Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
File:                     43hlh61HIFqBEo5XjJDK7h5Igos.mft (raw, json)
Hash identifier:          3XFYlnROIgvfnxUMvHCysYC8MRc0kzHhAwXYML0jmnw=
Subject key identifier:   E7:5A:00:A9:86:F0:53:22:8D:D7:20:70:25:3F:2E:72:0D:38:E7:FE
Authority key identifier: E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B
Certificate issuer:       /CN=e3786587ad47205a81128e578c90caee1e48828b
Certificate serial:       01976EF4D4E71490C7660919F1B5BA72C693
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
Manifest number:          14BF
Signing time:             Sat 14 Jun 2025 15:00:28 +0000
Manifest this update:     Sat 14 Jun 2025 15:00:28 +0000
Manifest next update:     Sun 15 Jun 2025 15:00:28 +0000
Files and hashes:         1: 43hlh61HIFqBEo5XjJDK7h5Igos.crl (hash: H2v58FMb2aNodH6fClhzaaSgSrbr65Fm1VzKkVSkJv8=)
                          2: LktO0B8qjGLInxw3N5jX_ouyGv4.roa (hash: 0acgVKGcL/QrYT0G9rMKO5SvHbTzsdzBy14zEKR/PS4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 15:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:f4:d4:e7:14:90:c7:66:09:19:f1:b5:ba:72:c6:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3786587ad47205a81128e578c90caee1e48828b
        Validity
            Not Before: Jun 14 15:00:28 2025 GMT
            Not After : Jun 15 15:00:28 2025 GMT
        Subject: CN=e75a00a986f053228dd72070253f2e720d38e7fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d2:d5:83:5f:a0:44:bc:0e:bd:77:91:8b:81:
                    22:4f:78:ed:97:03:32:30:f8:85:3a:79:81:6a:2d:
                    d5:33:6f:f7:10:48:92:e4:ac:6e:82:df:a3:c0:d6:
                    58:dc:6f:5f:6f:c1:b7:76:e0:7a:71:19:3a:c4:f9:
                    32:ed:45:02:98:7b:51:d7:3f:da:14:2e:ea:7c:2b:
                    9d:a1:1d:d5:85:a5:1d:d4:96:64:99:ab:5f:36:b2:
                    ce:04:24:26:68:54:62:ae:5e:86:18:b3:06:97:b6:
                    12:c7:d5:e0:d7:8d:5f:99:a9:13:68:31:10:a9:cf:
                    4b:39:3e:62:c3:8a:ea:72:50:b1:7f:61:d4:82:ab:
                    e8:84:41:2b:04:1f:7b:97:ea:d8:b2:9b:58:a2:c1:
                    0a:cb:7d:07:b7:87:bf:eb:d6:0a:c6:ed:27:cf:90:
                    85:cf:ce:8d:44:92:ee:0d:c1:53:7f:bb:b6:e6:e7:
                    69:42:d3:2e:f3:0c:88:a1:b7:e4:da:0c:62:93:25:
                    ef:93:ef:22:b8:53:a7:ee:3c:7a:60:af:76:59:e7:
                    85:16:03:e5:7a:fa:92:c5:4e:b4:3d:8a:83:46:b3:
                    69:ed:5a:cb:15:c8:16:82:20:0e:4d:29:56:1e:eb:
                    3f:dc:c1:59:ce:5d:ff:bb:0f:42:bd:08:5b:f0:57:
                    fa:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:5A:00:A9:86:F0:53:22:8D:D7:20:70:25:3F:2E:72:0D:38:E7:FE
            X509v3 Authority Key Identifier:
                keyid:E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:9c:81:f9:86:18:c4:d5:c6:01:d8:1b:00:8d:ce:ed:ae:2a:
         5d:1d:14:c2:a7:dc:3a:e2:ce:48:04:8e:85:13:80:e3:6f:55:
         a8:47:85:d1:c0:bf:f9:05:dd:92:09:53:05:b3:ce:2f:01:32:
         b0:d2:34:7f:b1:4d:7c:89:9d:38:f6:8e:54:8e:74:14:35:91:
         d4:a0:66:19:ca:37:b2:95:01:22:a1:25:50:e6:3e:c1:5c:da:
         7d:d0:04:d2:79:f8:69:4b:d4:8b:32:84:eb:12:a5:98:fe:38:
         9e:d5:5a:65:b4:94:fa:67:96:88:15:bf:77:bf:69:8f:d5:d7:
         8f:af:2b:37:7a:e6:05:48:0b:4d:54:d1:9c:0b:9e:07:e6:fb:
         d3:e1:cb:82:9e:15:eb:c6:88:c1:79:fd:f4:5e:d3:1d:5a:07:
         4c:06:0a:96:2c:8c:6b:77:3a:54:ea:35:04:83:eb:df:da:e1:
         73:21:08:f8:cb:df:b1:bd:66:a0:89:3e:7a:c3:3b:e1:1b:11:
         c6:74:62:8c:03:09:87:75:ff:b3:d8:2b:2d:91:d5:83:3e:2e:
         1d:7d:30:a7:62:f1:a7:1a:78:d5:b8:6b:5d:bb:3e:d6:d5:e1:
         0e:ca:d7:be:eb:31:cb:2e:69:11:77:d1:55:43:4a:ae:a6:ab:
         23:8b:eb:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdu9NTnFJDHZgkZ8bW6csaTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNzg2NTg3YWQ0NzIwNWE4MTEyOGU1NzhjOTBjYWVlMWU0
ODgyOGIwHhcNMjUwNjE0MTUwMDI4WhcNMjUwNjE1MTUwMDI4WjAzMTEwLwYDVQQD
EyhlNzVhMDBhOTg2ZjA1MzIyOGRkNzIwNzAyNTNmMmU3MjBkMzhlN2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9LVg1+gRLwOvXeRi4EiT3jtlwMy
MPiFOnmBai3VM2/3EEiS5Kxugt+jwNZY3G9fb8G3duB6cRk6xPky7UUCmHtR1z/a
FC7qfCudoR3VhaUd1JZkmatfNrLOBCQmaFRirl6GGLMGl7YSx9Xg141fmakTaDEQ
qc9LOT5iw4rqclCxf2HUgqvohEErBB97l+rYsptYosEKy30Ht4e/69YKxu0nz5CF
z86NRJLuDcFTf7u25udpQtMu8wyIobfk2gxikyXvk+8iuFOn7jx6YK92WeeFFgPl
evqSxU60PYqDRrNp7VrLFcgWgiAOTSlWHus/3MFZzl3/uw9CvQhb8Ff6NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOdaAKmG8FMijdcgcCU/LnINOOf+MB8GA1UdIwQY
MBaAFON4ZYetRyBagRKOV4yQyu4eSIKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDNobGg2MUhJRnFCRW81WGpKREs3aDVJZ29zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9iYjZhN2MtMzFhNC00ZDMzLWE4NTMt
MDdjYzQ2ZTYzYjUwLzEvNDNobGg2MUhJRnFCRW81WGpKREs3aDVJZ29zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9iYjZhN2MtMzFhNC00ZDMzLWE4NTMtMDdjYzQ2ZTYzYjUw
LzEvNDNobGg2MUhJRnFCRW81WGpKREs3aDVJZ29zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEpyB+YYY
xNXGAdgbAI3O7a4qXR0UwqfcOuLOSASOhROA429VqEeF0cC/+QXdkglTBbPOLwEy
sNI0f7FNfImdOPaOVI50FDWR1KBmGco3spUBIqElUOY+wVzafdAE0nn4aUvUizKE
6xKlmP44ntVaZbSU+meWiBW/d79pj9XXj68rN3rmBUgLTVTRnAueB+b70+HLgp4V
68aIwXn99F7THVoHTAYKliyMa3c6VOo1BIPr39rhcyEI+Mvfsb1moIk+esM74RsR
xnRijAMJh3X/s9grLZHVgz4uHX0wp2Lxpxp41bhrXbs+1tXhDsrXvusxyy5pEXfR
VUNKrqarI4vrYA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 00:05:56 2025 by rpki-client