Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft
File:                     RfwKpabDOR7__6g0JbI7JkxxCF8.mft (raw, json)
Hash identifier:          GjTMf8WxznwlqNJjtccvAvcQAy1X3xejykZU24HpsOo=
Subject key identifier:   6D:69:9A:ED:5A:68:D8:D0:68:0D:3D:76:C6:E8:D2:A7:A9:1E:02:81
Authority key identifier: 45:FC:0A:A5:A6:C3:39:1E:FF:FF:A8:34:25:B2:3B:26:4C:71:08:5F
Certificate issuer:       /CN=45fc0aa5a6c3391effffa83425b23b264c71085f
Certificate serial:       01977075338E1081C5AB2A48C123D22B1CCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft
Manifest number:          0341
Signing time:             Sat 14 Jun 2025 22:00:18 +0000
Manifest this update:     Sat 14 Jun 2025 22:00:18 +0000
Manifest next update:     Sun 15 Jun 2025 22:00:18 +0000
Files and hashes:         1: AtEE45wMuuWclU17cb1kVGtiK-k.roa (hash: zV0IMkpRcApVZ59kj9E+ybhQgMo26h1xRqM1Q3Q35gM=)
                          2: RfwKpabDOR7__6g0JbI7JkxxCF8.crl (hash: EzOzJZnmE4xIvkhs1jjd3TJLfkOW5ML+3xtWdJGAW0Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:75:33:8e:10:81:c5:ab:2a:48:c1:23:d2:2b:1c:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45fc0aa5a6c3391effffa83425b23b264c71085f
        Validity
            Not Before: Jun 14 22:00:18 2025 GMT
            Not After : Jun 15 22:00:18 2025 GMT
        Subject: CN=6d699aed5a68d8d0680d3d76c6e8d2a7a91e0281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:21:0e:e1:f2:15:4c:fe:f5:5c:d0:cf:c3:fb:
                    04:35:a4:f9:ff:8a:71:49:da:1a:b1:98:fc:d5:2e:
                    89:33:c1:e9:4e:f5:82:9a:53:ba:4d:ab:b1:32:d6:
                    24:59:ba:db:d7:bb:33:cc:2a:19:b0:24:ad:11:79:
                    e8:54:bf:23:34:5e:6e:ca:10:18:65:70:5b:c7:74:
                    e2:a1:e0:c8:ab:c9:89:11:6f:44:0a:7a:c8:70:10:
                    be:2b:39:8a:d8:26:98:27:7c:5e:60:10:36:49:fd:
                    b7:95:c3:6e:c8:8b:8d:39:f0:c4:a8:ba:08:db:e8:
                    22:09:a9:52:27:0a:bc:ac:a6:cf:89:aa:98:0e:e6:
                    30:c3:58:50:8e:78:4e:ca:8b:8a:11:61:74:82:a0:
                    01:73:79:5b:39:08:3b:c5:13:fa:fe:cd:6d:7d:e5:
                    08:5d:ad:0b:39:0a:fe:c5:7d:ac:a2:a5:73:c8:01:
                    de:f6:db:6b:6d:f7:e1:6b:f1:8a:be:ca:8d:65:ee:
                    51:bd:b8:d7:23:2f:f1:b1:13:19:e1:9d:f1:78:84:
                    53:fb:d9:f5:99:0a:16:5b:f1:07:e2:64:bd:eb:bf:
                    8e:19:88:03:e0:7e:cc:b8:d7:e9:51:1d:93:c0:e3:
                    20:5a:0f:b0:de:71:21:a5:74:22:b6:3f:89:98:56:
                    08:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:69:9A:ED:5A:68:D8:D0:68:0D:3D:76:C6:E8:D2:A7:A9:1E:02:81
            X509v3 Authority Key Identifier:
                keyid:45:FC:0A:A5:A6:C3:39:1E:FF:FF:A8:34:25:B2:3B:26:4C:71:08:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:cd:6e:4b:cd:98:a1:58:a9:d6:65:9e:c3:b5:e4:ed:5f:b7:
         9a:4a:b8:71:37:b2:59:69:aa:4a:97:ba:30:75:00:3b:ac:0f:
         0b:64:7d:52:79:14:12:f8:52:85:9c:34:0c:60:be:f9:df:b9:
         7e:b1:20:2d:c0:9b:d9:2d:f5:b0:eb:61:eb:39:a2:91:97:cd:
         6e:9a:fc:9f:a9:0c:8b:11:8d:42:d1:59:24:bd:ea:3b:43:02:
         e1:a6:30:36:bb:13:c9:29:f5:ac:b9:98:e8:00:6e:d0:fc:dd:
         cd:66:46:55:b3:99:8f:2c:bc:cd:33:2b:5b:67:e6:95:56:c9:
         57:ca:91:d0:b4:86:c0:04:cb:d3:d7:8b:36:65:f5:56:21:85:
         03:19:b7:93:db:2f:f3:3d:76:cf:48:cf:60:ab:b1:fa:85:74:
         db:e4:6b:6c:db:fc:a3:52:a4:b5:9b:4a:52:3d:71:fc:1b:f9:
         7d:d0:1b:dd:62:2c:5d:27:55:8c:5d:78:ff:b4:fd:aa:7d:c8:
         c4:5f:1d:6f:37:31:ea:27:cf:72:86:05:bf:ee:53:a1:55:0a:
         fc:13:c5:63:93:d7:db:da:87:b5:48:42:54:97:f1:47:c7:75:
         67:43:15:37:3f:59:11:ba:3c:62:2f:62:b7:14:6d:87:c6:c4:
         4d:ae:13:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwdTOOEIHFqypIwSPSKxzPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZmMwYWE1YTZjMzM5MWVmZmZmYTgzNDI1YjIzYjI2NGM3
MTA4NWYwHhcNMjUwNjE0MjIwMDE4WhcNMjUwNjE1MjIwMDE4WjAzMTEwLwYDVQQD
Eyg2ZDY5OWFlZDVhNjhkOGQwNjgwZDNkNzZjNmU4ZDJhN2E5MWUwMjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviEO4fIVTP71XNDPw/sENaT5/4px
SdoasZj81S6JM8HpTvWCmlO6TauxMtYkWbrb17szzCoZsCStEXnoVL8jNF5uyhAY
ZXBbx3TioeDIq8mJEW9ECnrIcBC+KzmK2CaYJ3xeYBA2Sf23lcNuyIuNOfDEqLoI
2+giCalSJwq8rKbPiaqYDuYww1hQjnhOyouKEWF0gqABc3lbOQg7xRP6/s1tfeUI
Xa0LOQr+xX2soqVzyAHe9ttrbffha/GKvsqNZe5RvbjXIy/xsRMZ4Z3xeIRT+9n1
mQoWW/EH4mS967+OGYgD4H7MuNfpUR2TwOMgWg+w3nEhpXQitj+JmFYIqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1pmu1aaNjQaA09dsbo0qepHgKBMB8GA1UdIwQY
MBaAFEX8CqWmwzke//+oNCWyOyZMcQhfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmZ3S3BhYkRPUjdfXzZnMEpiSTdKa3h4Q0Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS83M2M2MGItMThjZC00MjViLThlNmYt
OTI3MTliMDBiYmQ0LzEvUmZ3S3BhYkRPUjdfXzZnMEpiSTdKa3h4Q0Y4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS83M2M2MGItMThjZC00MjViLThlNmYtOTI3MTliMDBiYmQ0
LzEvUmZ3S3BhYkRPUjdfXzZnMEpiSTdKa3h4Q0Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWM1uS82Y
oVip1mWew7Xk7V+3mkq4cTeyWWmqSpe6MHUAO6wPC2R9UnkUEvhShZw0DGC++d+5
frEgLcCb2S31sOth6zmikZfNbpr8n6kMixGNQtFZJL3qO0MC4aYwNrsTySn1rLmY
6ABu0PzdzWZGVbOZjyy8zTMrW2fmlVbJV8qR0LSGwATL09eLNmX1ViGFAxm3k9sv
8z12z0jPYKux+oV02+RrbNv8o1KktZtKUj1x/Bv5fdAb3WIsXSdVjF14/7T9qn3I
xF8dbzcx6ifPcoYFv+5ToVUK/BPFY5PX29qHtUhCVJfxR8d1Z0MVNz9ZEbo8Yi9i
txRth8bETa4TvQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:35:33 2025 by rpki-client