Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
File:                     b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft (raw, json)
Hash identifier:          GOFw63Xtz2iqKlIScz8i4a2pIbcJucDYJPc1OICX66w=
Subject key identifier:   B0:B9:79:D9:4A:9C:47:1F:C6:2E:85:AF:CE:0E:82:76:4D:D0:AF:DF
Authority key identifier: 6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12
Certificate issuer:       /CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
Certificate serial:       01976997D255A10EBB18EFADF5B578F779AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
Manifest number:          05E3
Signing time:             Fri 13 Jun 2025 14:00:46 +0000
Manifest this update:     Fri 13 Jun 2025 14:00:46 +0000
Manifest next update:     Sat 14 Jun 2025 14:00:46 +0000
Files and hashes:         1: HzyW06_qFMHD7FoonuBI96cfqI0.roa (hash: tww5NCEvuHGOvnxV6oYkbLx4biv3u6Go3vXrACuAJA4=)
                          2: b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl (hash: b7pzkYv7HFBof2H9zH8emkshfO41dm45BlyOh3HrgpY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:97:d2:55:a1:0e:bb:18:ef:ad:f5:b5:78:f7:79:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
        Validity
            Not Before: Jun 13 14:00:46 2025 GMT
            Not After : Jun 14 14:00:46 2025 GMT
        Subject: CN=b0b979d94a9c471fc62e85afce0e82764dd0afdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:5b:f7:e9:67:1f:1f:c3:2e:a7:d5:b6:10:7a:
                    6b:91:3c:72:90:0b:a1:ac:4c:00:c4:6f:25:5e:79:
                    b8:38:2a:50:14:5c:ce:f1:a3:01:a0:4d:99:ca:c3:
                    fc:70:7e:89:36:6d:f2:ad:77:96:65:bd:e0:e3:2b:
                    e2:64:50:50:89:91:e4:54:e4:69:a9:79:68:be:1a:
                    02:8c:76:f6:f4:07:20:55:d6:45:05:b8:25:5c:54:
                    ea:02:94:74:ab:e2:c9:07:1d:c2:ec:f8:8c:6e:de:
                    5c:38:55:5d:a5:57:f8:89:fd:5f:55:98:4e:29:d0:
                    3f:0d:11:53:88:12:6d:60:ed:3f:08:6c:1c:ca:cf:
                    11:0a:44:d7:e3:b7:4f:f0:04:13:b1:3e:e6:1e:a1:
                    d4:55:c4:19:f9:92:e1:de:f7:1d:e1:9d:33:cb:af:
                    b2:33:a8:47:e7:64:94:35:c7:23:7b:9f:15:87:33:
                    69:70:b2:03:1d:9b:d6:49:2a:27:7e:a4:ac:36:d7:
                    74:84:7f:5e:40:2a:43:0d:8f:da:d6:9c:d0:e8:59:
                    1d:0b:91:75:a1:1f:b5:cc:82:3b:98:a4:c6:be:bd:
                    41:d5:a9:44:4b:00:92:d2:27:d2:a3:83:c1:86:cf:
                    62:7d:d0:82:b5:f0:2f:90:1b:75:d2:22:58:eb:e5:
                    e6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B9:79:D9:4A:9C:47:1F:C6:2E:85:AF:CE:0E:82:76:4D:D0:AF:DF
            X509v3 Authority Key Identifier:
                keyid:6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:46:33:82:96:6a:b9:2c:34:83:2a:27:15:54:fc:bb:59:de:
         71:a9:35:83:cb:a3:cc:76:3b:ba:8e:d3:63:6c:7e:e5:d6:94:
         4a:a8:11:b3:2a:bb:88:24:77:ed:80:18:29:ea:67:ce:f6:2f:
         91:1a:d5:c5:0b:77:51:e6:b6:28:a1:a3:25:09:2f:16:bf:07:
         15:fe:06:04:82:d2:e9:2c:2f:c6:41:04:27:c5:12:de:46:bd:
         e1:e5:1c:33:ae:a9:3b:cf:26:ad:5a:5a:73:4c:ee:77:46:96:
         5e:ad:6a:b0:ec:7b:51:84:ae:a9:eb:16:23:a2:ae:00:53:3a:
         b7:03:50:d1:5a:3b:c6:d2:9b:49:05:59:50:f8:c5:76:84:d8:
         6a:56:1b:0f:58:26:70:78:a3:28:d8:3f:96:4a:cf:91:59:ec:
         d1:df:80:4f:aa:67:57:e1:6e:7d:ea:eb:ec:9d:b9:60:44:95:
         0c:70:21:f5:b8:91:9b:91:53:e1:77:89:81:ff:cc:b8:d1:6d:
         bd:92:af:8b:45:86:d4:b2:4c:9f:6f:83:bd:39:fc:9f:c1:4e:
         3f:53:92:da:49:f2:20:0e:fc:58:a6:11:a3:6f:d1:fd:2d:f1:
         ad:b0:9b:1f:50:06:a4:03:34:55:16:95:8a:48:1b:53:ff:43:
         9a:4b:b0:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpl9JVoQ67GO+t9bV493mtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZmU3YjIxYjYyMTgzZDVlM2Q0YWUxYjkzZmYwMDkwOTI4
MmM5MTIwHhcNMjUwNjEzMTQwMDQ2WhcNMjUwNjE0MTQwMDQ2WjAzMTEwLwYDVQQD
EyhiMGI5NzlkOTRhOWM0NzFmYzYyZTg1YWZjZTBlODI3NjRkZDBhZmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Fv36WcfH8Mup9W2EHprkTxykAuh
rEwAxG8lXnm4OCpQFFzO8aMBoE2ZysP8cH6JNm3yrXeWZb3g4yviZFBQiZHkVORp
qXlovhoCjHb29AcgVdZFBbglXFTqApR0q+LJBx3C7PiMbt5cOFVdpVf4if1fVZhO
KdA/DRFTiBJtYO0/CGwcys8RCkTX47dP8AQTsT7mHqHUVcQZ+ZLh3vcd4Z0zy6+y
M6hH52SUNccje58VhzNpcLIDHZvWSSonfqSsNtd0hH9eQCpDDY/a1pzQ6FkdC5F1
oR+1zII7mKTGvr1B1alESwCS0ifSo4PBhs9ifdCCtfAvkBt10iJY6+XmvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLC5edlKnEcfxi6Fr84OgnZN0K/fMB8GA1UdIwQY
MBaAFG/+eyG2IYPV49SuG5P/AJCSgskSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYl81N0liWWhnOVhqMUs0YmtfOEFrSktDeVJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9hYTA2YjYtZTc2Ni00YWQ5LWFhN2Et
YTRiYmIxYmM5OGM2LzEvYl81N0liWWhnOVhqMUs0YmtfOEFrSktDeVJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9hYTA2YjYtZTc2Ni00YWQ5LWFhN2EtYTRiYmIxYmM5OGM2
LzEvYl81N0liWWhnOVhqMUs0YmtfOEFrSktDeVJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUkYzgpZq
uSw0gyonFVT8u1necak1g8ujzHY7uo7TY2x+5daUSqgRsyq7iCR37YAYKepnzvYv
kRrVxQt3Uea2KKGjJQkvFr8HFf4GBILS6SwvxkEEJ8US3ka94eUcM66pO88mrVpa
c0zud0aWXq1qsOx7UYSuqesWI6KuAFM6twNQ0Vo7xtKbSQVZUPjFdoTYalYbD1gm
cHijKNg/lkrPkVns0d+AT6pnV+Fuferr7J25YESVDHAh9biRm5FT4XeJgf/MuNFt
vZKvi0WG1LJMn2+DvTn8n8FOP1OS2knyIA78WKYRo2/R/S3xrbCbH1AGpAM0VRaV
ikgbU/9DmkuwiQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 18:55:47 2025 by rpki-client