Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.mft
File:                     iEv4DnL1Dwm_VjST69sRo0u6MS0.mft (raw, json)
Hash identifier:          xbsjRzPpwyr8ShVC5wFLRYX+szRoh7QR/I2RRlwLpKs=
Subject key identifier:   02:52:5B:58:4C:47:AA:35:D7:EF:9F:44:DF:96:D9:12:BD:4B:5E:5C
Authority key identifier: 88:4B:F8:0E:72:F5:0F:09:BF:56:34:93:EB:DB:11:A3:4B:BA:31:2D
Certificate issuer:       /CN=884bf80e72f50f09bf563493ebdb11a34bba312d
Certificate serial:       0197B6D771C12BB3DFC98C41955DAE95F493
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iEv4DnL1Dwm_VjST69sRo0u6MS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.mft
Manifest number:          15A5
Signing time:             Sat 28 Jun 2025 14:01:02 +0000
Manifest this update:     Sat 28 Jun 2025 14:01:02 +0000
Manifest next update:     Sun 29 Jun 2025 14:01:02 +0000
Files and hashes:         1: IVdpbiwp8sk6RWKPU9fU_W8afE4.roa (hash: X2lQta/XLPc+pnMfam2urh0+0omvloln8L5ZX9x6bhE=)
                          2: Npq0NgAUzPmjKDeEsxuhWw6BogU.roa (hash: z3169zTT1YiBlznFXGSnMAqWRbAhW/S4LcLq7Rxd94g=)
                          3: ZZlHpEh3xq_erGKCvTsR5cenP4M.roa (hash: C4STcediFbKih1AYZM4S/g3j+Dxm18LPv+Tu0224VhI=)
                          4: detAd7FlOFGjTsX2k3rOLy2UQCs.roa (hash: cqEU+ACySIshfpJTQIUM63m1I8ih1IEP8SdQskz8PQk=)
                          5: hEIm6b1kctKQOBdo1EnRG1VjnyQ.roa (hash: Xo1DxXqBfY11s6cBh+ynDozHMZaWken4xmavWyHXw6s=)
                          6: iEv4DnL1Dwm_VjST69sRo0u6MS0.crl (hash: ciFdqAFRAF3QMGBM4A0L6pZLwV2BSfNbAn//ydSxYe8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iEv4DnL1Dwm_VjST69sRo0u6MS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:71:c1:2b:b3:df:c9:8c:41:95:5d:ae:95:f4:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884bf80e72f50f09bf563493ebdb11a34bba312d
        Validity
            Not Before: Jun 28 14:01:02 2025 GMT
            Not After : Jun 29 14:01:02 2025 GMT
        Subject: CN=02525b584c47aa35d7ef9f44df96d912bd4b5e5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b1:d0:cf:d1:46:06:7c:ff:f5:de:82:49:f9:
                    94:4c:87:f6:b9:74:7f:af:bb:97:78:32:4d:4f:ab:
                    2f:c7:db:9f:b4:1d:58:6c:7c:a8:52:cc:b6:78:d1:
                    4a:10:52:5a:18:ba:42:ba:9b:17:51:50:5e:7c:2b:
                    81:8e:57:ec:f2:0b:38:e1:bc:d4:75:b6:22:e8:18:
                    08:b8:80:95:18:55:65:81:c5:17:d4:cf:40:ff:2f:
                    92:9f:89:40:fa:f8:47:a6:c0:be:6a:c4:7f:de:2b:
                    1b:53:ac:47:34:68:fb:8d:89:54:7e:40:99:a1:8a:
                    ee:eb:bb:77:23:ec:aa:8a:78:63:27:fe:1e:28:3d:
                    db:04:c9:9d:36:55:ed:eb:86:18:9d:b7:aa:72:33:
                    dd:e3:a5:72:b3:0e:62:d0:a7:66:6e:51:48:cd:d3:
                    33:a1:9f:d9:a7:9b:8a:04:cc:87:1d:73:e3:75:8b:
                    94:50:78:3f:9d:50:5d:7b:66:c2:34:93:dc:1f:0c:
                    7f:82:61:8a:57:93:e0:78:1e:16:79:4c:f1:a3:64:
                    35:dd:f6:bb:f2:cf:cf:55:d0:70:37:73:f4:69:5a:
                    c0:ea:e8:28:63:ba:78:bf:ab:c8:b4:31:d7:84:c1:
                    b8:02:e1:cb:55:d6:e2:2e:c0:77:66:fc:91:87:86:
                    0d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:52:5B:58:4C:47:AA:35:D7:EF:9F:44:DF:96:D9:12:BD:4B:5E:5C
            X509v3 Authority Key Identifier:
                keyid:88:4B:F8:0E:72:F5:0F:09:BF:56:34:93:EB:DB:11:A3:4B:BA:31:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEv4DnL1Dwm_VjST69sRo0u6MS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:5e:4f:81:e9:b5:e0:e3:57:58:5c:eb:09:37:32:68:69:c4:
         ef:9f:3e:1d:12:a1:64:c9:96:ee:98:8b:12:ca:59:28:b1:a0:
         ff:e3:14:02:92:24:87:1e:dc:40:36:a8:39:50:8e:2c:d6:e0:
         d3:a8:ec:97:18:24:4f:9a:c9:5b:82:18:70:67:2f:db:bc:9f:
         be:0a:14:48:d9:50:d7:25:2a:33:28:77:8c:d8:95:0c:fb:b9:
         cb:81:32:e0:42:00:e5:2f:96:4b:61:0f:86:3a:cb:1f:d5:df:
         d8:8b:3a:1b:35:02:07:17:e8:51:16:8f:d8:5c:1e:99:7d:bc:
         b1:38:46:fa:e5:75:4a:40:e6:ca:dd:bf:9d:b4:84:6c:49:ca:
         57:87:2b:79:89:93:6c:0d:64:e5:8e:24:5b:70:c2:8f:21:fd:
         24:93:5e:cf:4b:f2:82:4c:5c:e0:bf:63:91:55:57:2b:d3:ab:
         69:de:c5:88:ec:cb:1b:d1:bf:cd:73:5e:9b:3f:df:0c:29:d6:
         54:3f:35:89:1e:fe:3f:07:80:0b:b9:a5:42:63:12:84:d2:95:
         da:cd:c0:f9:36:38:7c:7f:9e:20:8e:f7:58:c8:1c:52:6a:10:
         a7:d3:d8:81:bd:93:2e:25:9c:8b:fd:b7:63:1d:20:c2:45:dc:
         7e:91:2c:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe213HBK7PfyYxBlV2ulfSTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NGJmODBlNzJmNTBmMDliZjU2MzQ5M2ViZGIxMWEzNGJi
YTMxMmQwHhcNMjUwNjI4MTQwMTAyWhcNMjUwNjI5MTQwMTAyWjAzMTEwLwYDVQQD
EygwMjUyNWI1ODRjNDdhYTM1ZDdlZjlmNDRkZjk2ZDkxMmJkNGI1ZTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbHQz9FGBnz/9d6CSfmUTIf2uXR/
r7uXeDJNT6svx9uftB1YbHyoUsy2eNFKEFJaGLpCupsXUVBefCuBjlfs8gs44bzU
dbYi6BgIuICVGFVlgcUX1M9A/y+Sn4lA+vhHpsC+asR/3isbU6xHNGj7jYlUfkCZ
oYru67t3I+yqinhjJ/4eKD3bBMmdNlXt64YYnbeqcjPd46Vysw5i0KdmblFIzdMz
oZ/Zp5uKBMyHHXPjdYuUUHg/nVBde2bCNJPcHwx/gmGKV5PgeB4WeUzxo2Q13fa7
8s/PVdBwN3P0aVrA6ugoY7p4v6vItDHXhMG4AuHLVdbiLsB3ZvyRh4YNawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJSW1hMR6o11++fRN+W2RK9S15cMB8GA1UdIwQY
MBaAFIhL+A5y9Q8Jv1Y0k+vbEaNLujEtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUV2NERuTDFEd21fVmpTVDY5c1JvMHU2TVMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9iMTJlNGQtOGExYS00MDEwLTlhOGIt
MzZmOTg0N2FjMzViLzEvaUV2NERuTDFEd21fVmpTVDY5c1JvMHU2TVMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9iMTJlNGQtOGExYS00MDEwLTlhOGItMzZmOTg0N2FjMzVi
LzEvaUV2NERuTDFEd21fVmpTVDY5c1JvMHU2TVMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZV5Pgem1
4ONXWFzrCTcyaGnE758+HRKhZMmW7piLEspZKLGg/+MUApIkhx7cQDaoOVCOLNbg
06jslxgkT5rJW4IYcGcv27yfvgoUSNlQ1yUqMyh3jNiVDPu5y4Ey4EIA5S+WS2EP
hjrLH9Xf2Is6GzUCBxfoURaP2FwemX28sThG+uV1SkDmyt2/nbSEbEnKV4creYmT
bA1k5Y4kW3DCjyH9JJNez0vygkxc4L9jkVVXK9Orad7FiOzLG9G/zXNemz/fDCnW
VD81iR7+PweAC7mlQmMShNKV2s3A+TY4fH+eII73WMgcUmoQp9PYgb2TLiWci/23
Yx0gwkXcfpEsfQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:56:54 2025 by rpki-client