Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
File:                     sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft (raw, json)
Hash identifier:          n1PhOEb2vG7BtuC72ug7a5g6rLjeDlXEkNwoVCScXLY=
Subject key identifier:   BD:78:A1:22:56:93:E1:20:9C:95:41:8E:E7:7C:C2:CF:7B:6B:95:DF
Authority key identifier: B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A
Certificate issuer:       /CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a
Certificate serial:       0197B74545CEB8789C7C381D7A5D2C7EF758
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
Manifest number:          15B4
Signing time:             Sat 28 Jun 2025 16:00:59 +0000
Manifest this update:     Sat 28 Jun 2025 16:00:59 +0000
Manifest next update:     Sun 29 Jun 2025 16:00:59 +0000
Files and hashes:         1: 5q_QBExX-iJkMtzTZ_fdW28i38Y.roa (hash: o+vnb00qVUwzoLHaYfEzcLDShc1yhr65w9Ny1ipEj7o=)
                          2: sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl (hash: BcG6Gl0kytd8y6N0J+eBF/Abope67EEFR7mC2e6YenQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 16:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:45:ce:b8:78:9c:7c:38:1d:7a:5d:2c:7e:f7:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a
        Validity
            Not Before: Jun 28 16:00:59 2025 GMT
            Not After : Jun 29 16:00:59 2025 GMT
        Subject: CN=bd78a1225693e1209c95418ee77cc2cf7b6b95df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:db:9e:c4:60:fe:f1:3c:83:c9:f6:95:7c:e9:
                    56:82:75:64:8c:14:1a:72:8b:54:86:2c:83:ac:ff:
                    22:77:63:1c:70:28:b4:31:3a:4c:0d:bb:64:79:19:
                    64:8f:25:a1:34:ce:12:77:71:c3:d3:42:19:d5:5c:
                    d5:11:5b:96:9a:40:dd:61:07:d6:57:cc:8a:aa:7f:
                    7b:9f:1e:13:c0:ff:6b:d1:b4:78:87:c5:a9:94:47:
                    27:87:ee:5f:2d:eb:6f:28:03:b1:d1:5d:d5:56:cf:
                    d0:37:4b:69:a5:11:54:59:cc:46:e5:66:b1:cd:81:
                    a0:f1:cb:de:f8:c5:fc:9c:1a:2f:4c:8c:88:c9:cc:
                    36:08:61:e0:80:72:b0:bf:c0:8f:f2:50:b5:03:99:
                    e2:09:61:48:2c:65:99:db:95:27:be:32:87:21:93:
                    0e:67:ed:d0:16:fe:8d:42:eb:c7:46:7b:de:71:76:
                    91:e5:e5:ee:39:6e:0b:23:2b:dd:ff:8e:e1:fb:c9:
                    9a:e1:69:99:6b:3d:b5:22:ce:bd:6c:91:eb:95:12:
                    22:0a:8c:4a:1d:ca:7b:4b:ff:95:68:c6:a9:76:14:
                    d3:af:6d:ec:c6:a2:6f:2f:20:d4:af:85:ba:8d:a0:
                    4f:e8:39:95:25:0b:57:c1:0c:63:bf:b6:c1:5a:6f:
                    4c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:78:A1:22:56:93:E1:20:9C:95:41:8E:E7:7C:C2:CF:7B:6B:95:DF
            X509v3 Authority Key Identifier:
                keyid:B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:17:81:47:a4:ef:98:5c:87:b4:e7:46:44:84:27:be:80:59:
         a0:81:2a:f8:c8:ea:02:12:b9:75:64:b9:e0:0c:3c:15:ee:bf:
         e5:33:cc:c2:91:84:ff:d1:3f:71:10:30:3b:55:83:a1:f1:1a:
         86:4e:8d:ea:62:f1:a8:64:c9:65:4e:43:b5:d2:12:d7:5c:92:
         d6:30:3a:e1:54:ed:74:c4:be:9c:d7:77:23:a4:c1:90:cf:58:
         ef:a2:6b:bb:91:1b:a6:f6:78:5c:4f:78:11:94:38:38:94:a9:
         c3:d4:16:b0:65:c7:43:99:8d:25:4f:a1:a6:49:27:77:36:12:
         77:e5:90:53:40:ed:c0:a4:b4:2d:69:74:e0:46:f8:5b:7e:59:
         06:14:9b:c2:71:92:01:04:7b:b2:f3:30:cf:a6:85:41:0c:f4:
         8f:71:c1:9f:dd:1f:42:90:bf:b9:0b:f5:42:3d:92:17:0d:4b:
         ba:57:88:ea:b4:d1:35:d9:6d:1e:d8:1c:66:e5:5a:fe:0d:0e:
         8e:98:a8:83:03:43:9d:58:c5:98:b6:8b:41:0f:6b:2c:21:28:
         70:1b:fc:94:d6:5c:73:fa:44:a0:60:64:55:95:10:69:ea:cc:
         58:20:a6:83:f8:ff:d6:99:ef:04:cc:98:d9:86:ec:36:60:f1:
         ba:96:35:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RUXOuHicfDgdel0sfvdYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYmVlZDZlZGU5ZWIyODViZDJhNmFiYjk4NWFkY2RiZThm
Mjc3OWEwHhcNMjUwNjI4MTYwMDU5WhcNMjUwNjI5MTYwMDU5WjAzMTEwLwYDVQQD
EyhiZDc4YTEyMjU2OTNlMTIwOWM5NTQxOGVlNzdjYzJjZjdiNmI5NWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNuexGD+8TyDyfaVfOlWgnVkjBQa
cotUhiyDrP8id2MccCi0MTpMDbtkeRlkjyWhNM4Sd3HD00IZ1VzVEVuWmkDdYQfW
V8yKqn97nx4TwP9r0bR4h8WplEcnh+5fLetvKAOx0V3VVs/QN0tppRFUWcxG5Wax
zYGg8cve+MX8nBovTIyIycw2CGHggHKwv8CP8lC1A5niCWFILGWZ25UnvjKHIZMO
Z+3QFv6NQuvHRnvecXaR5eXuOW4LIyvd/47h+8ma4WmZaz21Is69bJHrlRIiCoxK
Hcp7S/+VaMapdhTTr23sxqJvLyDUr4W6jaBP6DmVJQtXwQxjv7bBWm9MwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL14oSJWk+EgnJVBjud8ws97a5XfMB8GA1UdIwQY
MBaAFLC+7W7enrKFvSpqu5ha3Nvo8neaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0w3dGJ0NmVzb1c5S21xN21GcmMyLWp5ZDVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hZDBkNmQtZjk0OS00NmRiLTk4MWYt
YjM4ZDdmNzA5ZDcwLzEvc0w3dGJ0NmVzb1c5S21xN21GcmMyLWp5ZDVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hZDBkNmQtZjk0OS00NmRiLTk4MWYtYjM4ZDdmNzA5ZDcw
LzEvc0w3dGJ0NmVzb1c5S21xN21GcmMyLWp5ZDVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMheBR6Tv
mFyHtOdGRIQnvoBZoIEq+MjqAhK5dWS54Aw8Fe6/5TPMwpGE/9E/cRAwO1WDofEa
hk6N6mLxqGTJZU5DtdIS11yS1jA64VTtdMS+nNd3I6TBkM9Y76Jru5EbpvZ4XE94
EZQ4OJSpw9QWsGXHQ5mNJU+hpkkndzYSd+WQU0DtwKS0LWl04Eb4W35ZBhSbwnGS
AQR7svMwz6aFQQz0j3HBn90fQpC/uQv1Qj2SFw1LuleI6rTRNdltHtgcZuVa/g0O
jpiogwNDnVjFmLaLQQ9rLCEocBv8lNZcc/pEoGBkVZUQaerMWCCmg/j/1pnvBMyY
2YbsNmDxupY1JA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:47:20 2025 by rpki-client