Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.mft
File:                     R600-MIKUHPoYIIcjAm_dXmibQs.mft (raw, json)
Hash identifier:          Rkqxas+OQmYrMLyucsc0cjUIn8fzxsc/dBX6BrQxDeQ=
Subject key identifier:   46:FC:D4:E2:8D:F0:8F:12:5E:5C:A9:0A:DE:5D:36:A7:1D:91:B6:50
Authority key identifier: 47:AD:34:F8:C2:0A:50:73:E8:60:82:1C:8C:09:BF:75:79:A2:6D:0B
Certificate issuer:       /CN=47ad34f8c20a5073e860821c8c09bf7579a26d0b
Certificate serial:       0197B8210059E95C2A57C360CFE937B299EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R600-MIKUHPoYIIcjAm_dXmibQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.mft
Manifest number:          1522
Signing time:             Sat 28 Jun 2025 20:00:59 +0000
Manifest this update:     Sat 28 Jun 2025 20:00:59 +0000
Manifest next update:     Sun 29 Jun 2025 20:00:59 +0000
Files and hashes:         1: R600-MIKUHPoYIIcjAm_dXmibQs.crl (hash: cSgiyzbcZ9OyQ/iy1FLelRC3SmFF5UlgdGVoCKDln0g=)
                          2: jbn0uNt62cbm-5uAutTNS6KIeT0.roa (hash: JjRHfVTqZW3BM/UoOGJBXI5IB1+oYeNHfz6C/Sa7drI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R600-MIKUHPoYIIcjAm_dXmibQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:21:00:59:e9:5c:2a:57:c3:60:cf:e9:37:b2:99:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47ad34f8c20a5073e860821c8c09bf7579a26d0b
        Validity
            Not Before: Jun 28 20:00:59 2025 GMT
            Not After : Jun 29 20:00:59 2025 GMT
        Subject: CN=46fcd4e28df08f125e5ca90ade5d36a71d91b650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:df:48:e9:f4:46:da:ae:4a:e9:8b:11:00:27:
                    3b:e8:4b:72:82:44:94:7e:dc:97:aa:f0:a9:38:c7:
                    67:d5:71:53:f7:89:00:a3:a7:e3:d5:b1:84:ae:5f:
                    20:f1:81:3e:d0:38:24:38:b6:3d:87:eb:dc:1a:4d:
                    6e:71:0f:4a:d5:37:1f:96:a3:df:63:72:08:9d:7b:
                    93:15:2a:a7:4a:67:d8:a3:f7:d7:cb:1a:21:a5:6c:
                    c4:ef:d2:e2:d5:a2:3c:2d:8f:f9:d1:de:cf:62:15:
                    a9:03:40:06:1b:61:70:66:04:78:8d:a3:82:40:45:
                    ee:b7:39:bf:af:ea:9d:8b:34:b7:a8:2e:ff:44:6c:
                    50:d7:81:42:75:7a:47:84:f6:a7:66:c3:24:26:5b:
                    60:ec:7e:bb:b1:0f:eb:0b:40:35:6c:c9:dd:67:4e:
                    fc:9d:0f:6b:a7:09:2d:5f:c9:65:dc:63:3e:30:e6:
                    71:1b:06:7d:c0:6d:57:f3:69:bc:4a:a6:87:73:42:
                    76:ca:6a:6b:1a:50:36:70:de:3c:49:60:57:82:0f:
                    2c:02:18:bc:7f:fd:44:39:ef:e0:19:c8:c2:22:69:
                    eb:87:8f:9e:a4:b2:21:56:e9:56:61:08:d9:8a:e7:
                    5c:3b:49:13:a9:fe:ab:48:51:29:b7:1d:aa:dd:3a:
                    36:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:FC:D4:E2:8D:F0:8F:12:5E:5C:A9:0A:DE:5D:36:A7:1D:91:B6:50
            X509v3 Authority Key Identifier:
                keyid:47:AD:34:F8:C2:0A:50:73:E8:60:82:1C:8C:09:BF:75:79:A2:6D:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R600-MIKUHPoYIIcjAm_dXmibQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:d7:02:ad:03:ee:6a:48:c8:d6:ff:d9:94:0b:a0:fb:d1:86:
         4e:54:53:30:f1:c3:d4:3b:0e:d5:44:01:f8:88:6c:4a:bb:a4:
         88:88:7f:60:11:11:a0:7c:75:22:60:af:43:77:63:7d:47:54:
         96:a1:68:7a:36:33:22:1b:8e:e9:c7:07:1a:cb:17:19:e1:20:
         f1:6f:7a:1b:e0:a9:34:6e:bb:cf:2c:13:72:a9:5a:ad:f5:0d:
         86:25:50:0d:73:3f:fc:81:c6:82:57:98:2e:d9:60:4b:52:92:
         d3:77:04:81:99:ab:c9:3d:cd:9f:63:b6:24:71:76:ab:a4:f8:
         eb:5a:a2:e3:84:db:11:56:e1:93:1d:12:0c:84:af:8c:75:2b:
         15:99:04:e7:d9:e5:71:f6:bc:6f:87:06:e6:e9:1e:ba:04:b6:
         76:a0:6a:ce:19:17:71:15:69:6b:6c:2f:ab:0b:f6:ce:ec:1a:
         c0:53:5f:7a:c7:31:f4:af:d8:b0:d5:cb:27:48:18:03:26:98:
         48:68:24:99:b5:a1:c9:42:1f:6a:98:67:99:ee:30:28:d8:18:
         95:0e:de:55:24:12:80:90:1b:e6:d7:8a:23:df:1e:a7:55:09:
         75:ca:97:d6:92:40:a2:63:57:d3:5f:9f:2d:59:c1:7e:99:5c:
         fc:ca:2b:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IQBZ6VwqV8Ngz+k3spnrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YWQzNGY4YzIwYTUwNzNlODYwODIxYzhjMDliZjc1Nzlh
MjZkMGIwHhcNMjUwNjI4MjAwMDU5WhcNMjUwNjI5MjAwMDU5WjAzMTEwLwYDVQQD
Eyg0NmZjZDRlMjhkZjA4ZjEyNWU1Y2E5MGFkZTVkMzZhNzFkOTFiNjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvN9I6fRG2q5K6YsRACc76EtygkSU
ftyXqvCpOMdn1XFT94kAo6fj1bGErl8g8YE+0DgkOLY9h+vcGk1ucQ9K1TcflqPf
Y3IInXuTFSqnSmfYo/fXyxohpWzE79Li1aI8LY/50d7PYhWpA0AGG2FwZgR4jaOC
QEXutzm/r+qdizS3qC7/RGxQ14FCdXpHhPanZsMkJltg7H67sQ/rC0A1bMndZ078
nQ9rpwktX8ll3GM+MOZxGwZ9wG1X82m8SqaHc0J2ymprGlA2cN48SWBXgg8sAhi8
f/1EOe/gGcjCImnrh4+epLIhVulWYQjZiudcO0kTqf6rSFEptx2q3To2NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEb81OKN8I8SXlypCt5dNqcdkbZQMB8GA1UdIwQY
MBaAFEetNPjCClBz6GCCHIwJv3V5om0LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjYwMC1NSUtVSFBvWUlJY2pBbV9kWG1pYlFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8xMDdkYjQtOWZkNy00ZmNkLThkMTkt
MjU0MTNjMjYwZTQ1LzEvUjYwMC1NSUtVSFBvWUlJY2pBbV9kWG1pYlFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8xMDdkYjQtOWZkNy00ZmNkLThkMTktMjU0MTNjMjYwZTQ1
LzEvUjYwMC1NSUtVSFBvWUlJY2pBbV9kWG1pYlFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO9cCrQPu
akjI1v/ZlAug+9GGTlRTMPHD1DsO1UQB+IhsSrukiIh/YBERoHx1ImCvQ3djfUdU
lqFoejYzIhuO6ccHGssXGeEg8W96G+CpNG67zywTcqlarfUNhiVQDXM//IHGgleY
LtlgS1KS03cEgZmryT3Nn2O2JHF2q6T461qi44TbEVbhkx0SDISvjHUrFZkE59nl
cfa8b4cG5ukeugS2dqBqzhkXcRVpa2wvqwv2zuwawFNfescx9K/YsNXLJ0gYAyaY
SGgkmbWhyUIfaphnme4wKNgYlQ7eVSQSgJAb5teKI98ep1UJdcqX1pJAomNX01+f
LVnBfplc/MorAQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:28 2025 by rpki-client