Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
File:                     E9g7Il3TOGDFHcRKqI218D3BWnQ.mft (raw, json)
Hash identifier:          iOr9bAvkTd3ubIWCUlyMv5T/fynTgvROcC7BqEXIfsA=
Subject key identifier:   65:C2:73:7F:DF:61:A6:1E:8C:B8:14:60:85:1A:43:72:21:7F:49:AF
Authority key identifier: 13:D8:3B:22:5D:D3:38:60:C5:1D:C4:4A:A8:8D:B5:F0:3D:C1:5A:74
Certificate issuer:       /CN=13d83b225dd33860c51dc44aa88db5f03dc15a74
Certificate serial:       0197B6D78B44DE7A8E056A820E9CC0792AC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
Manifest number:          1546
Signing time:             Sat 28 Jun 2025 14:01:08 +0000
Manifest this update:     Sat 28 Jun 2025 14:01:08 +0000
Manifest next update:     Sun 29 Jun 2025 14:01:08 +0000
Files and hashes:         1: 9htWy01pg2D2zYDPH366mUte-18.roa (hash: EzJGaZ3hn2rEMiPwCBKqVw/ZKa/ezLWPSIlGniopSlk=)
                          2: E9g7Il3TOGDFHcRKqI218D3BWnQ.crl (hash: qpl1ngOKCSIbBG52ahOcgPL0nlOZSHZvARYeteTfa8k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:8b:44:de:7a:8e:05:6a:82:0e:9c:c0:79:2a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13d83b225dd33860c51dc44aa88db5f03dc15a74
        Validity
            Not Before: Jun 28 14:01:08 2025 GMT
            Not After : Jun 29 14:01:08 2025 GMT
        Subject: CN=65c2737fdf61a61e8cb81460851a4372217f49af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4c:5d:2c:12:28:67:c3:34:a7:44:33:89:39:
                    eb:28:64:01:8c:69:89:53:62:26:37:d7:9d:cc:2d:
                    f5:ea:47:da:b4:4f:79:6a:f7:96:2e:e6:11:14:05:
                    d9:47:41:de:57:e7:15:c3:a4:3b:87:13:96:cd:1b:
                    7a:89:bb:d3:f5:61:b7:47:62:a6:8b:0f:dc:33:76:
                    c2:55:6c:5a:96:7e:83:63:ce:79:ba:bb:d4:88:3a:
                    e9:1f:8b:25:2a:ce:5b:5c:30:b7:55:fa:7f:ab:31:
                    50:41:39:fc:b7:38:6f:f5:bb:ab:5c:24:a5:eb:b0:
                    ba:1a:56:49:71:80:be:53:29:97:36:fa:0d:01:25:
                    68:03:23:fc:60:74:01:f7:6e:40:ee:9a:39:2a:d9:
                    e7:a5:16:c2:ce:e1:5b:21:82:85:95:83:43:ad:7b:
                    b7:4a:87:9d:23:bf:e7:ae:0d:6f:cb:e5:38:19:7e:
                    27:39:ca:60:f6:b7:4d:97:64:2f:1d:1a:64:97:df:
                    b6:80:db:81:a8:ab:d7:89:a7:16:ee:8a:e5:27:19:
                    29:0b:fb:ef:5b:86:f7:ae:b2:38:11:e2:68:18:59:
                    fb:b7:54:09:42:ea:be:09:fc:15:b0:4a:fc:ed:40:
                    39:cc:75:3e:c6:28:2e:68:6e:62:dc:32:11:1b:51:
                    df:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C2:73:7F:DF:61:A6:1E:8C:B8:14:60:85:1A:43:72:21:7F:49:AF
            X509v3 Authority Key Identifier:
                keyid:13:D8:3B:22:5D:D3:38:60:C5:1D:C4:4A:A8:8D:B5:F0:3D:C1:5A:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:4a:8b:e7:9b:44:b8:ca:f7:e6:12:10:26:63:d1:6f:0d:64:
         6e:6d:3c:ee:d2:aa:50:e0:eb:28:97:7f:0a:0d:0c:9b:7e:11:
         b1:08:43:01:c0:14:46:cb:72:7d:bf:3a:cd:57:e6:79:37:fe:
         47:80:e2:10:25:2b:51:eb:a8:1a:fc:ff:62:53:58:b5:4b:5d:
         fd:28:fc:3a:b8:3a:89:2f:d6:13:02:87:86:30:da:a3:97:f8:
         0a:ff:73:76:15:a0:9f:4b:df:1b:d7:a9:0d:55:03:34:62:c6:
         ce:07:b5:34:4f:90:93:94:20:78:35:96:e0:59:a0:38:1a:c1:
         b7:ca:34:a1:7c:3b:9e:25:a3:49:c8:02:51:dd:6a:19:47:5e:
         59:85:28:69:58:e4:ce:40:1a:3b:5f:56:3c:29:b6:e5:c7:54:
         eb:28:1f:0a:82:64:c7:56:ac:29:8a:a2:96:2d:b1:7e:7c:28:
         e1:8a:d3:e1:28:a6:04:1d:e4:28:43:c9:5c:9b:ea:27:4d:86:
         15:b6:2c:33:67:be:e1:22:a6:b3:8e:49:95:8f:fe:a5:17:8d:
         e3:25:fa:c4:39:4f:eb:e6:bb:22:62:bf:69:6d:e0:37:2e:00:
         d9:9c:a1:2b:bf:0b:ab:21:ae:04:db:98:43:46:8b:cb:a7:93:
         b2:fb:24:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe214tE3nqOBWqCDpzAeSrAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZDgzYjIyNWRkMzM4NjBjNTFkYzQ0YWE4OGRiNWYwM2Rj
MTVhNzQwHhcNMjUwNjI4MTQwMTA4WhcNMjUwNjI5MTQwMTA4WjAzMTEwLwYDVQQD
Eyg2NWMyNzM3ZmRmNjFhNjFlOGNiODE0NjA4NTFhNDM3MjIxN2Y0OWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0xdLBIoZ8M0p0QziTnrKGQBjGmJ
U2ImN9edzC316kfatE95aveWLuYRFAXZR0HeV+cVw6Q7hxOWzRt6ibvT9WG3R2Km
iw/cM3bCVWxaln6DY855urvUiDrpH4slKs5bXDC3Vfp/qzFQQTn8tzhv9burXCSl
67C6GlZJcYC+UymXNvoNASVoAyP8YHQB925A7po5KtnnpRbCzuFbIYKFlYNDrXu3
SoedI7/nrg1vy+U4GX4nOcpg9rdNl2QvHRpkl9+2gNuBqKvXiacW7orlJxkpC/vv
W4b3rrI4EeJoGFn7t1QJQuq+CfwVsEr87UA5zHU+xiguaG5i3DIRG1HfqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGXCc3/fYaYejLgUYIUaQ3Ihf0mvMB8GA1UdIwQY
MBaAFBPYOyJd0zhgxR3ESqiNtfA9wVp0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTlnN0lsM1RPR0RGSGNSS3FJMjE4RDNCV25RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9mMjExMWEtM2Y0Ny00ZmYwLWE1MWQt
YjI1MTM3N2FkZDg2LzEvRTlnN0lsM1RPR0RGSGNSS3FJMjE4RDNCV25RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9mMjExMWEtM2Y0Ny00ZmYwLWE1MWQtYjI1MTM3N2FkZDg2
LzEvRTlnN0lsM1RPR0RGSGNSS3FJMjE4RDNCV25RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZEqL55tE
uMr35hIQJmPRbw1kbm087tKqUODrKJd/Cg0Mm34RsQhDAcAURstyfb86zVfmeTf+
R4DiECUrUeuoGvz/YlNYtUtd/Sj8Org6iS/WEwKHhjDao5f4Cv9zdhWgn0vfG9ep
DVUDNGLGzge1NE+Qk5QgeDWW4FmgOBrBt8o0oXw7niWjScgCUd1qGUdeWYUoaVjk
zkAaO19WPCm25cdU6ygfCoJkx1asKYqili2xfnwo4YrT4SimBB3kKEPJXJvqJ02G
FbYsM2e+4SKms45JlY/+pReN4yX6xDlP6+a7ImK/aW3gNy4A2ZyhK78LqyGuBNuY
Q0aLy6eTsvsk+g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:50:41 2025 by rpki-client