Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.mft
File:                     x6Lk65_TzNG6RKNi92-Ym3tE1fI.mft (raw, json)
Hash identifier:          pVq/m2zRJN3xZgS/NB6lVhBMG28xAd4q8CoKU+/AYPs=
Subject key identifier:   C6:7C:89:D8:EE:DB:4A:CE:DC:18:2B:D1:F7:A6:C5:E9:F0:42:41:06
Authority key identifier: C7:A2:E4:EB:9F:D3:CC:D1:BA:44:A3:62:F7:6F:98:9B:7B:44:D5:F2
Certificate issuer:       /CN=c7a2e4eb9fd3ccd1ba44a362f76f989b7b44d5f2
Certificate serial:       0197CFBC348950E5F9F36F598C22A8A0FC83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x6Lk65_TzNG6RKNi92-Ym3tE1fI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.mft
Manifest number:          0F14
Signing time:             Thu 03 Jul 2025 10:01:47 +0000
Manifest this update:     Thu 03 Jul 2025 10:01:47 +0000
Manifest next update:     Fri 04 Jul 2025 10:01:47 +0000
Files and hashes:         1: JqQax9sv0vRADwA78DtmjWkQLEE.roa (hash: Yj45NvtpL9PKcZ/9PbAe7wPZg60kGlm36nNetlLSWMc=)
                          2: QeY7vGKOe5WJwx2PdFZMhuvqcrM.roa (hash: iFsqZE7xTmoV7CGhuU56miv5nf81Wm5pGm3tJX+o8Gg=)
                          3: dSov7w2eyIME-dLmYE5huJUu4Yg.roa (hash: ZBbSGs3xtCwiRVVA/WAQV08kD/BTL0iXtgfJYGFBfeY=)
                          4: x6Lk65_TzNG6RKNi92-Ym3tE1fI.crl (hash: uOsZKum7ICuvopVmeTm4zf7CNOaOxiXf4+mf6KYRLjk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x6Lk65_TzNG6RKNi92-Ym3tE1fI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Jul 2025 10:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cf:bc:34:89:50:e5:f9:f3:6f:59:8c:22:a8:a0:fc:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7a2e4eb9fd3ccd1ba44a362f76f989b7b44d5f2
        Validity
            Not Before: Jul  3 10:01:47 2025 GMT
            Not After : Jul  4 10:01:47 2025 GMT
        Subject: CN=c67c89d8eedb4acedc182bd1f7a6c5e9f0424106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fb:bd:5a:ac:50:25:a9:24:79:ce:3d:a3:b2:
                    74:ce:57:d7:a8:8c:71:68:2a:c3:2e:8a:ce:95:21:
                    ef:e6:3f:83:d8:33:84:ba:d7:ec:cc:bb:b2:0e:e8:
                    a5:b5:55:f6:6c:15:35:95:a4:c5:7d:d7:3e:5d:3a:
                    20:4c:c4:86:7a:8c:58:30:7e:a5:6c:d3:bd:b3:2e:
                    e3:7f:10:5a:39:3c:cc:c2:19:2d:57:55:39:6e:1a:
                    f9:d2:78:77:eb:44:89:7f:36:3f:b3:23:76:fe:88:
                    8e:fc:e7:bc:f0:3a:d0:53:69:60:cb:10:44:ec:8a:
                    59:b8:a3:4d:29:47:b4:d6:e8:a9:db:07:f5:9e:23:
                    0e:82:a0:29:bb:3e:fb:87:b9:ad:55:b7:d3:a8:5b:
                    00:d5:b4:65:39:2d:be:03:5b:07:47:91:d5:bc:50:
                    25:10:31:35:e7:b3:b2:49:fa:f6:de:4e:3f:81:67:
                    9f:1e:d2:37:e8:41:b0:a4:8c:d3:2a:62:2a:3b:ec:
                    98:5f:37:57:de:00:35:ba:93:6d:69:06:3e:52:9d:
                    eb:2e:fc:cf:72:4a:1f:ad:0e:e0:30:84:33:7c:9b:
                    89:a8:87:e9:24:cb:81:42:f8:43:05:b4:f8:7d:f5:
                    21:9e:53:b4:f2:57:df:0d:e3:76:a4:df:92:a7:4d:
                    3b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:7C:89:D8:EE:DB:4A:CE:DC:18:2B:D1:F7:A6:C5:E9:F0:42:41:06
            X509v3 Authority Key Identifier:
                keyid:C7:A2:E4:EB:9F:D3:CC:D1:BA:44:A3:62:F7:6F:98:9B:7B:44:D5:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6Lk65_TzNG6RKNi92-Ym3tE1fI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:10:a3:1c:85:54:33:55:a3:1e:7a:dc:04:de:c2:cf:8d:c1:
         c7:40:35:7b:56:74:9a:78:7f:ff:b8:ed:e0:02:f1:fb:1b:3d:
         58:ac:1d:2d:16:aa:cd:c0:54:5b:bd:ed:8e:85:f0:fe:d4:62:
         55:4d:a5:24:63:35:c7:3b:f0:76:a8:99:6a:f3:88:49:cd:ca:
         12:e1:22:29:87:e5:69:1f:e0:4a:c4:25:56:2d:e2:30:f1:76:
         a9:6d:cd:e3:8e:a4:d1:77:8c:52:63:f6:05:10:a6:08:f4:c8:
         0d:79:88:69:20:7f:80:ac:94:ac:b1:9a:68:90:90:a7:0a:94:
         a3:19:25:51:46:19:18:61:ec:9b:82:7f:64:a2:aa:10:5d:ae:
         4a:00:ff:dd:bc:85:ff:cd:84:3a:e1:c2:e9:3f:20:af:0a:02:
         e7:51:5e:85:1d:8e:29:33:30:61:1e:11:e4:49:e8:b4:9b:c8:
         c9:18:01:9f:c2:15:c3:5b:d3:f7:1d:2e:88:3f:8c:be:18:0d:
         c3:da:1a:ea:5a:41:41:56:c7:9a:c4:13:c4:a8:3b:31:90:ae:
         c4:65:d4:8e:50:3c:d5:6f:a8:4c:22:2c:f2:35:62:f9:74:d7:
         3b:72:bc:1d:b8:79:dc:61:d9:f8:a7:da:96:3e:5c:95:20:6d:
         b6:9a:eb:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfPvDSJUOX5829ZjCKooPyDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3YTJlNGViOWZkM2NjZDFiYTQ0YTM2MmY3NmY5ODliN2I0
NGQ1ZjIwHhcNMjUwNzAzMTAwMTQ3WhcNMjUwNzA0MTAwMTQ3WjAzMTEwLwYDVQQD
EyhjNjdjODlkOGVlZGI0YWNlZGMxODJiZDFmN2E2YzVlOWYwNDI0MTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvu9WqxQJakkec49o7J0zlfXqIxx
aCrDLorOlSHv5j+D2DOEutfszLuyDuiltVX2bBU1laTFfdc+XTogTMSGeoxYMH6l
bNO9sy7jfxBaOTzMwhktV1U5bhr50nh360SJfzY/syN2/oiO/Oe88DrQU2lgyxBE
7IpZuKNNKUe01uip2wf1niMOgqApuz77h7mtVbfTqFsA1bRlOS2+A1sHR5HVvFAl
EDE157OySfr23k4/gWefHtI36EGwpIzTKmIqO+yYXzdX3gA1upNtaQY+Up3rLvzP
ckofrQ7gMIQzfJuJqIfpJMuBQvhDBbT4ffUhnlO08lffDeN2pN+Sp007FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZ8idju20rO3Bgr0femxenwQkEGMB8GA1UdIwQY
MBaAFMei5Ouf08zRukSjYvdvmJt7RNXyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDZMazY1X1R6Tkc2UktOaTkyLVltM3RFMWZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wZTQ5NzYtZTc1MC00NTY4LTg1ODMt
ZGU2ZWY3Yzk1NTI2LzEveDZMazY1X1R6Tkc2UktOaTkyLVltM3RFMWZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8wZTQ5NzYtZTc1MC00NTY4LTg1ODMtZGU2ZWY3Yzk1NTI2
LzEveDZMazY1X1R6Tkc2UktOaTkyLVltM3RFMWZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAehCjHIVU
M1WjHnrcBN7Cz43Bx0A1e1Z0mnh//7jt4ALx+xs9WKwdLRaqzcBUW73tjoXw/tRi
VU2lJGM1xzvwdqiZavOISc3KEuEiKYflaR/gSsQlVi3iMPF2qW3N446k0XeMUmP2
BRCmCPTIDXmIaSB/gKyUrLGaaJCQpwqUoxklUUYZGGHsm4J/ZKKqEF2uSgD/3byF
/82EOuHC6T8grwoC51FehR2OKTMwYR4R5EnotJvIyRgBn8IVw1vT9x0uiD+MvhgN
w9oa6lpBQVbHmsQTxKg7MZCuxGXUjlA81W+oTCIs8jVi+XTXO3K8Hbh53GHZ+Kfa
lj5clSBttprrhg==
-----END CERTIFICATE-----
Generated at Thu Jul 3 17:31:37 2025 by rpki-client