Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft
File:                     6tIKIulI-5ZEEprTAZ8I1PSYH88.mft (raw, json)
Hash identifier:          8Stm+yPWiMaKnHN6TNjxm0hiM0eDFn2pM74yZ0vegL0=
Subject key identifier:   1F:80:76:6F:77:41:94:FC:B7:D7:F0:C9:91:77:A7:BB:A4:B4:C8:0C
Authority key identifier: EA:D2:0A:22:E9:48:FB:96:44:12:9A:D3:01:9F:08:D4:F4:98:1F:CF
Certificate issuer:       /CN=ead20a22e948fb9644129ad3019f08d4f4981fcf
Certificate serial:       0197B70EC459668E06A840383F0DE2728B56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft
Manifest number:          0582
Signing time:             Sat 28 Jun 2025 15:01:27 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:27 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:27 +0000
Files and hashes:         1: 603LAvQ5JXA5_S8BjHWOsHJK9Wo.roa (hash: 8uIPD2qt5HOkYhC38b1edHK/qDoR0Hb99DfiBmCJ4B8=)
                          2: 6tIKIulI-5ZEEprTAZ8I1PSYH88.crl (hash: HeBbSSo4QklJQyUdiaQV06SFKZkQQ8jvZcDVBnWQowg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:c4:59:66:8e:06:a8:40:38:3f:0d:e2:72:8b:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ead20a22e948fb9644129ad3019f08d4f4981fcf
        Validity
            Not Before: Jun 28 15:01:27 2025 GMT
            Not After : Jun 29 15:01:27 2025 GMT
        Subject: CN=1f80766f774194fcb7d7f0c99177a7bba4b4c80c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:29:d3:5d:6e:73:c2:3a:ff:90:d4:7c:9d:43:
                    2e:8c:78:cd:32:eb:69:36:47:f2:19:a9:3e:bc:85:
                    54:c1:6b:74:04:1e:f0:90:97:7c:71:aa:45:be:be:
                    41:25:a6:45:41:cd:ae:2d:ce:7a:31:8b:9c:7b:f9:
                    e2:81:a2:b7:c7:06:b1:8b:00:3c:80:87:84:3c:60:
                    77:5d:28:a8:09:28:50:5b:39:d7:bb:bd:88:40:28:
                    bb:a5:d4:45:f6:6c:38:7e:ad:a4:13:d7:61:b1:7a:
                    b0:08:58:58:31:a3:af:5d:22:47:af:df:ff:5a:52:
                    bd:37:18:a8:f7:90:b6:2a:5b:8b:3a:9b:0a:d1:9f:
                    b8:3d:7a:8c:eb:b6:79:a7:d6:eb:b6:b4:db:71:55:
                    91:73:39:18:63:4f:df:59:dd:cd:79:91:e4:a3:4e:
                    04:4e:e0:87:a4:d6:c5:2c:c8:f7:ba:0d:1f:85:2b:
                    fc:0e:d5:96:a4:22:8c:97:27:4d:60:81:79:48:ca:
                    d7:1b:10:14:d5:26:ae:0c:e0:31:d8:91:8e:bc:c9:
                    f1:52:0e:d1:0c:65:f0:e4:0d:2b:b2:2c:2e:85:9a:
                    1a:7a:3e:ec:d2:9b:ef:97:76:07:b1:70:58:05:c6:
                    60:7d:a9:a5:a1:3b:0e:b7:92:d1:40:f4:5b:97:3b:
                    06:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:80:76:6F:77:41:94:FC:B7:D7:F0:C9:91:77:A7:BB:A4:B4:C8:0C
            X509v3 Authority Key Identifier:
                keyid:EA:D2:0A:22:E9:48:FB:96:44:12:9A:D3:01:9F:08:D4:F4:98:1F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:7e:18:9d:d0:30:9e:68:4e:36:6e:69:80:57:4b:c3:57:4b:
         09:d2:81:41:d0:6e:29:23:96:db:74:35:85:5c:0f:cc:eb:98:
         e3:f9:d9:84:71:ec:a8:76:e8:96:fc:25:81:42:83:63:7b:f4:
         18:65:24:47:52:98:39:af:68:f1:4d:0c:b8:67:3a:c8:32:47:
         57:a9:2a:c0:fc:1a:7f:0f:3e:90:3f:00:70:a6:c0:67:65:cf:
         26:06:f7:e5:88:fe:09:ab:fd:c6:ba:b0:30:8e:57:fa:29:eb:
         71:18:ca:4e:6e:88:e2:68:eb:4f:13:e5:c8:3b:34:2d:08:24:
         54:b3:21:c4:56:60:10:80:4b:4f:d0:4b:b2:ef:59:55:56:87:
         9a:eb:3e:b6:eb:54:91:9e:2c:26:5e:99:20:de:28:7b:80:bc:
         19:ef:60:76:19:b6:08:e7:38:50:80:44:2b:75:d0:85:e9:42:
         9a:fc:dc:cd:29:ea:11:4b:21:b1:50:e3:53:43:f5:78:30:7f:
         9c:e3:0b:dd:67:38:44:59:0b:97:db:d1:c6:3e:e8:8d:72:4b:
         66:74:35:4e:84:74:e7:91:08:69:04:0b:31:c7:52:8f:b8:9e:
         66:28:a9:c8:d9:a2:67:99:b9:ea:d7:c1:a7:d0:ae:6d:77:29:
         a8:ab:f9:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DsRZZo4GqEA4Pw3icotWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhZDIwYTIyZTk0OGZiOTY0NDEyOWFkMzAxOWYwOGQ0ZjQ5
ODFmY2YwHhcNMjUwNjI4MTUwMTI3WhcNMjUwNjI5MTUwMTI3WjAzMTEwLwYDVQQD
EygxZjgwNzY2Zjc3NDE5NGZjYjdkN2YwYzk5MTc3YTdiYmE0YjRjODBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSnTXW5zwjr/kNR8nUMujHjNMutp
NkfyGak+vIVUwWt0BB7wkJd8capFvr5BJaZFQc2uLc56MYuce/nigaK3xwaxiwA8
gIeEPGB3XSioCShQWznXu72IQCi7pdRF9mw4fq2kE9dhsXqwCFhYMaOvXSJHr9//
WlK9Nxio95C2KluLOpsK0Z+4PXqM67Z5p9brtrTbcVWRczkYY0/fWd3NeZHko04E
TuCHpNbFLMj3ug0fhSv8DtWWpCKMlydNYIF5SMrXGxAU1SauDOAx2JGOvMnxUg7R
DGXw5A0rsiwuhZoaej7s0pvvl3YHsXBYBcZgfamloTsOt5LRQPRblzsG6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+Adm93QZT8t9fwyZF3p7uktMgMMB8GA1UdIwQY
MBaAFOrSCiLpSPuWRBKa0wGfCNT0mB/PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnRJS0l1bEktNVpFRXByVEFaOEkxUFNZSDg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8xN2NhNWYtNDMyNy00YTg4LWI5NzYt
YjY0ZmZjZTA2NTgwLzEvNnRJS0l1bEktNVpFRXByVEFaOEkxUFNZSDg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8xN2NhNWYtNDMyNy00YTg4LWI5NzYtYjY0ZmZjZTA2NTgw
LzEvNnRJS0l1bEktNVpFRXByVEFaOEkxUFNZSDg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABX4YndAw
nmhONm5pgFdLw1dLCdKBQdBuKSOW23Q1hVwPzOuY4/nZhHHsqHbolvwlgUKDY3v0
GGUkR1KYOa9o8U0MuGc6yDJHV6kqwPwafw8+kD8AcKbAZ2XPJgb35Yj+Cav9xrqw
MI5X+inrcRjKTm6I4mjrTxPlyDs0LQgkVLMhxFZgEIBLT9BLsu9ZVVaHmus+tutU
kZ4sJl6ZIN4oe4C8Ge9gdhm2COc4UIBEK3XQhelCmvzczSnqEUshsVDjU0P1eDB/
nOML3Wc4RFkLl9vRxj7ojXJLZnQ1ToR055EIaQQLMcdSj7ieZiipyNmiZ5m56tfB
p9CubXcpqKv5FQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:36:04 2025 by rpki-client