Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft
File:                     Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft (raw, json)
Hash identifier:          da1h82clUqpcI4Ohz/EQwhfNKqzsO92jPayN7TmRBYI=
Subject key identifier:   9F:60:30:B0:5F:61:28:88:7D:4E:15:FD:80:77:75:4A:62:AA:32:A8
Authority key identifier: 66:FF:1E:6A:5C:C3:C0:69:76:29:F4:AF:BB:0B:07:AE:79:13:3C:5C
Certificate issuer:       /CN=66ff1e6a5cc3c0697629f4afbb0b07ae79133c5c
Certificate serial:       0197B74510A718D96861CDB3B5467121CBC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zv8ealzDwGl2KfSvuwsHrnkTPFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 16:00:46 +0000
Manifest this update:     Sat 28 Jun 2025 16:00:46 +0000
Manifest next update:     Sun 29 Jun 2025 16:00:46 +0000
Files and hashes:         1: VTMTtjqH-zixo9hQexyKWnuO0p4.roa (hash: QpOOm2VlJ9G/CZEjnwWuM3L+t5sPw22wtkcRl/OMgAk=)
                          2: Zv8ealzDwGl2KfSvuwsHrnkTPFw.crl (hash: e41GBcmr3pDBbCtrcp0W9pizlQa3qLsMtBj1HGxpOFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zv8ealzDwGl2KfSvuwsHrnkTPFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:10:a7:18:d9:68:61:cd:b3:b5:46:71:21:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ff1e6a5cc3c0697629f4afbb0b07ae79133c5c
        Validity
            Not Before: Jun 28 16:00:46 2025 GMT
            Not After : Jun 29 16:00:46 2025 GMT
        Subject: CN=9f6030b05f6128887d4e15fd8077754a62aa32a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fd:30:78:4a:ff:49:15:6f:d3:32:4b:f0:c3:
                    11:98:72:c0:e4:e2:16:e1:40:02:01:95:a0:86:c3:
                    0f:05:0d:a7:2a:91:e5:62:b9:ca:b6:6e:90:9b:db:
                    f3:d2:86:98:89:c9:13:79:c6:91:f1:a3:27:8c:af:
                    70:cb:ec:90:b5:a0:6c:31:96:65:f4:fd:07:49:8e:
                    cb:e6:f8:f6:93:8a:35:75:df:32:82:2e:48:3f:69:
                    fc:4a:ba:14:44:95:cb:48:45:a5:fb:e7:80:26:f4:
                    89:ed:b2:f4:ec:78:c7:88:28:7d:4c:5d:99:79:fe:
                    67:8f:3f:74:1e:47:54:05:41:2a:6e:a6:fd:f4:64:
                    ad:0a:47:2b:c2:8c:3a:ee:d7:67:fe:9f:f1:e8:ad:
                    15:f4:0e:0d:f4:89:7f:1a:24:1b:f5:8c:20:5b:d3:
                    e7:d0:4c:58:1f:7e:29:b5:cf:24:d4:d1:a4:fb:ea:
                    36:0f:11:7a:0a:bc:31:59:db:7f:43:fc:84:e5:40:
                    e4:5c:82:ca:22:1d:8d:04:1a:96:31:59:e4:45:9a:
                    16:21:fc:3f:cc:75:6e:b2:d6:8a:ce:5f:3c:4d:1d:
                    f1:6f:e1:4e:fe:90:6f:f2:3c:cb:0e:ad:bb:71:7f:
                    fe:48:f5:90:de:2f:d3:1f:79:9c:45:39:ca:91:6f:
                    7f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:60:30:B0:5F:61:28:88:7D:4E:15:FD:80:77:75:4A:62:AA:32:A8
            X509v3 Authority Key Identifier:
                keyid:66:FF:1E:6A:5C:C3:C0:69:76:29:F4:AF:BB:0B:07:AE:79:13:3C:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zv8ealzDwGl2KfSvuwsHrnkTPFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:3e:c6:5e:59:ed:09:5f:fe:50:52:6a:99:47:f7:15:b3:58:
         66:ea:0d:7d:be:91:b0:be:47:f2:07:5e:86:57:3f:4b:ed:1e:
         3f:01:7b:35:29:40:18:a1:ed:07:75:a6:24:f0:0b:c0:41:64:
         95:12:47:fe:11:0b:46:cc:7a:28:d2:39:88:52:46:56:f5:58:
         79:96:be:a2:a8:c6:09:2a:7d:d4:9f:40:76:4b:42:69:73:40:
         e1:de:bb:38:bf:b6:6e:0d:7c:43:a6:db:35:6a:d1:e7:31:1c:
         3f:69:2a:38:12:98:b1:cd:68:ae:b2:dc:89:48:ea:1e:0c:53:
         03:d7:96:8e:f6:37:fd:a9:d3:7b:93:d9:4a:b6:6e:41:00:ac:
         7b:75:c8:2a:bd:62:fd:e4:9c:23:42:1e:fc:12:51:62:a4:ee:
         0e:c2:10:99:1a:31:23:9c:e8:46:d1:6d:7c:d8:38:86:6a:64:
         a0:2f:2a:d6:41:74:6c:f9:2f:50:99:b5:2e:7e:86:f4:d5:a8:
         93:7b:24:7d:79:00:03:88:6f:b4:5d:81:9e:e6:77:b2:fa:62:
         58:77:af:6c:78:17:ea:bd:9e:14:03:02:35:6d:c5:95:70:83:
         82:c1:d9:54:de:00:c1:b8:aa:99:49:bc:a1:57:dd:9e:a5:61:
         ef:b3:ae:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RRCnGNloYc2ztUZxIcvAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZmYxZTZhNWNjM2MwNjk3NjI5ZjRhZmJiMGIwN2FlNzkx
MzNjNWMwHhcNMjUwNjI4MTYwMDQ2WhcNMjUwNjI5MTYwMDQ2WjAzMTEwLwYDVQQD
Eyg5ZjYwMzBiMDVmNjEyODg4N2Q0ZTE1ZmQ4MDc3NzU0YTYyYWEzMmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuv0weEr/SRVv0zJL8MMRmHLA5OIW
4UACAZWghsMPBQ2nKpHlYrnKtm6Qm9vz0oaYickTecaR8aMnjK9wy+yQtaBsMZZl
9P0HSY7L5vj2k4o1dd8ygi5IP2n8SroURJXLSEWl++eAJvSJ7bL07HjHiCh9TF2Z
ef5njz90HkdUBUEqbqb99GStCkcrwow67tdn/p/x6K0V9A4N9Il/GiQb9YwgW9Pn
0ExYH34ptc8k1NGk++o2DxF6CrwxWdt/Q/yE5UDkXILKIh2NBBqWMVnkRZoWIfw/
zHVustaKzl88TR3xb+FO/pBv8jzLDq27cX/+SPWQ3i/TH3mcRTnKkW9/YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9gMLBfYSiIfU4V/YB3dUpiqjKoMB8GA1UdIwQY
MBaAFGb/Hmpcw8Bpdin0r7sLB655EzxcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnY4ZWFsekR3R2wyS2ZTdnV3c0hybmtUUEZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8wN2Q1ZWItNjIxMS00ZDdhLWE5NmQt
ZWU0Mjc0NWQ4ZmQxLzEvWnY4ZWFsekR3R2wyS2ZTdnV3c0hybmtUUEZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8wN2Q1ZWItNjIxMS00ZDdhLWE5NmQtZWU0Mjc0NWQ4ZmQx
LzEvWnY4ZWFsekR3R2wyS2ZTdnV3c0hybmtUUEZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnz7GXlnt
CV/+UFJqmUf3FbNYZuoNfb6RsL5H8gdehlc/S+0ePwF7NSlAGKHtB3WmJPALwEFk
lRJH/hELRsx6KNI5iFJGVvVYeZa+oqjGCSp91J9AdktCaXNA4d67OL+2bg18Q6bb
NWrR5zEcP2kqOBKYsc1orrLciUjqHgxTA9eWjvY3/anTe5PZSrZuQQCse3XIKr1i
/eScI0Ie/BJRYqTuDsIQmRoxI5zoRtFtfNg4hmpkoC8q1kF0bPkvUJm1Ln6G9NWo
k3skfXkAA4hvtF2BnuZ3svpiWHevbHgX6r2eFAMCNW3FlXCDgsHZVN4AwbiqmUm8
oVfdnqVh77OuNA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:31:28 2025 by rpki-client