Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
File:                     AkHvRDYUJQbyZZODwW69oeKbT4Y.mft (raw, json)
Hash identifier:          sX31tqqtZuu4jAHK1Z6hAHp+ZtpXCUOkS4ZF9z1D8r0=
Subject key identifier:   6D:0C:00:6F:54:3E:C6:D5:BE:6B:8A:8C:AF:D6:78:A0:50:56:D5:D0
Authority key identifier: 02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86
Certificate issuer:       /CN=0241ef4436142506f2659383c16ebda1e29b4f86
Certificate serial:       0197C8A72A47304CDAF07519BF7C1C95FF2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
Manifest number:          0E81
Signing time:             Wed 02 Jul 2025 01:01:27 +0000
Manifest this update:     Wed 02 Jul 2025 01:01:27 +0000
Manifest next update:     Thu 03 Jul 2025 01:01:27 +0000
Files and hashes:         1: AkHvRDYUJQbyZZODwW69oeKbT4Y.crl (hash: 3L3nhVXvYYxsuSy2/thhuIZfxAtnblcGqB2MsqLuSHo=)
                          2: NDyhuvBiD7Dcf-VvAcHjeKP4Wls.roa (hash: oeDnEopXVy5MJcNbGxGeEZ1ceng1jmSd304y/xLBjoc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c8:a7:2a:47:30:4c:da:f0:75:19:bf:7c:1c:95:ff:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0241ef4436142506f2659383c16ebda1e29b4f86
        Validity
            Not Before: Jul  2 01:01:27 2025 GMT
            Not After : Jul  3 01:01:27 2025 GMT
        Subject: CN=6d0c006f543ec6d5be6b8a8cafd678a05056d5d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a2:51:a0:35:43:11:c9:6f:9b:6e:c1:a9:a5:
                    07:46:46:5d:1a:f2:75:ad:d4:78:53:c9:82:50:37:
                    bc:47:97:c1:d8:52:c7:56:a1:dc:80:7c:ac:cf:e4:
                    55:9e:4c:46:25:01:05:a2:5e:94:1c:c4:0b:5b:b6:
                    43:1c:d4:7e:98:92:71:c3:b6:5c:4e:cc:7f:ab:4a:
                    d9:ad:d7:cc:3b:0f:04:ee:5c:32:ef:ff:65:ed:a3:
                    2c:cf:82:af:a8:93:e9:38:8f:dc:af:30:51:3b:4a:
                    16:fa:d6:03:27:8f:bd:02:83:3f:87:9e:0e:94:a9:
                    79:13:bc:5c:76:3e:c5:73:f7:49:63:b5:49:a5:ad:
                    94:ca:43:74:66:de:42:b8:44:1c:45:07:f7:fd:17:
                    fa:b0:3a:0f:62:37:78:01:25:40:ce:ef:59:d4:93:
                    9c:be:32:f7:ff:44:ff:66:03:c1:3f:18:f8:82:0a:
                    84:3b:c2:2a:03:2b:0c:f7:5d:96:5f:6b:36:59:a8:
                    ad:2c:9b:4d:5d:50:64:f7:42:93:5e:b4:6d:e4:5a:
                    33:a5:1f:ce:da:c7:90:af:9a:e1:be:7f:f4:e7:59:
                    9d:f4:b5:7d:63:1c:6d:7a:f5:23:d1:55:ff:c3:52:
                    f2:82:c3:5c:5a:0a:8b:a2:7a:81:ab:d9:37:f3:ca:
                    95:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:0C:00:6F:54:3E:C6:D5:BE:6B:8A:8C:AF:D6:78:A0:50:56:D5:D0
            X509v3 Authority Key Identifier:
                keyid:02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:10:ae:1a:68:b7:d7:ee:fd:e5:e3:ca:47:09:08:2b:c9:86:
         c7:9f:12:cf:89:85:e2:55:f9:c0:a1:43:75:7e:e9:f9:58:c5:
         3f:7c:b1:af:97:c0:41:08:7e:0e:50:e6:02:20:b9:51:7c:81:
         e3:f0:48:cc:a7:86:1e:b1:21:d9:2f:84:25:b1:97:b0:6d:13:
         4c:45:d9:ea:d4:86:9e:19:5d:3d:da:1b:f9:c9:37:92:d0:15:
         69:81:30:88:00:d1:57:97:9d:59:7e:c3:95:67:27:cc:1d:a1:
         90:6e:52:36:dc:2d:70:12:ec:85:a8:97:71:5f:e1:eb:e0:87:
         1c:26:da:1e:d5:9c:2e:a5:91:d7:e2:df:41:3a:79:82:10:09:
         10:8c:ff:0a:80:02:18:15:10:89:cd:3c:92:37:d2:1f:b6:6e:
         69:3e:60:ab:c5:3e:eb:f5:8e:bb:2b:42:ad:31:33:ea:60:c8:
         88:e2:fa:ba:83:f3:39:41:3c:55:15:18:39:be:5b:05:7f:bf:
         5c:d6:54:d6:78:b0:0d:0c:60:34:5a:d2:28:45:a1:44:c7:33:
         2f:5c:32:73:4d:5c:d5:5c:b0:ed:2c:d3:8e:9b:f6:27:9f:f5:
         c0:e1:c8:23:33:c4:e4:0e:95:d0:13:2c:84:2b:44:b5:e7:75:
         96:2e:ff:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfIpypHMEza8HUZv3wclf8vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNDFlZjQ0MzYxNDI1MDZmMjY1OTM4M2MxNmViZGExZTI5
YjRmODYwHhcNMjUwNzAyMDEwMTI3WhcNMjUwNzAzMDEwMTI3WjAzMTEwLwYDVQQD
Eyg2ZDBjMDA2ZjU0M2VjNmQ1YmU2YjhhOGNhZmQ2NzhhMDUwNTZkNWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKJRoDVDEclvm27BqaUHRkZdGvJ1
rdR4U8mCUDe8R5fB2FLHVqHcgHysz+RVnkxGJQEFol6UHMQLW7ZDHNR+mJJxw7Zc
Tsx/q0rZrdfMOw8E7lwy7/9l7aMsz4KvqJPpOI/crzBRO0oW+tYDJ4+9AoM/h54O
lKl5E7xcdj7Fc/dJY7VJpa2UykN0Zt5CuEQcRQf3/Rf6sDoPYjd4ASVAzu9Z1JOc
vjL3/0T/ZgPBPxj4ggqEO8IqAysM912WX2s2WaitLJtNXVBk90KTXrRt5FozpR/O
2seQr5rhvn/051md9LV9YxxtevUj0VX/w1LygsNcWgqLonqBq9k388qVMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0MAG9UPsbVvmuKjK/WeKBQVtXQMB8GA1UdIwQY
MBaAFAJB70Q2FCUG8mWTg8FuvaHim0+GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWtIdlJEWVVKUWJ5WlpPRHdXNjlvZUtiVDRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85ZWUyMDItYjliMy00N2YwLThjOWEt
OWZkZjRjMTVmOWE2LzEvQWtIdlJEWVVKUWJ5WlpPRHdXNjlvZUtiVDRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85ZWUyMDItYjliMy00N2YwLThjOWEtOWZkZjRjMTVmOWE2
LzEvQWtIdlJEWVVKUWJ5WlpPRHdXNjlvZUtiVDRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmxCuGmi3
1+795ePKRwkIK8mGx58Sz4mF4lX5wKFDdX7p+VjFP3yxr5fAQQh+DlDmAiC5UXyB
4/BIzKeGHrEh2S+EJbGXsG0TTEXZ6tSGnhldPdob+ck3ktAVaYEwiADRV5edWX7D
lWcnzB2hkG5SNtwtcBLshaiXcV/h6+CHHCbaHtWcLqWR1+LfQTp5ghAJEIz/CoAC
GBUQic08kjfSH7ZuaT5gq8U+6/WOuytCrTEz6mDIiOL6uoPzOUE8VRUYOb5bBX+/
XNZU1niwDQxgNFrSKEWhRMczL1wyc01c1Vyw7SzTjpv2J5/1wOHIIzPE5A6V0BMs
hCtEted1li7/VQ==
-----END CERTIFICATE-----
Generated at Wed Jul 2 05:01:18 2025 by rpki-client