Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.mft
File:                     U_R6clx2jU3nj7MbtA_hbroZ8g0.mft (raw, json)
Hash identifier:          Mk1Z5vVT9fxwiUndHnuldq/pNZ3Rvkb5aNmlg4INOqE=
Subject key identifier:   A6:57:32:51:51:81:98:10:B3:44:60:B6:65:25:BC:FB:E7:00:A2:D1
Authority key identifier: 53:F4:7A:72:5C:76:8D:4D:E7:8F:B3:1B:B4:0F:E1:6E:BA:19:F2:0D
Certificate issuer:       /CN=53f47a725c768d4de78fb31bb40fe16eba19f20d
Certificate serial:       01976D3E80347EEEBF36B87106E23C66211D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U_R6clx2jU3nj7MbtA_hbroZ8g0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.mft
Manifest number:          08AF
Signing time:             Sat 14 Jun 2025 07:01:41 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:41 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:41 +0000
Files and hashes:         1: U_R6clx2jU3nj7MbtA_hbroZ8g0.crl (hash: nE/Tox1XtQdH01Mm3FUmRmPRH23myqs8vpQZ4tB2wlA=)
                          2: g-5hPmoz7dP3nMeNf-8zyzCBLS0.roa (hash: 3ADI/JnmU2jWCSq5Oyp3ZfW9QGg96OokVA1qdrppkBI=)
                          3: jdP65vqZd3Yn6U96eT8_mfZkvjA.roa (hash: ne4jP46DKtEJ9p4ZQwpnXhCV9KcXgzPhGgBO66/D1T0=)
                          4: rqlbZmhX6az-9-fg97NcIUHnUrM.roa (hash: VaAY7HNRDIpkX6LMYIaC1zA2JriB1tOOLhUTcCXd3bE=)
                          5: uldn70CmsoO8mEjXDA2qsH171BM.roa (hash: sF3Le5y5D/xahF9JJgZ52rEEuG9V89PoQt2h37YZGwE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U_R6clx2jU3nj7MbtA_hbroZ8g0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3e:80:34:7e:ee:bf:36:b8:71:06:e2:3c:66:21:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53f47a725c768d4de78fb31bb40fe16eba19f20d
        Validity
            Not Before: Jun 14 07:01:41 2025 GMT
            Not After : Jun 15 07:01:41 2025 GMT
        Subject: CN=a657325151819810b34460b66525bcfbe700a2d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1d:42:72:42:1b:8b:77:06:bc:cc:73:4a:b7:
                    50:56:30:59:aa:30:2e:0a:fd:72:1b:02:3e:e3:84:
                    50:a1:be:79:04:ca:34:39:62:57:41:39:65:47:4f:
                    30:18:5a:74:46:ca:0a:9e:d5:51:78:7e:5e:be:78:
                    87:75:fa:32:1c:5a:86:a6:59:e9:3a:c3:76:2a:50:
                    40:16:86:15:d7:4c:05:ee:bf:f7:49:99:78:4c:a6:
                    b0:fa:50:1b:a4:cd:ee:8c:8e:57:2c:ad:cc:07:df:
                    42:65:0e:d4:6d:f2:fe:ab:d5:4f:fc:2c:78:70:4f:
                    de:c8:d9:79:fe:45:3f:13:f3:e6:d4:e0:20:52:da:
                    53:8b:7c:3a:3b:cf:bb:1e:1a:e1:93:8d:62:7b:52:
                    54:7b:e1:ab:3f:19:d7:b6:c9:cd:21:2e:9d:70:e4:
                    5a:c1:32:a8:9a:e6:1a:fc:a6:c5:15:b7:07:9f:91:
                    9d:fe:ca:51:79:e0:5e:b1:c3:d6:d9:e4:8d:02:26:
                    79:52:f6:95:c8:f2:4c:a9:a0:ca:d2:45:6d:f0:3c:
                    16:99:f7:99:70:0e:10:62:52:6b:a3:23:54:7d:27:
                    2b:c9:85:85:af:d6:39:a8:02:bb:e0:f7:7d:3a:1d:
                    01:88:3f:90:a2:d3:fc:9a:db:d6:4a:0c:b8:af:19:
                    c6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:57:32:51:51:81:98:10:B3:44:60:B6:65:25:BC:FB:E7:00:A2:D1
            X509v3 Authority Key Identifier:
                keyid:53:F4:7A:72:5C:76:8D:4D:E7:8F:B3:1B:B4:0F:E1:6E:BA:19:F2:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_R6clx2jU3nj7MbtA_hbroZ8g0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:55:44:74:9f:97:2a:d4:80:6b:58:8e:57:97:06:be:cd:83:
         a6:42:9f:78:65:b4:6d:35:6e:7d:87:ed:80:b4:ed:66:29:3f:
         3f:4a:f0:13:ad:42:0a:16:f8:3d:cd:45:3e:7f:6c:38:4a:ae:
         10:c3:71:eb:0b:fe:71:46:d5:06:a9:5b:c0:29:94:b8:2e:38:
         0a:64:28:d4:c4:f8:dd:d4:ac:f7:ed:f2:92:4e:d4:3b:3e:4d:
         b0:1d:cb:e7:c1:6d:4f:b9:6c:1b:12:98:4a:4e:89:86:49:36:
         5a:11:c7:55:35:96:72:cd:97:cd:80:68:24:60:75:6b:56:77:
         dc:ef:07:4e:12:33:b7:91:a1:29:85:ea:dd:21:61:66:be:ff:
         d3:46:b7:df:17:ed:1c:08:e6:4b:45:03:d5:8d:e8:3a:a0:dc:
         3a:13:77:84:e5:77:56:ca:b1:53:68:2c:da:21:95:21:54:6f:
         f3:b5:cd:69:fe:04:40:4b:e9:f9:69:c9:24:f4:f6:94:da:fa:
         17:21:e9:e9:ad:ed:1d:ce:41:0b:96:cd:68:3e:2a:03:4b:fa:
         e6:da:1d:fb:41:cb:54:c9:30:2b:54:8c:72:79:51:6f:98:5c:
         54:f2:22:c2:ea:3e:1e:15:6f:50:20:3b:05:7b:8c:26:c5:75:
         3b:64:02:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPoA0fu6/NrhxBuI8ZiEdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZjQ3YTcyNWM3NjhkNGRlNzhmYjMxYmI0MGZlMTZlYmEx
OWYyMGQwHhcNMjUwNjE0MDcwMTQxWhcNMjUwNjE1MDcwMTQxWjAzMTEwLwYDVQQD
EyhhNjU3MzI1MTUxODE5ODEwYjM0NDYwYjY2NTI1YmNmYmU3MDBhMmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1h1CckIbi3cGvMxzSrdQVjBZqjAu
Cv1yGwI+44RQob55BMo0OWJXQTllR08wGFp0RsoKntVReH5evniHdfoyHFqGplnp
OsN2KlBAFoYV10wF7r/3SZl4TKaw+lAbpM3ujI5XLK3MB99CZQ7UbfL+q9VP/Cx4
cE/eyNl5/kU/E/Pm1OAgUtpTi3w6O8+7Hhrhk41ie1JUe+GrPxnXtsnNIS6dcORa
wTKomuYa/KbFFbcHn5Gd/spReeBescPW2eSNAiZ5UvaVyPJMqaDK0kVt8DwWmfeZ
cA4QYlJroyNUfScryYWFr9Y5qAK74Pd9Oh0BiD+QotP8mtvWSgy4rxnGRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZXMlFRgZgQs0RgtmUlvPvnAKLRMB8GA1UdIwQY
MBaAFFP0enJcdo1N54+zG7QP4W66GfINMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVV9SNmNseDJqVTNuajdNYnRBX2hicm9aOGcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82NDAxZjMtNmRmMC00MDM4LWIwYmMt
NTc0NzEzODQ1ZGJjLzEvVV9SNmNseDJqVTNuajdNYnRBX2hicm9aOGcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82NDAxZjMtNmRmMC00MDM4LWIwYmMtNTc0NzEzODQ1ZGJj
LzEvVV9SNmNseDJqVTNuajdNYnRBX2hicm9aOGcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfVVEdJ+X
KtSAa1iOV5cGvs2DpkKfeGW0bTVufYftgLTtZik/P0rwE61CChb4Pc1FPn9sOEqu
EMNx6wv+cUbVBqlbwCmUuC44CmQo1MT43dSs9+3ykk7UOz5NsB3L58FtT7lsGxKY
Sk6Jhkk2WhHHVTWWcs2XzYBoJGB1a1Z33O8HThIzt5GhKYXq3SFhZr7/00a33xft
HAjmS0UD1Y3oOqDcOhN3hOV3VsqxU2gs2iGVIVRv87XNaf4EQEvp+WnJJPT2lNr6
FyHp6a3tHc5BC5bNaD4qA0v65tod+0HLVMkwK1SMcnlRb5hcVPIiwuo+HhVvUCA7
BXuMJsV1O2QCRg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:16:43 2025 by rpki-client