Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
File:                     L6TocLw3rJcx_m_PloLrZX5QvKM.mft (raw, json)
Hash identifier:          wjB9AEc98vDPcNY9K2J1rkOQrk5/vyGGpu8h7UzfvTc=
Subject key identifier:   FE:24:0D:C2:29:9D:E5:1F:7A:0E:36:FF:6C:B3:8C:6E:6F:E6:A4:48
Authority key identifier: 2F:A4:E8:70:BC:37:AC:97:31:FE:6F:CF:96:82:EB:65:7E:50:BC:A3
Certificate issuer:       /CN=2fa4e870bc37ac9731fe6fcf9682eb657e50bca3
Certificate serial:       0197688536118F59DCE72AC53C676510AB4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
Manifest number:          10AA
Signing time:             Fri 13 Jun 2025 09:00:49 +0000
Manifest this update:     Fri 13 Jun 2025 09:00:49 +0000
Manifest next update:     Sat 14 Jun 2025 09:00:49 +0000
Files and hashes:         1: L6TocLw3rJcx_m_PloLrZX5QvKM.crl (hash: QIIpdjXDqLSaPjAjlTii5SafjCLPwrpjtRyDtt1n3z4=)
                          2: m7j41yWDEfLAx4I6fuINswAyiXA.roa (hash: dDqFpGebxjdBoXgviJqZBlxaNfM8q5rLJMGVfhQeHKs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 09:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:85:36:11:8f:59:dc:e7:2a:c5:3c:67:65:10:ab:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa4e870bc37ac9731fe6fcf9682eb657e50bca3
        Validity
            Not Before: Jun 13 09:00:49 2025 GMT
            Not After : Jun 14 09:00:49 2025 GMT
        Subject: CN=fe240dc2299de51f7a0e36ff6cb38c6e6fe6a448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ab:b9:33:2d:53:0b:3d:8c:c3:37:dc:d7:f1:
                    c6:0e:67:6c:e3:22:83:59:e3:83:90:0f:8e:6b:21:
                    d1:02:3a:e5:56:a5:c5:96:12:65:cc:ab:3a:e8:39:
                    44:65:9a:75:a3:69:ad:91:07:33:90:6b:da:40:16:
                    1a:fb:78:f0:db:80:ec:cb:05:6f:7c:f9:ac:36:a8:
                    ea:c9:b5:a2:69:4f:08:bc:9b:13:15:ac:6c:ab:e8:
                    49:d7:9e:33:2b:5a:fe:27:39:96:9d:e8:60:02:62:
                    3e:09:77:90:55:b0:e6:d4:18:0c:fd:fe:5e:90:ed:
                    3f:dd:6e:b6:b1:7e:0c:95:aa:37:db:7a:27:87:9a:
                    37:ed:65:33:85:2e:06:9f:8b:19:69:95:2c:f7:2d:
                    74:33:95:15:02:82:4f:8f:75:b2:08:17:1f:22:6f:
                    e6:b6:69:a7:8a:c7:09:13:45:a8:a8:35:c0:5f:7b:
                    a6:be:e6:a8:fd:40:14:68:ce:ae:b6:0f:1e:60:50:
                    8d:9d:89:40:0e:8f:68:ba:94:89:db:cb:86:f9:e8:
                    64:49:ac:95:ef:fd:f3:f3:34:21:fa:af:09:a4:d3:
                    e7:a5:d6:3b:96:34:32:3b:bf:95:46:30:62:ab:dc:
                    5e:b0:b4:52:a5:36:be:6c:25:f5:95:3b:5c:7a:4d:
                    29:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:24:0D:C2:29:9D:E5:1F:7A:0E:36:FF:6C:B3:8C:6E:6F:E6:A4:48
            X509v3 Authority Key Identifier:
                keyid:2F:A4:E8:70:BC:37:AC:97:31:FE:6F:CF:96:82:EB:65:7E:50:BC:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:1c:50:ee:55:95:5f:cc:4f:bc:82:00:44:58:2f:4b:42:7e:
         ab:a0:11:92:ce:20:a7:36:37:e0:c6:79:5e:e2:f2:f9:8c:a0:
         2d:83:d0:5b:b7:a1:51:d6:64:22:38:fc:ef:7d:a5:73:a1:4a:
         eb:a6:87:63:67:b1:28:ee:47:4e:0c:2b:4d:68:98:97:b4:1e:
         d2:36:70:10:0c:78:61:65:49:ca:ee:a2:11:dd:83:be:74:2c:
         13:a7:b0:e3:a0:52:41:c8:e0:49:2a:8f:8d:31:8a:e9:24:82:
         56:b7:df:f8:33:4f:5a:cd:39:dc:4a:4b:f6:23:02:e6:08:63:
         52:b7:b9:f6:ee:0c:27:17:24:20:3a:60:2f:71:7e:35:c4:61:
         00:1e:b2:cf:8b:de:2b:03:1c:b4:77:98:a3:a5:12:71:28:12:
         2e:65:50:4b:80:ce:c7:45:9e:06:6d:72:4e:fa:bb:2c:97:a6:
         63:6a:cf:9e:c8:89:3c:24:4e:05:a1:62:45:f0:13:0e:fd:65:
         95:83:0d:67:ee:fe:ae:b6:62:df:a7:c0:59:39:3e:5f:9e:79:
         b5:ef:68:7e:b6:85:4a:f4:7b:55:44:7e:b9:7b:97:4c:19:57:
         ff:07:d1:9b:2d:d8:87:19:6b:18:4d:ee:c8:c2:94:a5:57:93:
         46:31:7c:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdohTYRj1nc5yrFPGdlEKtOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYTRlODcwYmMzN2FjOTczMWZlNmZjZjk2ODJlYjY1N2U1
MGJjYTMwHhcNMjUwNjEzMDkwMDQ5WhcNMjUwNjE0MDkwMDQ5WjAzMTEwLwYDVQQD
EyhmZTI0MGRjMjI5OWRlNTFmN2EwZTM2ZmY2Y2IzOGM2ZTZmZTZhNDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKu5My1TCz2Mwzfc1/HGDmds4yKD
WeODkA+OayHRAjrlVqXFlhJlzKs66DlEZZp1o2mtkQczkGvaQBYa+3jw24DsywVv
fPmsNqjqybWiaU8IvJsTFaxsq+hJ154zK1r+JzmWnehgAmI+CXeQVbDm1BgM/f5e
kO0/3W62sX4Mlao323onh5o37WUzhS4Gn4sZaZUs9y10M5UVAoJPj3WyCBcfIm/m
tmmniscJE0WoqDXAX3umvuao/UAUaM6utg8eYFCNnYlADo9oupSJ28uG+ehkSayV
7/3z8zQh+q8JpNPnpdY7ljQyO7+VRjBiq9xesLRSpTa+bCX1lTtcek0pSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4kDcIpneUfeg42/2yzjG5v5qRIMB8GA1UdIwQY
MBaAFC+k6HC8N6yXMf5vz5aC62V+ULyjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDZUb2NMdzNySmN4X21fUGxvTHJaWDVRdktNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8zZjYzMTAtZjU2Yi00MTY1LWI4ZmUt
OWI4N2YyYWZiZDdmLzEvTDZUb2NMdzNySmN4X21fUGxvTHJaWDVRdktNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8zZjYzMTAtZjU2Yi00MTY1LWI4ZmUtOWI4N2YyYWZiZDdm
LzEvTDZUb2NMdzNySmN4X21fUGxvTHJaWDVRdktNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlRxQ7lWV
X8xPvIIARFgvS0J+q6ARks4gpzY34MZ5XuLy+YygLYPQW7ehUdZkIjj8732lc6FK
66aHY2exKO5HTgwrTWiYl7Qe0jZwEAx4YWVJyu6iEd2DvnQsE6ew46BSQcjgSSqP
jTGK6SSCVrff+DNPWs053EpL9iMC5ghjUre59u4MJxckIDpgL3F+NcRhAB6yz4ve
KwMctHeYo6UScSgSLmVQS4DOx0WeBm1yTvq7LJemY2rPnsiJPCROBaFiRfATDv1l
lYMNZ+7+rrZi36fAWTk+X555te9ofraFSvR7VUR+uXuXTBlX/wfRmy3YhxlrGE3u
yMKUpVeTRjF8yg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 18:58:20 2025 by rpki-client