Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.mft
File:                     rBoLnMXOi_2e4m0J1-kRUaQtNw0.mft (raw, json)
Hash identifier:          1UO2LmNiy+j804LW1++IVBBrjwGmRtxJF8AaL+DmNoI=
Subject key identifier:   C4:6B:0A:F4:C9:07:CC:E4:51:CF:83:BC:6F:58:72:D5:BA:0F:9B:8B
Authority key identifier: AC:1A:0B:9C:C5:CE:8B:FD:9E:E2:6D:09:D7:E9:11:51:A4:2D:37:0D
Certificate issuer:       /CN=ac1a0b9cc5ce8bfd9ee26d09d7e91151a42d370d
Certificate serial:       01977007C5F377F4006764F55D8E5716BA95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rBoLnMXOi_2e4m0J1-kRUaQtNw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.mft
Manifest number:          1590
Signing time:             Sat 14 Jun 2025 20:00:46 +0000
Manifest this update:     Sat 14 Jun 2025 20:00:46 +0000
Manifest next update:     Sun 15 Jun 2025 20:00:46 +0000
Files and hashes:         1: e7v6KfsQ42Ju_th6J-KjayhE0pc.roa (hash: 2QzdBlDL7vaApFGThIZoir4ZfxpYLQiDlB23vrYFa1A=)
                          2: rBoLnMXOi_2e4m0J1-kRUaQtNw0.crl (hash: w0WaDzHNmlgOx/h8fxGP8LdtBV23SdWNeu9PnoNzSEk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rBoLnMXOi_2e4m0J1-kRUaQtNw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:07:c5:f3:77:f4:00:67:64:f5:5d:8e:57:16:ba:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac1a0b9cc5ce8bfd9ee26d09d7e91151a42d370d
        Validity
            Not Before: Jun 14 20:00:46 2025 GMT
            Not After : Jun 15 20:00:46 2025 GMT
        Subject: CN=c46b0af4c907cce451cf83bc6f5872d5ba0f9b8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e1:0b:2c:41:12:97:f7:51:17:e0:78:d6:f6:
                    fd:f6:78:57:ea:ca:9b:b8:6f:6b:2e:83:c6:3f:ef:
                    56:6f:51:b7:bc:ed:0f:c2:63:3a:67:8a:ad:4e:ef:
                    c2:49:76:1e:2c:d9:c0:f4:8f:a3:ae:82:f4:b3:44:
                    0f:3d:8c:06:b5:a2:2e:f5:78:5d:fa:5c:9e:2e:35:
                    1c:c8:7d:49:d3:99:20:85:e5:37:1f:72:93:0a:ce:
                    46:38:53:60:4c:d5:44:27:29:5e:e2:50:72:53:f7:
                    7a:0a:76:2f:df:5a:56:c3:d8:a7:bc:21:81:8d:34:
                    2c:86:a7:1b:62:15:c1:cc:2c:61:3a:59:b1:32:cf:
                    df:de:e1:b3:78:8a:7d:14:9f:04:ed:78:16:dc:0b:
                    54:dd:f5:b1:d8:c6:6b:d2:8f:17:68:11:82:0c:69:
                    0d:bb:c2:48:c9:89:61:5d:41:db:6e:f1:84:0e:2f:
                    63:cc:e4:cd:f6:92:4d:78:0e:96:23:dc:4d:9a:f2:
                    5a:44:3c:0a:c7:de:19:4a:6d:1b:af:bc:7c:97:d2:
                    e0:17:71:88:ae:8f:82:a2:bd:23:dd:58:16:30:0f:
                    c3:d1:b3:9d:4c:4e:08:71:9c:3c:95:e7:d8:f2:81:
                    c4:75:03:0a:43:32:20:e8:fc:82:54:7a:1a:6f:ca:
                    23:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6B:0A:F4:C9:07:CC:E4:51:CF:83:BC:6F:58:72:D5:BA:0F:9B:8B
            X509v3 Authority Key Identifier:
                keyid:AC:1A:0B:9C:C5:CE:8B:FD:9E:E2:6D:09:D7:E9:11:51:A4:2D:37:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rBoLnMXOi_2e4m0J1-kRUaQtNw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:b5:a5:da:42:4e:ac:3d:d6:63:0d:47:17:c0:b5:21:0e:7c:
         ca:35:1e:00:8a:b1:f6:17:9f:ed:ed:03:a1:e0:7e:c8:3b:8d:
         40:1d:de:8b:26:e3:81:2f:74:29:c4:dc:b7:65:95:7e:95:f0:
         7f:7b:6b:69:af:33:9c:e7:89:1d:21:cd:86:42:a9:67:67:15:
         a6:81:78:81:2d:b7:a3:c4:0d:10:2e:e5:d7:86:67:3a:57:4e:
         13:cd:20:81:7f:57:00:a1:55:75:d4:cc:10:24:97:69:84:93:
         a6:4f:df:f7:4d:ee:60:5b:f6:83:6c:81:8f:6a:92:f2:0f:a4:
         6b:4e:da:3b:4c:36:03:7e:a7:5b:68:78:51:37:7d:6a:75:3f:
         9f:75:61:39:81:48:cb:d9:d8:fb:70:ba:ce:85:5c:f1:fb:4f:
         75:39:60:e6:cc:cf:f3:4b:db:c6:69:a1:b5:e3:52:8c:4e:37:
         42:c8:c9:f1:6b:b3:73:5d:d6:be:b9:95:44:d7:75:fd:62:9d:
         c6:d7:a2:9b:c3:04:90:d8:c2:dd:af:0d:55:33:c1:91:18:92:
         66:47:e0:8d:cd:cc:ee:80:23:ed:61:76:0d:72:db:48:31:24:
         4f:68:36:53:70:e1:ca:82:49:d3:66:3c:cb:f6:47:9b:7e:af:
         57:ca:34:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwB8Xzd/QAZ2T1XY5XFrqVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMWEwYjljYzVjZThiZmQ5ZWUyNmQwOWQ3ZTkxMTUxYTQy
ZDM3MGQwHhcNMjUwNjE0MjAwMDQ2WhcNMjUwNjE1MjAwMDQ2WjAzMTEwLwYDVQQD
EyhjNDZiMGFmNGM5MDdjY2U0NTFjZjgzYmM2ZjU4NzJkNWJhMGY5YjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+ELLEESl/dRF+B41vb99nhX6sqb
uG9rLoPGP+9Wb1G3vO0PwmM6Z4qtTu/CSXYeLNnA9I+jroL0s0QPPYwGtaIu9Xhd
+lyeLjUcyH1J05kgheU3H3KTCs5GOFNgTNVEJyle4lByU/d6CnYv31pWw9invCGB
jTQshqcbYhXBzCxhOlmxMs/f3uGzeIp9FJ8E7XgW3AtU3fWx2MZr0o8XaBGCDGkN
u8JIyYlhXUHbbvGEDi9jzOTN9pJNeA6WI9xNmvJaRDwKx94ZSm0br7x8l9LgF3GI
ro+Cor0j3VgWMA/D0bOdTE4IcZw8lefY8oHEdQMKQzIg6PyCVHoab8ojQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRrCvTJB8zkUc+DvG9YctW6D5uLMB8GA1UdIwQY
MBaAFKwaC5zFzov9nuJtCdfpEVGkLTcNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckJvTG5NWE9pXzJlNG0wSjEta1JVYVF0TncwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9hMzI4NzItODhhMy00ZTg0LTlmODMt
YWE3MzUzZDRkOThmLzEvckJvTG5NWE9pXzJlNG0wSjEta1JVYVF0TncwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9hMzI4NzItODhhMy00ZTg0LTlmODMtYWE3MzUzZDRkOThm
LzEvckJvTG5NWE9pXzJlNG0wSjEta1JVYVF0TncwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMrWl2kJO
rD3WYw1HF8C1IQ58yjUeAIqx9hef7e0DoeB+yDuNQB3eiybjgS90KcTct2WVfpXw
f3traa8znOeJHSHNhkKpZ2cVpoF4gS23o8QNEC7l14ZnOldOE80ggX9XAKFVddTM
ECSXaYSTpk/f903uYFv2g2yBj2qS8g+ka07aO0w2A36nW2h4UTd9anU/n3VhOYFI
y9nY+3C6zoVc8ftPdTlg5szP80vbxmmhteNSjE43QsjJ8Wuzc13WvrmVRNd1/WKd
xteim8MEkNjC3a8NVTPBkRiSZkfgjc3M7oAj7WF2DXLbSDEkT2g2U3DhyoJJ02Y8
y/ZHm36vV8o0IQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:57:14 2025 by rpki-client