Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
File:                     _JEop2LO62tZ9UMVaLwT_OQauhI.mft (raw, json)
Hash identifier:          9o2cAjDBvEitvQ4W4PDvsc8xF2v2IkhF79RCEMwYyWI=
Subject key identifier:   51:75:DF:4D:C9:DF:A4:DF:9A:C9:F7:68:BE:E1:CA:BE:45:83:3C:B6
Authority key identifier: FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12
Certificate issuer:       /CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
Certificate serial:       0197692992004262D6414526F258C67B223D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
Manifest number:          03F1
Signing time:             Fri 13 Jun 2025 12:00:21 +0000
Manifest this update:     Fri 13 Jun 2025 12:00:21 +0000
Manifest next update:     Sat 14 Jun 2025 12:00:21 +0000
Files and hashes:         1: _JEop2LO62tZ9UMVaLwT_OQauhI.crl (hash: 8AmUfOxp2iIY0zyLDHYBytMqyZ54Qr+CLCR88zA2v60=)
                          2: vrcnG3rPeIv-84eM3hfeiXZcqyA.roa (hash: JWLSZU8dWBcg2FNxy+Ts9gij4yT1i3JNXoLy/WJRhwU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 12:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:29:92:00:42:62:d6:41:45:26:f2:58:c6:7b:22:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
        Validity
            Not Before: Jun 13 12:00:21 2025 GMT
            Not After : Jun 14 12:00:21 2025 GMT
        Subject: CN=5175df4dc9dfa4df9ac9f768bee1cabe45833cb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:37:70:fe:55:e6:6d:42:56:48:0c:0c:51:47:
                    ac:cc:ee:c4:2f:cf:29:4f:b7:48:9a:ad:fc:14:6d:
                    04:3e:71:fe:b6:25:ae:95:76:fb:dd:15:10:54:ed:
                    dc:1e:d3:cb:b7:89:75:07:3d:87:43:06:0b:b8:cf:
                    82:6c:35:bd:03:18:b0:85:ff:07:7e:e4:8b:9e:37:
                    8c:6a:bc:f7:22:ed:d4:5a:06:71:50:d3:3b:11:a8:
                    99:29:8e:86:c1:8b:21:84:c0:c1:10:cd:b9:1e:85:
                    cf:41:2d:05:30:78:f0:57:4e:8e:2c:9c:83:9a:66:
                    c3:a5:99:05:8f:d7:72:d0:26:5f:08:4d:e0:37:a2:
                    bc:6d:f0:6d:70:a9:9f:c1:d2:f2:cf:2f:0c:37:77:
                    e5:1a:66:aa:59:40:57:c2:43:0f:4f:b1:a1:bc:ee:
                    91:f8:37:2a:75:fa:6d:ac:54:4c:02:7c:c2:67:e5:
                    31:bd:bb:7f:4d:04:38:a2:e6:c4:4b:a8:9a:32:c5:
                    e1:f6:b9:98:9f:69:4e:72:89:73:0c:43:68:34:7a:
                    d4:03:2f:a5:89:c1:2b:12:fd:33:38:6e:a1:15:8e:
                    4c:81:98:b6:c1:4b:46:19:e2:5b:18:62:56:e6:b3:
                    d8:c9:16:1b:af:21:0a:d9:a7:1e:ec:72:e6:a5:65:
                    6a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:75:DF:4D:C9:DF:A4:DF:9A:C9:F7:68:BE:E1:CA:BE:45:83:3C:B6
            X509v3 Authority Key Identifier:
                keyid:FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:ba:4e:d2:2c:1b:f7:35:ee:65:fd:28:ce:27:0b:13:90:07:
         2d:93:82:c2:2c:92:63:69:30:6d:6f:91:5c:a4:c0:d0:64:8e:
         55:42:86:49:90:d6:03:c1:7c:9b:e5:03:2a:96:2f:e6:ba:cb:
         10:c2:dc:a4:07:f1:55:f0:95:c6:56:f8:4d:2a:bc:e6:cd:74:
         c2:f1:06:da:90:4c:32:72:da:3c:43:37:57:3f:31:8b:58:b5:
         7f:02:0c:2b:de:30:3a:dc:48:d6:1b:c7:2f:b9:41:c5:f5:6f:
         6b:50:f3:8d:5a:7b:a8:ef:72:69:ee:4b:f9:8a:9e:bc:cb:92:
         e9:28:5c:31:f4:a2:fd:aa:f1:17:77:31:39:0c:89:0a:ba:31:
         fc:a6:05:59:12:c0:9a:f6:b7:71:b9:3a:5f:8e:33:fe:92:31:
         28:62:d3:63:29:83:ac:fc:16:3e:78:12:b4:64:7f:84:82:fe:
         5c:b1:cd:d5:10:f2:76:57:a8:99:49:49:89:cc:bf:8a:11:98:
         c9:0c:43:d4:96:6f:10:9d:40:bb:da:0d:6e:c3:1f:35:0d:f1:
         8a:12:36:12:0a:d4:67:d1:f6:14:64:03:b8:a8:05:fc:3c:ca:
         5f:8d:88:3a:3a:8c:4b:82:4c:5e:af:cb:8c:75:bc:44:a7:33:
         9b:1e:19:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpKZIAQmLWQUUm8ljGeyI9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjOTEyOGE3NjJjZWViNmI1OWY1NDMxNTY4YmMxM2ZjZTQx
YWJhMTIwHhcNMjUwNjEzMTIwMDIxWhcNMjUwNjE0MTIwMDIxWjAzMTEwLwYDVQQD
Eyg1MTc1ZGY0ZGM5ZGZhNGRmOWFjOWY3NjhiZWUxY2FiZTQ1ODMzY2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zdw/lXmbUJWSAwMUUeszO7EL88p
T7dImq38FG0EPnH+tiWulXb73RUQVO3cHtPLt4l1Bz2HQwYLuM+CbDW9Axiwhf8H
fuSLnjeMarz3Iu3UWgZxUNM7EaiZKY6GwYshhMDBEM25HoXPQS0FMHjwV06OLJyD
mmbDpZkFj9dy0CZfCE3gN6K8bfBtcKmfwdLyzy8MN3flGmaqWUBXwkMPT7GhvO6R
+DcqdfptrFRMAnzCZ+Uxvbt/TQQ4oubES6iaMsXh9rmYn2lOcolzDENoNHrUAy+l
icErEv0zOG6hFY5MgZi2wUtGGeJbGGJW5rPYyRYbryEK2ace7HLmpWVq7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFF1303J36Tfmsn3aL7hyr5Fgzy2MB8GA1UdIwQY
MBaAFPyRKKdizutrWfVDFWi8E/zkGroSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0pFb3AyTE82MnRaOVVNVmFMd1RfT1FhdWhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yMWU2OGMtMWM0Yy00NTU5LTllMzAt
MTM1ZDcwOWI1OWUwLzEvX0pFb3AyTE82MnRaOVVNVmFMd1RfT1FhdWhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8yMWU2OGMtMWM0Yy00NTU5LTllMzAtMTM1ZDcwOWI1OWUw
LzEvX0pFb3AyTE82MnRaOVVNVmFMd1RfT1FhdWhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcrpO0iwb
9zXuZf0ozicLE5AHLZOCwiySY2kwbW+RXKTA0GSOVUKGSZDWA8F8m+UDKpYv5rrL
EMLcpAfxVfCVxlb4TSq85s10wvEG2pBMMnLaPEM3Vz8xi1i1fwIMK94wOtxI1hvH
L7lBxfVva1DzjVp7qO9yae5L+YqevMuS6ShcMfSi/arxF3cxOQyJCrox/KYFWRLA
mva3cbk6X44z/pIxKGLTYymDrPwWPngStGR/hIL+XLHN1RDydleomUlJicy/ihGY
yQxD1JZvEJ1Au9oNbsMfNQ3xihI2EgrUZ9H2FGQDuKgF/DzKX42IOjqMS4JMXq/L
jHW8RKczmx4ZxA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:02:34 2025 by rpki-client