Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft
File:                     60GVbRLcuYK-1HqfrEp-SOd4fHk.mft (raw, json)
Hash identifier:          GfEfL1tMbrN4zQj7/9EG2GwB2lS0w1umPth9W/3CnO8=
Subject key identifier:   6B:0E:AF:37:8C:5D:6A:A5:BE:51:F4:23:64:74:7E:17:A9:A4:42:E7
Authority key identifier: EB:41:95:6D:12:DC:B9:82:BE:D4:7A:9F:AC:4A:7E:48:E7:78:7C:79
Certificate issuer:       /CN=eb41956d12dcb982bed47a9fac4a7e48e7787c79
Certificate serial:       0198D7739CA185165C2876E1FC7BB0AD63A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/60GVbRLcuYK-1HqfrEp-SOd4fHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 15:02:14 +0000
Manifest this update:     Sat 23 Aug 2025 15:02:14 +0000
Manifest next update:     Sun 24 Aug 2025 15:02:14 +0000
Files and hashes:         1: 60GVbRLcuYK-1HqfrEp-SOd4fHk.crl (hash: Gwficka/XDo+Qv0kQS8R6Noe25AzVAK9PijtoDOGars=)
                          2: yAxzfi9JXUul0TO1jK5Ldw1Rthk.roa (hash: lWeFfnhZvBmgn+p8KY5mqn1eMKw9nzLuCchH9PtGLK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/60GVbRLcuYK-1HqfrEp-SOd4fHk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:73:9c:a1:85:16:5c:28:76:e1:fc:7b:b0:ad:63:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb41956d12dcb982bed47a9fac4a7e48e7787c79
        Validity
            Not Before: Aug 23 15:02:14 2025 GMT
            Not After : Aug 24 15:02:14 2025 GMT
        Subject: CN=6b0eaf378c5d6aa5be51f42364747e17a9a442e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:17:1c:2a:20:0e:c3:52:72:87:fb:0a:30:fc:
                    4d:61:f0:45:d2:f6:f1:58:9d:b0:88:cf:8c:f5:9e:
                    62:8b:73:15:02:39:97:22:b7:6c:07:5a:96:f5:0b:
                    e5:fe:a3:7f:a1:c8:7a:1d:12:a6:47:8c:25:e1:a9:
                    9d:58:0e:97:23:c4:ea:b4:d0:4c:05:73:5c:c1:76:
                    4c:b7:62:b6:f6:b5:99:03:2f:77:a2:41:cc:1c:af:
                    92:c2:31:da:43:24:f9:7c:49:d6:c3:b8:d4:58:f6:
                    6a:bd:7d:e0:87:b0:f7:b1:49:b5:f8:b4:1d:28:4e:
                    03:ce:9a:af:2a:aa:f7:61:ca:67:0e:6c:c5:d0:c8:
                    fe:6f:24:ef:3c:82:47:b4:fa:51:ea:77:9f:2a:de:
                    4b:d4:40:cd:88:e7:35:13:30:92:46:b3:ea:f9:db:
                    e4:be:af:90:6b:09:b3:08:0f:33:fc:97:17:bd:48:
                    3c:9b:3a:a6:10:39:17:21:bd:48:d3:f2:bc:7f:75:
                    5e:fb:d1:b6:5d:de:ff:f6:06:6b:dc:5f:0c:6d:2b:
                    31:84:f7:96:e4:98:ce:e0:27:a1:47:f8:0e:49:c1:
                    0b:3e:d5:cc:1d:01:45:6e:7a:e6:8c:b7:33:1b:26:
                    50:95:44:98:aa:bf:c1:c2:55:7e:5b:fd:2d:0e:2b:
                    4c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:0E:AF:37:8C:5D:6A:A5:BE:51:F4:23:64:74:7E:17:A9:A4:42:E7
            X509v3 Authority Key Identifier:
                keyid:EB:41:95:6D:12:DC:B9:82:BE:D4:7A:9F:AC:4A:7E:48:E7:78:7C:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/60GVbRLcuYK-1HqfrEp-SOd4fHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:d2:99:58:fc:93:64:f0:11:9b:ab:fc:28:eb:00:3e:45:55:
         97:67:10:d6:78:03:41:b5:83:33:d1:53:15:e8:2e:55:5c:c1:
         53:52:9d:b4:6c:6f:ce:6d:a1:48:52:d1:74:75:51:66:a9:57:
         92:07:f5:ca:5a:8e:7a:fd:08:c4:2d:3a:29:a9:1c:ba:4a:63:
         6b:68:26:38:eb:58:5f:6c:87:23:bf:30:b0:c3:86:c3:c3:12:
         dc:cc:b1:af:a6:8c:98:38:a3:9c:d8:de:f0:44:18:ae:8c:02:
         cd:0a:eb:f4:32:d7:08:e0:0e:d9:6d:9f:fb:3d:bf:f7:41:95:
         c6:4f:c4:c7:cb:f4:26:42:1e:80:4f:02:22:00:ad:a3:bb:60:
         13:f0:f4:ed:96:ac:23:7d:65:1e:52:99:fb:3b:cb:9f:90:27:
         b0:32:e7:d4:5c:2b:ef:4a:50:ed:70:5e:21:4e:31:47:e8:ea:
         c4:2a:98:72:d2:7b:ce:c8:37:03:0b:0d:10:01:ad:7d:b8:19:
         13:f0:54:bb:d8:ba:a4:7a:d9:bd:b3:f0:1b:07:d9:46:2d:9b:
         62:5f:1b:be:0c:40:00:ad:a1:25:38:96:5c:07:e4:57:17:e7:
         a9:aa:be:bd:a6:4f:da:a1:b3:20:b6:a5:66:4d:d6:5e:40:69:
         4e:bd:fb:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXc5yhhRZcKHbh/HuwrWOjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNDE5NTZkMTJkY2I5ODJiZWQ0N2E5ZmFjNGE3ZTQ4ZTc3
ODdjNzkwHhcNMjUwODIzMTUwMjE0WhcNMjUwODI0MTUwMjE0WjAzMTEwLwYDVQQD
Eyg2YjBlYWYzNzhjNWQ2YWE1YmU1MWY0MjM2NDc0N2UxN2E5YTQ0MmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxccKiAOw1Jyh/sKMPxNYfBF0vbx
WJ2wiM+M9Z5ii3MVAjmXIrdsB1qW9Qvl/qN/och6HRKmR4wl4amdWA6XI8TqtNBM
BXNcwXZMt2K29rWZAy93okHMHK+SwjHaQyT5fEnWw7jUWPZqvX3gh7D3sUm1+LQd
KE4DzpqvKqr3YcpnDmzF0Mj+byTvPIJHtPpR6nefKt5L1EDNiOc1EzCSRrPq+dvk
vq+QawmzCA8z/JcXvUg8mzqmEDkXIb1I0/K8f3Ve+9G2Xd7/9gZr3F8MbSsxhPeW
5JjO4CehR/gOScELPtXMHQFFbnrmjLczGyZQlUSYqr/BwlV+W/0tDitMsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsOrzeMXWqlvlH0I2R0fheppELnMB8GA1UdIwQY
MBaAFOtBlW0S3LmCvtR6n6xKfkjneHx5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjBHVmJSTGN1WUstMUhxZnJFcC1TT2Q0ZkhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81ZDNmMWMtY2ZmNS00YjJiLTllNDYt
Njc4NDdjNzZjYjc2LzEvNjBHVmJSTGN1WUstMUhxZnJFcC1TT2Q0ZkhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC81ZDNmMWMtY2ZmNS00YjJiLTllNDYtNjc4NDdjNzZjYjc2
LzEvNjBHVmJSTGN1WUstMUhxZnJFcC1TT2Q0ZkhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgtKZWPyT
ZPARm6v8KOsAPkVVl2cQ1ngDQbWDM9FTFeguVVzBU1KdtGxvzm2hSFLRdHVRZqlX
kgf1ylqOev0IxC06Kakcukpja2gmOOtYX2yHI78wsMOGw8MS3Myxr6aMmDijnNje
8EQYrowCzQrr9DLXCOAO2W2f+z2/90GVxk/Ex8v0JkIegE8CIgCto7tgE/D07Zas
I31lHlKZ+zvLn5AnsDLn1Fwr70pQ7XBeIU4xR+jqxCqYctJ7zsg3AwsNEAGtfbgZ
E/BUu9i6pHrZvbPwGwfZRi2bYl8bvgxAAK2hJTiWXAfkVxfnqaq+vaZP2qGzILal
Zk3WXkBpTr37Hw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:58:08 2025 by rpki-client