Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
File:                     c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft (raw, json)
Hash identifier:          yu4Il4XogHhN/vu79ASsvfBWDOkCIzJ2Z0+G5mw9rhU=
Subject key identifier:   86:D8:F7:4A:D3:52:BD:3C:39:07:BB:86:6A:F4:3A:B8:78:53:46:FD
Authority key identifier: 73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94
Certificate issuer:       /CN=73c90ad151d4326a6d62e13046d788f85bf82e94
Certificate serial:       01976D748D413366DA1983AC88E5F960AB4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
Manifest number:          0EF5
Signing time:             Sat 14 Jun 2025 08:00:44 +0000
Manifest this update:     Sat 14 Jun 2025 08:00:44 +0000
Manifest next update:     Sun 15 Jun 2025 08:00:44 +0000
Files and hashes:         1: 6KWsm-ISjjNa3GCb69ojlbhUSE4.roa (hash: P1LdbF9uJ10tW+331stp5KKcZciYQiQ/KQwCd/ZEwrg=)
                          2: c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl (hash: 9It0uZncffVfIwHMLa5k7SNm3pdRV6jVhIj3/ysLczs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:74:8d:41:33:66:da:19:83:ac:88:e5:f9:60:ab:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c90ad151d4326a6d62e13046d788f85bf82e94
        Validity
            Not Before: Jun 14 08:00:44 2025 GMT
            Not After : Jun 15 08:00:44 2025 GMT
        Subject: CN=86d8f74ad352bd3c3907bb866af43ab8785346fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f4:b4:19:ce:7f:9e:14:79:98:a6:44:1c:74:
                    78:f7:ca:21:c2:59:c3:ee:1e:a3:2a:28:ec:8f:9d:
                    b9:1d:84:e9:71:d1:d9:8e:14:2f:52:db:fa:52:b4:
                    69:f7:4d:ae:b3:28:4c:8e:d7:07:83:ee:d2:51:96:
                    6f:0e:91:ed:e0:50:9c:1b:67:49:6f:13:1b:e0:da:
                    e5:b6:e7:ed:53:80:b3:2a:68:fd:18:a9:b5:9e:96:
                    ed:a8:75:0a:0f:a6:cf:7b:cb:67:b8:cb:36:56:b1:
                    82:1b:b9:49:e4:85:27:16:4e:26:e9:ae:ad:1f:93:
                    2f:a1:d5:8b:99:50:f9:0f:aa:9c:f5:bc:64:38:3e:
                    09:15:e3:5e:f2:1a:7c:06:30:b6:10:23:0e:72:9d:
                    d9:c0:86:1f:88:83:d9:64:22:8c:86:f5:e9:eb:b9:
                    b4:f5:e9:9c:2e:e1:ff:a5:16:4b:2e:dc:c1:89:a8:
                    08:5c:f5:df:da:77:a3:20:74:0c:a3:4c:95:70:00:
                    e5:86:9b:cc:56:e3:52:1d:af:51:27:be:68:ce:9d:
                    86:0d:50:27:f9:93:40:8f:7c:86:41:bf:64:de:78:
                    c9:b2:84:3f:7f:a8:5e:e3:9f:47:7b:4b:db:24:95:
                    88:5b:25:31:4d:43:b6:c4:a8:56:fa:40:69:1c:70:
                    24:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D8:F7:4A:D3:52:BD:3C:39:07:BB:86:6A:F4:3A:B8:78:53:46:FD
            X509v3 Authority Key Identifier:
                keyid:73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:00:1a:6c:b8:0d:67:b3:63:5d:54:a8:1d:be:07:ee:0a:12:
         b7:ce:bb:4a:b5:ed:e3:82:57:2c:bc:df:39:fe:b2:9e:64:10:
         e8:9c:76:e5:42:23:cf:ab:ee:26:47:b9:bc:4a:de:ab:c6:77:
         15:b7:4c:d2:d0:30:c0:d8:0c:62:b6:94:e6:d6:d1:31:63:84:
         97:c5:73:9c:28:98:d0:5e:11:fd:eb:76:05:9f:39:6a:1c:d4:
         a0:98:fc:94:e5:95:34:c6:60:95:33:82:27:ee:de:aa:20:d3:
         e1:d6:ad:69:79:cf:20:65:31:e8:e1:b9:8c:2b:19:48:a5:66:
         36:3e:58:a4:91:64:b8:f9:64:21:42:45:c7:56:a2:f6:7f:6d:
         39:24:8f:11:83:79:14:64:cd:d5:1e:ae:f6:2c:9d:00:dc:a0:
         2b:46:a7:d6:cd:1e:c6:9d:ff:ac:d9:53:8b:bd:e9:cc:d2:f6:
         2a:21:5a:46:0b:a2:06:78:40:6f:5c:7c:c1:73:77:20:d1:9c:
         ad:10:24:93:60:ec:45:e2:2f:a6:81:24:66:9d:23:da:15:31:
         83:5f:70:57:52:aa:03:fd:5f:2b:de:48:65:de:0b:51:22:04:
         76:99:df:7f:0b:47:88:ee:43:0b:59:7e:36:d4:d7:bc:1a:fc:
         de:14:41:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtdI1BM2baGYOsiOX5YKtKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYzkwYWQxNTFkNDMyNmE2ZDYyZTEzMDQ2ZDc4OGY4NWJm
ODJlOTQwHhcNMjUwNjE0MDgwMDQ0WhcNMjUwNjE1MDgwMDQ0WjAzMTEwLwYDVQQD
Eyg4NmQ4Zjc0YWQzNTJiZDNjMzkwN2JiODY2YWY0M2FiODc4NTM0NmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvS0Gc5/nhR5mKZEHHR498ohwlnD
7h6jKijsj525HYTpcdHZjhQvUtv6UrRp902usyhMjtcHg+7SUZZvDpHt4FCcG2dJ
bxMb4NrltuftU4CzKmj9GKm1npbtqHUKD6bPe8tnuMs2VrGCG7lJ5IUnFk4m6a6t
H5MvodWLmVD5D6qc9bxkOD4JFeNe8hp8BjC2ECMOcp3ZwIYfiIPZZCKMhvXp67m0
9emcLuH/pRZLLtzBiagIXPXf2nejIHQMo0yVcADlhpvMVuNSHa9RJ75ozp2GDVAn
+ZNAj3yGQb9k3njJsoQ/f6he459He0vbJJWIWyUxTUO2xKhW+kBpHHAkKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbY90rTUr08OQe7hmr0Orh4U0b9MB8GA1UdIwQY
MBaAFHPJCtFR1DJqbWLhMEbXiPhb+C6UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzhrSzBWSFVNbXB0WXVFd1J0ZUktRnY0THBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi85YmUyYTAtMTA2MC00MWM3LWI4ZTIt
YmE2MjZkMzI1ZDU5LzEvYzhrSzBWSFVNbXB0WXVFd1J0ZUktRnY0THBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi85YmUyYTAtMTA2MC00MWM3LWI4ZTItYmE2MjZkMzI1ZDU5
LzEvYzhrSzBWSFVNbXB0WXVFd1J0ZUktRnY0THBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmgAabLgN
Z7NjXVSoHb4H7goSt867SrXt44JXLLzfOf6ynmQQ6Jx25UIjz6vuJke5vEreq8Z3
FbdM0tAwwNgMYraU5tbRMWOEl8VznCiY0F4R/et2BZ85ahzUoJj8lOWVNMZglTOC
J+7eqiDT4dataXnPIGUx6OG5jCsZSKVmNj5YpJFkuPlkIUJFx1ai9n9tOSSPEYN5
FGTN1R6u9iydANygK0an1s0exp3/rNlTi73pzNL2KiFaRguiBnhAb1x8wXN3INGc
rRAkk2DsReIvpoEkZp0j2hUxg19wV1KqA/1fK95IZd4LUSIEdpnffwtHiO5DC1l+
NtTXvBr83hRBUg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:14:25 2025 by rpki-client