Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft
File:                     dbvImtBCDee1vC3TL-o7l5-t4Cc.mft (raw, json)
Hash identifier:          QDaW43qwWJ5qeYP9SmiaPaduRa0phvIvSXyJKHlsVu4=
Subject key identifier:   68:93:17:5F:B3:95:E6:24:C1:EB:87:CA:FA:E0:88:90:3D:47:55:EA
Authority key identifier: 75:BB:C8:9A:D0:42:0D:E7:B5:BC:2D:D3:2F:EA:3B:97:9F:AD:E0:27
Certificate issuer:       /CN=75bbc89ad0420de7b5bc2dd32fea3b979fade027
Certificate serial:       0197688569EAF3E8DF2B3214AD15E518D3DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft
Manifest number:          0C1D
Signing time:             Fri 13 Jun 2025 09:01:03 +0000
Manifest this update:     Fri 13 Jun 2025 09:01:03 +0000
Manifest next update:     Sat 14 Jun 2025 09:01:03 +0000
Files and hashes:         1: dNIjhcgOmJl_uqUY3ufEirea4-I.roa (hash: gkwMMNbP4H2f7PZtpLojDcOWvuhbyLZWIbK4WgzSXOU=)
                          2: dbvImtBCDee1vC3TL-o7l5-t4Cc.crl (hash: U058ZZfSD5/Q/vuRAqP2uTuRWjmeN9I/W60rIcA8Bnc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 09:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:85:69:ea:f3:e8:df:2b:32:14:ad:15:e5:18:d3:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75bbc89ad0420de7b5bc2dd32fea3b979fade027
        Validity
            Not Before: Jun 13 09:01:03 2025 GMT
            Not After : Jun 14 09:01:03 2025 GMT
        Subject: CN=6893175fb395e624c1eb87cafae088903d4755ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c4:c7:38:2d:31:cf:e3:b3:8f:e2:91:1f:6b:
                    90:38:40:67:e5:3d:92:03:15:31:c6:bc:c5:a8:80:
                    56:3e:de:6d:a5:7f:cf:59:2c:1d:d2:50:0b:14:7e:
                    92:f1:1a:c3:bd:8c:81:41:a1:02:b6:dd:66:a8:53:
                    bf:9d:ac:9c:8d:12:51:2b:89:0e:f7:a0:ae:45:4a:
                    79:e6:49:37:05:ad:74:38:55:23:f7:b8:04:88:53:
                    77:18:f2:7d:bb:56:49:cb:dd:0b:00:c5:b7:40:3c:
                    d4:8f:cb:56:b8:fe:6d:5c:0f:da:54:80:db:34:20:
                    0f:ff:8c:55:54:d0:0c:28:a5:ac:e8:61:2d:e6:77:
                    dd:e3:83:45:e0:bd:29:82:93:86:2f:f6:e1:fc:f9:
                    d8:ae:7e:c1:ea:92:0b:85:6a:eb:6e:d0:75:87:cb:
                    16:e4:25:6f:a8:24:a4:28:2b:1f:9b:f1:db:a3:93:
                    9e:45:34:23:dc:b6:c5:fd:45:b8:d5:e5:22:22:50:
                    f1:29:23:39:76:4f:8b:77:f6:7f:f2:0e:56:75:18:
                    b1:a4:e7:75:e3:aa:c1:44:98:cb:7b:ce:0a:e1:49:
                    d2:a4:b7:1a:16:b8:1a:3d:8b:19:4a:b8:51:07:6f:
                    35:eb:f9:7c:8a:09:86:92:e0:78:ba:8f:cc:3a:a3:
                    69:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:93:17:5F:B3:95:E6:24:C1:EB:87:CA:FA:E0:88:90:3D:47:55:EA
            X509v3 Authority Key Identifier:
                keyid:75:BB:C8:9A:D0:42:0D:E7:B5:BC:2D:D3:2F:EA:3B:97:9F:AD:E0:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:ec:24:db:3c:8f:03:7b:7c:78:f2:44:79:3f:c2:04:54:fb:
         54:e8:b3:b0:8f:c6:be:ad:96:d5:63:76:9e:ca:72:ac:1d:01:
         9b:55:ce:8a:c1:76:10:cc:54:a0:4b:e3:0d:c3:0e:b9:b5:bb:
         b9:1f:72:51:d2:48:c4:fc:95:85:79:0e:63:4d:b7:1f:4d:b3:
         24:79:e7:07:fb:12:fc:02:1d:b4:60:8d:fd:b9:39:b8:60:08:
         7c:f0:3d:e7:3e:05:62:5e:e2:6f:34:ff:6f:ab:1a:7e:30:1e:
         b4:ac:84:8b:ca:f4:67:0b:cc:9d:76:a7:81:8f:c3:48:38:b9:
         ff:6e:df:f9:c4:ab:e3:82:25:84:28:44:f6:c7:fc:59:ee:ef:
         d7:d1:e6:be:5d:08:a0:e7:b2:e0:cc:80:bf:37:ad:f6:6c:34:
         2f:6c:a7:69:fa:5e:49:34:d4:5d:6f:5d:e9:1a:55:a9:79:b4:
         d7:d3:0c:42:89:81:d2:1a:94:a7:bf:c3:18:7e:0c:cd:74:55:
         16:c3:c4:e5:16:8b:68:35:25:d6:39:36:d2:2e:b9:24:b3:42:
         80:60:1b:f0:b4:ed:25:07:d5:db:50:50:da:6e:66:5b:b8:ab:
         4b:dc:f2:18:d9:07:0f:2e:f4:73:fc:f7:3f:67:72:1c:3d:22:
         64:4a:7a:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdohWnq8+jfKzIUrRXlGNPeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YmJjODlhZDA0MjBkZTdiNWJjMmRkMzJmZWEzYjk3OWZh
ZGUwMjcwHhcNMjUwNjEzMDkwMTAzWhcNMjUwNjE0MDkwMTAzWjAzMTEwLwYDVQQD
Eyg2ODkzMTc1ZmIzOTVlNjI0YzFlYjg3Y2FmYWUwODg5MDNkNDc1NWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMTHOC0xz+Ozj+KRH2uQOEBn5T2S
AxUxxrzFqIBWPt5tpX/PWSwd0lALFH6S8RrDvYyBQaECtt1mqFO/naycjRJRK4kO
96CuRUp55kk3Ba10OFUj97gEiFN3GPJ9u1ZJy90LAMW3QDzUj8tWuP5tXA/aVIDb
NCAP/4xVVNAMKKWs6GEt5nfd44NF4L0pgpOGL/bh/PnYrn7B6pILhWrrbtB1h8sW
5CVvqCSkKCsfm/Hbo5OeRTQj3LbF/UW41eUiIlDxKSM5dk+Ld/Z/8g5WdRixpOd1
46rBRJjLe84K4UnSpLcaFrgaPYsZSrhRB2816/l8igmGkuB4uo/MOqNpuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGiTF1+zleYkweuHyvrgiJA9R1XqMB8GA1UdIwQY
MBaAFHW7yJrQQg3ntbwt0y/qO5efreAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGJ2SW10QkNEZWUxdkMzVEwtbzdsNS10NENjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wYjg3ZWUtMTA2NC00MTM3LTg0OTAt
MDJmYTIxOGQxNGY4LzEvZGJ2SW10QkNEZWUxdkMzVEwtbzdsNS10NENjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8wYjg3ZWUtMTA2NC00MTM3LTg0OTAtMDJmYTIxOGQxNGY4
LzEvZGJ2SW10QkNEZWUxdkMzVEwtbzdsNS10NENjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQOwk2zyP
A3t8ePJEeT/CBFT7VOizsI/Gvq2W1WN2nspyrB0Bm1XOisF2EMxUoEvjDcMOubW7
uR9yUdJIxPyVhXkOY023H02zJHnnB/sS/AIdtGCN/bk5uGAIfPA95z4FYl7ibzT/
b6safjAetKyEi8r0ZwvMnXangY/DSDi5/27f+cSr44IlhChE9sf8We7v19Hmvl0I
oOey4MyAvzet9mw0L2ynafpeSTTUXW9d6RpVqXm019MMQomB0hqUp7/DGH4MzXRV
FsPE5RaLaDUl1jk20i65JLNCgGAb8LTtJQfV21BQ2m5mW7irS9zyGNkHDy70c/z3
P2dyHD0iZEp6ng==
-----END CERTIFICATE-----
Generated at Fri Jun 13 18:57:38 2025 by rpki-client