Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
File:                     YI5qalQBfdO5sszjX9Wpp_KkVJg.mft (raw, json)
Hash identifier:          p6LKx4GhFw5OGzQBiAAJSjrUKFCHgZLks+kbMQnfQ3s=
Subject key identifier:   79:50:AF:82:73:6B:20:CB:91:5D:C3:A6:E9:8F:69:BA:F5:0C:44:C5
Authority key identifier: 60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
Certificate issuer:       /CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Certificate serial:       0197B77C8DBE748610552A2F6D4754B2506B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
Manifest number:          15B8
Signing time:             Sat 28 Jun 2025 17:01:22 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:22 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:22 +0000
Files and hashes:         1: 4Rs6VOUb7Jz1WEbUI4mx4euf-jo.roa (hash: 0ue5rKQ04dXvEPaM/2a7F1E05+6Su6iR1FzvjJIwmzg=)
                          2: X_5mJIe23lTGFoHxQS-RDQrkxZY.roa (hash: RzER0AmjnLXODOGy8fUMFdlmPYkcB4bwanmhBdhdXVQ=)
                          3: YI5qalQBfdO5sszjX9Wpp_KkVJg.crl (hash: 1hAcxcWTWEQy3EsWCV9IYgpNvo0d2bJR+qcpnxvtTrI=)
                          4: mRXbSMwMplFS-oxDDBYp3cRPJvY.roa (hash: 2gbj64POpXtv1Gc7Tqp5twOdYYGVI2nr7NuHBiH4Qgs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:8d:be:74:86:10:55:2a:2f:6d:47:54:b2:50:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
        Validity
            Not Before: Jun 28 17:01:22 2025 GMT
            Not After : Jun 29 17:01:22 2025 GMT
        Subject: CN=7950af82736b20cb915dc3a6e98f69baf50c44c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c3:e1:4f:4e:06:7b:bc:72:7b:1a:7b:d3:78:
                    49:0d:10:87:4d:f2:1a:3f:33:12:6d:ca:20:24:94:
                    9b:67:03:da:50:5d:70:ad:42:ce:ee:7e:c6:06:84:
                    7d:25:61:fe:b6:41:08:b3:be:51:d7:4d:84:04:a2:
                    62:bc:01:38:e8:5d:18:71:5b:a3:74:78:42:e4:45:
                    04:04:97:67:ab:0c:b5:8a:17:24:28:62:e8:cb:29:
                    36:d7:ed:7f:be:dc:f6:61:aa:7d:12:23:81:30:bc:
                    b2:d8:cc:75:8b:5c:7d:7c:38:40:cf:2e:5e:76:25:
                    38:06:97:26:28:4e:87:a8:44:a1:37:ba:98:e4:42:
                    10:85:b9:7b:28:cd:b5:eb:9a:5e:31:eb:18:15:e2:
                    ed:2c:08:8c:b6:9d:51:6a:a4:20:8c:32:d7:5e:ba:
                    1e:be:d9:c2:f4:7c:76:61:bd:2b:9c:2e:3f:92:b6:
                    b5:eb:f1:2c:81:4b:10:bf:50:52:a8:eb:60:07:4d:
                    25:47:83:73:e1:b8:d0:cc:12:a5:80:7b:03:2f:a3:
                    d9:7c:07:09:ec:72:5d:9a:86:c7:35:cc:6b:ac:1a:
                    dd:ae:22:ca:c8:2f:c1:5d:2c:04:f0:3d:58:c9:89:
                    b5:bd:e7:11:9a:06:ed:10:8b:71:e4:39:77:8a:f1:
                    b6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:50:AF:82:73:6B:20:CB:91:5D:C3:A6:E9:8F:69:BA:F5:0C:44:C5
            X509v3 Authority Key Identifier:
                keyid:60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:22:b8:84:7b:5a:0d:a7:8c:d3:cc:55:b2:54:bf:9d:7b:20:
         c7:d2:d9:f1:4e:87:80:ff:28:f8:15:b4:ea:b7:d6:d9:ad:79:
         59:2f:49:13:34:5f:04:66:29:e9:f4:03:91:77:e1:0d:5f:83:
         c8:5c:83:93:ea:16:04:12:88:71:5e:da:45:d0:e3:47:2e:a7:
         57:1b:ca:b8:80:c7:b8:9e:43:19:f9:17:e3:32:38:43:32:97:
         04:f9:46:a9:94:0b:68:88:72:7b:2d:58:3b:fa:a5:a0:e8:76:
         a2:8c:11:e4:ec:aa:e7:0a:16:ef:0e:45:3e:9f:10:3f:59:89:
         9d:78:2e:60:fd:1c:5c:89:79:71:63:a5:59:40:4c:6d:43:9b:
         3d:f4:82:69:b1:b6:c4:89:e1:dc:dc:74:db:67:0b:a0:50:f0:
         0e:10:d1:f5:6b:b2:dd:38:ab:ad:69:83:3e:9d:41:d7:d2:40:
         94:99:d0:ae:7b:b9:e6:85:5e:8c:f8:02:33:f4:47:76:a7:8f:
         47:0a:cc:ec:2e:14:56:39:0c:43:c8:81:03:08:c5:bb:45:f8:
         b9:62:5f:8a:ff:45:0b:68:96:c9:d8:11:10:b1:2c:f5:53:50:
         e7:90:6d:f4:ab:e3:31:4e:2b:60:ff:d8:1a:68:87:54:05:89:
         a1:85:e3:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fI2+dIYQVSovbUdUslBrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwOGU2YTZhNTQwMTdkZDNiOWIyY2NlMzVmZDVhOWE3ZjJh
NDU0OTgwHhcNMjUwNjI4MTcwMTIyWhcNMjUwNjI5MTcwMTIyWjAzMTEwLwYDVQQD
Eyg3OTUwYWY4MjczNmIyMGNiOTE1ZGMzYTZlOThmNjliYWY1MGM0NGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycPhT04Ge7xyexp703hJDRCHTfIa
PzMSbcogJJSbZwPaUF1wrULO7n7GBoR9JWH+tkEIs75R102EBKJivAE46F0YcVuj
dHhC5EUEBJdnqwy1ihckKGLoyyk21+1/vtz2Yap9EiOBMLyy2Mx1i1x9fDhAzy5e
diU4BpcmKE6HqEShN7qY5EIQhbl7KM2165peMesYFeLtLAiMtp1RaqQgjDLXXroe
vtnC9Hx2Yb0rnC4/kra16/EsgUsQv1BSqOtgB00lR4Nz4bjQzBKlgHsDL6PZfAcJ
7HJdmobHNcxrrBrdriLKyC/BXSwE8D1YyYm1vecRmgbtEItx5Dl3ivG2ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHlQr4JzayDLkV3DpumPabr1DETFMB8GA1UdIwQY
MBaAFGCOampUAX3TubLM41/VqafypFSYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUk1cWFsUUJmZE81c3N6alg5V3BwX0trVkpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9jMzMyOGUtMWNlOS00ZTM4LTllY2Et
MjMyNDk3N2M5MzkzLzEvWUk1cWFsUUJmZE81c3N6alg5V3BwX0trVkpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9jMzMyOGUtMWNlOS00ZTM4LTllY2EtMjMyNDk3N2M5Mzkz
LzEvWUk1cWFsUUJmZE81c3N6alg5V3BwX0trVkpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOSK4hHta
DaeM08xVslS/nXsgx9LZ8U6HgP8o+BW06rfW2a15WS9JEzRfBGYp6fQDkXfhDV+D
yFyDk+oWBBKIcV7aRdDjRy6nVxvKuIDHuJ5DGfkX4zI4QzKXBPlGqZQLaIhyey1Y
O/qloOh2oowR5Oyq5woW7w5FPp8QP1mJnXguYP0cXIl5cWOlWUBMbUObPfSCabG2
xInh3Nx022cLoFDwDhDR9Wuy3TirrWmDPp1B19JAlJnQrnu55oVejPgCM/RHdqeP
RwrM7C4UVjkMQ8iBAwjFu0X4uWJfiv9FC2iWydgRELEs9VNQ55Bt9KvjMU4rYP/Y
GmiHVAWJoYXjBw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:25 2025 by rpki-client