Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft
File:                     f2vRprBGJcVx2DD4eLHAI4JHQIw.mft (raw, json)
Hash identifier:          /9vits4ms0u4L50J1B2p9uQMGFYGG8/pDlowmg7AShk=
Subject key identifier:   BB:A4:4D:F7:EB:2C:42:E0:D4:FD:87:EA:EF:E4:40:C9:E9:EF:58:7E
Authority key identifier: 7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C
Certificate issuer:       /CN=7f6bd1a6b04625c571d830f878b1c0238247408c
Certificate serial:       0197C838CE2275845EFD31475B1CCB4059F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft
Manifest number:          045C
Signing time:             Tue 01 Jul 2025 23:00:55 +0000
Manifest this update:     Tue 01 Jul 2025 23:00:55 +0000
Manifest next update:     Wed 02 Jul 2025 23:00:55 +0000
Files and hashes:         1: 9RdZIw-S-FYoTEGCNtUVTMr1UI0.roa (hash: cuWu4zoZh39hHnMbQsbn1GavX5fkwgR9EpdjwPAYmFM=)
                          2: K6r4JbxghClQGiOJgPHD3qM06uA.roa (hash: Z7BS3eMvEl2jFHcYWZaavqiGcVmavHPtMtk5iNM38S8=)
                          3: f2vRprBGJcVx2DD4eLHAI4JHQIw.crl (hash: SMpHYoNH6hHSLCRi2C33Wuh+5chD8o9Vnp82rG2plzQ=)
                          4: jrWoUX2I08t96DUAzMXpfrjbImw.roa (hash: 5fZxekpC+R8XTkzuMqL1WK63VlO9GSurjZzzW/k5L60=)
                          5: nWYHniVnDldwYunEGsc0VWWiVYU.roa (hash: VRa9zgOVZdpaRaM8P3APLwpP4Czcpn3M9s3Qb5fNEps=)
                          6: yT3jgEty--bHZQ6VzksRagm4cQA.roa (hash: 4d1UC0j00yg6mNDfxBP7QhNOG9rIufYmVR0yyaqstZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 23:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c8:38:ce:22:75:84:5e:fd:31:47:5b:1c:cb:40:59:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f6bd1a6b04625c571d830f878b1c0238247408c
        Validity
            Not Before: Jul  1 23:00:55 2025 GMT
            Not After : Jul  2 23:00:55 2025 GMT
        Subject: CN=bba44df7eb2c42e0d4fd87eaefe440c9e9ef587e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:46:cb:f0:dc:a7:6a:6d:45:d4:df:1a:35:bc:
                    5c:f5:3a:4b:2b:7a:80:03:a4:bf:88:38:0e:bf:2a:
                    eb:2c:8d:74:26:2a:e4:23:0e:a0:44:f0:07:4c:9d:
                    52:3d:b7:a7:4e:06:15:a1:23:72:e7:44:a8:11:ba:
                    e8:f3:dd:52:e4:5c:8b:aa:20:af:42:a3:00:26:a5:
                    00:e5:97:2b:55:ed:a8:80:5e:51:d1:5b:af:af:0b:
                    a8:01:23:eb:f2:01:25:b4:89:22:dc:61:12:5f:25:
                    4b:94:3c:89:0f:d6:bb:3a:00:95:a7:35:c4:0a:81:
                    dd:fe:37:55:b4:92:d7:00:b0:d2:53:21:55:c8:77:
                    08:d2:bf:8b:96:4b:46:0f:b2:2b:ca:91:b0:f3:43:
                    3f:40:c0:b0:dc:c2:7b:59:59:2b:17:69:09:e7:79:
                    af:a9:de:95:96:71:12:3c:ac:21:60:ac:e5:e7:b6:
                    0a:21:65:ef:4b:ad:a8:9a:7b:8a:4a:6a:f9:fc:f6:
                    46:5e:e5:8d:d1:20:8f:f0:26:9e:9c:dd:d2:c1:ac:
                    fd:48:eb:c3:e7:1c:70:0e:f0:d1:2f:b7:22:9e:27:
                    5f:de:ec:f4:81:e4:6e:a3:c1:8e:2d:f4:15:07:48:
                    0e:5b:5d:4a:fb:10:17:19:da:24:84:f4:f2:ad:9d:
                    3f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A4:4D:F7:EB:2C:42:E0:D4:FD:87:EA:EF:E4:40:C9:E9:EF:58:7E
            X509v3 Authority Key Identifier:
                keyid:7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:18:ca:82:17:37:a9:91:b5:86:5b:a5:2e:08:ca:c5:01:fe:
         54:68:52:8f:69:f7:5c:19:67:71:15:2e:ef:fb:36:a5:6f:0d:
         21:61:6f:93:01:db:86:37:40:36:42:20:90:f5:5f:3c:62:1c:
         be:86:84:1f:9e:18:89:a5:b5:2b:9b:bc:b2:7d:7f:93:8f:2c:
         b2:14:a2:77:1f:74:26:8e:fd:45:96:13:db:92:98:18:26:86:
         89:d6:00:76:14:86:04:d8:4e:29:2c:72:7e:86:37:fc:35:98:
         10:ff:b3:3e:87:8d:66:e0:59:9d:06:bb:74:2c:02:e9:ac:dc:
         2d:b4:ae:09:0f:60:57:69:f4:79:22:f4:e6:63:24:ff:35:68:
         6d:41:10:c0:2d:5e:59:6c:70:3a:a3:8d:f2:b7:1d:5b:70:64:
         15:84:cd:5b:e1:e7:c7:0a:57:42:c4:e6:6a:70:b6:ed:3a:c0:
         1e:7a:5c:d0:cf:f7:39:67:22:a9:5b:b1:a8:8b:cb:cc:f9:f0:
         30:d1:2c:77:af:9e:19:cc:3c:07:dc:68:89:62:4a:27:f0:88:
         cc:a7:65:ea:62:32:1b:5a:cf:22:ec:80:a9:b3:3b:49:18:38:
         ee:ca:34:82:81:83:23:55:a5:c9:7a:a9:63:3a:7c:2c:8d:f6:
         37:94:7f:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfIOM4idYRe/TFHWxzLQFn4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNmJkMWE2YjA0NjI1YzU3MWQ4MzBmODc4YjFjMDIzODI0
NzQwOGMwHhcNMjUwNzAxMjMwMDU1WhcNMjUwNzAyMjMwMDU1WjAzMTEwLwYDVQQD
EyhiYmE0NGRmN2ViMmM0MmUwZDRmZDg3ZWFlZmU0NDBjOWU5ZWY1ODdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEbL8Nynam1F1N8aNbxc9TpLK3qA
A6S/iDgOvyrrLI10JirkIw6gRPAHTJ1SPbenTgYVoSNy50SoEbro891S5FyLqiCv
QqMAJqUA5ZcrVe2ogF5R0VuvrwuoASPr8gEltIki3GESXyVLlDyJD9a7OgCVpzXE
CoHd/jdVtJLXALDSUyFVyHcI0r+LlktGD7IrypGw80M/QMCw3MJ7WVkrF2kJ53mv
qd6VlnESPKwhYKzl57YKIWXvS62omnuKSmr5/PZGXuWN0SCP8CaenN3Swaz9SOvD
5xxwDvDRL7cinidf3uz0geRuo8GOLfQVB0gOW11K+xAXGdokhPTyrZ0/HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLukTffrLELg1P2H6u/kQMnp71h+MB8GA1UdIwQY
MBaAFH9r0aawRiXFcdgw+HixwCOCR0CMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEt
ODliNmMzMjMxNWMyLzEvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEtODliNmMzMjMxNWMy
LzEvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADRjKghc3
qZG1hlulLgjKxQH+VGhSj2n3XBlncRUu7/s2pW8NIWFvkwHbhjdANkIgkPVfPGIc
voaEH54YiaW1K5u8sn1/k48sshSidx90Jo79RZYT25KYGCaGidYAdhSGBNhOKSxy
foY3/DWYEP+zPoeNZuBZnQa7dCwC6azcLbSuCQ9gV2n0eSL05mMk/zVobUEQwC1e
WWxwOqON8rcdW3BkFYTNW+HnxwpXQsTmanC27TrAHnpc0M/3OWciqVuxqIvLzPnw
MNEsd6+eGcw8B9xoiWJKJ/CIzKdl6mIyG1rPIuyAqbM7SRg47so0goGDI1WlyXqp
Yzp8LI32N5R/SQ==
-----END CERTIFICATE-----
Generated at Wed Jul 2 03:26:28 2025 by rpki-client