Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
File:                     rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft (raw, json)
Hash identifier:          oyQ1L+LyTU5BveZmuYSJT5xI7ry4gxg0mrHDXkv+XcQ=
Subject key identifier:   4D:AE:D6:27:94:33:49:3B:EE:58:BC:16:C6:97:68:60:98:E9:86:E4
Authority key identifier: AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
Certificate issuer:       /CN=ad80679b96ca322bfa85500cab206c6d47412edf
Certificate serial:       0197C8026E937CC62A688C042C2F300528A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
Manifest number:          15C6
Signing time:             Tue 01 Jul 2025 22:01:31 +0000
Manifest this update:     Tue 01 Jul 2025 22:01:31 +0000
Manifest next update:     Wed 02 Jul 2025 22:01:31 +0000
Files and hashes:         1: 47RTgndCr3WK9uvLA47Mf3Veeq0.roa (hash: nqkQXS//GUp6pq9hI3HV70pQJ3Mrf63Mr+wizeUmh6Y=)
                          2: AjQ1qmq1QAXjvAuMHhBzyxf3AQQ.roa (hash: PhWZ+RwWSScRWkGQiHT3k31EkR3n/BR9waZYYFuBjy8=)
                          3: BqxQqMXfVsv8J4WaLs72INfcI-w.roa (hash: E4uf1aplKzZlY/g2WLAMnV1cBOEsVJ+7b0auNGq9law=)
                          4: EbiER1YyYwAg31JRo_4MT9hutgE.roa (hash: 58aF5sG9ezc8MIrgsG64fLq6UpWN9k1MeWSXyTcyYrs=)
                          5: rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl (hash: LA1vKgXQbtck+/anU+pyVZQ2W/vrrlvaBKWJro6fRe4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 22:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c8:02:6e:93:7c:c6:2a:68:8c:04:2c:2f:30:05:28:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad80679b96ca322bfa85500cab206c6d47412edf
        Validity
            Not Before: Jul  1 22:01:31 2025 GMT
            Not After : Jul  2 22:01:31 2025 GMT
        Subject: CN=4daed6279433493bee58bc16c697686098e986e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:10:80:77:13:56:64:a1:21:19:52:1d:41:9d:
                    92:5e:ac:ba:60:b0:df:8b:95:8d:ae:91:df:a3:08:
                    95:43:bd:64:50:01:63:5d:69:6c:b4:bf:ac:03:a2:
                    fe:4e:ce:ca:7c:ff:de:92:06:0d:78:05:7f:b2:db:
                    dd:25:62:4d:ed:de:c3:cf:e1:9b:1b:f0:3b:fa:bc:
                    91:28:ab:c8:8f:5f:37:b0:bc:81:04:d0:13:5b:7d:
                    64:a6:e2:d5:36:5e:5f:fd:24:b6:2b:c3:3b:09:02:
                    f5:78:77:d7:91:0f:71:fb:62:c5:2b:b2:c4:92:40:
                    e9:6e:d0:89:32:58:3b:29:b3:e7:fa:1f:f4:1c:b0:
                    ab:75:bf:4b:2b:d8:ca:6e:6b:45:61:cc:33:d0:08:
                    b0:08:cf:21:dd:d7:f0:54:a7:37:9d:79:3f:30:ce:
                    dd:21:7f:34:c7:49:38:b2:3e:b5:1d:82:ba:4b:9f:
                    74:81:25:5a:2f:b7:19:55:84:4c:16:fc:34:97:f8:
                    46:d3:36:63:1e:ba:b2:bb:5a:d1:66:bf:1e:43:e3:
                    e7:23:89:86:b6:ca:e7:f3:ff:b3:74:c1:ea:5a:d5:
                    38:21:7d:54:43:b8:00:12:4f:72:08:7a:79:26:8d:
                    1c:1a:14:59:36:a7:b6:dd:93:6d:fb:e5:d8:a5:1a:
                    8b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:AE:D6:27:94:33:49:3B:EE:58:BC:16:C6:97:68:60:98:E9:86:E4
            X509v3 Authority Key Identifier:
                keyid:AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:e1:d1:8d:c1:a5:6f:18:2f:5a:80:38:4b:27:ba:53:61:ec:
         6e:80:51:b3:f8:98:3f:cc:3d:3a:38:7c:fb:53:ce:78:8a:9c:
         f8:34:94:f8:3b:58:7e:65:9e:ff:ce:f7:d4:b1:55:57:ae:1c:
         2c:37:d8:e8:5a:2d:59:77:cb:50:a5:64:8d:b3:bd:8d:e0:9a:
         db:fb:16:38:58:90:9c:c2:d7:78:a2:de:9a:c6:9c:fc:72:e9:
         02:61:d6:98:06:ca:aa:f0:07:e0:0e:e6:14:71:21:79:59:4f:
         81:ea:6b:35:b7:89:4f:24:92:10:e3:d6:b7:99:fc:da:be:1d:
         93:2a:66:5f:ee:70:d6:4b:ec:29:e2:17:c7:80:dd:cb:db:a0:
         b5:15:ad:5a:4e:fe:99:9e:7c:0a:32:55:9b:76:6b:aa:da:7f:
         3b:d5:3d:22:d4:88:81:fa:89:e5:5c:6f:93:32:b2:d9:69:dc:
         1c:df:83:b4:5a:0b:7f:6c:55:e4:75:19:78:de:23:71:d9:10:
         11:1f:21:ba:5f:64:c5:47:7b:6b:be:a9:aa:63:01:5f:49:82:
         89:6e:cf:5d:64:86:13:c8:96:a5:93:f9:10:7e:b8:a2:9a:40:
         b4:f8:77:93:22:5c:de:67:af:e2:03:df:29:09:83:ae:7e:8b:
         8c:76:a0:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfIAm6TfMYqaIwELC8wBSihMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkODA2NzliOTZjYTMyMmJmYTg1NTAwY2FiMjA2YzZkNDc0
MTJlZGYwHhcNMjUwNzAxMjIwMTMxWhcNMjUwNzAyMjIwMTMxWjAzMTEwLwYDVQQD
Eyg0ZGFlZDYyNzk0MzM0OTNiZWU1OGJjMTZjNjk3Njg2MDk4ZTk4NmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRCAdxNWZKEhGVIdQZ2SXqy6YLDf
i5WNrpHfowiVQ71kUAFjXWlstL+sA6L+Ts7KfP/ekgYNeAV/stvdJWJN7d7Dz+Gb
G/A7+ryRKKvIj183sLyBBNATW31kpuLVNl5f/SS2K8M7CQL1eHfXkQ9x+2LFK7LE
kkDpbtCJMlg7KbPn+h/0HLCrdb9LK9jKbmtFYcwz0AiwCM8h3dfwVKc3nXk/MM7d
IX80x0k4sj61HYK6S590gSVaL7cZVYRMFvw0l/hG0zZjHrqyu1rRZr8eQ+PnI4mG
tsrn8/+zdMHqWtU4IX1UQ7gAEk9yCHp5Jo0cGhRZNqe23ZNt++XYpRqLhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2u1ieUM0k77li8FsaXaGCY6YbkMB8GA1UdIwQY
MBaAFK2AZ5uWyjIr+oVQDKsgbG1HQS7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcllCbm01YktNaXY2aFZBTXF5QnNiVWRCTHQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9hMTM5OWEtZWE2Yi00YTA5LThiNDAt
OTBjMGJkZTA5ODY5LzEvcllCbm01YktNaXY2aFZBTXF5QnNiVWRCTHQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9hMTM5OWEtZWE2Yi00YTA5LThiNDAtOTBjMGJkZTA5ODY5
LzEvcllCbm01YktNaXY2aFZBTXF5QnNiVWRCTHQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg+HRjcGl
bxgvWoA4Sye6U2HsboBRs/iYP8w9Ojh8+1POeIqc+DSU+DtYfmWe/8731LFVV64c
LDfY6FotWXfLUKVkjbO9jeCa2/sWOFiQnMLXeKLemsac/HLpAmHWmAbKqvAH4A7m
FHEheVlPgeprNbeJTySSEOPWt5n82r4dkypmX+5w1kvsKeIXx4Ddy9ugtRWtWk7+
mZ58CjJVm3Zrqtp/O9U9ItSIgfqJ5VxvkzKy2WncHN+DtFoLf2xV5HUZeN4jcdkQ
ER8hul9kxUd7a76pqmMBX0mCiW7PXWSGE8iWpZP5EH64oppAtPh3kyJc3mev4gPf
KQmDrn6LjHagoA==
-----END CERTIFICATE-----
Generated at Wed Jul 2 07:11:51 2025 by rpki-client