Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
File:                     4saBbgo6L2FsOqd6NrTK96kiQDQ.mft (raw, json)
Hash identifier:          8MyZFjfAM8lB8cFCi8ThIirAr5E4NrZ372Lj0bZjQpI=
Subject key identifier:   09:66:91:80:1C:D3:33:5C:A1:A4:68:C5:C7:4F:65:61:9C:94:0D:9A
Authority key identifier: E2:C6:81:6E:0A:3A:2F:61:6C:3A:A7:7A:36:B4:CA:F7:A9:22:40:34
Certificate issuer:       /CN=e2c6816e0a3a2f616c3aa77a36b4caf7a9224034
Certificate serial:       0197B70F1A597031D49C018C79A23D79C998
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 15:01:49 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:49 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:49 +0000
Files and hashes:         1: 4saBbgo6L2FsOqd6NrTK96kiQDQ.crl (hash: F5dsroPyLaE3sk4vK60VnlyGixEpYYGxo+HtehJR4BI=)
                          2: ulLbtOc6Qp1yKXQQUOt_f70BmFE.roa (hash: YXCw2FZd5PginHPRvRNBgQK3YOd2UnylrB+hjikSz1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:1a:59:70:31:d4:9c:01:8c:79:a2:3d:79:c9:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c6816e0a3a2f616c3aa77a36b4caf7a9224034
        Validity
            Not Before: Jun 28 15:01:49 2025 GMT
            Not After : Jun 29 15:01:49 2025 GMT
        Subject: CN=096691801cd3335ca1a468c5c74f65619c940d9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:57:2a:e5:ba:59:8c:f4:0e:ee:a1:04:92:56:
                    16:f4:d2:ba:38:4c:17:ef:46:46:f6:05:9f:29:76:
                    ee:6b:89:12:07:66:3f:1a:1b:2a:28:2f:0f:d1:c2:
                    e1:29:28:c2:35:09:e3:1a:44:c3:b9:af:b2:dd:35:
                    19:81:ff:d8:05:08:1f:b7:15:1c:a8:e7:f1:e5:74:
                    56:64:01:74:ce:35:90:b0:9a:14:75:37:ac:97:bd:
                    f8:f2:44:13:aa:50:01:c4:0e:d7:c2:2e:c5:bc:6b:
                    c9:48:bb:f1:67:09:ac:71:8f:96:4e:2a:d5:24:72:
                    f5:de:64:dd:65:bb:08:56:91:95:62:39:d8:85:65:
                    81:13:52:b7:f6:1e:93:86:6c:02:43:2a:26:da:82:
                    9f:6d:bf:93:a7:56:77:de:d5:67:ec:33:a0:81:c6:
                    a2:d7:27:b6:0f:f7:4d:f4:2f:31:b9:0b:34:d5:0c:
                    b8:00:e6:2b:ac:0b:ce:03:8d:af:de:7b:f5:05:f9:
                    d2:69:51:13:bc:65:a5:ad:21:50:66:2b:f4:89:86:
                    d4:7c:ea:1c:00:1b:c0:1b:3e:68:4a:0a:90:f6:ab:
                    e6:9d:36:49:21:f8:33:d8:6b:9f:b4:e4:d3:86:6c:
                    6d:28:0a:75:d8:b3:d1:ec:ff:9d:bc:8d:a0:9d:94:
                    17:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:66:91:80:1C:D3:33:5C:A1:A4:68:C5:C7:4F:65:61:9C:94:0D:9A
            X509v3 Authority Key Identifier:
                keyid:E2:C6:81:6E:0A:3A:2F:61:6C:3A:A7:7A:36:B4:CA:F7:A9:22:40:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:f6:f3:b6:0a:86:1a:5e:fa:2a:06:91:ec:8e:ee:c2:a2:2e:
         0f:f7:34:5b:87:c0:a2:3b:0b:44:85:12:96:88:92:ee:82:30:
         cd:ce:b5:c5:9a:e1:72:4e:2c:be:f1:88:24:7c:1f:c8:3a:a8:
         05:4f:8c:92:f5:a5:83:a4:67:40:f0:2d:8d:af:63:00:14:ff:
         e4:d0:6b:d0:82:8e:f3:13:a8:03:fa:17:62:f9:8d:0d:34:74:
         ef:06:5a:60:50:66:ef:23:f7:bc:16:67:b4:7a:17:4d:a1:0a:
         a7:6f:00:8d:c7:07:43:29:36:60:7d:e7:40:ca:90:a9:02:57:
         ab:56:dc:28:f9:5a:a7:ba:26:0f:3b:ac:47:8e:3a:f5:b0:c2:
         05:61:e7:73:a9:03:5e:1e:01:69:e2:15:34:e8:11:45:8f:1b:
         0c:9b:d0:aa:dd:17:69:dd:41:ca:53:9f:43:f8:37:c9:44:db:
         ff:ea:6b:bb:80:a6:16:a6:9f:61:7d:fd:e4:e8:80:cd:fb:61:
         73:24:92:5f:ac:79:19:ca:41:6d:63:8e:58:8f:bb:97:f6:39:
         76:e5:91:b0:3a:e5:ec:ec:6f:8c:f6:54:46:10:a2:cb:9e:74:
         3f:54:37:0a:40:4e:a5:e6:df:e5:6a:40:e0:65:4c:f4:92:3a:
         e3:94:eb:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DxpZcDHUnAGMeaI9ecmYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzY4MTZlMGEzYTJmNjE2YzNhYTc3YTM2YjRjYWY3YTky
MjQwMzQwHhcNMjUwNjI4MTUwMTQ5WhcNMjUwNjI5MTUwMTQ5WjAzMTEwLwYDVQQD
EygwOTY2OTE4MDFjZDMzMzVjYTFhNDY4YzVjNzRmNjU2MTljOTQwZDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1cq5bpZjPQO7qEEklYW9NK6OEwX
70ZG9gWfKXbua4kSB2Y/GhsqKC8P0cLhKSjCNQnjGkTDua+y3TUZgf/YBQgftxUc
qOfx5XRWZAF0zjWQsJoUdTesl7348kQTqlABxA7Xwi7FvGvJSLvxZwmscY+WTirV
JHL13mTdZbsIVpGVYjnYhWWBE1K39h6ThmwCQyom2oKfbb+Tp1Z33tVn7DOggcai
1ye2D/dN9C8xuQs01Qy4AOYrrAvOA42v3nv1BfnSaVETvGWlrSFQZiv0iYbUfOoc
ABvAGz5oSgqQ9qvmnTZJIfgz2GuftOTThmxtKAp12LPR7P+dvI2gnZQXtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAlmkYAc0zNcoaRoxcdPZWGclA2aMB8GA1UdIwQY
MBaAFOLGgW4KOi9hbDqneja0yvepIkA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNhQmJnbzZMMkZzT3FkNk5yVEs5NmtpUURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zYmE3Y2QtZTgxNS00NWNlLTkyZTEt
MjAyYzUxNzIwYWI3LzEvNHNhQmJnbzZMMkZzT3FkNk5yVEs5NmtpUURRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8zYmE3Y2QtZTgxNS00NWNlLTkyZTEtMjAyYzUxNzIwYWI3
LzEvNHNhQmJnbzZMMkZzT3FkNk5yVEs5NmtpUURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJPbztgqG
Gl76KgaR7I7uwqIuD/c0W4fAojsLRIUSloiS7oIwzc61xZrhck4svvGIJHwfyDqo
BU+MkvWlg6RnQPAtja9jABT/5NBr0IKO8xOoA/oXYvmNDTR07wZaYFBm7yP3vBZn
tHoXTaEKp28AjccHQyk2YH3nQMqQqQJXq1bcKPlap7omDzusR4469bDCBWHnc6kD
Xh4BaeIVNOgRRY8bDJvQqt0Xad1BylOfQ/g3yUTb/+pru4CmFqafYX395OiAzfth
cySSX6x5GcpBbWOOWI+7l/Y5duWRsDrl7OxvjPZURhCiy550P1Q3CkBOpebf5WpA
4GVM9JI645TrUA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:43 2025 by rpki-client