Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
File:                     2ko-wHuXhY5oNKWh-I64_jG_eyA.mft (raw, json)
Hash identifier:          ZxIe2li4j2VLD57wDFL+RXmxjYlXXlv+saN00Ji3jCw=
Subject key identifier:   6D:9E:38:31:BF:F8:2C:C1:19:FC:70:75:42:B8:B9:B5:77:9B:FF:9C
Authority key identifier: DA:4A:3E:C0:7B:97:85:8E:68:34:A5:A1:F8:8E:B8:FE:31:BF:7B:20
Certificate issuer:       /CN=da4a3ec07b97858e6834a5a1f88eb8fe31bf7b20
Certificate serial:       0197722D530AC0E1102B459C95C6603B55EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
Manifest number:          063D
Signing time:             Sun 15 Jun 2025 06:01:02 +0000
Manifest this update:     Sun 15 Jun 2025 06:01:02 +0000
Manifest next update:     Mon 16 Jun 2025 06:01:02 +0000
Files and hashes:         1: 2ko-wHuXhY5oNKWh-I64_jG_eyA.crl (hash: mjXPSsr+qEbq+EjYDe5DLQVJ13MZgZGsAnzUOcK27AA=)
                          2: SKL1Cd8Tn-ZKbcOxgMo9-wJ0gbQ.roa (hash: 4u4TOuVY+peXwBlO4N668GLOAFUf52/Bj870kxpoG3I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:72:2d:53:0a:c0:e1:10:2b:45:9c:95:c6:60:3b:55:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da4a3ec07b97858e6834a5a1f88eb8fe31bf7b20
        Validity
            Not Before: Jun 15 06:01:02 2025 GMT
            Not After : Jun 16 06:01:02 2025 GMT
        Subject: CN=6d9e3831bff82cc119fc707542b8b9b5779bff9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:01:c3:7d:00:02:1a:a1:9b:ff:79:ee:35:a4:
                    f1:99:8d:1d:1e:3e:5d:64:38:6d:f7:d7:82:e3:13:
                    aa:24:06:39:86:dd:0a:dc:56:bd:7e:2c:b5:e2:a0:
                    98:54:d2:c9:a4:c1:81:a9:be:1b:ee:55:cc:6f:e7:
                    95:f9:14:ef:3f:77:9f:0f:c0:27:f6:6d:f6:ed:77:
                    db:74:53:82:d3:ca:2e:2c:ce:d4:c1:cd:1a:86:f6:
                    3b:4f:d6:a7:09:8c:2c:03:d0:63:da:2a:56:02:35:
                    91:89:f2:b4:4e:70:b4:5d:33:0a:0e:ed:c3:a3:26:
                    b5:25:5f:ee:c1:68:2b:fc:3c:9e:1c:a2:f2:98:08:
                    c8:0b:55:a8:75:48:c0:7e:cd:f1:9a:92:41:bd:3a:
                    73:8d:69:51:20:02:b2:ba:ce:fb:6f:da:2f:16:ed:
                    d9:d9:87:e7:32:a5:ce:01:9f:21:90:12:38:07:1e:
                    02:2e:69:f4:68:05:96:6e:5d:dd:6f:d0:64:23:fe:
                    67:f7:37:69:ce:bb:c1:c2:02:e9:c9:9c:8a:02:e9:
                    b9:f2:de:39:ca:a2:61:74:2e:56:3f:ab:71:67:82:
                    9d:90:89:4b:41:06:c2:50:ac:ba:62:6d:cc:87:e9:
                    e8:4d:9a:f4:89:a3:e2:88:32:64:db:19:a9:1c:d0:
                    4a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:9E:38:31:BF:F8:2C:C1:19:FC:70:75:42:B8:B9:B5:77:9B:FF:9C
            X509v3 Authority Key Identifier:
                keyid:DA:4A:3E:C0:7B:97:85:8E:68:34:A5:A1:F8:8E:B8:FE:31:BF:7B:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:7b:11:d5:3c:b8:12:88:4c:7f:4d:62:04:7a:f1:ac:ff:ef:
         84:e2:56:fd:1b:6d:8f:8f:eb:17:c8:7c:91:38:ad:70:95:87:
         8a:52:9c:39:9a:26:3d:06:b0:fc:c1:c3:9e:d8:25:6d:a6:49:
         d8:83:2d:f9:97:40:e6:d8:cd:d9:86:71:8a:4c:30:f9:07:0d:
         e9:62:a9:a5:16:f7:97:28:ca:ac:62:03:56:3b:db:ef:cc:4e:
         c3:df:0e:c0:03:aa:c5:4c:e3:5f:d6:9c:4d:a0:ae:dc:31:08:
         cc:52:fd:2a:32:4c:0e:02:10:69:a0:42:d9:f2:60:52:41:b0:
         3c:ba:75:0e:9d:b5:ee:b2:e6:43:60:e9:ef:01:5d:c0:cb:59:
         11:73:b1:50:b9:d7:c4:53:a2:7a:48:ca:75:ca:cd:52:ee:12:
         08:9a:47:a5:4f:ae:f3:d0:56:e3:ab:41:3a:b7:d6:d2:e7:d0:
         05:79:de:ad:b4:1d:6f:29:ca:89:9f:e3:18:9e:bc:1a:f9:0f:
         9a:65:c5:53:aa:3c:32:b1:9e:ba:9d:2f:82:66:ba:9f:39:b7:
         7b:b3:5b:6c:93:37:b3:70:70:82:e3:29:bc:9d:bd:3a:10:f3:
         d7:9d:0e:09:1c:e6:31:ab:e3:8f:08:da:6e:34:52:42:27:17:
         e1:83:6e:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdyLVMKwOEQK0WclcZgO1XsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNGEzZWMwN2I5Nzg1OGU2ODM0YTVhMWY4OGViOGZlMzFi
ZjdiMjAwHhcNMjUwNjE1MDYwMTAyWhcNMjUwNjE2MDYwMTAyWjAzMTEwLwYDVQQD
Eyg2ZDllMzgzMWJmZjgyY2MxMTlmYzcwNzU0MmI4YjliNTc3OWJmZjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogHDfQACGqGb/3nuNaTxmY0dHj5d
ZDht99eC4xOqJAY5ht0K3Fa9fiy14qCYVNLJpMGBqb4b7lXMb+eV+RTvP3efD8An
9m327XfbdFOC08ouLM7Uwc0ahvY7T9anCYwsA9Bj2ipWAjWRifK0TnC0XTMKDu3D
oya1JV/uwWgr/DyeHKLymAjIC1WodUjAfs3xmpJBvTpzjWlRIAKyus77b9ovFu3Z
2YfnMqXOAZ8hkBI4Bx4CLmn0aAWWbl3db9BkI/5n9zdpzrvBwgLpyZyKAum58t45
yqJhdC5WP6txZ4KdkIlLQQbCUKy6Ym3Mh+noTZr0iaPiiDJk2xmpHNBKuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG2eODG/+CzBGfxwdUK4ubV3m/+cMB8GA1UdIwQY
MBaAFNpKPsB7l4WOaDSlofiOuP4xv3sgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmtvLXdIdVhoWTVvTktXaC1JNjRfakdfZXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mZTAzMDYtYWY4NC00ZThlLTg4ODUt
Yjg0YTk4MTllYWQ2LzEvMmtvLXdIdVhoWTVvTktXaC1JNjRfakdfZXlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9mZTAzMDYtYWY4NC00ZThlLTg4ODUtYjg0YTk4MTllYWQ2
LzEvMmtvLXdIdVhoWTVvTktXaC1JNjRfakdfZXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbHsR1Ty4
EohMf01iBHrxrP/vhOJW/Rttj4/rF8h8kTitcJWHilKcOZomPQaw/MHDntglbaZJ
2IMt+ZdA5tjN2YZxikww+QcN6WKppRb3lyjKrGIDVjvb78xOw98OwAOqxUzjX9ac
TaCu3DEIzFL9KjJMDgIQaaBC2fJgUkGwPLp1Dp217rLmQ2Dp7wFdwMtZEXOxULnX
xFOiekjKdcrNUu4SCJpHpU+u89BW46tBOrfW0ufQBXnerbQdbynKiZ/jGJ68GvkP
mmXFU6o8MrGeup0vgma6nzm3e7NbbJM3s3BwguMpvJ29OhDz150OCRzmMavjjwja
bjRSQicX4YNuoA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:31:26 2025 by rpki-client