Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft
File:                     o20K5eL7_8zgh3Drwgwha5-_lIU.mft (raw, json)
Hash identifier:          NPRTUYhwJrqJ53VAFqEEoz4WikKo1B9fJDZW+7dOeBU=
Subject key identifier:   61:EB:ED:F5:81:2B:4F:DE:19:E5:94:A8:44:95:4B:41:25:19:66:35
Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
Certificate issuer:       /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Certificate serial:       019768BC3F78310B69ABB0D5C6746E1183C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft
Manifest number:          15BB
Signing time:             Fri 13 Jun 2025 10:00:56 +0000
Manifest this update:     Fri 13 Jun 2025 10:00:56 +0000
Manifest next update:     Sat 14 Jun 2025 10:00:56 +0000
Files and hashes:         1: 1XbIXlsc12j6nm66ObHlANu1FxM.roa (hash: lxZWGjYaWrGULnJUqbEWkt5IyYC/5a04fccF0g2Mp+o=)
                          2: 3RFddkozoZGvDJWQRcnS3tQnN6k.roa (hash: KSM4qOmDj4X6PN9gZp6oxzJSTfcXsGzAsnDPsOPcYvo=)
                          3: 5Ni6TTomkpPGcPlO3kSvRsrQu-U.roa (hash: 1JbN0aQZgu8I5lbFUp1QWBBO58Y4WN7qnz2P+FqHbJQ=)
                          4: BUbLcDK2mlbMmQrWrXK_KkB_Z8I.roa (hash: 5p58mg305UQz5j2iOVYn7ENJmD3sfGRtf406Z23M5Fg=)
                          5: DlEN3D6ABTKOQAUtaBMUB9rDXTg.roa (hash: 7Z/Q1II+IY41ZQNrl/gNVuPJHIVrAlLxhLrLlp3uHJ8=)
                          6: RdqjtJDLFWOt3Phx5mE_iQ2n2ac.roa (hash: lxo1VRjxzcOyUQlNG+1uXakzpre9ZL0uw2/WRhwVovc=)
                          7: fz5OQX3YNuZKli23fQPsHJMHAjg.roa (hash: 2W1jdhiJm6VJW0yfAkLiyNtl6yjC+Bfx3j0Hv8QWt58=)
                          8: o20K5eL7_8zgh3Drwgwha5-_lIU.crl (hash: u3bQKsbw5gxEuHmTEcQve2+hqnOPUc+X8nm6dFz1Aac=)
                          9: tn7ZdWo9WQgYlB0Z6sOK2If7PKQ.roa (hash: 8aBGWuWam9C6QXOPco15OTid7ItEiEbxf2K863xiGIk=)
                          10: uxPuBCLIiL0vvpcp5iG57n6Nxl8.roa (hash: 9FJQPnJf1+iHQwAWGEeso0fULqarFlyxqNgrRoa6pYY=)
                          11: v8yHhVnQZ24d3Hqq-_MmljsyF-o.roa (hash: ldyVLPmDRLippOD+hn4EjHJmd9dcu8cUfl/mwJelT5M=)
                          12: vOg7pIai3eYlqI8nGfkYR-448qE.roa (hash: k2twTqEvKHP86X8yabE26RQnv5iqhvXZjH+b4EIuDog=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 10:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:bc:3f:78:31:0b:69:ab:b0:d5:c6:74:6e:11:83:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
        Validity
            Not Before: Jun 13 10:00:56 2025 GMT
            Not After : Jun 14 10:00:56 2025 GMT
        Subject: CN=61ebedf5812b4fde19e594a844954b4125196635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:10:41:71:cf:c8:40:40:66:8b:0b:36:10:0f:
                    53:2b:8c:96:a3:01:6a:2a:6c:80:31:10:fe:5e:13:
                    10:6c:ab:0f:5c:1b:43:89:d0:15:bc:f0:0c:85:16:
                    3e:b1:48:54:8e:1c:de:26:26:f7:07:e3:7a:b1:80:
                    df:0f:7b:44:cd:75:c0:96:5b:ed:a9:61:95:cb:e9:
                    3b:93:42:d0:90:b5:17:38:60:a8:a4:0b:78:2d:ce:
                    29:c0:d7:17:ae:ef:f0:74:f1:01:7b:3e:d6:cb:45:
                    f0:b3:4b:28:73:86:42:18:9d:f4:c9:72:aa:1e:ee:
                    74:dd:2f:9f:ff:fa:d8:9f:cf:b8:03:85:1a:9f:6a:
                    f5:51:eb:24:3b:14:c7:8b:ab:57:54:aa:98:f8:c8:
                    44:99:cd:a9:cc:6a:4b:92:c3:7f:7f:62:01:72:d4:
                    ce:8e:06:6f:c7:34:bf:91:30:a1:77:9f:2d:24:a4:
                    99:4b:d2:2f:ff:cd:26:5f:89:b9:3a:37:a1:22:b7:
                    93:ab:a3:14:44:94:85:d8:8c:96:13:da:52:5b:3b:
                    da:89:9e:23:bc:44:f8:00:40:f4:c7:82:c0:0e:07:
                    51:58:57:1b:3a:44:ed:ba:1d:18:b9:51:24:de:23:
                    d3:87:e6:6d:e1:11:3b:17:b0:7f:7f:87:b5:73:d1:
                    49:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:EB:ED:F5:81:2B:4F:DE:19:E5:94:A8:44:95:4B:41:25:19:66:35
            X509v3 Authority Key Identifier:
                keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:4e:75:20:03:fd:82:43:f3:47:ed:4f:9a:d1:d1:ac:61:c4:
         00:fe:65:6c:cd:d5:2d:82:8f:d4:1f:a1:ba:e4:ff:e6:e6:2a:
         5e:2c:22:81:2a:b1:f3:f0:cb:0f:5a:af:1e:54:7c:9f:1c:56:
         aa:a2:c0:02:bd:ee:08:d1:a7:d3:a0:19:6e:70:bb:74:aa:36:
         6e:81:6f:23:a7:ca:a3:ed:a9:65:c0:1b:bb:1b:81:9b:0f:48:
         55:94:d8:f4:a8:57:06:43:65:a1:08:14:cd:cd:77:ad:5a:68:
         3c:19:eb:97:a1:af:b6:03:e0:5d:3b:9e:40:74:17:82:72:98:
         5c:77:c9:8a:61:01:a2:a6:15:a1:be:ab:c1:5b:70:72:e2:a7:
         5c:f9:8b:9e:50:15:b9:7b:d4:94:71:f3:54:09:5e:d0:47:fc:
         b2:e8:c1:95:fc:06:28:c7:c0:ab:35:31:c9:16:db:a1:68:d9:
         a9:e4:39:4d:d6:05:a8:86:3b:39:7a:87:91:3c:4f:c4:38:ce:
         8a:25:b8:da:ad:0c:86:4c:70:b9:b0:9a:0a:3f:47:bd:ca:9b:
         53:5c:97:42:37:f8:d0:fa:bd:be:21:d8:20:bf:f7:59:d3:9d:
         87:e2:3b:ef:88:8b:57:6c:0f:2d:10:c3:54:36:f6:f3:49:d2:
         bb:26:ad:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdovD94MQtpq7DVxnRuEYPHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNmQwYWU1ZTJmYmZmY2NlMDg3NzBlYmMyMGMyMTZiOWZi
Zjk0ODUwHhcNMjUwNjEzMTAwMDU2WhcNMjUwNjE0MTAwMDU2WjAzMTEwLwYDVQQD
Eyg2MWViZWRmNTgxMmI0ZmRlMTllNTk0YTg0NDk1NGI0MTI1MTk2NjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRBBcc/IQEBmiws2EA9TK4yWowFq
KmyAMRD+XhMQbKsPXBtDidAVvPAMhRY+sUhUjhzeJib3B+N6sYDfD3tEzXXAllvt
qWGVy+k7k0LQkLUXOGCopAt4Lc4pwNcXru/wdPEBez7Wy0Xws0soc4ZCGJ30yXKq
Hu503S+f//rYn8+4A4Uan2r1UeskOxTHi6tXVKqY+MhEmc2pzGpLksN/f2IBctTO
jgZvxzS/kTChd58tJKSZS9Iv/80mX4m5OjehIreTq6MURJSF2IyWE9pSWzvaiZ4j
vET4AED0x4LADgdRWFcbOkTtuh0YuVEk3iPTh+Zt4RE7F7B/f4e1c9FJpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGHr7fWBK0/eGeWUqESVS0ElGWY1MB8GA1UdIwQY
MBaAFKNtCuXi+//M4Idw68IMIWufv5SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAt
Y2JiOTUxODNiMjdhLzEvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAtY2JiOTUxODNiMjdh
LzEvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZk51IAP9
gkPzR+1PmtHRrGHEAP5lbM3VLYKP1B+huuT/5uYqXiwigSqx8/DLD1qvHlR8nxxW
qqLAAr3uCNGn06AZbnC7dKo2boFvI6fKo+2pZcAbuxuBmw9IVZTY9KhXBkNloQgU
zc13rVpoPBnrl6GvtgPgXTueQHQXgnKYXHfJimEBoqYVob6rwVtwcuKnXPmLnlAV
uXvUlHHzVAle0Ef8sujBlfwGKMfAqzUxyRbboWjZqeQ5TdYFqIY7OXqHkTxPxDjO
iiW42q0MhkxwubCaCj9HvcqbU1yXQjf40Pq9viHYIL/3WdOdh+I774iLV2wPLRDD
VDb280nSuyatqA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:01:01 2025 by rpki-client