Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft
File:                     c46JPc00f32rX3DTUfj84d6qZdE.mft (raw, json)
Hash identifier:          dMcfuAfjGKpHR+XzTpp7k38v6b2P5ejHSfPJoQbg/Xk=
Subject key identifier:   2D:FE:B0:84:A9:4E:CC:13:14:CA:75:96:91:16:A7:38:1C:58:0B:EB
Authority key identifier: 73:8E:89:3D:CD:34:7F:7D:AB:5F:70:D3:51:F8:FC:E1:DE:AA:65:D1
Certificate issuer:       /CN=738e893dcd347f7dab5f70d351f8fce1deaa65d1
Certificate serial:       0197B745876ED0C61234F2681FC979D13749
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c46JPc00f32rX3DTUfj84d6qZdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft
Manifest number:          15B3
Signing time:             Sat 28 Jun 2025 16:01:16 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:16 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:16 +0000
Files and hashes:         1: 3ktEzDL0WvhnsuJm2C6DIk-mHBM.roa (hash: OJtb++yW5+MtXw5QSymaUjcZIRPMQ11YahPbPvwPK4Q=)
                          2: c46JPc00f32rX3DTUfj84d6qZdE.crl (hash: 2U72/8yvSWrh68jG2V1eaPDZwqX53uQtrGNShkIuixM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c46JPc00f32rX3DTUfj84d6qZdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:87:6e:d0:c6:12:34:f2:68:1f:c9:79:d1:37:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=738e893dcd347f7dab5f70d351f8fce1deaa65d1
        Validity
            Not Before: Jun 28 16:01:16 2025 GMT
            Not After : Jun 29 16:01:16 2025 GMT
        Subject: CN=2dfeb084a94ecc1314ca75969116a7381c580beb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c8:58:a8:8e:23:d8:49:04:e1:39:d9:8d:db:
                    6d:7a:ca:8e:e8:d1:bf:21:c4:b3:48:eb:73:45:8d:
                    16:75:20:da:f9:ec:4d:5c:dc:1d:c0:48:c4:59:85:
                    67:3f:b4:b1:d0:b2:7a:92:d1:19:eb:d5:a0:5f:03:
                    9c:27:30:79:bf:f6:1e:bb:c4:98:d4:81:b4:8c:c5:
                    c1:75:38:a9:21:ed:4a:ba:02:d6:2b:56:52:cb:99:
                    12:f0:50:1a:e1:34:1a:0e:11:7f:a2:2f:c7:5e:80:
                    59:15:8b:db:ce:6c:3b:a0:cc:27:10:7a:02:a1:76:
                    74:2f:8e:e2:a6:c1:71:2f:fb:db:ec:be:b3:61:00:
                    95:55:67:45:f1:e5:50:83:1d:3d:19:10:f5:72:30:
                    3b:1f:9f:28:9e:fa:91:cc:65:85:97:df:3e:66:10:
                    25:7d:d3:83:5e:ff:b2:21:0e:39:0f:b3:60:af:fb:
                    74:67:0f:34:35:ec:a2:e0:76:e7:d1:80:1d:31:23:
                    5f:61:85:58:d8:de:09:82:e3:6b:b7:2a:07:57:8c:
                    0c:2b:c3:af:21:6d:0c:b3:46:c9:ae:92:b0:8f:cf:
                    aa:35:53:78:20:f7:17:20:51:ec:d9:48:80:8c:7b:
                    92:a4:96:56:e5:33:fc:e4:4e:82:c4:ef:d9:23:53:
                    37:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:FE:B0:84:A9:4E:CC:13:14:CA:75:96:91:16:A7:38:1C:58:0B:EB
            X509v3 Authority Key Identifier:
                keyid:73:8E:89:3D:CD:34:7F:7D:AB:5F:70:D3:51:F8:FC:E1:DE:AA:65:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c46JPc00f32rX3DTUfj84d6qZdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:82:b5:88:2e:16:21:b5:4d:33:fb:44:a1:6a:a9:ab:5e:55:
         56:b0:12:3d:2c:08:ae:c6:c3:25:6a:e1:2a:9f:9e:60:9a:dd:
         73:1d:a9:85:bd:8f:2c:44:e0:c0:05:8a:2a:4d:76:06:4b:90:
         3a:03:c4:2a:47:04:b2:a7:24:01:10:5c:a1:78:dd:6f:02:58:
         38:dc:77:fb:e7:a9:a7:3d:6e:ab:55:be:1e:6b:c9:7a:a3:a3:
         c0:5e:b4:a0:91:28:e2:fe:c8:bb:a7:6f:85:09:14:b2:83:23:
         aa:0b:0a:e7:9f:9e:0d:82:6b:43:9d:6e:dc:52:94:5b:b0:0b:
         69:71:f7:1b:4d:2b:c8:91:d3:61:cc:53:fb:af:fa:e4:ef:e4:
         79:7a:2c:86:ed:3c:4f:dc:d4:ff:7c:12:fd:7e:48:48:ba:82:
         ca:d8:48:37:e8:85:f3:06:f6:0a:73:fa:03:2a:6e:44:ff:cc:
         34:d6:aa:46:0c:a1:2e:b6:de:61:78:5c:4a:fa:1f:6a:5d:2d:
         37:0c:48:7e:b3:43:66:b8:c8:c5:04:90:fd:74:08:3b:03:a9:
         cf:48:14:63:d5:76:64:c1:04:16:28:fd:28:b6:23:96:a8:1f:
         f3:af:d2:44:4b:6b:c4:f1:01:e5:20:90:8c:ce:af:e4:29:60:
         9a:25:54:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RYdu0MYSNPJoH8l50TdJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczOGU4OTNkY2QzNDdmN2RhYjVmNzBkMzUxZjhmY2UxZGVh
YTY1ZDEwHhcNMjUwNjI4MTYwMTE2WhcNMjUwNjI5MTYwMTE2WjAzMTEwLwYDVQQD
EygyZGZlYjA4NGE5NGVjYzEzMTRjYTc1OTY5MTE2YTczODFjNTgwYmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8hYqI4j2EkE4TnZjdttesqO6NG/
IcSzSOtzRY0WdSDa+exNXNwdwEjEWYVnP7Sx0LJ6ktEZ69WgXwOcJzB5v/Yeu8SY
1IG0jMXBdTipIe1KugLWK1ZSy5kS8FAa4TQaDhF/oi/HXoBZFYvbzmw7oMwnEHoC
oXZ0L47ipsFxL/vb7L6zYQCVVWdF8eVQgx09GRD1cjA7H58onvqRzGWFl98+ZhAl
fdODXv+yIQ45D7Ngr/t0Zw80Neyi4Hbn0YAdMSNfYYVY2N4JguNrtyoHV4wMK8Ov
IW0Ms0bJrpKwj8+qNVN4IPcXIFHs2UiAjHuSpJZW5TP85E6CxO/ZI1M3uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3+sISpTswTFMp1lpEWpzgcWAvrMB8GA1UdIwQY
MBaAFHOOiT3NNH99q19w01H4/OHeqmXRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzQ2SlBjMDBmMzJyWDNEVFVmajg0ZDZxWmRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8yNTUxNDktOGM0Yi00Y2Q4LTkxOWYt
NzdiYjUzMjIyOGI0LzEvYzQ2SlBjMDBmMzJyWDNEVFVmajg0ZDZxWmRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8yNTUxNDktOGM0Yi00Y2Q4LTkxOWYtNzdiYjUzMjIyOGI0
LzEvYzQ2SlBjMDBmMzJyWDNEVFVmajg0ZDZxWmRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI4K1iC4W
IbVNM/tEoWqpq15VVrASPSwIrsbDJWrhKp+eYJrdcx2phb2PLETgwAWKKk12BkuQ
OgPEKkcEsqckARBcoXjdbwJYONx3++eppz1uq1W+HmvJeqOjwF60oJEo4v7Iu6dv
hQkUsoMjqgsK55+eDYJrQ51u3FKUW7ALaXH3G00ryJHTYcxT+6/65O/keXoshu08
T9zU/3wS/X5ISLqCythIN+iF8wb2CnP6AypuRP/MNNaqRgyhLrbeYXhcSvofal0t
NwxIfrNDZrjIxQSQ/XQIOwOpz0gUY9V2ZMEEFij9KLYjlqgf86/SREtrxPEB5SCQ
jM6v5ClgmiVUaA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:33:35 2025 by rpki-client