHvTCLarg2lwsBA.roa (hash: kfpPpXA7rFVv7oH2r9JbqI4VMxVD5WROc79GogJD5qg=)
                          2: 6yOl9H7GfpJakkkauZskujcRg_E.crl (hash: qjzuB1D3IrRZihJkW0T408SB0uTUB44RxEo8rTxhQa4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 15:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:83:8e:1f:16:69:ab:51:b9:86:42:dc:d1:2e:48:08:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb23a5f47ec67e925a92491ab99b24ba371183f1
        Validity
            Not Before: Jun 18 15:00:18 2025 GMT
            Not After : Jun 19 15:00:18 2025 GMT
        Subject: CN=4084b5b01967533d90dd17023855a02bba02cfaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bd:79:02:3d:54:90:3f:f6:4c:1d:37:30:fb:
                    fc:75:90:d1:43:a2:a9:5f:2c:b1:7d:a0:41:60:d1:
                    6c:d4:59:0f:07:6a:66:a7:2e:59:f6:17:c5:de:94:
                    39:23:d0:4b:b4:35:94:66:cf:72:e0:7b:9f:40:d7:
                    e0:08:97:6c:51:a1:16:33:04:f5:18:47:4b:03:55:
                    73:84:b2:56:5b:f1:7f:e0:1e:48:81:61:f2:f8:bd:
                    d2:9c:e9:54:0f:95:24:87:d6:49:7f:36:23:a2:f9:
                    df:10:58:cf:d4:e3:c8:ef:93:cf:36:96:28:b6:98:
                    d1:be:9a:e5:f3:80:14:cc:94:55:c2:fb:4a:06:e1:
                    fa:5e:88:36:84:aa:ec:d7:cd:d4:9c:08:ad:41:d4:
                    c4:a0:91:65:72:79:a5:be:ab:8d:94:5b:92:52:a8:
                    c3:3a:75:76:d1:50:04:25:dc:66:aa:dd:a8:8c:b9:
                    72:6a:3f:ea:a8:fb:2c:b5:0b:b3:b0:89:c6:c1:57:
                    99:82:dc:db:26:70:b7:5a:a3:1f:6b:71:20:d2:97:
                    62:d4:ec:6c:3f:ff:cc:34:11:bf:18:19:15:0b:ce:
                    05:7e:a4:df:8f:0c:92:4b:0c:b8:79:2d:de:09:a6:
                    60:f5:a9:66:07:41:1b:d0:75:34:cc:ab:cf:3c:d1:
                    58:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:84:B5:B0:19:67:53:3D:90:DD:17:02:38:55:A0:2B:BA:02:CF:AA
            X509v3 Authority Key Identifier:
                keyid:EB:23:A5:F4:7E:C6:7E:92:5A:92:49:1A:B9:9B:24:BA:37:11:83:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:c2:3e:f6:43:e5:3b:48:c7:e9:b5:a4:b7:71:5c:09:b0:33:
         1e:25:b2:85:a7:f9:68:99:41:1f:8d:f5:b6:0e:d5:5c:04:6f:
         e1:6b:15:4c:b9:bd:ae:6a:5c:52:2a:e4:6d:4d:db:8e:6a:ec:
         99:92:6d:61:3d:a4:f7:9d:7a:98:b1:01:f5:8b:c2:91:fd:f0:
         1b:84:0a:19:4e:9b:b9:3c:50:46:54:6e:19:f7:d2:76:7d:da:
         de:55:84:61:48:5e:cd:cb:8a:41:4b:0c:03:b4:9d:6f:6a:36:
         4a:18:4a:a2:ab:8f:c4:46:0d:7a:f4:f8:8f:95:99:f1:b6:c3:
         73:09:30:6c:2f:df:33:80:ea:61:46:66:70:e4:a6:78:63:3e:
         cf:51:fd:66:60:23:45:f0:3d:8d:b0:29:da:0a:89:55:c8:f4:
         8c:34:f1:d1:d6:1d:aa:c3:9a:2d:f1:60:c6:f1:10:2e:ce:47:
         e6:96:54:1f:94:af:54:c4:f3:87:f4:80:e7:fa:23:ff:f6:15:
         90:d1:42:92:d0:ac:74:2e:18:cb:19:b5:9a:2a:8f:97:e5:15:
         4c:d2:68:c9:76:cd:e6:01:50:6d:05:c3:7e:5e:0e:60:b8:3b:
         13:cb:eb:d7:cf:07:d8:2e:68:dc:8c:98:5d:28:8d:40:fc:4e:
         03:41:c1:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeDjh8WaatRuYZC3NEuSAi3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMjNhNWY0N2VjNjdlOTI1YTkyNDkxYWI5OWIyNGJhMzcx
MTgzZjEwHhcNMjUwNjE4MTUwMDE4WhcNMjUwNjE5MTUwMDE4WjAzMTEwLwYDVQQD
Eyg0MDg0YjViMDE5Njc1MzNkOTBkZDE3MDIzODU1YTAyYmJhMDJjZmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzL15Aj1UkD/2TB03MPv8dZDRQ6Kp
XyyxfaBBYNFs1FkPB2pmpy5Z9hfF3pQ5I9BLtDWUZs9y4HufQNfgCJdsUaEWMwT1
GEdLA1VzhLJWW/F/4B5IgWHy+L3SnOlUD5Ukh9ZJfzYjovnfEFjP1OPI75PPNpYo
tpjRvprl84AUzJRVwvtKBuH6Xog2hKrs183UnAitQdTEoJFlcnmlvquNlFuSUqjD
OnV20VAEJdxmqt2ojLlyaj/qqPsstQuzsInGwVeZgtzbJnC3WqMfa3Eg0pdi1Oxs
P//MNBG/GBkVC84FfqTfjwySSwy4eS3eCaZg9almB0Eb0HU0zKvPPNFY1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFECEtbAZZ1M9kN0XAjhVoCu6As+qMB8GA1UdIwQY
MBaAFOsjpfR+xn6SWpJJGrmbJLo3EYPxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnlPbDlIN0dmcEpha2trYXVac2t1amNSZ19FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9hYjU1MDAtZjYyMy00YTU0LTlhZTIt
ZmZlMjFlZjk4Njc0LzEvNnlPbDlIN0dmcEpha2trYXVac2t1amNSZ19FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9hYjU1MDAtZjYyMy00YTU0LTlhZTItZmZlMjFlZjk4Njc0
LzEvNnlPbDlIN0dmcEpha2trYXVac2t1amNSZ19FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO8I+9kPl
O0jH6bWkt3FcCbAzHiWyhaf5aJlBH431tg7VXARv4WsVTLm9rmpcUirkbU3bjmrs
mZJtYT2k9516mLEB9YvCkf3wG4QKGU6buTxQRlRuGffSdn3a3lWEYUhezcuKQUsM
A7Sdb2o2ShhKoquPxEYNevT4j5WZ8bbDcwkwbC/fM4DqYUZmcOSmeGM+z1H9ZmAj
RfA9jbAp2gqJVcj0jDTx0dYdqsOaLfFgxvEQLs5H5pZUH5SvVMTzh/SA5/oj//YV
kNFCktCsdC4Yyxm1miqPl+UVTNJoyXbN5gFQbQXDfl4OYLg7E8vr188H2C5o3IyY
XSiNQPxOA0HB0w==
-----END CERTIFICATE-----
Generated at Wed Jun 18 21:50:17 2025 by rpki-client