Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft
File:                     jO6IBP9wN24q_iGr-T4ijVr91Qk.mft (raw, json)
Hash identifier:          tCFJs3Tz5hVZ9wjMMCZeqbtzzvytqdB/kobo3/xzsAo=
Subject key identifier:   BF:39:7B:AF:E0:18:8E:14:F3:ED:AB:39:B3:04:BF:46:D4:29:3B:39
Authority key identifier: 8C:EE:88:04:FF:70:37:6E:2A:FE:21:AB:F9:3E:22:8D:5A:FD:D5:09
Certificate issuer:       /CN=8cee8804ff70376e2afe21abf93e228d5afdd509
Certificate serial:       01976C61C3D3E2F3D5C4F702A35C0B0AF372
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft
Manifest number:          158E
Signing time:             Sat 14 Jun 2025 03:00:35 +0000
Manifest this update:     Sat 14 Jun 2025 03:00:35 +0000
Manifest next update:     Sun 15 Jun 2025 03:00:35 +0000
Files and hashes:         1: ZW-bLN7mpwXCPTSQ0v5aAVoTu8g.roa (hash: E10KwVeqHj4J7myzFFX6atSdaz21CXH8tahheXJigm0=)
                          2: jO6IBP9wN24q_iGr-T4ijVr91Qk.crl (hash: i/zUkXFaIzYa2kGOEJAFNV6Zlv3WCSLXwbhEtjTCx6g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:61:c3:d3:e2:f3:d5:c4:f7:02:a3:5c:0b:0a:f3:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cee8804ff70376e2afe21abf93e228d5afdd509
        Validity
            Not Before: Jun 14 03:00:35 2025 GMT
            Not After : Jun 15 03:00:35 2025 GMT
        Subject: CN=bf397bafe0188e14f3edab39b304bf46d4293b39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4e:b1:98:bc:11:c6:05:6f:f3:c0:09:9f:06:
                    6a:42:36:5d:0e:12:33:c1:79:50:57:9b:a3:e2:f2:
                    f8:47:0e:71:01:b9:c2:73:90:fc:f5:66:b6:84:d2:
                    29:8b:ca:d6:c6:28:cf:9b:4b:35:fa:c8:e0:b7:39:
                    2a:a6:6c:46:a8:27:e9:1c:96:1d:a6:ff:1e:ed:ce:
                    67:ba:00:ca:db:6f:75:ab:55:4f:35:87:9c:49:32:
                    15:f7:52:69:51:f4:f2:6a:21:19:bb:d7:6d:dd:d8:
                    0b:75:6a:48:4c:03:81:e9:b6:70:da:74:1f:a1:bc:
                    3b:8c:13:55:83:21:d1:10:ec:e9:fd:6c:bf:e1:09:
                    1f:9e:de:32:f3:54:c9:71:38:7e:a5:ac:8d:10:eb:
                    d9:fe:4e:c0:ad:e2:bc:d7:ca:dd:33:bb:e3:e5:4b:
                    75:db:8e:e3:e4:09:e2:cb:c7:c2:85:5c:7a:c4:ea:
                    cb:34:b1:37:b4:02:da:e2:7e:19:07:99:a9:11:25:
                    ce:57:3b:e1:8d:33:4c:85:59:31:b8:0c:f2:a1:7d:
                    99:59:ea:68:79:a4:1c:80:63:71:37:23:ef:b6:00:
                    78:08:80:74:08:9d:48:7d:a4:2f:7c:2e:11:ce:ca:
                    35:56:7f:b4:3c:a1:fa:35:2c:af:f3:8e:99:f8:69:
                    7b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:39:7B:AF:E0:18:8E:14:F3:ED:AB:39:B3:04:BF:46:D4:29:3B:39
            X509v3 Authority Key Identifier:
                keyid:8C:EE:88:04:FF:70:37:6E:2A:FE:21:AB:F9:3E:22:8D:5A:FD:D5:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:17:c4:5f:ae:7a:a4:e0:e1:9e:9b:7d:9e:00:c4:e5:f2:27:
         83:ef:af:ea:18:c6:0f:b7:53:9f:ac:d8:8b:be:81:cd:4c:bc:
         52:c7:90:1c:de:f5:60:c3:4d:c5:8e:cc:b8:40:17:70:ed:36:
         2a:a2:fc:bf:d2:23:18:90:35:b0:04:17:d3:5c:29:14:0f:9c:
         28:9a:43:57:8f:c1:7a:a9:8e:00:17:d9:6f:3f:97:d9:8b:0b:
         00:38:b3:7e:8a:9b:54:28:a5:5b:fc:31:56:ee:54:10:05:53:
         00:79:93:50:3d:3e:44:7c:93:82:66:79:e4:24:27:89:b8:e8:
         1e:60:08:a7:72:5d:e9:69:d8:91:6a:8f:fc:dd:fa:26:09:f6:
         bd:13:57:ee:6e:fc:38:98:73:b2:cc:ba:1e:26:5d:aa:96:c8:
         34:af:04:a2:59:bf:01:65:de:78:e5:af:c7:e9:eb:e8:4f:45:
         0f:f8:26:fb:4a:95:28:41:e7:5b:84:59:e0:ee:36:18:b3:5e:
         a8:3b:1a:a4:fa:24:15:08:0f:48:c7:b4:73:60:b2:03:36:dd:
         e8:04:31:d8:20:dc:6d:45:39:42:3d:1b:a7:72:2e:a1:17:8c:
         11:b4:b6:a1:c2:f9:ef:4c:1e:5d:d7:99:0c:f8:ff:d6:6f:75:
         b3:1f:2d:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsYcPT4vPVxPcCo1wLCvNyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZWU4ODA0ZmY3MDM3NmUyYWZlMjFhYmY5M2UyMjhkNWFm
ZGQ1MDkwHhcNMjUwNjE0MDMwMDM1WhcNMjUwNjE1MDMwMDM1WjAzMTEwLwYDVQQD
EyhiZjM5N2JhZmUwMTg4ZTE0ZjNlZGFiMzliMzA0YmY0NmQ0MjkzYjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxk6xmLwRxgVv88AJnwZqQjZdDhIz
wXlQV5uj4vL4Rw5xAbnCc5D89Wa2hNIpi8rWxijPm0s1+sjgtzkqpmxGqCfpHJYd
pv8e7c5nugDK2291q1VPNYecSTIV91JpUfTyaiEZu9dt3dgLdWpITAOB6bZw2nQf
obw7jBNVgyHREOzp/Wy/4Qkfnt4y81TJcTh+payNEOvZ/k7AreK818rdM7vj5Ut1
247j5Aniy8fChVx6xOrLNLE3tALa4n4ZB5mpESXOVzvhjTNMhVkxuAzyoX2ZWepo
eaQcgGNxNyPvtgB4CIB0CJ1IfaQvfC4Rzso1Vn+0PKH6NSyv846Z+Gl7dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL85e6/gGI4U8+2rObMEv0bUKTs5MB8GA1UdIwQY
MBaAFIzuiAT/cDduKv4hq/k+Io1a/dUJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak82SUJQOXdOMjRxX2lHci1UNGlqVnI5MVFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jYzFhYjktZmViZS00NDIyLThiMzIt
OTJkOTRjZDdiMDI0LzEvak82SUJQOXdOMjRxX2lHci1UNGlqVnI5MVFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9jYzFhYjktZmViZS00NDIyLThiMzItOTJkOTRjZDdiMDI0
LzEvak82SUJQOXdOMjRxX2lHci1UNGlqVnI5MVFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAohfEX656
pODhnpt9ngDE5fIng++v6hjGD7dTn6zYi76BzUy8UseQHN71YMNNxY7MuEAXcO02
KqL8v9IjGJA1sAQX01wpFA+cKJpDV4/BeqmOABfZbz+X2YsLADizfoqbVCilW/wx
Vu5UEAVTAHmTUD0+RHyTgmZ55CQnibjoHmAIp3Jd6WnYkWqP/N36Jgn2vRNX7m78
OJhzssy6HiZdqpbINK8Eolm/AWXeeOWvx+nr6E9FD/gm+0qVKEHnW4RZ4O42GLNe
qDsapPokFQgPSMe0c2CyAzbd6AQx2CDcbUU5Qj0bp3IuoReMEbS2ocL570weXdeZ
DPj/1m91sx8tlQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:13:41 2025 by rpki-client