Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
File:                     1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft (raw, json)
Hash identifier:          jLJk3QnFmf0KqavJoHm4s4UQXnZc2oD2QfBJNoLeqrs=
Subject key identifier:   F6:B6:0E:2A:2A:31:F8:43:34:E3:47:C3:27:27:C5:64:51:0D:0E:4A
Authority key identifier: D6:FB:D9:ED:50:4E:EF:65:9E:CF:C9:19:A1:95:CD:2A:80:3B:60:A7
Certificate issuer:       /CN=d6fbd9ed504eef659ecfc919a195cd2a803b60a7
Certificate serial:       0197B6A11EDBFE9BB61AEEAA803202802AC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
Manifest number:          15B8
Signing time:             Sat 28 Jun 2025 13:01:41 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:41 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:41 +0000
Files and hashes:         1: 1-YLF-MeFwDISim6adBK6qk3JuME.roa (hash: GapGZPBb9/hawREIr0KOF+mssvGG8XyPh9uD8dxUmf4=)
                          2: 1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl (hash: aGHsCpQhwOFIwj0UsuL+09+x0JE2DETvtoe1gtqW7ZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:1e:db:fe:9b:b6:1a:ee:aa:80:32:02:80:2a:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6fbd9ed504eef659ecfc919a195cd2a803b60a7
        Validity
            Not Before: Jun 28 13:01:41 2025 GMT
            Not After : Jun 29 13:01:41 2025 GMT
        Subject: CN=f6b60e2a2a31f84334e347c32727c564510d0e4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:82:eb:3c:61:97:ed:49:d8:19:91:db:bb:18:
                    ed:a2:2d:d6:35:3d:da:90:6c:07:64:ba:6e:ef:05:
                    c8:d5:a5:5e:b3:ac:4d:46:45:de:fb:cb:b9:bd:da:
                    7e:7c:28:bb:f2:6d:40:7f:79:62:5b:0e:59:c0:22:
                    bb:d9:d0:78:0f:23:8b:b7:1d:3c:c2:3f:d7:fb:24:
                    d5:8e:66:7a:9b:05:78:58:79:c6:b3:92:52:56:b5:
                    7c:95:cf:a3:80:ab:dc:70:fe:d3:b2:b7:5f:7a:98:
                    bf:6e:5a:d6:6d:d2:a4:59:4a:99:2d:9a:87:e4:a2:
                    42:43:da:18:df:47:96:5e:7b:49:26:6f:86:ef:09:
                    01:47:a0:b3:8f:54:44:68:e5:08:fa:58:31:3e:ab:
                    52:96:84:ee:57:eb:04:cc:aa:d5:0e:6d:80:4f:24:
                    51:8d:55:f7:49:e6:c5:6b:65:bf:97:20:42:90:ef:
                    b7:91:98:68:4c:48:f3:ea:7d:1d:75:ea:dd:ba:75:
                    b6:27:40:32:9d:69:a0:47:3d:4a:75:3b:71:0c:1f:
                    ec:b9:fc:3a:93:db:06:c5:93:57:f3:ed:35:85:e0:
                    ed:cd:88:db:92:2d:d2:68:49:8e:67:1f:de:2f:b8:
                    01:5f:07:d5:40:8e:84:16:b2:5a:e9:80:b9:fd:0a:
                    ad:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B6:0E:2A:2A:31:F8:43:34:E3:47:C3:27:27:C5:64:51:0D:0E:4A
            X509v3 Authority Key Identifier:
                keyid:D6:FB:D9:ED:50:4E:EF:65:9E:CF:C9:19:A1:95:CD:2A:80:3B:60:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:fe:97:79:a3:52:a0:52:e4:9b:96:b9:a2:d3:26:cd:93:b6:
         15:3d:47:f6:de:fe:51:54:39:81:b5:d5:b1:ed:28:a6:50:75:
         fc:f2:4c:04:c7:96:f7:95:bb:79:8a:a9:ca:32:1c:c3:4e:8e:
         b6:62:40:65:9d:3d:b0:cd:43:5c:e4:88:fb:37:41:ad:6d:fb:
         95:77:b1:12:79:07:82:cb:07:0f:73:a0:b0:53:58:16:79:74:
         6f:cc:a9:eb:9e:1d:9b:f0:a9:be:0e:91:07:a1:30:28:ec:e9:
         27:02:ba:89:dd:3e:20:30:fb:22:55:e4:2a:37:25:21:61:05:
         20:96:aa:be:c8:5e:d9:6a:6d:99:12:10:6d:78:2a:60:9a:b4:
         0e:75:c6:ea:ea:d8:52:70:b7:06:c4:92:a1:be:58:20:3e:7f:
         4b:c8:5b:39:e5:c1:8b:1b:00:76:5f:86:ba:81:0c:b1:a3:41:
         48:11:9b:e2:f2:e2:f6:c6:42:49:9f:b9:11:55:f3:97:32:6f:
         fb:5a:7b:39:d5:43:2c:54:f5:07:da:c7:5e:df:1d:99:03:2f:
         7b:2f:8f:08:22:3a:d1:7d:46:a3:20:51:97:10:ba:13:c2:a0:
         4b:7d:97:34:46:ce:43:03:2d:5d:bf:ab:3b:b6:7d:a9:ef:73:
         4e:52:be:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oR7b/pu2Gu6qgDICgCrCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZmJkOWVkNTA0ZWVmNjU5ZWNmYzkxOWExOTVjZDJhODAz
YjYwYTcwHhcNMjUwNjI4MTMwMTQxWhcNMjUwNjI5MTMwMTQxWjAzMTEwLwYDVQQD
EyhmNmI2MGUyYTJhMzFmODQzMzRlMzQ3YzMyNzI3YzU2NDUxMGQwZTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYLrPGGX7UnYGZHbuxjtoi3WNT3a
kGwHZLpu7wXI1aVes6xNRkXe+8u5vdp+fCi78m1Af3liWw5ZwCK72dB4DyOLtx08
wj/X+yTVjmZ6mwV4WHnGs5JSVrV8lc+jgKvccP7Tsrdfepi/blrWbdKkWUqZLZqH
5KJCQ9oY30eWXntJJm+G7wkBR6Czj1REaOUI+lgxPqtSloTuV+sEzKrVDm2ATyRR
jVX3SebFa2W/lyBCkO+3kZhoTEjz6n0dderdunW2J0AynWmgRz1KdTtxDB/sufw6
k9sGxZNX8+01heDtzYjbki3SaEmOZx/eL7gBXwfVQI6EFrJa6YC5/QqtJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPa2DioqMfhDNONHwycnxWRRDQ5KMB8GA1UdIwQY
MBaAFNb72e1QTu9lns/JGaGVzSqAO2CnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXZ2WjdWQk83MldlejhrWm9aWE5Lb0E3WUtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC80YTU4NWEtZjBmMC00OTg3LWFlMDMt
YWNjY2FlNjkwZTc1LzEvMXZ2WjdWQk83MldlejhrWm9aWE5Lb0E3WUtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC80YTU4NWEtZjBmMC00OTg3LWFlMDMtYWNjY2FlNjkwZTc1
LzEvMXZ2WjdWQk83MldlejhrWm9aWE5Lb0E3WUtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYv6XeaNS
oFLkm5a5otMmzZO2FT1H9t7+UVQ5gbXVse0oplB1/PJMBMeW95W7eYqpyjIcw06O
tmJAZZ09sM1DXOSI+zdBrW37lXexEnkHgssHD3OgsFNYFnl0b8yp654dm/Cpvg6R
B6EwKOzpJwK6id0+IDD7IlXkKjclIWEFIJaqvshe2WptmRIQbXgqYJq0DnXG6urY
UnC3BsSSob5YID5/S8hbOeXBixsAdl+GuoEMsaNBSBGb4vLi9sZCSZ+5EVXzlzJv
+1p7OdVDLFT1B9rHXt8dmQMvey+PCCI60X1GoyBRlxC6E8KgS32XNEbOQwMtXb+r
O7Z9qe9zTlK+CA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:00:46 2025 by rpki-client