Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
File:                     Su-5nSoG7pneqVZvFr8ibbPlbJI.mft (raw, json)
Hash identifier:          1T6rtzrRlW36p1vkGoG11uWtADEgC4coBzpDAioZSig=
Subject key identifier:   6A:17:CC:0A:01:4B:A2:21:32:A8:75:04:3F:BB:BF:B8:40:75:70:67
Authority key identifier: 4A:EF:B9:9D:2A:06:EE:99:DE:A9:56:6F:16:BF:22:6D:B3:E5:6C:92
Certificate issuer:       /CN=4aefb99d2a06ee99dea9566f16bf226db3e56c92
Certificate serial:       0197B6D7A743C06B0D498D2F89ED17C32699
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 14:01:15 +0000
Manifest this update:     Sat 28 Jun 2025 14:01:15 +0000
Manifest next update:     Sun 29 Jun 2025 14:01:15 +0000
Files and hashes:         1: Su-5nSoG7pneqVZvFr8ibbPlbJI.crl (hash: 4V+vY0+naeOa6jmKkke1X8nO8cjAmPxFrO8q4APqBpY=)
                          2: zFoJFUnlPbl4jZ_b8xY0tJqEvEA.roa (hash: LdaJGwGlR/sqxaI5NlWcBg7c+O1FzJXWT3jVGiryGW8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:a7:43:c0:6b:0d:49:8d:2f:89:ed:17:c3:26:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aefb99d2a06ee99dea9566f16bf226db3e56c92
        Validity
            Not Before: Jun 28 14:01:15 2025 GMT
            Not After : Jun 29 14:01:15 2025 GMT
        Subject: CN=6a17cc0a014ba22132a875043fbbbfb840757067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:74:2b:f8:b1:31:36:4c:af:2e:3a:87:df:db:
                    5c:bb:e6:70:92:ad:29:16:7e:36:55:5f:c9:31:2a:
                    bf:2a:ed:54:e5:e7:1e:f5:ae:45:9d:6d:8f:38:f0:
                    22:98:b5:6d:96:b1:ba:21:53:55:54:fa:fa:e3:f8:
                    67:0b:84:b1:fd:26:66:55:d1:b5:4d:a5:d2:47:55:
                    6f:ca:ec:e5:54:8d:12:8b:56:0a:ee:9d:84:7a:6b:
                    4c:b4:d0:73:69:3d:2a:87:3c:ab:51:36:c6:b3:b9:
                    7d:6d:c8:79:a1:08:fc:01:7a:5b:c6:fd:31:42:aa:
                    0d:c4:d7:ab:f0:00:27:f4:42:4e:e0:4f:39:82:34:
                    62:c3:f7:99:74:d7:4f:b5:af:7c:a0:32:ce:2a:f2:
                    5f:78:30:a4:8d:fe:4f:0b:c0:79:77:62:28:a3:ff:
                    4b:8d:e1:db:56:5e:6b:d9:3a:c1:16:c7:2e:63:97:
                    59:c3:fb:db:a2:b2:35:56:f8:d2:18:8d:1c:da:09:
                    64:b8:af:fc:72:45:46:15:4d:bf:f7:bc:17:b7:bf:
                    fa:6e:de:7c:2d:dc:e0:f6:7b:c7:79:b8:e9:82:31:
                    7d:a2:2b:14:0c:82:8b:ae:f2:96:3d:16:5d:0e:2a:
                    a3:a5:f5:c1:9c:d6:ff:65:b0:b8:e2:98:61:6c:d6:
                    69:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:17:CC:0A:01:4B:A2:21:32:A8:75:04:3F:BB:BF:B8:40:75:70:67
            X509v3 Authority Key Identifier:
                keyid:4A:EF:B9:9D:2A:06:EE:99:DE:A9:56:6F:16:BF:22:6D:B3:E5:6C:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:62:79:03:59:99:4a:cb:90:96:8e:f6:79:e0:d4:86:72:9e:
         e4:fc:ca:4b:fa:04:e8:00:2e:f5:ef:31:55:4c:df:40:a6:7a:
         6c:53:d5:6e:ce:4d:c4:a7:4e:6e:33:de:a6:e4:0e:f5:ea:32:
         8f:82:5c:c9:f7:6e:1e:b4:d1:2e:25:72:6f:0c:a6:8a:ff:7b:
         7b:48:b2:c2:d8:dd:01:76:4c:a7:a5:bf:e9:2e:59:68:60:48:
         04:f9:97:72:a8:c6:bc:3f:e0:61:b1:cd:54:60:34:cf:dc:5e:
         d5:1d:1a:00:1c:d6:b6:77:7c:d7:c6:93:3b:04:d9:15:46:8d:
         08:b1:3b:25:c2:8f:e3:63:84:19:ea:d4:87:95:76:07:7b:f2:
         93:7a:2d:b9:3f:34:7d:24:1d:d0:a0:37:f4:03:78:05:ad:2d:
         29:a2:a5:ad:73:ac:1b:c3:44:ed:6c:f7:bd:ff:09:d9:30:79:
         f1:76:86:06:38:43:d8:69:ea:3f:a3:a0:c7:75:d8:6f:10:51:
         93:38:98:8d:a1:df:4e:6d:db:e6:3c:b5:1f:14:58:61:df:27:
         ed:4d:0f:1f:6e:f5:24:ef:9f:70:23:91:79:71:4b:02:71:34:
         a6:45:bf:d2:ca:8b:8e:7d:7c:2a:66:83:14:fd:dd:6f:79:34:
         c7:f8:b2:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe216dDwGsNSY0vie0XwyaZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhZWZiOTlkMmEwNmVlOTlkZWE5NTY2ZjE2YmYyMjZkYjNl
NTZjOTIwHhcNMjUwNjI4MTQwMTE1WhcNMjUwNjI5MTQwMTE1WjAzMTEwLwYDVQQD
Eyg2YTE3Y2MwYTAxNGJhMjIxMzJhODc1MDQzZmJiYmZiODQwNzU3MDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnQr+LExNkyvLjqH39tcu+Zwkq0p
Fn42VV/JMSq/Ku1U5ece9a5FnW2POPAimLVtlrG6IVNVVPr64/hnC4Sx/SZmVdG1
TaXSR1VvyuzlVI0Si1YK7p2EemtMtNBzaT0qhzyrUTbGs7l9bch5oQj8AXpbxv0x
QqoNxNer8AAn9EJO4E85gjRiw/eZdNdPta98oDLOKvJfeDCkjf5PC8B5d2Ioo/9L
jeHbVl5r2TrBFscuY5dZw/vborI1VvjSGI0c2glkuK/8ckVGFU2/97wXt7/6bt58
Ldzg9nvHebjpgjF9oisUDIKLrvKWPRZdDiqjpfXBnNb/ZbC44phhbNZpCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGoXzAoBS6IhMqh1BD+7v7hAdXBnMB8GA1UdIwQY
MBaAFErvuZ0qBu6Z3qlWbxa/Im2z5WySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3UtNW5Tb0c3cG5lcVZadkZyOGliYlBsYkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xNjlhM2ItNmE3My00OWVjLWFmZmEt
ZWQwYTdhYmE4Y2IyLzEvU3UtNW5Tb0c3cG5lcVZadkZyOGliYlBsYkpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8xNjlhM2ItNmE3My00OWVjLWFmZmEtZWQwYTdhYmE4Y2Iy
LzEvU3UtNW5Tb0c3cG5lcVZadkZyOGliYlBsYkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjWJ5A1mZ
SsuQlo72eeDUhnKe5PzKS/oE6AAu9e8xVUzfQKZ6bFPVbs5NxKdObjPepuQO9eoy
j4JcyfduHrTRLiVybwymiv97e0iywtjdAXZMp6W/6S5ZaGBIBPmXcqjGvD/gYbHN
VGA0z9xe1R0aABzWtnd818aTOwTZFUaNCLE7JcKP42OEGerUh5V2B3vyk3otuT80
fSQd0KA39AN4Ba0tKaKlrXOsG8NE7Wz3vf8J2TB58XaGBjhD2GnqP6Ogx3XYbxBR
kziYjaHfTm3b5jy1HxRYYd8n7U0PH271JO+fcCOReXFLAnE0pkW/0sqLjn18KmaD
FP3db3k0x/iyXg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:34 2025 by rpki-client