Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
File:                     4McMwtIdqMLqZIFTT0jaSVqoS90.mft (raw, json)
Hash identifier:          y4pGO/gU9E7EoaIFFn6IGIErFhvnHVn/W4CWaygBJ4E=
Subject key identifier:   5F:4F:49:CF:63:04:B0:98:9A:33:C3:7A:85:31:16:BC:12:62:53:60
Authority key identifier: E0:C7:0C:C2:D2:1D:A8:C2:EA:64:81:53:4F:48:DA:49:5A:A8:4B:DD
Certificate issuer:       /CN=e0c70cc2d21da8c2ea6481534f48da495aa84bdd
Certificate serial:       0197703EB7141FBCBF56D4D0762E0C10B536
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
Manifest number:          1590
Signing time:             Sat 14 Jun 2025 21:00:47 +0000
Manifest this update:     Sat 14 Jun 2025 21:00:47 +0000
Manifest next update:     Sun 15 Jun 2025 21:00:47 +0000
Files and hashes:         1: 4McMwtIdqMLqZIFTT0jaSVqoS90.crl (hash: IN+m4hVrS4IKeMPB7yUXAt412Eubj6p9pB2w6xV1Cmk=)
                          2: Eyx-nlRpe0-godGFL3xYlKtLlbQ.roa (hash: 9oeY/MAa6lvwYN19OiXxeJ1LVR37sI0FzCd1Eq/rgTE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:3e:b7:14:1f:bc:bf:56:d4:d0:76:2e:0c:10:b5:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0c70cc2d21da8c2ea6481534f48da495aa84bdd
        Validity
            Not Before: Jun 14 21:00:47 2025 GMT
            Not After : Jun 15 21:00:47 2025 GMT
        Subject: CN=5f4f49cf6304b0989a33c37a853116bc12625360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:da:d6:dc:ad:5a:0a:ab:49:e6:88:51:d2:d4:
                    20:26:bd:1d:74:a1:8f:92:93:2a:db:78:99:c2:e0:
                    3d:07:e4:bf:62:ba:4c:54:f3:d8:cf:56:6a:f2:2f:
                    45:0e:b0:c3:b3:5c:0c:00:2e:3b:ad:cf:05:63:18:
                    e3:11:90:1f:77:f2:41:55:24:4e:f8:a2:c5:82:40:
                    bd:d0:53:10:f0:57:99:15:8e:e4:e7:99:c9:10:9f:
                    e0:94:6c:a0:50:0a:69:58:73:13:53:f8:be:57:71:
                    94:93:64:7e:1b:5f:80:be:be:7e:26:48:31:32:7b:
                    49:a4:1d:0c:52:40:88:93:66:60:34:f3:bc:e9:f7:
                    1c:ef:49:2f:bc:60:ea:c1:04:24:10:7e:f1:0e:a2:
                    a1:d8:18:45:fa:3c:58:56:c3:56:00:6a:07:da:0a:
                    d9:89:5a:57:c0:8f:c2:e4:09:c3:0b:71:89:a0:60:
                    a0:0d:8a:83:00:4c:69:39:7b:37:9c:5e:fe:12:37:
                    5b:47:50:c9:06:4d:e7:3e:1a:21:87:ba:ce:f8:ce:
                    8c:43:90:1f:f3:6c:7f:1b:39:4e:2d:2a:7c:42:cf:
                    68:58:0f:eb:0f:73:2a:92:76:20:ec:49:3e:c0:ea:
                    ee:16:42:31:51:a4:2f:e6:4d:82:c3:93:e7:18:89:
                    14:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:4F:49:CF:63:04:B0:98:9A:33:C3:7A:85:31:16:BC:12:62:53:60
            X509v3 Authority Key Identifier:
                keyid:E0:C7:0C:C2:D2:1D:A8:C2:EA:64:81:53:4F:48:DA:49:5A:A8:4B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:77:26:f6:c5:52:9e:ee:b1:77:b9:35:bd:e0:64:7e:df:ea:
         df:2c:9d:50:66:99:33:f4:66:f0:04:86:57:d9:b1:09:f9:58:
         83:d2:88:81:ce:da:85:91:1c:d0:cd:43:77:b8:48:db:55:69:
         ff:40:51:cf:ec:cf:e3:5d:08:9c:19:e2:94:03:c2:cc:03:6a:
         50:29:50:3d:5e:d2:7c:09:26:15:08:bc:89:b7:30:8c:d8:85:
         fc:72:f5:25:42:a9:8c:42:cf:d6:5e:a4:02:5f:78:7b:3c:e6:
         2c:0a:53:61:d2:ae:28:49:6f:d3:89:e6:0b:76:b6:b9:68:c2:
         db:62:c1:1d:d6:d2:f9:b3:7e:b8:34:52:a0:67:1d:de:5b:dd:
         56:58:25:91:73:c4:a3:d6:e5:38:22:4e:b4:d8:00:c7:9e:86:
         db:86:0e:8a:f8:86:59:e1:b8:c8:27:dd:ee:d3:e7:e3:a3:98:
         54:1a:a8:26:0e:94:94:9e:b7:2e:7f:74:fd:f2:e4:ff:35:a3:
         0b:0e:0d:00:16:58:2a:05:2e:cb:98:47:45:e3:93:9a:60:26:
         45:60:f4:6c:a0:10:63:63:a9:12:21:40:5f:1d:a6:53:31:f8:
         c4:a2:7d:32:cf:08:30:f5:c4:7f:f4:10:51:17:36:ae:87:e8:
         3c:a9:0f:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwPrcUH7y/VtTQdi4MELU2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYzcwY2MyZDIxZGE4YzJlYTY0ODE1MzRmNDhkYTQ5NWFh
ODRiZGQwHhcNMjUwNjE0MjEwMDQ3WhcNMjUwNjE1MjEwMDQ3WjAzMTEwLwYDVQQD
Eyg1ZjRmNDljZjYzMDRiMDk4OWEzM2MzN2E4NTMxMTZiYzEyNjI1MzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNrW3K1aCqtJ5ohR0tQgJr0ddKGP
kpMq23iZwuA9B+S/YrpMVPPYz1Zq8i9FDrDDs1wMAC47rc8FYxjjEZAfd/JBVSRO
+KLFgkC90FMQ8FeZFY7k55nJEJ/glGygUAppWHMTU/i+V3GUk2R+G1+Avr5+Jkgx
MntJpB0MUkCIk2ZgNPO86fcc70kvvGDqwQQkEH7xDqKh2BhF+jxYVsNWAGoH2grZ
iVpXwI/C5AnDC3GJoGCgDYqDAExpOXs3nF7+EjdbR1DJBk3nPhohh7rO+M6MQ5Af
82x/GzlOLSp8Qs9oWA/rD3MqknYg7Ek+wOruFkIxUaQv5k2Cw5PnGIkUPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF9PSc9jBLCYmjPDeoUxFrwSYlNgMB8GA1UdIwQY
MBaAFODHDMLSHajC6mSBU09I2klaqEvdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE1jTXd0SWRxTUxxWklGVFQwamFTVnFvUzkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC83MTAzM2MtMGI2YS00NmU2LWE1ZmUt
MzI5YTk5ZjBmMWI1LzEvNE1jTXd0SWRxTUxxWklGVFQwamFTVnFvUzkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC83MTAzM2MtMGI2YS00NmU2LWE1ZmUtMzI5YTk5ZjBmMWI1
LzEvNE1jTXd0SWRxTUxxWklGVFQwamFTVnFvUzkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY3cm9sVS
nu6xd7k1veBkft/q3yydUGaZM/Rm8ASGV9mxCflYg9KIgc7ahZEc0M1Dd7hI21Vp
/0BRz+zP410InBnilAPCzANqUClQPV7SfAkmFQi8ibcwjNiF/HL1JUKpjELP1l6k
Al94ezzmLApTYdKuKElv04nmC3a2uWjC22LBHdbS+bN+uDRSoGcd3lvdVlglkXPE
o9blOCJOtNgAx56G24YOiviGWeG4yCfd7tPn46OYVBqoJg6UlJ63Ln90/fLk/zWj
Cw4NABZYKgUuy5hHReOTmmAmRWD0bKAQY2OpEiFAXx2mUzH4xKJ9Ms8IMPXEf/QQ
URc2rofoPKkPgw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:44:54 2025 by rpki-client