Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
File:                     Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft (raw, json)
Hash identifier:          vVd/sBzUzUCz0l3VVP56wCDWKhnmaCFajiSNQVn+6Ak=
Subject key identifier:   31:8B:BE:82:E9:D2:8E:AA:0B:F3:91:65:CF:33:72:2F:B6:03:C1:58
Authority key identifier: 55:E9:3C:C3:E6:1C:F3:34:B1:61:11:CA:E3:4A:E9:92:8C:4F:C3:FA
Certificate issuer:       /CN=55e93cc3e61cf334b16111cae34ae9928c4fc3fa
Certificate serial:       01976A058B2B4BCDF548CEABBC0E0B5717C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
Manifest number:          101F
Signing time:             Fri 13 Jun 2025 16:00:37 +0000
Manifest this update:     Fri 13 Jun 2025 16:00:37 +0000
Manifest next update:     Sat 14 Jun 2025 16:00:37 +0000
Files and hashes:         1: 8WKeNRHKfnPMtDPrJe2tbs0peW8.roa (hash: p24Kg0o2ZZFpnMMb7fnMgorqDU4JrcszVsb7S2USX88=)
                          2: Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl (hash: B9LRmwaDCSsU2uIMtrk6EktoYL7wBfUbd1fQe7OL4tE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:05:8b:2b:4b:cd:f5:48:ce:ab:bc:0e:0b:57:17:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55e93cc3e61cf334b16111cae34ae9928c4fc3fa
        Validity
            Not Before: Jun 13 16:00:37 2025 GMT
            Not After : Jun 14 16:00:37 2025 GMT
        Subject: CN=318bbe82e9d28eaa0bf39165cf33722fb603c158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:97:18:61:6c:c6:fc:ce:61:ec:53:fe:3a:b4:
                    17:c6:d9:d5:f3:aa:b5:2e:53:5d:36:d0:0a:85:c8:
                    a7:16:18:19:72:69:46:5f:b6:dd:b5:f2:b0:c6:f7:
                    3a:94:b1:81:94:d2:92:f7:57:e9:80:f6:e9:80:b2:
                    23:24:0f:23:85:8d:bc:83:69:96:26:a7:6e:f7:81:
                    86:ef:2f:5c:c5:00:d5:e7:f1:ba:e4:c1:ed:72:65:
                    01:e7:7b:71:ad:6b:86:54:e0:34:99:c2:47:fe:4a:
                    bd:85:72:ff:2a:e0:3a:85:02:9e:8c:81:f9:09:67:
                    33:1e:62:03:c4:94:d0:60:83:22:f4:00:f2:8a:23:
                    e2:a3:6f:ab:a5:66:57:3c:12:5c:b3:aa:73:0b:89:
                    56:cd:0a:ce:a8:dd:79:b1:7b:f7:dd:36:e7:32:c8:
                    49:f9:f6:92:14:a5:92:05:7d:5e:aa:bc:2e:6f:f4:
                    51:0a:e2:2a:e4:0d:3a:e4:c9:e7:9b:14:b4:39:45:
                    86:67:4e:53:a4:d1:2b:f7:f7:0c:2c:72:5b:4a:9a:
                    09:87:75:21:9a:4a:ff:67:5d:0a:61:80:eb:09:42:
                    1f:dd:2a:76:32:6c:c6:79:57:ad:6e:1d:1d:e6:38:
                    61:a4:9a:3a:95:40:f4:d3:40:04:93:fc:82:67:e5:
                    7f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:8B:BE:82:E9:D2:8E:AA:0B:F3:91:65:CF:33:72:2F:B6:03:C1:58
            X509v3 Authority Key Identifier:
                keyid:55:E9:3C:C3:E6:1C:F3:34:B1:61:11:CA:E3:4A:E9:92:8C:4F:C3:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:99:13:07:95:2b:0b:63:88:0b:73:e8:95:28:04:6b:4d:4e:
         ff:6c:2f:ce:ce:c5:a6:46:22:b6:98:e4:c2:34:13:65:dd:89:
         28:99:bb:ae:e1:30:f9:a7:aa:b1:89:dd:49:db:c5:18:fe:e4:
         cc:6d:ca:51:be:9d:71:be:8e:b9:0b:84:de:6d:b6:ff:f0:16:
         ec:cf:13:3e:08:e2:a3:b7:08:96:ad:f4:dd:84:77:e6:6d:82:
         ed:19:3b:56:36:66:5a:f5:fa:0d:82:ef:54:57:f1:cf:27:40:
         13:f1:09:79:0f:61:6b:26:4f:c8:28:ff:45:3d:b3:58:4e:69:
         82:7e:3e:1e:72:a4:e4:29:a1:52:ad:fa:55:19:e8:dd:ae:2d:
         c5:69:ed:6c:df:c0:c7:48:55:68:56:bc:6e:48:bc:67:a3:e3:
         b3:85:fd:47:21:ec:5d:55:69:bb:2a:4b:a4:be:17:a4:a7:2f:
         5b:9c:3f:cf:67:ff:96:e7:04:11:71:a8:91:d1:58:d3:43:83:
         53:33:37:3e:26:41:44:f6:23:56:13:7d:34:28:42:a6:e0:97:
         48:c9:b2:66:02:83:df:a8:9c:7f:8d:f2:76:a3:77:97:db:48:
         35:64:a5:21:33:dc:d2:2c:64:56:da:3d:8c:cb:e7:37:c7:59:
         19:a9:6e:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdqBYsrS831SM6rvA4LVxfBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ZTkzY2MzZTYxY2YzMzRiMTYxMTFjYWUzNGFlOTkyOGM0
ZmMzZmEwHhcNMjUwNjEzMTYwMDM3WhcNMjUwNjE0MTYwMDM3WjAzMTEwLwYDVQQD
EygzMThiYmU4MmU5ZDI4ZWFhMGJmMzkxNjVjZjMzNzIyZmI2MDNjMTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA85cYYWzG/M5h7FP+OrQXxtnV86q1
LlNdNtAKhcinFhgZcmlGX7bdtfKwxvc6lLGBlNKS91fpgPbpgLIjJA8jhY28g2mW
Jqdu94GG7y9cxQDV5/G65MHtcmUB53txrWuGVOA0mcJH/kq9hXL/KuA6hQKejIH5
CWczHmIDxJTQYIMi9ADyiiPio2+rpWZXPBJcs6pzC4lWzQrOqN15sXv33TbnMshJ
+faSFKWSBX1eqrwub/RRCuIq5A065MnnmxS0OUWGZ05TpNEr9/cMLHJbSpoJh3Uh
mkr/Z10KYYDrCUIf3Sp2MmzGeVetbh0d5jhhpJo6lUD000AEk/yCZ+V/GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDGLvoLp0o6qC/ORZc8zci+2A8FYMB8GA1UdIwQY
MBaAFFXpPMPmHPM0sWERyuNK6ZKMT8P6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmVrOHctWWM4elN4WVJISzQwcnBrb3hQd19vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8zYzQzODYtNDIzOC00ZGU2LWI1MGIt
ZTgwOTJkZDY1YzdmLzEvVmVrOHctWWM4elN4WVJISzQwcnBrb3hQd19vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8zYzQzODYtNDIzOC00ZGU2LWI1MGItZTgwOTJkZDY1Yzdm
LzEvVmVrOHctWWM4elN4WVJISzQwcnBrb3hQd19vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWpkTB5Ur
C2OIC3PolSgEa01O/2wvzs7FpkYitpjkwjQTZd2JKJm7ruEw+aeqsYndSdvFGP7k
zG3KUb6dcb6OuQuE3m22//AW7M8TPgjio7cIlq303YR35m2C7Rk7VjZmWvX6DYLv
VFfxzydAE/EJeQ9hayZPyCj/RT2zWE5pgn4+HnKk5CmhUq36VRno3a4txWntbN/A
x0hVaFa8bki8Z6Pjs4X9RyHsXVVpuypLpL4XpKcvW5w/z2f/lucEEXGokdFY00OD
UzM3PiZBRPYjVhN9NChCpuCXSMmyZgKD36icf43ydqN3l9tINWSlITPc0ixkVto9
jMvnN8dZGaluoA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 20:01:14 2025 by rpki-client