Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
File:                     fmXasjlAyzlPmqpmT-pNb49C4xg.mft (raw, json)
Hash identifier:          0DWWT4SeDmgz+moqpH+aTuTvrTPnRAD0mz916Pk4BJc=
Subject key identifier:   C1:D9:F0:8A:8B:73:14:90:1C:E8:30:F5:E5:66:38:F5:8C:6A:42:C1
Authority key identifier: 7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
Certificate issuer:       /CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Certificate serial:       0197B857B0886B74C94AAD7B944DD45E22BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
Manifest number:          15BF
Signing time:             Sat 28 Jun 2025 21:00:43 +0000
Manifest this update:     Sat 28 Jun 2025 21:00:43 +0000
Manifest next update:     Sun 29 Jun 2025 21:00:43 +0000
Files and hashes:         1: 2EgNkY8LCfJBqiF5G8pJe3q0hB4.roa (hash: wdnhU8m5AMaVCnPJuJ1ikMuyahXryJ7xnwDGzqvqxIk=)
                          2: B9gQbAB9xsN6pQfQdJIwTw0mN8w.roa (hash: x4fcMnOhpMuR2+7kVYptH+8Mn3pldQm1ilWOcm4WRJw=)
                          3: fmXasjlAyzlPmqpmT-pNb49C4xg.crl (hash: 9sNd3SCgxMjlljcX2t6A1HuIJFZZwgCllVxmwiEfq44=)
                          4: jKTi0IFy2Gsl-io5IjP67e8YnpY.roa (hash: zmbRyxceh2NVjEHPxC/G8V+VaBl1rJ3CnIcL4cBiYPg=)
                          5: onHMu3bAahxq_cU4SfKfk6E_UV4.roa (hash: iPBBLCVey8nRw59EFOtKkUkXyLv07ioTCFN/ZWTNZaI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:57:b0:88:6b:74:c9:4a:ad:7b:94:4d:d4:5e:22:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
        Validity
            Not Before: Jun 28 21:00:43 2025 GMT
            Not After : Jun 29 21:00:43 2025 GMT
        Subject: CN=c1d9f08a8b7314901ce830f5e56638f58c6a42c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b5:3e:e2:45:79:71:5d:a4:20:8c:52:2f:69:
                    c8:f4:cc:dc:f6:95:ec:6e:34:ba:c5:d9:c7:98:39:
                    dc:d1:08:c9:7f:94:b1:d1:0e:00:f6:02:83:de:af:
                    e9:92:7c:3c:21:0c:2e:04:64:d3:da:40:2d:9a:dd:
                    bd:36:5b:59:df:37:87:c0:c0:dd:a3:40:4d:7e:07:
                    77:17:d1:18:81:82:40:e7:79:fb:0f:6a:3b:3f:32:
                    28:9f:48:23:07:8c:80:c6:e4:df:7b:a0:f3:ff:80:
                    9c:ae:98:de:ea:e4:70:ec:32:38:33:48:a6:f7:6a:
                    cd:91:04:a9:6c:ef:09:7c:00:3a:85:0e:5d:36:3c:
                    9d:fe:0e:5b:87:44:ca:0f:96:b2:82:d4:91:3f:02:
                    4e:6f:24:ed:0c:10:ae:4e:a8:20:eb:3c:8c:59:bd:
                    51:82:41:15:3d:d0:55:ee:1e:5f:bf:bc:0a:4a:6a:
                    2e:61:32:ca:d4:86:e5:4c:76:f5:7e:ed:60:fc:2b:
                    d1:d5:43:b5:d8:48:c6:37:e3:42:90:cb:30:c7:8c:
                    d8:7a:a2:01:31:08:c1:6b:cb:31:c4:46:08:87:bb:
                    49:81:45:1b:cf:9c:fa:24:a4:09:21:4c:a4:c4:7d:
                    33:6a:3a:1c:b6:72:8d:ad:03:a2:ee:2d:fc:89:01:
                    3a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D9:F0:8A:8B:73:14:90:1C:E8:30:F5:E5:66:38:F5:8C:6A:42:C1
            X509v3 Authority Key Identifier:
                keyid:7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:b0:43:29:3a:dd:05:18:c1:af:ee:70:70:8b:bd:8f:70:54:
         b0:f7:78:47:a7:cd:aa:70:82:5e:89:cf:e3:13:cd:48:e4:4a:
         2f:db:cd:2a:4c:57:04:94:7d:e9:88:6d:11:08:34:cf:8a:26:
         9c:09:97:e3:68:d2:60:a6:1d:18:56:1b:ac:2a:b6:30:e7:03:
         f0:6b:5f:2f:99:9f:38:0d:3c:ec:be:c0:39:41:f9:51:46:ea:
         f4:74:70:df:d8:b0:7d:75:15:6c:45:47:7a:5b:b7:03:d1:70:
         5f:43:f9:4d:7b:25:0a:5b:a3:21:07:4d:eb:26:3f:bb:a4:61:
         78:7d:f7:5b:33:a5:17:d1:00:f9:5d:d5:76:df:7d:49:13:7a:
         cf:18:65:61:3e:0d:fe:c3:ca:eb:10:88:6f:91:38:2d:f9:03:
         d7:b5:cc:c8:4d:01:b0:5e:50:14:cd:73:e7:f8:e0:b8:d2:b3:
         ee:ac:05:94:5e:1b:00:1a:11:72:be:4e:6c:5b:73:8a:ef:d8:
         c1:b9:1a:ad:ec:3b:f1:fb:e6:59:c4:da:5b:bc:ef:af:93:6a:
         67:2f:3a:4a:54:64:03:8b:61:e7:4f:c9:c7:40:e1:1c:50:c3:
         24:93:a4:f7:d7:b2:4f:01:40:45:c9:0e:e9:ef:3f:d8:5e:19:
         8b:5b:45:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4V7CIa3TJSq17lE3UXiK+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNjVkYWIyMzk0MGNiMzk0ZjlhYWE2NjRmZWE0ZDZmOGY0
MmUzMTgwHhcNMjUwNjI4MjEwMDQzWhcNMjUwNjI5MjEwMDQzWjAzMTEwLwYDVQQD
EyhjMWQ5ZjA4YThiNzMxNDkwMWNlODMwZjVlNTY2MzhmNThjNmE0MmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLU+4kV5cV2kIIxSL2nI9Mzc9pXs
bjS6xdnHmDnc0QjJf5Sx0Q4A9gKD3q/pknw8IQwuBGTT2kAtmt29NltZ3zeHwMDd
o0BNfgd3F9EYgYJA53n7D2o7PzIon0gjB4yAxuTfe6Dz/4Ccrpje6uRw7DI4M0im
92rNkQSpbO8JfAA6hQ5dNjyd/g5bh0TKD5aygtSRPwJObyTtDBCuTqgg6zyMWb1R
gkEVPdBV7h5fv7wKSmouYTLK1IblTHb1fu1g/CvR1UO12EjGN+NCkMswx4zYeqIB
MQjBa8sxxEYIh7tJgUUbz5z6JKQJIUykxH0zajoctnKNrQOi7i38iQE6fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHZ8IqLcxSQHOgw9eVmOPWMakLBMB8GA1UdIwQY
MBaAFH5l2rI5QMs5T5qqZk/qTW+PQuMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZm1YYXNqbEF5emxQbXFwbVQtcE5iNDlDNHhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC81OGViYjEtZGJlYy00N2Y5LWJiOTYt
ODQ5Y2ZjYWJiNjU3LzEvZm1YYXNqbEF5emxQbXFwbVQtcE5iNDlDNHhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC81OGViYjEtZGJlYy00N2Y5LWJiOTYtODQ5Y2ZjYWJiNjU3
LzEvZm1YYXNqbEF5emxQbXFwbVQtcE5iNDlDNHhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATrBDKTrd
BRjBr+5wcIu9j3BUsPd4R6fNqnCCXonP4xPNSORKL9vNKkxXBJR96YhtEQg0z4om
nAmX42jSYKYdGFYbrCq2MOcD8GtfL5mfOA087L7AOUH5UUbq9HRw39iwfXUVbEVH
elu3A9FwX0P5TXslClujIQdN6yY/u6RheH33WzOlF9EA+V3Vdt99SRN6zxhlYT4N
/sPK6xCIb5E4LfkD17XMyE0BsF5QFM1z5/jguNKz7qwFlF4bABoRcr5ObFtziu/Y
wbkarew78fvmWcTaW7zvr5NqZy86SlRkA4th50/Jx0DhHFDDJJOk99eyTwFARckO
6e8/2F4Zi1tFpA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:53 2025 by rpki-client