Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
File:                     _cv3oqQ7GA1yKzdjHoea-huaXts.mft (raw, json)
Hash identifier:          DCqmpqGK7HpsMefeCeKLYDM4+vCClFoWvWaoJcs8scg=
Subject key identifier:   62:64:72:DF:F5:75:36:68:14:12:38:3B:E6:1C:C9:0C:AD:37:53:F5
Authority key identifier: FD:CB:F7:A2:A4:3B:18:0D:72:2B:37:63:1E:87:9A:FA:1B:9A:5E:DB
Certificate issuer:       /CN=fdcbf7a2a43b180d722b37631e879afa1b9a5edb
Certificate serial:       019770079A3022CF3F19E83226207C58F92E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
Manifest number:          1591
Signing time:             Sat 14 Jun 2025 20:00:35 +0000
Manifest this update:     Sat 14 Jun 2025 20:00:35 +0000
Manifest next update:     Sun 15 Jun 2025 20:00:35 +0000
Files and hashes:         1: _cv3oqQ7GA1yKzdjHoea-huaXts.crl (hash: jcc7hPbuQRfEPw9dOBrajvD9QQ1r8SdAxZYUYDZEEbE=)
                          2: t-4cbJi-Ew3u3ipzgXiueic4IR4.roa (hash: bVpOfO45u9FlgP+T8GAth2ynXzQ4yeosDEHag/U9nSY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:07:9a:30:22:cf:3f:19:e8:32:26:20:7c:58:f9:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdcbf7a2a43b180d722b37631e879afa1b9a5edb
        Validity
            Not Before: Jun 14 20:00:35 2025 GMT
            Not After : Jun 15 20:00:35 2025 GMT
        Subject: CN=626472dff57536681412383be61cc90cad3753f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:58:26:ea:f5:bb:af:fd:ac:84:97:4c:14:f7:
                    78:8f:f0:0b:e5:03:57:f0:ac:bc:50:12:8e:f9:dc:
                    74:73:bb:71:ed:bd:21:36:f0:50:37:30:94:64:80:
                    46:b6:54:83:e0:82:62:24:03:9a:71:dc:32:c8:6d:
                    12:92:f3:f1:83:c7:a3:79:85:ae:45:df:a1:ed:09:
                    87:38:8b:03:14:67:b6:c7:4a:f5:71:d6:9e:ae:a5:
                    80:d6:ab:d1:47:99:9e:a1:51:47:ac:bd:05:37:69:
                    22:55:cc:22:72:ba:f6:a4:f5:9a:fb:70:71:9e:a7:
                    0d:d6:f0:28:63:2f:08:eb:9a:3b:a0:41:5c:a1:e3:
                    89:dd:df:e9:46:54:a1:17:6e:c3:04:f0:1c:00:57:
                    de:51:d6:00:f9:6c:11:fe:97:b5:7d:2a:46:96:1e:
                    33:95:1a:a7:4e:a6:56:cd:12:c4:9d:2c:d1:24:ed:
                    e2:cb:82:b8:70:c2:c8:a6:19:c6:72:f4:43:1e:85:
                    7b:07:57:a2:b6:d6:f9:d3:0c:05:f8:27:f0:25:2f:
                    d1:72:1a:50:0f:58:f1:4c:25:f0:54:13:ca:43:a1:
                    86:80:c4:ab:9b:c3:11:5e:8b:7c:be:45:e7:44:76:
                    af:b6:c2:b7:e3:74:d4:6f:11:85:09:52:4b:2b:04:
                    72:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:64:72:DF:F5:75:36:68:14:12:38:3B:E6:1C:C9:0C:AD:37:53:F5
            X509v3 Authority Key Identifier:
                keyid:FD:CB:F7:A2:A4:3B:18:0D:72:2B:37:63:1E:87:9A:FA:1B:9A:5E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:b8:7f:a3:3c:5b:77:6e:eb:88:51:3a:5b:1a:c9:6d:a2:bb:
         23:af:10:8b:b5:28:dc:c5:bd:05:e7:c3:a9:65:a3:5c:b2:20:
         bf:28:73:54:45:6a:fd:be:49:ea:b6:10:9a:88:7d:6b:8f:67:
         66:d2:8e:fc:1d:03:b3:27:9b:12:d9:72:14:c7:e5:35:71:27:
         78:ca:7e:12:2b:b3:28:b9:0c:c3:db:7b:93:c7:51:5e:f8:ad:
         00:fd:83:3a:cf:92:4e:39:64:d8:06:77:69:4b:88:a3:fc:16:
         1c:db:a7:41:b4:ff:a1:1e:de:dd:87:30:e8:63:55:f6:40:3e:
         be:0d:f4:8c:51:f4:a3:91:c4:b5:7c:49:b6:5a:92:5e:bd:3d:
         ee:bc:b6:19:45:1a:15:7d:42:d1:38:db:f5:00:c4:f4:a6:3e:
         3f:0f:ff:65:09:44:01:b2:35:df:8d:90:fe:a5:55:ab:65:7e:
         10:4e:4a:48:83:1a:54:30:bc:c4:6a:66:9a:c8:f3:4b:d6:e9:
         01:52:58:6c:0b:b0:8c:13:2d:d0:28:18:db:53:63:a2:89:71:
         36:8f:b2:52:9a:2f:00:0e:b9:e0:b6:77:60:19:a8:2b:72:fb:
         7f:7a:e6:80:29:7e:5b:94:40:79:27:f5:a7:56:42:8b:b9:c6:
         01:b7:74:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwB5owIs8/GegyJiB8WPkuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkY2JmN2EyYTQzYjE4MGQ3MjJiMzc2MzFlODc5YWZhMWI5
YTVlZGIwHhcNMjUwNjE0MjAwMDM1WhcNMjUwNjE1MjAwMDM1WjAzMTEwLwYDVQQD
Eyg2MjY0NzJkZmY1NzUzNjY4MTQxMjM4M2JlNjFjYzkwY2FkMzc1M2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFgm6vW7r/2shJdMFPd4j/AL5QNX
8Ky8UBKO+dx0c7tx7b0hNvBQNzCUZIBGtlSD4IJiJAOacdwyyG0SkvPxg8ejeYWu
Rd+h7QmHOIsDFGe2x0r1cdaerqWA1qvRR5meoVFHrL0FN2kiVcwicrr2pPWa+3Bx
nqcN1vAoYy8I65o7oEFcoeOJ3d/pRlShF27DBPAcAFfeUdYA+WwR/pe1fSpGlh4z
lRqnTqZWzRLEnSzRJO3iy4K4cMLIphnGcvRDHoV7B1eittb50wwF+CfwJS/RchpQ
D1jxTCXwVBPKQ6GGgMSrm8MRXot8vkXnRHavtsK343TUbxGFCVJLKwRytwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJkct/1dTZoFBI4O+YcyQytN1P1MB8GA1UdIwQY
MBaAFP3L96KkOxgNcis3Yx6Hmvobml7bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2N2M29xUTdHQTF5S3pkakhvZWEtaHVhWHRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9mOWE5M2MtMGQ2OS00NGVjLTg0NDUt
ZjU4YTViODhjNzNlLzEvX2N2M29xUTdHQTF5S3pkakhvZWEtaHVhWHRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9mOWE5M2MtMGQ2OS00NGVjLTg0NDUtZjU4YTViODhjNzNl
LzEvX2N2M29xUTdHQTF5S3pkakhvZWEtaHVhWHRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMrh/ozxb
d27riFE6WxrJbaK7I68Qi7Uo3MW9BefDqWWjXLIgvyhzVEVq/b5J6rYQmoh9a49n
ZtKO/B0DsyebEtlyFMflNXEneMp+EiuzKLkMw9t7k8dRXvitAP2DOs+STjlk2AZ3
aUuIo/wWHNunQbT/oR7e3Ycw6GNV9kA+vg30jFH0o5HEtXxJtlqSXr097ry2GUUa
FX1C0Tjb9QDE9KY+Pw//ZQlEAbI1342Q/qVVq2V+EE5KSIMaVDC8xGpmmsjzS9bp
AVJYbAuwjBMt0CgY21NjoolxNo+yUpovAA654LZ3YBmoK3L7f3rmgCl+W5RAeSf1
p1ZCi7nGAbd01A==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:46:57 2025 by rpki-client