Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
File:                     R3QefHWNSAQTtfGwBgYRKX5EA28.mft (raw, json)
Hash identifier:          /KlCuo8iUtr3zZO83yA+A7pkuikRILka5tKuWAZ8JT4=
Subject key identifier:   B5:C0:4A:9F:F2:50:09:F3:65:6B:A9:EE:24:A8:D7:1F:0A:DB:7C:A6
Authority key identifier: 47:74:1E:7C:75:8D:48:04:13:B5:F1:B0:06:06:11:29:7E:44:03:6F
Certificate issuer:       /CN=47741e7c758d480413b5f1b0060611297e44036f
Certificate serial:       0197B9A1B16EA8DA9D27974061402D3789F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
Manifest number:          15B7
Signing time:             Sun 29 Jun 2025 03:01:10 +0000
Manifest this update:     Sun 29 Jun 2025 03:01:10 +0000
Manifest next update:     Mon 30 Jun 2025 03:01:10 +0000
Files and hashes:         1: K4szTGDgWu8YAkp3B3AunTFhsNY.roa (hash: ZlMWPu4zKIGTz35MfDokFAisIKFFE+qRN3bSmh9wdso=)
                          2: R3QefHWNSAQTtfGwBgYRKX5EA28.crl (hash: ScgkB0Y1YcrDFsFzayO+kbAXa4xmv+4ID8NJlkoFBaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 03:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:a1:b1:6e:a8:da:9d:27:97:40:61:40:2d:37:89:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47741e7c758d480413b5f1b0060611297e44036f
        Validity
            Not Before: Jun 29 03:01:10 2025 GMT
            Not After : Jun 30 03:01:10 2025 GMT
        Subject: CN=b5c04a9ff25009f3656ba9ee24a8d71f0adb7ca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f8:35:56:a8:c8:46:17:b6:bd:5b:d5:95:1a:
                    5f:88:a7:64:3d:e7:dc:11:5d:8e:d3:74:c8:7d:b7:
                    7b:3d:54:ff:bb:60:13:93:0c:48:93:69:12:2e:7a:
                    04:32:f3:06:92:2f:4a:0c:80:48:ae:25:a2:b4:ca:
                    fa:74:bb:fb:9f:fd:bf:a8:86:eb:b8:82:3f:27:4b:
                    07:18:92:d6:1c:b8:07:05:13:95:19:9c:1d:22:b1:
                    e5:ab:44:43:d4:45:32:e4:7a:c7:71:5e:f8:b8:38:
                    0b:3b:96:a5:68:7d:9a:89:2f:7b:25:0d:b0:71:f2:
                    7a:ed:1d:95:6a:96:4a:61:21:cd:f4:a9:2c:04:90:
                    b7:af:25:30:41:9c:f1:f3:6e:a8:75:46:54:2e:df:
                    b8:b6:a4:33:ab:14:c1:27:b1:39:93:b7:3c:c1:ec:
                    2f:c3:98:0e:3e:f0:07:4f:7d:fb:10:1e:63:22:c8:
                    5a:ef:8f:25:48:49:36:2b:b0:4f:f9:8b:02:53:b7:
                    3f:d5:5d:f7:07:20:1b:6e:bc:1e:1a:04:c2:15:7e:
                    b2:9b:f0:98:86:96:eb:51:b1:30:72:9e:40:55:92:
                    67:aa:d5:32:c7:e9:c9:a9:54:9c:ab:e2:57:f9:42:
                    0e:dd:10:2d:22:dc:b5:cd:bd:ef:ef:c1:76:f9:45:
                    b6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C0:4A:9F:F2:50:09:F3:65:6B:A9:EE:24:A8:D7:1F:0A:DB:7C:A6
            X509v3 Authority Key Identifier:
                keyid:47:74:1E:7C:75:8D:48:04:13:B5:F1:B0:06:06:11:29:7E:44:03:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:a1:fa:14:2f:a9:f7:ef:24:54:67:e9:9f:1a:f7:99:d5:5d:
         60:63:83:73:5f:dc:4e:be:4d:33:3d:4b:f9:c9:75:e9:9a:39:
         4f:d5:54:fa:c1:fa:43:65:bd:2c:69:6f:b3:ec:86:72:01:d8:
         1a:18:28:35:19:fd:8c:d8:05:be:51:98:25:6a:07:dc:ce:1a:
         13:3c:41:eb:8a:8b:ab:c0:5a:54:b0:74:b9:ae:bb:f4:d3:cf:
         fc:8b:6f:d4:52:6a:4d:10:27:ab:77:a1:b4:9a:d4:da:e4:80:
         bb:cf:b8:65:a0:eb:94:3d:33:11:a1:76:05:cf:32:9e:6f:41:
         64:66:d1:0a:52:ab:cd:f8:f5:83:b9:de:a3:19:2e:ac:20:82:
         97:c3:9d:f9:ae:be:4b:e6:97:9f:64:0d:36:51:2a:8b:11:f8:
         31:c9:a1:69:de:9b:f2:60:ae:fb:83:e9:6d:8b:45:ca:e5:6a:
         13:eb:c1:9d:cf:01:a5:bf:5a:7f:d1:e6:d9:72:f5:a0:fc:cc:
         d4:57:91:0d:cb:81:70:0c:63:e9:02:cb:7e:6e:f7:62:66:ca:
         8c:2e:21:80:5a:7b:7b:f7:dc:be:58:f6:67:0c:de:7e:92:5e:
         0a:06:ac:b2:fe:b7:d5:df:72:56:38:0e:a3:8d:b9:a7:0e:4d:
         eb:b1:d2:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5obFuqNqdJ5dAYUAtN4n1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NzQxZTdjNzU4ZDQ4MDQxM2I1ZjFiMDA2MDYxMTI5N2U0
NDAzNmYwHhcNMjUwNjI5MDMwMTEwWhcNMjUwNjMwMDMwMTEwWjAzMTEwLwYDVQQD
EyhiNWMwNGE5ZmYyNTAwOWYzNjU2YmE5ZWUyNGE4ZDcxZjBhZGI3Y2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvg1VqjIRhe2vVvVlRpfiKdkPefc
EV2O03TIfbd7PVT/u2ATkwxIk2kSLnoEMvMGki9KDIBIriWitMr6dLv7n/2/qIbr
uII/J0sHGJLWHLgHBROVGZwdIrHlq0RD1EUy5HrHcV74uDgLO5alaH2aiS97JQ2w
cfJ67R2VapZKYSHN9KksBJC3ryUwQZzx826odUZULt+4tqQzqxTBJ7E5k7c8wewv
w5gOPvAHT337EB5jIsha748lSEk2K7BP+YsCU7c/1V33ByAbbrweGgTCFX6ym/CY
hpbrUbEwcp5AVZJnqtUyx+nJqVScq+JX+UIO3RAtIty1zb3v78F2+UW2PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXASp/yUAnzZWup7iSo1x8K23ymMB8GA1UdIwQY
MBaAFEd0Hnx1jUgEE7XxsAYGESl+RANvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjNRZWZIV05TQVFUdGZHd0JnWVJLWDVFQTI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy81MDI5NGQtOGNjNS00OWQzLTkzMTIt
NzI3YjFiNTgzZWI2LzEvUjNRZWZIV05TQVFUdGZHd0JnWVJLWDVFQTI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy81MDI5NGQtOGNjNS00OWQzLTkzMTItNzI3YjFiNTgzZWI2
LzEvUjNRZWZIV05TQVFUdGZHd0JnWVJLWDVFQTI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb6H6FC+p
9+8kVGfpnxr3mdVdYGODc1/cTr5NMz1L+cl16Zo5T9VU+sH6Q2W9LGlvs+yGcgHY
GhgoNRn9jNgFvlGYJWoH3M4aEzxB64qLq8BaVLB0ua679NPP/Itv1FJqTRAnq3eh
tJrU2uSAu8+4ZaDrlD0zEaF2Bc8ynm9BZGbRClKrzfj1g7neoxkurCCCl8Od+a6+
S+aXn2QNNlEqixH4Mcmhad6b8mCu+4PpbYtFyuVqE+vBnc8Bpb9af9Hm2XL1oPzM
1FeRDcuBcAxj6QLLfm73YmbKjC4hgFp7e/fcvlj2ZwzefpJeCgassv631d9yVjgO
o425pw5N67HSzg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 11:30:02 2025 by rpki-client