Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft
File:                     aMDy0Hdvfh00kHWIHDXp04dGNAU.mft (raw, json)
Hash identifier:          hi0sDbZFLgCP4pcjxbP99JuM1AzSVceY4GJaVmfr9o4=
Subject key identifier:   F1:8A:87:18:3A:DF:E1:32:64:F4:DE:84:D9:96:90:F2:FF:AE:F1:62
Authority key identifier: 68:C0:F2:D0:77:6F:7E:1D:34:90:75:88:1C:35:E9:D3:87:46:34:05
Certificate issuer:       /CN=68c0f2d0776f7e1d349075881c35e9d387463405
Certificate serial:       0197B5C47FA882F93B0C57D32513EC2B5D0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft
Manifest number:          070B
Signing time:             Sat 28 Jun 2025 09:00:43 +0000
Manifest this update:     Sat 28 Jun 2025 09:00:43 +0000
Manifest next update:     Sun 29 Jun 2025 09:00:43 +0000
Files and hashes:         1: 9Cor9nA5STtdeNAPJ4EF2UhIUNY.roa (hash: 2Xypo5/I10KMSVc6sd5OAZl2260JQAWQGDIcFZqWthg=)
                          2: 9L1jJAO_HMQ73m0y2wPc0NTq508.roa (hash: dppWJh2OxH8+hUL7V9AV0LikKL7kW2xpJmDuGMTyRBM=)
                          3: BofSOCqR9lVaW3XPh8s-hTi0YA4.roa (hash: GjLb3/wGRJd3Eao5cHxTciBM+9F+oErcKi5PWIvkCug=)
                          4: aMDy0Hdvfh00kHWIHDXp04dGNAU.crl (hash: I3VjkhGW0dn0zkyBwMjGXlGQ6TPN2WLavUPPG+/tveA=)
                          5: pGJ6hykI0SezIUBll3Bejkc4eK8.roa (hash: LOy2PAU5LyGNlvT8G9Ei0trOR6p2w0dY/EWeeNGTATo=)
                          6: sid7Fz4p9LsUb435z4rlURheO5M.roa (hash: tKFwC0bd+BEOCIW21NmrzUtEhbV3IutUiWL0BmRO0A8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 09:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:c4:7f:a8:82:f9:3b:0c:57:d3:25:13:ec:2b:5d:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68c0f2d0776f7e1d349075881c35e9d387463405
        Validity
            Not Before: Jun 28 09:00:43 2025 GMT
            Not After : Jun 29 09:00:43 2025 GMT
        Subject: CN=f18a87183adfe13264f4de84d99690f2ffaef162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:eb:d9:b8:18:8a:ac:ac:2b:99:f7:a0:71:9a:
                    1f:72:52:4f:96:1f:3a:7a:00:9b:07:84:71:05:5f:
                    3e:ed:cd:01:cf:04:8c:20:1b:bd:de:ac:15:f2:5a:
                    3e:81:3b:d5:d3:78:64:fb:eb:dd:38:eb:f9:22:87:
                    82:64:4b:a7:32:f6:b7:29:09:55:45:94:81:47:f3:
                    1a:78:47:d4:cb:e1:1f:7e:81:86:2c:56:20:3e:04:
                    22:fc:2e:13:f9:48:46:83:4a:83:fe:04:5e:ce:63:
                    37:89:dc:16:9f:b6:4e:f6:1b:af:4c:f9:92:bd:8f:
                    41:1b:62:a8:f1:dc:03:29:3c:72:0a:58:94:4e:4b:
                    f8:ca:97:56:33:3e:f8:c5:44:30:a5:05:15:d7:5e:
                    db:a2:16:cf:70:28:ee:1a:3a:a9:48:a0:04:c0:cc:
                    3f:ec:92:3d:3f:05:04:54:ff:d8:11:ea:10:fe:6d:
                    ce:cc:2a:90:1a:1a:5f:ff:8b:27:db:e8:a5:19:80:
                    55:63:77:6e:a6:75:47:b8:28:95:62:11:8e:c3:f7:
                    6f:9a:c5:50:22:04:bf:b8:5b:7d:a7:3f:a6:3f:9d:
                    61:ed:d5:3d:f6:73:61:a5:4e:18:b6:07:49:d4:64:
                    3a:04:f8:a5:63:c9:91:4b:b8:b4:d6:1c:53:5c:2a:
                    4a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:8A:87:18:3A:DF:E1:32:64:F4:DE:84:D9:96:90:F2:FF:AE:F1:62
            X509v3 Authority Key Identifier:
                keyid:68:C0:F2:D0:77:6F:7E:1D:34:90:75:88:1C:35:E9:D3:87:46:34:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:fb:aa:df:44:a2:8b:d4:1a:0a:96:0e:b9:1a:13:35:ac:22:
         a9:91:5e:ec:e3:a6:94:65:56:19:cf:7c:94:67:c2:a6:0c:db:
         c7:7a:68:4f:5d:c1:e6:b6:f1:07:d8:ba:e2:68:29:22:93:9b:
         99:8d:05:d2:f0:dc:30:9f:72:78:cb:9b:07:8e:1d:fa:98:9d:
         54:af:ea:ef:c6:91:97:4b:fc:ba:77:9e:66:86:01:f6:ea:1c:
         b0:f5:19:9b:d8:9f:99:87:a7:5a:8e:b3:d8:3c:3f:5d:e3:39:
         06:18:59:64:39:71:0a:48:b0:3c:8e:79:67:b4:a8:ea:fa:a3:
         48:d1:f4:b5:55:89:d3:b2:7a:ef:15:82:38:ff:43:e9:31:c8:
         94:b4:3f:c5:66:8f:0f:65:39:ba:5b:a0:8d:62:3d:d5:2e:5f:
         f9:bc:78:d1:5b:3f:53:d3:8a:4b:fe:a7:8e:90:0f:6e:1d:36:
         ce:84:79:8f:b5:8a:18:05:a7:ef:8d:59:8d:57:d7:25:c0:a2:
         d9:23:ec:f5:bb:76:b8:ff:68:09:48:f0:64:8f:54:22:1d:fb:
         75:97:cb:30:7c:14:bb:23:5c:99:e3:80:5f:ae:f9:fd:ad:67:
         49:97:bf:10:e1:3d:d2:8b:42:48:51:c5:80:cd:aa:f0:84:77:
         77:ec:81:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1xH+ogvk7DFfTJRPsK10PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YzBmMmQwNzc2ZjdlMWQzNDkwNzU4ODFjMzVlOWQzODc0
NjM0MDUwHhcNMjUwNjI4MDkwMDQzWhcNMjUwNjI5MDkwMDQzWjAzMTEwLwYDVQQD
EyhmMThhODcxODNhZGZlMTMyNjRmNGRlODRkOTk2OTBmMmZmYWVmMTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5evZuBiKrKwrmfegcZofclJPlh86
egCbB4RxBV8+7c0BzwSMIBu93qwV8lo+gTvV03hk++vdOOv5IoeCZEunMva3KQlV
RZSBR/MaeEfUy+EffoGGLFYgPgQi/C4T+UhGg0qD/gRezmM3idwWn7ZO9huvTPmS
vY9BG2Ko8dwDKTxyCliUTkv4ypdWMz74xUQwpQUV117bohbPcCjuGjqpSKAEwMw/
7JI9PwUEVP/YEeoQ/m3OzCqQGhpf/4sn2+ilGYBVY3dupnVHuCiVYhGOw/dvmsVQ
IgS/uFt9pz+mP51h7dU99nNhpU4YtgdJ1GQ6BPilY8mRS7i01hxTXCpK9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGKhxg63+EyZPTehNmWkPL/rvFiMB8GA1UdIwQY
MBaAFGjA8tB3b34dNJB1iBw16dOHRjQFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU1EeTBIZHZmaDAwa0hXSUhEWHAwNGRHTkFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS84NGVlZGMtYTJmNi00YTM5LWE5MTgt
ZjlkOWMwM2Q0YjRjLzEvYU1EeTBIZHZmaDAwa0hXSUhEWHAwNGRHTkFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS84NGVlZGMtYTJmNi00YTM5LWE5MTgtZjlkOWMwM2Q0YjRj
LzEvYU1EeTBIZHZmaDAwa0hXSUhEWHAwNGRHTkFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmvuq30Si
i9QaCpYOuRoTNawiqZFe7OOmlGVWGc98lGfCpgzbx3poT13B5rbxB9i64mgpIpOb
mY0F0vDcMJ9yeMubB44d+pidVK/q78aRl0v8uneeZoYB9uocsPUZm9ifmYenWo6z
2Dw/XeM5BhhZZDlxCkiwPI55Z7So6vqjSNH0tVWJ07J67xWCOP9D6THIlLQ/xWaP
D2U5ulugjWI91S5f+bx40Vs/U9OKS/6njpAPbh02zoR5j7WKGAWn741ZjVfXJcCi
2SPs9bt2uP9oCUjwZI9UIh37dZfLMHwUuyNcmeOAX675/a1nSZe/EOE90otCSFHF
gM2q8IR3d+yBAQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:04:49 2025 by rpki-client