Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
File:                     F5WshDzYupAYj3MTZSu1YSmbKW8.mft (raw, json)
Hash identifier:          nDe4vgIDQdSoaHgrsyPIo/UcfvBT+SFGrAqfRY2R5ug=
Subject key identifier:   E3:49:68:E1:2B:75:FA:B4:7A:64:BA:8B:9E:5F:FF:3B:71:1B:13:69
Authority key identifier: 17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F
Certificate issuer:       /CN=1795ac843cd8ba90188f7313652bb561299b296f
Certificate serial:       0197B7EABBB7C52E1B19D3DA815319C9C729
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
Manifest number:          15BD
Signing time:             Sat 28 Jun 2025 19:01:43 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:43 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:43 +0000
Files and hashes:         1: 1n1Q04zTdHaXs9Co2veuwtfoAuY.roa (hash: afUxzktY8K6iIw5yy9bhALlArbdcu4aXL49GknMT04Q=)
                          2: F5WshDzYupAYj3MTZSu1YSmbKW8.crl (hash: Am8H/XzNUAqmTGRGcgKoHyIMzmkz00WODLpo3e3i7Vo=)
                          3: LkE6OmvUvLDEPLVXvhD8kSWchgI.roa (hash: TIEViqlGaXbwRIzS3a8WhThpumMDQCKC4sJFBNgCRkg=)
                          4: ZFdBgXtGzTSyBGSw60XB32cB-AA.roa (hash: 9AZAjPuYZlr2IIMZY508T3D+XaoUBtHO/4Z0E+AyZEw=)
                          5: _OFNw-GBnd-o_UkPPoF8Y7s25zo.roa (hash: YjFqSfXiAolAj9dxHs/dwz/o2yt4XxRKBGVbY9zdKmU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:bb:b7:c5:2e:1b:19:d3:da:81:53:19:c9:c7:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1795ac843cd8ba90188f7313652bb561299b296f
        Validity
            Not Before: Jun 28 19:01:43 2025 GMT
            Not After : Jun 29 19:01:43 2025 GMT
        Subject: CN=e34968e12b75fab47a64ba8b9e5fff3b711b1369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:79:95:06:41:54:0f:0a:8e:aa:fc:d2:fc:b6:
                    5d:25:b0:64:67:2d:48:93:ea:73:35:ab:b3:ce:0c:
                    7d:df:36:52:2c:79:c0:90:5c:1a:74:19:c1:2a:d3:
                    c7:2e:65:a7:e0:a4:33:2f:7a:7b:ef:6c:79:28:44:
                    8f:56:2d:c0:2c:15:b0:19:1a:5c:08:10:23:e0:55:
                    75:26:a5:3c:0d:e2:bd:ed:b3:cf:a5:ee:b5:3d:95:
                    95:06:a3:47:a1:63:4f:c4:32:58:5d:bd:03:e0:50:
                    ff:79:39:4c:a9:75:55:c0:2b:cd:c3:2a:ce:d6:22:
                    ea:32:7c:31:48:fd:e2:82:ad:7b:35:51:ae:94:75:
                    2d:a2:16:86:46:26:de:ae:e5:49:c5:93:5a:8f:a9:
                    84:73:f1:44:d0:b2:44:f8:6c:98:04:15:06:c7:15:
                    2b:be:e4:84:f0:f1:37:a3:41:e2:3c:36:86:f5:60:
                    58:c3:1f:ba:a4:f5:7f:31:8b:ec:56:b6:79:c6:c2:
                    b2:65:95:07:56:52:d4:ea:85:50:db:15:b4:18:ca:
                    25:1f:d8:39:30:22:b9:7b:19:46:4e:32:11:d5:f0:
                    98:f8:52:0c:99:d2:c2:b9:07:28:1f:3e:67:f9:3d:
                    64:5d:de:1e:f4:7c:1c:d3:79:af:ca:9b:40:89:ea:
                    a3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:49:68:E1:2B:75:FA:B4:7A:64:BA:8B:9E:5F:FF:3B:71:1B:13:69
            X509v3 Authority Key Identifier:
                keyid:17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:26:40:4a:23:d2:18:a0:13:f7:53:3d:7f:7d:ea:b6:47:09:
         86:32:71:38:2a:d3:b3:d7:a3:71:b9:5f:a8:e7:91:4d:c0:8e:
         72:ee:94:cb:90:3f:69:30:7b:f0:6e:cc:8f:82:0f:a8:2f:7b:
         76:c7:31:b0:a8:6e:7b:3e:44:da:b1:d7:4d:e5:a3:7a:97:d8:
         81:5f:be:c3:39:8c:b1:de:81:af:50:1c:ec:76:8a:63:e1:00:
         23:05:a4:f8:e8:78:dc:27:80:08:82:50:21:2c:e9:36:50:fa:
         11:42:9b:83:45:c8:ed:06:0d:b6:46:ea:2a:59:86:e8:95:69:
         c5:2d:f5:55:ee:d1:73:a6:09:4b:9d:d7:8c:f7:fb:a7:48:41:
         aa:28:bd:95:a3:cc:31:23:47:d5:ac:a2:55:26:61:1d:8b:97:
         51:29:29:8c:f4:80:55:eb:01:46:af:0f:4f:81:60:02:ef:9b:
         d5:21:09:f2:cb:3b:70:97:a1:da:e7:ed:31:3b:68:85:bd:88:
         2d:bc:cd:34:bd:96:89:21:e5:c8:3c:79:e3:ab:2f:82:89:36:
         4f:e3:7b:69:fb:57:e3:c6:af:4e:63:5b:fa:b5:f6:30:2d:6f:
         f5:0f:d7:8a:bc:f2:02:1e:37:f7:d0:0f:25:2b:29:cd:0e:48:
         16:1e:fb:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36ru3xS4bGdPagVMZyccpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3OTVhYzg0M2NkOGJhOTAxODhmNzMxMzY1MmJiNTYxMjk5
YjI5NmYwHhcNMjUwNjI4MTkwMTQzWhcNMjUwNjI5MTkwMTQzWjAzMTEwLwYDVQQD
EyhlMzQ5NjhlMTJiNzVmYWI0N2E2NGJhOGI5ZTVmZmYzYjcxMWIxMzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknmVBkFUDwqOqvzS/LZdJbBkZy1I
k+pzNauzzgx93zZSLHnAkFwadBnBKtPHLmWn4KQzL3p772x5KESPVi3ALBWwGRpc
CBAj4FV1JqU8DeK97bPPpe61PZWVBqNHoWNPxDJYXb0D4FD/eTlMqXVVwCvNwyrO
1iLqMnwxSP3igq17NVGulHUtohaGRiberuVJxZNaj6mEc/FE0LJE+GyYBBUGxxUr
vuSE8PE3o0HiPDaG9WBYwx+6pPV/MYvsVrZ5xsKyZZUHVlLU6oVQ2xW0GMolH9g5
MCK5exlGTjIR1fCY+FIMmdLCuQcoHz5n+T1kXd4e9Hwc03mvyptAieqjTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONJaOErdfq0emS6i55f/ztxGxNpMB8GA1UdIwQY
MBaAFBeVrIQ82LqQGI9zE2UrtWEpmylvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjVXc2hEell1cEFZajNNVFpTdTFZU21iS1c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS82NjgzZjQtM2VlYy00ZGNiLTg3ODct
NzMxYWJjNmY3NWNhLzEvRjVXc2hEell1cEFZajNNVFpTdTFZU21iS1c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS82NjgzZjQtM2VlYy00ZGNiLTg3ODctNzMxYWJjNmY3NWNh
LzEvRjVXc2hEell1cEFZajNNVFpTdTFZU21iS1c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADyZASiPS
GKAT91M9f33qtkcJhjJxOCrTs9ejcblfqOeRTcCOcu6Uy5A/aTB78G7Mj4IPqC97
dscxsKhuez5E2rHXTeWjepfYgV++wzmMsd6Br1Ac7HaKY+EAIwWk+Oh43CeACIJQ
ISzpNlD6EUKbg0XI7QYNtkbqKlmG6JVpxS31Ve7Rc6YJS53XjPf7p0hBqii9laPM
MSNH1ayiVSZhHYuXUSkpjPSAVesBRq8PT4FgAu+b1SEJ8ss7cJeh2uftMTtohb2I
LbzNNL2WiSHlyDx546svgok2T+N7aftX48avTmNb+rX2MC1v9Q/XirzyAh4399AP
JSspzQ5IFh77tg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:59 2025 by rpki-client