Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
File:                     3DiEAh0bAujBa1VXQ9_rnajkjjE.mft (raw, json)
Hash identifier:          4BL9oGvdwlIlzbMNL+ogx73e9EyiaLf7zhgcMzILGME=
Subject key identifier:   90:56:90:DC:B8:C3:76:A1:D8:79:99:FA:FB:22:1B:40:2D:B9:57:39
Authority key identifier: DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31
Certificate issuer:       /CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
Certificate serial:       0197722CF5229DBAA2351DD328E0D24BE35D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
Manifest number:          1596
Signing time:             Sun 15 Jun 2025 06:00:38 +0000
Manifest this update:     Sun 15 Jun 2025 06:00:38 +0000
Manifest next update:     Mon 16 Jun 2025 06:00:38 +0000
Files and hashes:         1: 3DiEAh0bAujBa1VXQ9_rnajkjjE.crl (hash: DCebiNx+PDPwy+q76YhoqTuaGz8dukYLBGRvCW1uf1Q=)
                          2: Fv3sE2iVskV-mDIZ6tC2kUlGAaA.roa (hash: H3F5XuYvkLtvyyyPb3WNBs3Jib+ztvm2aFiyN79ql3U=)
                          3: Lf6gNW4pB2_3G8WJ1gs4diM2dp4.roa (hash: KsApADDkWth8orQKJUtme8wDWNYjMSX9ur5fZXW4Ab8=)
                          4: MC2jKTT_qt4dQPRJuzCLJkn3dIY.roa (hash: 690YFNoA6dF93SoBbsIHXRbUtNVseAW76vFSFSdgmtM=)
                          5: Y7R0jQTyur7PS79n24V95dokJ1E.roa (hash: kBuKXhAOJMq8DqLXajUVs2ZVCA0WRxqfHOvHHVdd1e0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:72:2c:f5:22:9d:ba:a2:35:1d:d3:28:e0:d2:4b:e3:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
        Validity
            Not Before: Jun 15 06:00:38 2025 GMT
            Not After : Jun 16 06:00:38 2025 GMT
        Subject: CN=905690dcb8c376a1d87999fafb221b402db95739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:08:bc:be:46:fd:07:fc:f8:b7:ea:dc:4f:c4:
                    4e:be:ed:07:b7:48:2b:e2:05:15:78:17:be:7e:6a:
                    f6:8f:74:cb:7b:dd:12:af:dd:70:4e:db:dc:a8:e2:
                    16:4c:24:dc:fa:6a:17:4a:f6:17:a6:df:ef:fa:e2:
                    64:a7:35:34:43:e5:b1:90:9b:c1:49:ce:38:60:ea:
                    7c:9a:e3:9c:b0:1c:4f:6f:46:ec:c6:89:ee:12:41:
                    9b:9b:c3:ed:09:ad:58:ff:f6:49:53:3e:bf:63:02:
                    33:ba:54:97:37:b4:b8:3f:2d:72:09:9b:10:d1:15:
                    78:48:0c:91:84:a4:c9:a5:e3:c0:0b:c7:ca:c7:2e:
                    15:74:4d:c0:08:c8:8e:dd:77:11:97:e4:70:6d:5d:
                    f3:9e:04:9e:bb:5d:47:e2:58:c8:58:23:3c:ef:30:
                    79:38:73:4f:d8:07:4c:8b:86:ed:8c:52:00:38:2b:
                    96:1e:b2:f5:05:94:67:20:80:eb:ba:b6:66:0f:dc:
                    d4:89:30:e8:27:35:ec:ea:db:0a:5d:5c:c4:47:dd:
                    e8:55:82:a9:6e:be:1c:47:31:5c:c2:cb:29:c7:bd:
                    84:92:19:98:36:a5:b6:05:04:9b:f3:aa:36:a9:1c:
                    35:e2:9c:bf:f7:d5:6f:b1:ad:6b:09:6c:04:5a:5c:
                    c6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:56:90:DC:B8:C3:76:A1:D8:79:99:FA:FB:22:1B:40:2D:B9:57:39
            X509v3 Authority Key Identifier:
                keyid:DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:14:35:66:91:f9:81:b9:34:f8:bc:a4:55:46:89:e8:37:d4:
         2c:29:f5:4a:bd:fb:50:c5:0a:e2:6a:5e:18:97:46:6a:69:0f:
         2c:7b:79:7d:2f:08:ed:c9:97:63:21:ed:c2:74:e3:b3:e8:c3:
         83:0b:cb:1c:72:9d:b9:47:cc:f0:75:35:09:64:57:a1:f4:12:
         aa:f5:df:bd:15:f5:b4:e3:4a:65:e7:f4:ce:d5:f6:0b:97:ac:
         41:1c:b1:2e:52:46:0c:40:4e:88:71:df:02:a0:07:d2:04:94:
         a1:6b:d9:f6:4d:ff:20:33:a1:61:9d:bb:aa:73:ee:1a:9a:16:
         fd:ee:ae:8a:46:17:7c:d6:52:9f:0d:6b:60:ac:7b:36:8f:7f:
         33:d2:df:28:e0:50:8d:db:e5:08:c8:3f:b7:e9:28:ec:6e:c0:
         8d:77:87:35:59:18:79:71:fa:e6:4a:0d:d9:89:f1:4e:51:a7:
         93:f5:ab:ca:69:95:ac:1c:00:3e:95:06:ef:89:48:62:6c:0f:
         55:09:75:52:23:7e:60:8d:f3:d6:bc:5f:35:cf:9d:41:61:2e:
         b6:37:82:f4:32:12:c5:8d:88:a2:df:9d:3d:85:3c:ef:4c:b3:
         a4:a4:a9:36:a3:ce:20:ef:04:a2:be:ea:14:4f:32:e9:69:14:
         fb:db:22:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdyLPUinbqiNR3TKODSS+NdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMzg4NDAyMWQxYjAyZThjMTZiNTU1NzQzZGZlYjlkYThl
NDhlMzEwHhcNMjUwNjE1MDYwMDM4WhcNMjUwNjE2MDYwMDM4WjAzMTEwLwYDVQQD
Eyg5MDU2OTBkY2I4YzM3NmExZDg3OTk5ZmFmYjIyMWI0MDJkYjk1NzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQi8vkb9B/z4t+rcT8ROvu0Ht0gr
4gUVeBe+fmr2j3TLe90Sr91wTtvcqOIWTCTc+moXSvYXpt/v+uJkpzU0Q+WxkJvB
Sc44YOp8muOcsBxPb0bsxonuEkGbm8PtCa1Y//ZJUz6/YwIzulSXN7S4Py1yCZsQ
0RV4SAyRhKTJpePAC8fKxy4VdE3ACMiO3XcRl+RwbV3zngSeu11H4ljIWCM87zB5
OHNP2AdMi4btjFIAOCuWHrL1BZRnIIDrurZmD9zUiTDoJzXs6tsKXVzER93oVYKp
br4cRzFcwsspx72EkhmYNqW2BQSb86o2qRw14py/99Vvsa1rCWwEWlzGkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJBWkNy4w3ah2HmZ+vsiG0AtuVc5MB8GA1UdIwQY
MBaAFNw4hAIdGwLowWtVV0Pf652o5I4xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0RpRUFoMGJBdWpCYTFWWFE5X3JuYWprampFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8wY2IyZjktOGVmOS00ZWViLTk2MmEt
ZDhiNGUwZDBkNmQ1LzEvM0RpRUFoMGJBdWpCYTFWWFE5X3JuYWprampFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8wY2IyZjktOGVmOS00ZWViLTk2MmEtZDhiNGUwZDBkNmQ1
LzEvM0RpRUFoMGJBdWpCYTFWWFE5X3JuYWprampFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWRQ1ZpH5
gbk0+LykVUaJ6DfULCn1Sr37UMUK4mpeGJdGamkPLHt5fS8I7cmXYyHtwnTjs+jD
gwvLHHKduUfM8HU1CWRXofQSqvXfvRX1tONKZef0ztX2C5esQRyxLlJGDEBOiHHf
AqAH0gSUoWvZ9k3/IDOhYZ27qnPuGpoW/e6uikYXfNZSnw1rYKx7No9/M9LfKOBQ
jdvlCMg/t+ko7G7AjXeHNVkYeXH65koN2YnxTlGnk/WrymmVrBwAPpUG74lIYmwP
VQl1UiN+YI3z1rxfNc+dQWEutjeC9DISxY2Iot+dPYU870yzpKSpNqPOIO8Eor7q
FE8y6WkU+9si+Q==
-----END CERTIFICATE-----
Generated at Sun Jun 15 11:28:28 2025 by rpki-client