Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.mft
File:                     wR_52bpVx9lQjFpNwe7MDilWHC4.mft (raw, json)
Hash identifier:          MHZ5LN/h1OT4MkrrcE8p5fP1r/Gr155ZF/Di+piAId4=
Subject key identifier:   77:74:A2:02:3A:5E:BD:41:A7:31:2F:0D:32:B3:07:3A:32:0E:28:9F
Authority key identifier: C1:1F:F9:D9:BA:55:C7:D9:50:8C:5A:4D:C1:EE:CC:0E:29:56:1C:2E
Certificate issuer:       /CN=c11ff9d9ba55c7d9508c5a4dc1eecc0e29561c2e
Certificate serial:       0197B96B034B86495F1971424D2383538111
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wR_52bpVx9lQjFpNwe7MDilWHC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.mft
Manifest number:          15B4
Signing time:             Sun 29 Jun 2025 02:01:27 +0000
Manifest this update:     Sun 29 Jun 2025 02:01:27 +0000
Manifest next update:     Mon 30 Jun 2025 02:01:27 +0000
Files and hashes:         1: wR_52bpVx9lQjFpNwe7MDilWHC4.crl (hash: M+DyUBuWzQVXATqYROurpGjmQC6QOxx0E1p74Mb4ZKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wR_52bpVx9lQjFpNwe7MDilWHC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:6b:03:4b:86:49:5f:19:71:42:4d:23:83:53:81:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c11ff9d9ba55c7d9508c5a4dc1eecc0e29561c2e
        Validity
            Not Before: Jun 29 02:01:27 2025 GMT
            Not After : Jun 30 02:01:27 2025 GMT
        Subject: CN=7774a2023a5ebd41a7312f0d32b3073a320e289f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c3:59:2e:88:f5:f2:85:cf:10:25:fa:c7:a6:
                    d9:16:01:ca:e9:9e:c0:58:9f:17:ca:22:70:74:f0:
                    b8:48:f7:bd:5f:b1:77:42:d8:fd:a6:8e:68:2e:12:
                    37:d5:48:26:44:86:77:1f:bd:02:25:9c:44:85:65:
                    24:a2:36:48:40:1e:26:8c:bf:9d:64:1d:11:85:b7:
                    98:a8:ca:ff:bf:42:6b:0e:c6:f5:02:4d:f8:14:7b:
                    57:6c:f7:70:4e:dd:5d:a9:15:b3:e0:37:5a:29:39:
                    08:83:2c:c7:83:4a:4f:83:e0:18:63:37:12:e4:dc:
                    ea:af:c4:59:b8:cd:27:b9:87:e9:a0:d3:2b:b2:b5:
                    08:bd:d5:7b:ea:bd:d6:96:76:f4:8f:75:a7:0a:c4:
                    1f:06:95:3e:ed:f2:1d:f4:d3:b6:1c:e6:19:2c:0a:
                    46:84:19:c7:f6:a7:e0:af:2b:0a:5a:1a:6a:58:54:
                    df:e0:7e:8d:5b:bf:1a:53:21:b4:ce:ba:36:c6:f1:
                    94:53:da:39:ad:ce:63:03:c7:08:5e:d6:ea:05:c9:
                    cd:4a:cf:63:c1:b4:d5:c3:79:be:95:47:88:af:39:
                    22:e5:d7:16:7b:44:bb:5e:8c:2c:0a:43:34:4a:f5:
                    89:b5:c0:84:f4:8c:66:40:d5:b9:60:17:2c:b8:c7:
                    83:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:74:A2:02:3A:5E:BD:41:A7:31:2F:0D:32:B3:07:3A:32:0E:28:9F
            X509v3 Authority Key Identifier:
                keyid:C1:1F:F9:D9:BA:55:C7:D9:50:8C:5A:4D:C1:EE:CC:0E:29:56:1C:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wR_52bpVx9lQjFpNwe7MDilWHC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ab:aa:d4:e7:b3:72:a4:79:81:20:65:58:f9:d4:64:e0:61:
         58:61:c0:f3:1a:af:ea:37:e3:ff:69:a5:fa:be:45:91:21:1f:
         44:c9:4d:83:3c:2f:33:71:da:7c:73:4f:ba:90:84:24:72:1f:
         54:b3:45:13:5b:20:1e:1d:59:69:4a:4e:62:a2:fa:fe:f1:20:
         13:73:09:5d:7f:5a:a7:6a:1e:86:b6:54:0e:12:65:93:6f:fd:
         6d:e3:13:36:6e:1b:11:62:9a:a9:21:45:1e:f2:32:91:a6:10:
         95:01:70:47:03:1f:01:5f:f9:c9:08:45:dd:fc:19:ec:e8:de:
         1e:fd:68:e7:b8:a4:e2:c7:a4:dc:99:51:b1:38:db:1c:3b:2a:
         9c:65:dd:98:3e:1d:46:cc:68:ea:71:3d:17:3c:fd:c8:cc:10:
         d2:b8:aa:c1:f4:b2:6e:9f:4a:87:cc:18:39:40:b5:5d:01:95:
         db:1c:e1:e5:dd:6b:40:9b:d5:1b:25:c3:6c:f4:85:ac:c2:de:
         4f:54:c4:33:a4:02:79:24:85:48:95:bd:7a:b7:a6:09:be:95:
         28:79:0a:72:9c:ca:41:53:d3:3d:68:ab:5b:2b:fd:56:28:ae:
         ef:c9:a5:d6:17:3e:c6:96:64:11:04:e6:ec:91:bd:15:7e:81:
         a7:6c:9d:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5awNLhklfGXFCTSODU4ERMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMWZmOWQ5YmE1NWM3ZDk1MDhjNWE0ZGMxZWVjYzBlMjk1
NjFjMmUwHhcNMjUwNjI5MDIwMTI3WhcNMjUwNjMwMDIwMTI3WjAzMTEwLwYDVQQD
Eyg3Nzc0YTIwMjNhNWViZDQxYTczMTJmMGQzMmIzMDczYTMyMGUyODlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cNZLoj18oXPECX6x6bZFgHK6Z7A
WJ8XyiJwdPC4SPe9X7F3Qtj9po5oLhI31UgmRIZ3H70CJZxEhWUkojZIQB4mjL+d
ZB0RhbeYqMr/v0JrDsb1Ak34FHtXbPdwTt1dqRWz4DdaKTkIgyzHg0pPg+AYYzcS
5Nzqr8RZuM0nuYfpoNMrsrUIvdV76r3Wlnb0j3WnCsQfBpU+7fId9NO2HOYZLApG
hBnH9qfgrysKWhpqWFTf4H6NW78aUyG0zro2xvGUU9o5rc5jA8cIXtbqBcnNSs9j
wbTVw3m+lUeIrzki5dcWe0S7XowsCkM0SvWJtcCE9IxmQNW5YBcsuMeDkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHd0ogI6Xr1BpzEvDTKzBzoyDiifMB8GA1UdIwQY
MBaAFMEf+dm6VcfZUIxaTcHuzA4pVhwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1JfNTJicFZ4OWxRakZwTndlN01EaWxXSEM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS84MDc5MGItODkxZi00ZTAzLWJkNTYt
OWZiNmI0ZWEyNTBhLzEvd1JfNTJicFZ4OWxRakZwTndlN01EaWxXSEM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS84MDc5MGItODkxZi00ZTAzLWJkNTYtOWZiNmI0ZWEyNTBh
LzEvd1JfNTJicFZ4OWxRakZwTndlN01EaWxXSEM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ6uq1Oez
cqR5gSBlWPnUZOBhWGHA8xqv6jfj/2ml+r5FkSEfRMlNgzwvM3HafHNPupCEJHIf
VLNFE1sgHh1ZaUpOYqL6/vEgE3MJXX9ap2oehrZUDhJlk2/9beMTNm4bEWKaqSFF
HvIykaYQlQFwRwMfAV/5yQhF3fwZ7OjeHv1o57ik4sek3JlRsTjbHDsqnGXdmD4d
Rsxo6nE9Fzz9yMwQ0riqwfSybp9Kh8wYOUC1XQGV2xzh5d1rQJvVGyXDbPSFrMLe
T1TEM6QCeSSFSJW9eremCb6VKHkKcpzKQVPTPWirWyv9Viiu78ml1hc+xpZkEQTm
7JG9FX6Bp2ydQA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:34:47 2025 by rpki-client