Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft
File:                     NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft (raw, json)
Hash identifier:          wAJiDXYJwAocO1pjaBIdwnXt2JX8ahP9GaOeg+rrCpk=
Subject key identifier:   69:A2:76:28:8E:F7:85:BD:68:B4:45:3A:9E:98:36:EE:04:64:5D:7F
Authority key identifier: 34:8C:F9:77:9A:92:EF:E9:75:43:B2:2A:34:7B:81:C2:EA:A5:BB:FA
Certificate issuer:       /CN=348cf9779a92efe97543b22a347b81c2eaa5bbfa
Certificate serial:       0197B77CB61397C7A7603E92FA0FF070A6F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft
Manifest number:          0B77
Signing time:             Sat 28 Jun 2025 17:01:32 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:32 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:32 +0000
Files and hashes:         1: NIz5d5qS7-l1Q7IqNHuBwuqlu_o.crl (hash: CMsgwFdBZMZPc48VU14MmjGVHdM0t72SWpoDyriDsfk=)
                          2: i5CYIYxAtwPyni-Dl_N7cKRXfcY.roa (hash: SZTtaQcBy5UozsIuO5IHd1U+7pFMt22yevLjl5l8lZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 17:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:b6:13:97:c7:a7:60:3e:92:fa:0f:f0:70:a6:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=348cf9779a92efe97543b22a347b81c2eaa5bbfa
        Validity
            Not Before: Jun 28 17:01:32 2025 GMT
            Not After : Jun 29 17:01:32 2025 GMT
        Subject: CN=69a276288ef785bd68b4453a9e9836ee04645d7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:35:5d:dd:de:36:d3:d4:a9:c1:ad:e2:1b:7e:
                    7e:80:12:ff:a9:32:89:86:65:a3:80:25:ae:54:c7:
                    36:6e:f4:8b:48:91:03:c3:53:8f:23:94:16:fb:e5:
                    b4:97:82:5e:ea:3d:5d:25:7b:71:61:e6:7d:4e:51:
                    66:95:e5:b7:79:2c:ff:c8:da:45:df:02:46:58:32:
                    7b:9a:68:fc:a6:c6:96:b2:49:e6:dc:8f:b9:11:41:
                    b7:de:0e:82:03:57:c8:e1:2c:9f:dc:ce:1c:2a:3c:
                    fe:de:c2:bb:4c:2a:e4:19:0c:96:e4:bc:d4:3c:74:
                    3f:7e:c0:9b:4a:7b:be:c3:03:7c:d9:e4:08:3b:39:
                    66:3a:5c:3f:f2:25:0d:4e:f6:5d:d0:b8:b8:96:41:
                    c5:e6:1d:aa:2c:60:19:2b:36:9e:91:b1:99:6a:97:
                    3b:ca:4e:c5:65:d1:6e:f8:e6:f1:54:40:94:d3:ae:
                    10:b4:2b:5b:5b:65:9a:1f:f9:2a:73:ea:fa:9b:72:
                    29:45:d0:3e:45:33:fe:51:33:ea:f7:12:9e:61:8d:
                    f5:ad:1b:2d:31:16:cf:ff:03:9a:57:b8:36:bb:74:
                    69:72:44:b6:21:62:11:50:9a:08:e2:ff:4e:f9:a8:
                    7a:f3:57:63:5c:33:22:c3:6c:e3:31:b9:28:3c:66:
                    16:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A2:76:28:8E:F7:85:BD:68:B4:45:3A:9E:98:36:EE:04:64:5D:7F
            X509v3 Authority Key Identifier:
                keyid:34:8C:F9:77:9A:92:EF:E9:75:43:B2:2A:34:7B:81:C2:EA:A5:BB:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:d0:a8:39:fe:2d:5a:b2:f2:02:0a:5d:32:a5:a3:ff:50:17:
         8f:64:31:9f:09:8a:47:da:27:7e:b7:85:46:87:a8:55:60:b8:
         ca:17:10:7d:a2:8b:bc:cf:20:33:cf:1d:dd:a3:fa:37:7e:85:
         ae:d1:62:82:29:b2:5a:d5:8f:01:a9:68:e7:09:0f:d5:ac:60:
         5a:76:fc:f4:8a:f1:12:1b:e2:e9:92:e8:ba:1d:cc:5e:1e:af:
         d8:e7:99:14:66:a9:56:6c:dd:9b:46:46:c4:18:ef:40:b8:58:
         12:a4:93:4a:e5:14:50:7e:7c:3f:9e:ba:1c:73:75:4c:cf:4f:
         95:7c:9d:22:a7:51:da:70:80:27:47:22:97:de:43:1e:db:13:
         59:c6:6c:bd:0f:e7:d9:1a:18:6e:6f:bd:ec:aa:b0:c5:41:2b:
         0e:c7:6e:e0:81:e2:5a:3e:19:f0:e7:7f:07:53:48:2f:09:23:
         d0:9b:54:5b:9c:67:42:5e:75:b3:24:23:42:3d:ed:8c:0b:ba:
         28:ac:b0:e3:67:fe:a2:96:e0:d5:87:fb:bb:59:f8:ba:ce:6e:
         e0:ff:27:f9:0c:67:39:52:a4:c4:28:14:d2:6a:03:79:fa:45:
         20:33:8b:7a:e8:93:93:d7:64:8a:5e:41:19:48:10:90:1f:f0:
         d4:f4:20:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fLYTl8enYD6S+g/wcKbxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OGNmOTc3OWE5MmVmZTk3NTQzYjIyYTM0N2I4MWMyZWFh
NWJiZmEwHhcNMjUwNjI4MTcwMTMyWhcNMjUwNjI5MTcwMTMyWjAzMTEwLwYDVQQD
Eyg2OWEyNzYyODhlZjc4NWJkNjhiNDQ1M2E5ZTk4MzZlZTA0NjQ1ZDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTVd3d4209Spwa3iG35+gBL/qTKJ
hmWjgCWuVMc2bvSLSJEDw1OPI5QW++W0l4Je6j1dJXtxYeZ9TlFmleW3eSz/yNpF
3wJGWDJ7mmj8psaWsknm3I+5EUG33g6CA1fI4Syf3M4cKjz+3sK7TCrkGQyW5LzU
PHQ/fsCbSnu+wwN82eQIOzlmOlw/8iUNTvZd0Li4lkHF5h2qLGAZKzaekbGZapc7
yk7FZdFu+ObxVECU064QtCtbW2WaH/kqc+r6m3IpRdA+RTP+UTPq9xKeYY31rRst
MRbP/wOaV7g2u3RpckS2IWIRUJoI4v9O+ah681djXDMiw2zjMbkoPGYWSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmidiiO94W9aLRFOp6YNu4EZF1/MB8GA1UdIwQY
MBaAFDSM+Xeaku/pdUOyKjR7gcLqpbv6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkl6NWQ1cVM3LWwxUTdJcU5IdUJ3dXFsdV9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yOWNkNTgtODMyNy00MmJlLWI3Zjkt
Yzk4MTlhNDEwYTdhLzEvTkl6NWQ1cVM3LWwxUTdJcU5IdUJ3dXFsdV9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8yOWNkNTgtODMyNy00MmJlLWI3ZjktYzk4MTlhNDEwYTdh
LzEvTkl6NWQ1cVM3LWwxUTdJcU5IdUJ3dXFsdV9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeNCoOf4t
WrLyAgpdMqWj/1AXj2QxnwmKR9onfreFRoeoVWC4yhcQfaKLvM8gM88d3aP6N36F
rtFigimyWtWPAalo5wkP1axgWnb89IrxEhvi6ZLouh3MXh6v2OeZFGapVmzdm0ZG
xBjvQLhYEqSTSuUUUH58P566HHN1TM9PlXydIqdR2nCAJ0cil95DHtsTWcZsvQ/n
2RoYbm+97KqwxUErDsdu4IHiWj4Z8Od/B1NILwkj0JtUW5xnQl51syQjQj3tjAu6
KKyw42f+opbg1Yf7u1n4us5u4P8n+QxnOVKkxCgU0moDefpFIDOLeuiTk9dkil5B
GUgQkB/w1PQg+g==
-----END CERTIFICATE-----
Generated at Sun Jun 29 02:04:18 2025 by rpki-client