Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
File:                     h7PLLW-2jm7bhEL-sKv8la61sVc.mft (raw, json)
Hash identifier:          bdmIpLY8CMSK5og2vxI+IoWEOIxCcvQcWWisjx10SFE=
Subject key identifier:   41:27:65:A7:4E:CD:0C:11:33:DB:4F:67:1F:41:11:F9:C7:EE:7E:89
Authority key identifier: 87:B3:CB:2D:6F:B6:8E:6E:DB:84:42:FE:B0:AB:FC:95:AE:B5:B1:57
Certificate issuer:       /CN=87b3cb2d6fb68e6edb8442feb0abfc95aeb5b157
Certificate serial:       0197699792A9D8077C77456E18F96C5F644D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
Manifest number:          04B5
Signing time:             Fri 13 Jun 2025 14:00:30 +0000
Manifest this update:     Fri 13 Jun 2025 14:00:30 +0000
Manifest next update:     Sat 14 Jun 2025 14:00:30 +0000
Files and hashes:         1: h7PLLW-2jm7bhEL-sKv8la61sVc.crl (hash: Lslxk7w2JO4UsLu40urJgHOsjat2aQDJ+zmSwvf9McM=)
                          2: qK0r22fc4dStcfs-iJMEOqc-e8I.roa (hash: szAPsZBmBxrbRZJWId/rghs7S63YVBb1wXhPcGatKBA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:97:92:a9:d8:07:7c:77:45:6e:18:f9:6c:5f:64:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87b3cb2d6fb68e6edb8442feb0abfc95aeb5b157
        Validity
            Not Before: Jun 13 14:00:30 2025 GMT
            Not After : Jun 14 14:00:30 2025 GMT
        Subject: CN=412765a74ecd0c1133db4f671f4111f9c7ee7e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:86:3d:e8:3c:44:f2:b8:52:3d:49:5e:b6:ea:
                    d3:91:fd:4d:48:70:a1:8a:e7:4b:6d:f7:24:8f:68:
                    05:7d:2d:2f:e1:f7:b1:09:dc:a0:0d:49:e4:47:6d:
                    e9:3b:f4:b1:d5:6a:f1:67:57:17:4c:5d:a7:f6:3d:
                    81:0c:dd:8e:f4:e4:26:fb:8e:b2:35:75:a2:5e:d5:
                    bb:ff:37:2b:08:93:87:51:97:44:f5:c5:d0:20:15:
                    8b:f9:86:b2:29:10:de:1b:24:ac:6e:a1:fd:9b:4d:
                    3c:36:28:28:d7:c8:c3:f8:7b:40:ba:8d:79:cd:73:
                    98:89:45:21:18:ed:d1:6b:3c:40:23:71:b0:5a:c3:
                    5c:93:49:a3:86:54:1f:e2:2e:64:70:b5:77:2d:33:
                    c2:92:5b:38:a6:5d:f1:ba:22:77:6f:0c:a6:cb:17:
                    12:c3:5a:5e:5e:1e:d9:51:d1:ea:c3:22:c9:73:8d:
                    fe:15:e4:30:e3:4e:9e:88:c9:d3:ad:1b:1b:87:96:
                    71:5c:1e:de:e1:f0:49:e4:b2:91:08:53:74:96:4b:
                    59:7b:bc:04:35:91:ee:7d:48:c9:a2:d6:35:4e:d6:
                    13:2a:ad:c8:b8:60:aa:8d:6e:6a:a7:59:25:fc:8d:
                    a0:2e:9a:d9:08:21:fb:ac:5b:62:58:7a:60:d9:0c:
                    65:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:27:65:A7:4E:CD:0C:11:33:DB:4F:67:1F:41:11:F9:C7:EE:7E:89
            X509v3 Authority Key Identifier:
                keyid:87:B3:CB:2D:6F:B6:8E:6E:DB:84:42:FE:B0:AB:FC:95:AE:B5:B1:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:6e:27:9c:a5:3f:11:b1:d6:77:5d:8a:da:cc:18:1c:b4:6a:
         aa:76:b9:3f:ac:c1:41:e4:1a:97:52:e1:7d:b0:47:5e:63:2d:
         4f:3f:68:bd:64:34:52:08:f1:4c:cd:10:eb:43:66:9c:46:59:
         08:64:94:aa:73:a9:b7:ea:1a:67:29:2a:95:e2:b8:d6:63:df:
         a7:32:c0:1a:dd:7a:9b:23:1b:ee:78:07:9f:b7:88:63:57:cb:
         4b:af:86:b7:f6:52:a7:c7:33:f4:92:74:a1:31:16:f5:71:2d:
         31:fa:e9:49:56:08:7e:8d:d8:c1:15:b1:0d:bc:cf:13:22:6a:
         b7:5d:6f:8c:19:8a:fb:23:ba:4d:ec:7c:05:13:62:c1:ac:b6:
         bd:f4:0b:07:6a:74:17:34:bf:23:a5:6b:ba:21:2c:04:44:f6:
         4d:04:40:68:6f:46:3d:4b:ed:93:af:d4:8d:b7:74:c6:f7:c6:
         1e:90:e5:ba:e3:b0:17:d7:88:81:1e:f3:12:b7:84:7e:29:48:
         24:e6:ae:46:2c:0d:f2:9e:36:68:e9:cc:99:26:5b:db:9e:ff:
         ef:06:77:f1:bb:2d:be:3c:21:5a:c5:72:78:3f:e5:96:a1:9b:
         e0:bb:b1:00:ef:38:16:0f:9e:a0:c4:2c:bd:21:b2:d6:3e:0e:
         e3:c7:6d:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpl5Kp2Ad8d0VuGPlsX2RNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3YjNjYjJkNmZiNjhlNmVkYjg0NDJmZWIwYWJmYzk1YWVi
NWIxNTcwHhcNMjUwNjEzMTQwMDMwWhcNMjUwNjE0MTQwMDMwWjAzMTEwLwYDVQQD
Eyg0MTI3NjVhNzRlY2QwYzExMzNkYjRmNjcxZjQxMTFmOWM3ZWU3ZTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoY96DxE8rhSPUleturTkf1NSHCh
iudLbfckj2gFfS0v4fexCdygDUnkR23pO/Sx1WrxZ1cXTF2n9j2BDN2O9OQm+46y
NXWiXtW7/zcrCJOHUZdE9cXQIBWL+YayKRDeGySsbqH9m008Nigo18jD+HtAuo15
zXOYiUUhGO3RazxAI3GwWsNck0mjhlQf4i5kcLV3LTPCkls4pl3xuiJ3bwymyxcS
w1peXh7ZUdHqwyLJc43+FeQw406eiMnTrRsbh5ZxXB7e4fBJ5LKRCFN0lktZe7wE
NZHufUjJotY1TtYTKq3IuGCqjW5qp1kl/I2gLprZCCH7rFtiWHpg2QxlAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEnZadOzQwRM9tPZx9BEfnH7n6JMB8GA1UdIwQY
MBaAFIezyy1vto5u24RC/rCr/JWutbFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDdQTExXLTJqbTdiaEVMLXNLdjhsYTYxc1ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy85OWQ5YTYtMTNiZS00MGFiLWJlNTMt
YjQyYTRjM2U5MTZiLzEvaDdQTExXLTJqbTdiaEVMLXNLdjhsYTYxc1ZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy85OWQ5YTYtMTNiZS00MGFiLWJlNTMtYjQyYTRjM2U5MTZi
LzEvaDdQTExXLTJqbTdiaEVMLXNLdjhsYTYxc1ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkm4nnKU/
EbHWd12K2swYHLRqqna5P6zBQeQal1LhfbBHXmMtTz9ovWQ0UgjxTM0Q60NmnEZZ
CGSUqnOpt+oaZykqleK41mPfpzLAGt16myMb7ngHn7eIY1fLS6+Gt/ZSp8cz9JJ0
oTEW9XEtMfrpSVYIfo3YwRWxDbzPEyJqt11vjBmK+yO6Tex8BRNiway2vfQLB2p0
FzS/I6VruiEsBET2TQRAaG9GPUvtk6/Ujbd0xvfGHpDluuOwF9eIgR7zEreEfilI
JOauRiwN8p42aOnMmSZb257/7wZ38bstvjwhWsVyeD/llqGb4LuxAO84Fg+eoMQs
vSGy1j4O48dtLA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:38:54 2025 by rpki-client