Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
File:                     b9qzLf1uW8aZ57826Bgpjcf7skY.mft (raw, json)
Hash identifier:          CV2uCdovbow8JTtkAi1/GUALq7fF1ZqH/P2YzmtGGEg=
Subject key identifier:   C7:58:99:0C:43:92:33:BA:2D:05:F2:FA:90:FA:49:0A:7D:B5:6B:2B
Authority key identifier: 6F:DA:B3:2D:FD:6E:5B:C6:99:E7:BF:36:E8:18:29:8D:C7:FB:B2:46
Certificate issuer:       /CN=6fdab32dfd6e5bc699e7bf36e818298dc7fbb246
Certificate serial:       01978357AEC27F329717245EA00EF4BC1FA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
Manifest number:          060D
Signing time:             Wed 18 Jun 2025 14:00:51 +0000
Manifest this update:     Wed 18 Jun 2025 14:00:51 +0000
Manifest next update:     Thu 19 Jun 2025 14:00:51 +0000
Files and hashes:         1: b9qzLf1uW8aZ57826Bgpjcf7skY.crl (hash: aCleJtg7bbuqfbGbAWmYFrTtSy3yKdaXg4yGXbu46Xk=)
                          2: jDb6CVt7LMESu9TedWHpv82vXzQ.roa (hash: zvLg2bIhHSdnpMeV4b2spjUGOYu0nN5hkdLuTlMfXXA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:83:57:ae:c2:7f:32:97:17:24:5e:a0:0e:f4:bc:1f:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fdab32dfd6e5bc699e7bf36e818298dc7fbb246
        Validity
            Not Before: Jun 18 14:00:51 2025 GMT
            Not After : Jun 19 14:00:51 2025 GMT
        Subject: CN=c758990c439233ba2d05f2fa90fa490a7db56b2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:53:18:be:31:d7:56:27:e4:6e:2d:a4:04:62:
                    ee:f4:63:30:8d:e2:7d:4a:b3:d3:8c:58:07:8c:d7:
                    56:0a:a0:cf:a1:2e:e9:ce:d4:36:89:4e:f9:37:ee:
                    20:a3:bb:8a:db:d8:cd:fd:83:d0:30:65:bd:fd:8d:
                    e5:20:8d:5c:ad:1a:33:ba:b1:47:c3:9c:00:bf:1e:
                    a5:18:18:54:35:44:a7:00:09:81:2b:7b:92:8d:e3:
                    a2:7a:f8:73:3e:7c:1f:45:63:be:ce:34:75:f7:96:
                    91:6c:fb:d3:bc:6b:87:9a:02:79:a8:8c:ca:93:de:
                    f1:1d:57:47:1a:77:fc:32:4e:eb:c9:7e:9d:5e:c2:
                    df:83:45:00:35:38:d8:81:37:91:a3:21:ee:76:01:
                    aa:2a:3f:39:cd:74:f0:08:ec:94:3d:9d:cd:4e:56:
                    1e:0b:16:59:d1:aa:1a:4d:5f:ed:82:1b:90:28:1e:
                    e4:d4:37:24:8f:1d:ae:34:58:03:2f:52:e8:dc:a1:
                    fc:00:b1:4c:0d:cf:31:87:cf:f9:9a:b3:58:e0:cf:
                    1d:85:6f:53:98:d2:66:f3:54:d4:8c:42:73:e6:10:
                    b7:42:73:5c:de:92:61:bd:ca:cc:c4:4a:69:94:9d:
                    2a:e5:cc:56:64:85:82:63:5e:8e:51:f0:2e:d3:98:
                    54:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:58:99:0C:43:92:33:BA:2D:05:F2:FA:90:FA:49:0A:7D:B5:6B:2B
            X509v3 Authority Key Identifier:
                keyid:6F:DA:B3:2D:FD:6E:5B:C6:99:E7:BF:36:E8:18:29:8D:C7:FB:B2:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:36:86:56:63:62:cf:33:69:6f:94:a4:19:89:22:70:c9:97:
         42:d7:f4:8c:c6:88:88:7e:66:5c:44:f2:b5:52:cc:b1:16:39:
         31:ce:6f:02:00:e3:63:27:80:c0:07:9c:4e:6e:30:16:ac:5d:
         ea:ea:c3:53:88:08:18:2b:5f:90:8f:6a:6b:07:cb:3f:e1:5d:
         e5:b4:c7:a9:a4:62:f2:ff:9d:a9:20:97:74:ca:4f:a7:60:6d:
         e1:b8:a8:30:38:af:ca:83:2a:8b:26:b3:3a:00:5f:b8:a7:4a:
         97:36:97:f1:52:59:f4:44:b1:55:a4:22:53:26:af:41:ae:68:
         90:9b:c0:ec:bb:fc:ca:10:61:a3:95:23:65:76:57:db:ad:36:
         06:29:0a:fc:68:8d:59:85:b4:a1:be:27:41:66:0e:c7:07:3e:
         b2:5a:e0:0d:a1:79:53:59:28:81:4e:bd:fc:0b:65:db:7c:f0:
         f8:67:dd:2e:7d:7f:df:51:fa:12:e5:30:19:c6:83:74:d2:16:
         bb:db:a9:95:25:7a:8b:54:dd:80:d6:1f:64:8d:e0:c5:68:fa:
         4d:fd:d4:5e:63:56:eb:7b:bc:f1:c3:52:43:69:bb:da:0a:e9:
         9e:39:20:a3:8e:96:d9:77:de:7a:5d:5c:bc:30:73:47:4c:e6:
         d6:f8:49:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeDV67CfzKXFyReoA70vB+pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZGFiMzJkZmQ2ZTViYzY5OWU3YmYzNmU4MTgyOThkYzdm
YmIyNDYwHhcNMjUwNjE4MTQwMDUxWhcNMjUwNjE5MTQwMDUxWjAzMTEwLwYDVQQD
EyhjNzU4OTkwYzQzOTIzM2JhMmQwNWYyZmE5MGZhNDkwYTdkYjU2YjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VMYvjHXVifkbi2kBGLu9GMwjeJ9
SrPTjFgHjNdWCqDPoS7pztQ2iU75N+4go7uK29jN/YPQMGW9/Y3lII1crRozurFH
w5wAvx6lGBhUNUSnAAmBK3uSjeOievhzPnwfRWO+zjR195aRbPvTvGuHmgJ5qIzK
k97xHVdHGnf8Mk7ryX6dXsLfg0UANTjYgTeRoyHudgGqKj85zXTwCOyUPZ3NTlYe
CxZZ0aoaTV/tghuQKB7k1Dckjx2uNFgDL1Lo3KH8ALFMDc8xh8/5mrNY4M8dhW9T
mNJm81TUjEJz5hC3QnNc3pJhvcrMxEpplJ0q5cxWZIWCY16OUfAu05hUnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMdYmQxDkjO6LQXy+pD6SQp9tWsrMB8GA1UdIwQY
MBaAFG/asy39blvGmee/NugYKY3H+7JGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjlxekxmMXVXOGFaNTc4MjZCZ3BqY2Y3c2tZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC84MjJkYzQtNzhlOC00ODAxLWI3MzQt
ZjFlNTVmNTM3Yzg3LzEvYjlxekxmMXVXOGFaNTc4MjZCZ3BqY2Y3c2tZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC84MjJkYzQtNzhlOC00ODAxLWI3MzQtZjFlNTVmNTM3Yzg3
LzEvYjlxekxmMXVXOGFaNTc4MjZCZ3BqY2Y3c2tZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZzaGVmNi
zzNpb5SkGYkicMmXQtf0jMaIiH5mXETytVLMsRY5Mc5vAgDjYyeAwAecTm4wFqxd
6urDU4gIGCtfkI9qawfLP+Fd5bTHqaRi8v+dqSCXdMpPp2Bt4bioMDivyoMqiyaz
OgBfuKdKlzaX8VJZ9ESxVaQiUyavQa5okJvA7Lv8yhBho5UjZXZX2602BikK/GiN
WYW0ob4nQWYOxwc+slrgDaF5U1kogU69/Atl23zw+GfdLn1/31H6EuUwGcaDdNIW
u9uplSV6i1TdgNYfZI3gxWj6Tf3UXmNW63u88cNSQ2m72grpnjkgo46W2Xfeel1c
vDBzR0zm1vhJRg==
-----END CERTIFICATE-----
Generated at Wed Jun 18 18:14:31 2025 by rpki-client