Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
File:                     BySLUtI-vSN7iotuY-3QLf7vmEw.mft (raw, json)
Hash identifier:          nu33syiSKlyE86rTnTKVJN77U2hM+89dJnL2x5aD+3Y=
Subject key identifier:   8E:6C:B4:91:18:74:AF:2E:2C:B8:99:37:C6:B6:CB:2A:96:D0:8C:56
Authority key identifier: 07:24:8B:52:D2:3E:BD:23:7B:8A:8B:6E:63:ED:D0:2D:FE:EF:98:4C
Certificate issuer:       /CN=07248b52d23ebd237b8a8b6e63edd02dfeef984c
Certificate serial:       019777534E448A68D3E219A533BBCDACC6EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
Manifest number:          027C
Signing time:             Mon 16 Jun 2025 06:00:37 +0000
Manifest this update:     Mon 16 Jun 2025 06:00:37 +0000
Manifest next update:     Tue 17 Jun 2025 06:00:37 +0000
Files and hashes:         1: BySLUtI-vSN7iotuY-3QLf7vmEw.crl (hash: y2V2U8GdQ9gRgU5qku0yMf6yPM78OinLFXKW6KQ2xiI=)
                          2: XlhaEzLsA7jWqPOILfz8Yhd9kdk.roa (hash: fE0R2m8vpEkHRD5syUluKcIvECTiC6hfTnpdsOL+n0Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:77:53:4e:44:8a:68:d3:e2:19:a5:33:bb:cd:ac:c6:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07248b52d23ebd237b8a8b6e63edd02dfeef984c
        Validity
            Not Before: Jun 16 06:00:37 2025 GMT
            Not After : Jun 17 06:00:37 2025 GMT
        Subject: CN=8e6cb4911874af2e2cb89937c6b6cb2a96d08c56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:84:e8:82:15:d2:16:95:dc:d7:a1:ae:8e:d9:
                    20:a9:fc:34:ee:eb:c8:43:02:51:1d:98:1c:fd:fd:
                    9f:b1:93:82:20:eb:71:91:54:d0:68:14:35:56:0a:
                    44:c3:6b:7b:dc:21:e8:55:cb:27:5b:d5:ed:c1:c7:
                    91:cc:f3:3c:ee:d4:a1:0d:91:81:b4:89:42:82:d0:
                    3e:95:b6:e0:f8:38:e2:78:7c:23:56:22:20:3c:d7:
                    ee:67:9a:20:31:54:2b:2e:f9:06:c4:d0:e9:85:da:
                    a4:8d:70:0b:59:67:13:39:11:7b:d7:bb:30:b8:ea:
                    86:05:5e:b2:55:18:22:07:76:70:4e:2a:5a:41:87:
                    11:40:7f:a0:72:9b:df:bb:5a:b6:3f:5f:28:ee:70:
                    4c:bd:e7:d5:71:79:41:c1:67:02:95:74:12:a3:87:
                    61:39:d2:0a:e2:ee:92:c9:a1:eb:ef:93:c1:85:6d:
                    37:b6:ab:39:04:f2:fa:05:91:f0:98:22:38:7f:12:
                    f3:9c:30:f5:bc:84:60:a2:68:2f:d0:ee:7d:8a:fa:
                    6c:ba:dd:85:f5:52:69:6b:96:bd:19:65:96:b9:fe:
                    c2:16:fb:5f:67:1f:32:a4:ec:b4:2a:f6:eb:2f:07:
                    e7:8e:ad:06:3e:62:a4:21:a3:77:c9:9f:4e:b0:e0:
                    d6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:6C:B4:91:18:74:AF:2E:2C:B8:99:37:C6:B6:CB:2A:96:D0:8C:56
            X509v3 Authority Key Identifier:
                keyid:07:24:8B:52:D2:3E:BD:23:7B:8A:8B:6E:63:ED:D0:2D:FE:EF:98:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:9a:04:56:61:66:fd:6b:58:ba:1d:be:be:a4:3b:1a:36:2c:
         d1:e4:ef:3f:5f:b7:6e:3e:29:39:5d:3e:c9:c9:33:b4:2d:e6:
         cd:02:e4:db:47:41:4e:66:e2:86:e1:2c:1b:7e:49:ac:93:5c:
         16:8b:fa:d2:33:f6:15:cf:7a:cc:7b:ca:8a:54:92:fd:00:d4:
         bb:ef:55:57:43:05:5b:56:ff:f6:37:51:fd:95:74:66:4d:9e:
         a1:7c:ee:2b:10:59:d9:24:bc:88:1e:a0:2f:98:6d:b0:87:ef:
         b4:7b:cb:83:dc:15:8d:0a:97:57:37:b9:24:f5:ed:4c:f0:d5:
         2a:49:8e:c2:1f:b1:37:4d:1f:1e:b2:19:69:ad:c5:ba:c8:c4:
         b8:f0:e4:46:6d:51:0c:0f:1d:6e:15:bf:94:74:cc:d4:95:dc:
         b6:66:4d:ac:06:ec:72:64:68:7c:d9:d5:1d:96:b8:5c:b9:02:
         38:06:19:6a:36:3d:73:74:b9:4d:98:f6:49:69:5a:9d:ea:b2:
         85:4c:ff:a4:13:ec:25:c9:ab:0f:9a:5e:8d:43:7c:0f:87:4f:
         48:94:9d:8f:9c:6e:56:dd:1a:d4:7f:24:8f:22:f3:e7:8f:18:
         6b:6a:b3:90:7e:62:a7:84:c5:dc:6d:50:be:32:d2:33:1f:35:
         1f:8c:c0:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd3U05EimjT4hmlM7vNrMbuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MjQ4YjUyZDIzZWJkMjM3YjhhOGI2ZTYzZWRkMDJkZmVl
Zjk4NGMwHhcNMjUwNjE2MDYwMDM3WhcNMjUwNjE3MDYwMDM3WjAzMTEwLwYDVQQD
Eyg4ZTZjYjQ5MTE4NzRhZjJlMmNiODk5MzdjNmI2Y2IyYTk2ZDA4YzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIToghXSFpXc16Gujtkgqfw07uvI
QwJRHZgc/f2fsZOCIOtxkVTQaBQ1VgpEw2t73CHoVcsnW9XtwceRzPM87tShDZGB
tIlCgtA+lbbg+DjieHwjViIgPNfuZ5ogMVQrLvkGxNDphdqkjXALWWcTORF717sw
uOqGBV6yVRgiB3ZwTipaQYcRQH+gcpvfu1q2P18o7nBMvefVcXlBwWcClXQSo4dh
OdIK4u6SyaHr75PBhW03tqs5BPL6BZHwmCI4fxLznDD1vIRgomgv0O59ivpsut2F
9VJpa5a9GWWWuf7CFvtfZx8ypOy0KvbrLwfnjq0GPmKkIaN3yZ9OsODWdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5stJEYdK8uLLiZN8a2yyqW0IxWMB8GA1UdIwQY
MBaAFAcki1LSPr0je4qLbmPt0C3+75hMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnlTTFV0SS12U043aW90dVktM1FMZjd2bUV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9jZWQ5YjUtOTQ0MC00ZDBiLWJlMWYt
MWIyZTQxMDVlYjdlLzEvQnlTTFV0SS12U043aW90dVktM1FMZjd2bUV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9jZWQ5YjUtOTQ0MC00ZDBiLWJlMWYtMWIyZTQxMDVlYjdl
LzEvQnlTTFV0SS12U043aW90dVktM1FMZjd2bUV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqpoEVmFm
/WtYuh2+vqQ7GjYs0eTvP1+3bj4pOV0+yckztC3mzQLk20dBTmbihuEsG35JrJNc
Fov60jP2Fc96zHvKilSS/QDUu+9VV0MFW1b/9jdR/ZV0Zk2eoXzuKxBZ2SS8iB6g
L5htsIfvtHvLg9wVjQqXVze5JPXtTPDVKkmOwh+xN00fHrIZaa3FusjEuPDkRm1R
DA8dbhW/lHTM1JXctmZNrAbscmRofNnVHZa4XLkCOAYZajY9c3S5TZj2SWlaneqy
hUz/pBPsJcmrD5pejUN8D4dPSJSdj5xuVt0a1H8kjyLz548Ya2qzkH5ip4TF3G1Q
vjLSMx81H4zAKg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:10:58 2025 by rpki-client