Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft
File:                     04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft (raw, json)
Hash identifier:          gqvBNVFGnw9rGyqdn5mkFzKmKVpIzKakwHU+W1KWRn0=
Subject key identifier:   41:91:CA:E7:58:88:86:16:01:2A:C6:2A:49:23:87:CC:02:2C:A9:D1
Authority key identifier: D3:80:2E:A8:F9:CE:80:2B:57:BB:BA:B7:8E:30:97:93:7F:FA:11:C4
Certificate issuer:       /CN=d3802ea8f9ce802b57bbbab78e3097937ffa11c4
Certificate serial:       01976A05933E7C5AC9379B99F2133E8D59FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/04AuqPnOgCtXu7q3jjCXk3_6EcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft
Manifest number:          028D
Signing time:             Fri 13 Jun 2025 16:00:39 +0000
Manifest this update:     Fri 13 Jun 2025 16:00:39 +0000
Manifest next update:     Sat 14 Jun 2025 16:00:39 +0000
Files and hashes:         1: 04AuqPnOgCtXu7q3jjCXk3_6EcQ.crl (hash: rT+fXC5u5+yTLZHHW+UZBDMiHNLdTeVIOVmg8+nixzY=)
                          2: 0k42oFwK9zeHh7UudZGNANSBYXM.roa (hash: 5Ao6mH3fPzWjkBEDJZN7zRWdA8LcUFLpcoEHQj83IGk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/04AuqPnOgCtXu7q3jjCXk3_6EcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:05:93:3e:7c:5a:c9:37:9b:99:f2:13:3e:8d:59:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3802ea8f9ce802b57bbbab78e3097937ffa11c4
        Validity
            Not Before: Jun 13 16:00:39 2025 GMT
            Not After : Jun 14 16:00:39 2025 GMT
        Subject: CN=4191cae758888616012ac62a492387cc022ca9d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:71:7c:56:bf:59:ce:48:65:92:46:e6:4c:c9:
                    1b:63:47:1e:96:9b:a9:6b:2e:f7:05:6f:54:eb:29:
                    b3:79:da:93:a7:64:24:19:0e:8d:53:37:b0:2c:ee:
                    b3:48:d5:c0:95:de:a7:00:aa:01:43:21:09:c6:e1:
                    52:f8:5a:4a:5f:df:c1:5d:61:0e:45:ce:3e:92:58:
                    80:20:79:24:8a:1e:e6:98:be:0c:73:ca:b7:e3:e0:
                    93:38:3e:bf:6d:6b:6f:ff:01:7b:9e:c8:bf:79:92:
                    c7:01:5a:1a:52:c1:53:3e:89:5a:e6:a3:9f:1e:2b:
                    e4:b6:3b:af:af:bc:4d:27:3b:c3:ee:c8:a1:5f:f8:
                    a5:fa:60:31:fc:5e:de:c2:5c:54:b2:1f:13:84:ce:
                    56:71:86:f9:f4:53:15:68:56:5d:d8:5d:c4:e5:6e:
                    ae:d3:6a:fb:a0:e6:59:e1:be:3e:c5:d6:a0:92:f6:
                    a2:67:a4:30:50:35:0e:42:4b:da:90:75:f6:f7:8c:
                    73:fb:bc:36:4e:0e:42:98:87:1a:3d:a3:c7:f4:2c:
                    0d:e8:c6:89:95:f2:0d:e0:0b:70:7c:c9:b6:68:92:
                    bb:c6:d3:06:56:a3:74:02:2f:a7:a5:88:7f:02:4a:
                    c9:e4:43:7b:f8:98:37:cb:f5:cc:d2:58:db:a7:bb:
                    6e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:91:CA:E7:58:88:86:16:01:2A:C6:2A:49:23:87:CC:02:2C:A9:D1
            X509v3 Authority Key Identifier:
                keyid:D3:80:2E:A8:F9:CE:80:2B:57:BB:BA:B7:8E:30:97:93:7F:FA:11:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04AuqPnOgCtXu7q3jjCXk3_6EcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:97:53:b3:16:3f:54:f4:8d:10:7a:fb:b9:95:7a:d1:48:3c:
         b4:ed:97:4a:f6:1c:eb:dc:e4:9b:46:25:a0:78:f2:97:15:00:
         b4:27:f7:9f:d2:65:68:80:08:67:f1:36:75:4d:9f:0b:a0:5b:
         a5:7d:60:b1:55:26:ee:02:ac:2a:c9:7e:24:24:ea:68:a2:0d:
         71:a6:3a:4b:91:80:05:1d:0d:a2:8e:5c:0d:29:fb:b2:9c:d4:
         21:29:75:13:61:72:0b:a8:f9:e7:ac:95:c7:d1:cf:b7:73:4e:
         49:1c:db:1e:05:88:a9:d3:ec:2c:a3:73:43:ca:3f:7f:92:a7:
         7b:e9:84:13:84:6f:4c:51:34:5b:05:0c:09:ef:6d:18:de:90:
         d6:35:d1:dc:7e:36:6a:51:2d:70:96:aa:53:4b:62:b6:d9:bf:
         ac:ae:9a:47:df:d7:58:8c:ba:14:b0:10:1c:7c:4d:d3:bb:de:
         ad:92:a6:bb:4e:24:a9:f7:6e:ec:f4:15:1b:1e:2c:4c:51:7a:
         e1:95:8a:f3:cd:0a:aa:11:c6:4f:ac:90:2f:92:22:9c:37:05:
         14:73:01:72:42:4e:d9:1a:1e:7e:e5:6f:b3:fb:54:ab:dc:6d:
         f6:6c:b5:a0:5d:d0:50:dd:93:72:c5:ca:45:9c:aa:ec:3f:61:
         05:29:95:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdqBZM+fFrJN5uZ8hM+jVn9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzODAyZWE4ZjljZTgwMmI1N2JiYmFiNzhlMzA5NzkzN2Zm
YTExYzQwHhcNMjUwNjEzMTYwMDM5WhcNMjUwNjE0MTYwMDM5WjAzMTEwLwYDVQQD
Eyg0MTkxY2FlNzU4ODg4NjE2MDEyYWM2MmE0OTIzODdjYzAyMmNhOWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XF8Vr9ZzkhlkkbmTMkbY0celpup
ay73BW9U6ymzedqTp2QkGQ6NUzewLO6zSNXAld6nAKoBQyEJxuFS+FpKX9/BXWEO
Rc4+kliAIHkkih7mmL4Mc8q34+CTOD6/bWtv/wF7nsi/eZLHAVoaUsFTPola5qOf
Hivktjuvr7xNJzvD7sihX/il+mAx/F7ewlxUsh8ThM5WcYb59FMVaFZd2F3E5W6u
02r7oOZZ4b4+xdagkvaiZ6QwUDUOQkvakHX294xz+7w2Tg5CmIcaPaPH9CwN6MaJ
lfIN4AtwfMm2aJK7xtMGVqN0Ai+npYh/AkrJ5EN7+Jg3y/XM0ljbp7tuPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGRyudYiIYWASrGKkkjh8wCLKnRMB8GA1UdIwQY
MBaAFNOALqj5zoArV7u6t44wl5N/+hHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDRBdXFQbk9nQ3RYdTdxM2pqQ1hrM182RWNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84NzAyZTctNGJmMS00MDdlLWJhZmUt
ZmFkMjFmZjI5ZTJiLzEvMDRBdXFQbk9nQ3RYdTdxM2pqQ1hrM182RWNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS84NzAyZTctNGJmMS00MDdlLWJhZmUtZmFkMjFmZjI5ZTJi
LzEvMDRBdXFQbk9nQ3RYdTdxM2pqQ1hrM182RWNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAZdTsxY/
VPSNEHr7uZV60Ug8tO2XSvYc69zkm0YloHjylxUAtCf3n9JlaIAIZ/E2dU2fC6Bb
pX1gsVUm7gKsKsl+JCTqaKINcaY6S5GABR0Noo5cDSn7spzUISl1E2FyC6j556yV
x9HPt3NOSRzbHgWIqdPsLKNzQ8o/f5Kne+mEE4RvTFE0WwUMCe9tGN6Q1jXR3H42
alEtcJaqU0tittm/rK6aR9/XWIy6FLAQHHxN07verZKmu04kqfdu7PQVGx4sTFF6
4ZWK880KqhHGT6yQL5IinDcFFHMBckJO2RoefuVvs/tUq9xt9my1oF3QUN2TcsXK
RZyq7D9hBSmVbg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:50:58 2025 by rpki-client