Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
File:                     3B_QB9_6UI8wBj--TVOisuHoxN4.mft (raw, json)
Hash identifier:          8CDo+GcgGpWRvZ+EFQNGzG0/G0fi3mmnoQDPoGNbges=
Subject key identifier:   46:FC:AD:B3:BA:DF:50:D5:CE:B4:B8:EA:53:9B:87:15:35:83:D1:31
Authority key identifier: DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE
Certificate issuer:       /CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
Certificate serial:       0197B70EB78B0F26CD35B1990A808C5B54F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
Manifest number:          15B7
Signing time:             Sat 28 Jun 2025 15:01:24 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:24 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:24 +0000
Files and hashes:         1: 3B_QB9_6UI8wBj--TVOisuHoxN4.crl (hash: K4Conv4qLgKeiG/vrhcTbqLYQiOQNdJJ5uL+CaARil4=)
                          2: 7qgaiTo5W1muFdP6MpWa1opzbS0.roa (hash: oB/3LoyawIAIuZTlw98KM6WEQJoxwvB9mX5CJlG5Qkc=)
                          3: 85dcB4vHUu_Vy4eqlKOzrmW4Olg.roa (hash: d3YRcy8kGOgyIH2+yoyF6a5JQlRH1WTLZygkMizzc7U=)
                          4: 8ev_3ecaOE9Xy6P1NIXqcQLzweI.roa (hash: Zj+FSqlWF1bKg6ErvNytlDkNslmJzZbU8Tq384TdAl4=)
                          5: LRmAFx6q6erwroYFlG8E6BiVohg.roa (hash: bRtBOx3Fb0WsS33nQsn4XTP0KNTUlQXCLuBYDXQSf/k=)
                          6: onA5Qj1rH9MGyVQYHgNFggbjtjI.roa (hash: KWPiO4cF+XLCzdYsua/SReatJ6Kfy0LyhbM0N7V5zn8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:b7:8b:0f:26:cd:35:b1:99:0a:80:8c:5b:54:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
        Validity
            Not Before: Jun 28 15:01:24 2025 GMT
            Not After : Jun 29 15:01:24 2025 GMT
        Subject: CN=46fcadb3badf50d5ceb4b8ea539b87153583d131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:be:13:42:80:9d:f9:ef:d6:85:44:1d:e4:97:
                    84:a7:58:c5:f6:4d:7e:c0:94:e4:e6:e7:b6:82:82:
                    a0:e4:74:2c:1b:77:01:0c:f5:ee:61:08:f4:f1:97:
                    e5:47:85:48:f1:1c:89:e6:43:d0:65:3b:79:dd:c8:
                    7c:b1:3f:65:7e:c7:83:04:d3:cb:18:3f:64:b5:8f:
                    65:5e:bc:75:eb:66:99:dc:39:19:13:d0:2a:3a:4c:
                    47:51:f3:1f:47:ae:dc:ba:e4:20:a3:e0:f6:48:fe:
                    ee:e2:04:b9:b7:92:a5:ba:20:de:da:29:2e:48:4e:
                    ba:ea:64:e4:67:88:46:ae:dc:25:9b:e0:9e:b6:02:
                    68:57:e4:96:22:c8:95:d4:ed:e9:6a:71:f4:2e:90:
                    14:22:7c:54:50:0e:02:b1:b0:fd:e7:a6:14:61:d4:
                    ff:eb:91:81:39:7b:18:b1:18:d7:8f:20:01:5f:b2:
                    7e:9a:22:94:ff:91:47:10:16:2b:2d:81:36:e8:05:
                    95:2a:36:12:83:57:63:37:37:5f:bf:20:01:b6:a3:
                    87:18:2d:6e:13:a4:4b:4d:ca:7f:16:72:de:6c:90:
                    30:64:54:56:04:22:4e:16:0a:76:cb:fe:bf:38:ad:
                    71:97:42:71:28:8b:be:ee:55:d4:1b:e0:90:0c:c8:
                    c9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:FC:AD:B3:BA:DF:50:D5:CE:B4:B8:EA:53:9B:87:15:35:83:D1:31
            X509v3 Authority Key Identifier:
                keyid:DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:77:ff:36:bf:6e:c9:84:1e:a8:b6:94:e1:fe:1a:66:bc:d5:
         07:bf:cc:a4:c0:f4:17:e0:94:b5:1f:a9:a7:2a:e4:fb:46:76:
         1e:f3:81:9e:e9:e7:16:a8:7c:d9:ec:0d:c7:ef:5a:d5:63:c2:
         9d:2a:45:21:7d:a7:5e:11:63:4e:89:5e:6e:24:31:11:b3:83:
         d3:f1:7f:47:e6:a4:4d:64:bb:01:50:9b:4e:ea:60:e1:17:25:
         be:6d:be:1c:1e:aa:3d:06:14:e5:82:c1:e2:2e:1c:c0:95:ab:
         e4:48:a2:39:42:95:6b:64:76:e8:63:0c:6b:86:ae:9e:2f:2c:
         15:33:48:94:dc:75:bd:8c:d3:3a:ac:c9:8a:8e:e8:bf:fa:43:
         9f:5e:15:43:5b:49:b5:59:a4:30:b2:1e:7b:23:81:7e:13:09:
         6b:e3:97:8c:97:a8:e1:01:4a:71:8b:db:c3:7b:5d:07:1a:81:
         4f:3c:06:c7:11:3c:94:17:5b:20:d0:4b:7c:ab:fb:13:1a:24:
         8a:f0:c7:dc:e0:c0:da:69:63:5b:7f:0d:7e:11:88:10:ac:dc:
         c0:66:1c:d9:9e:d7:43:94:c4:6e:0a:df:eb:e9:b3:4c:7d:53:
         9d:7a:09:3c:82:06:7b:eb:23:c3:13:bf:27:6c:89:6f:47:1a:
         ca:33:58:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DreLDybNNbGZCoCMW1T5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMWZkMDA3ZGZmYTUwOGYzMDA2M2ZiZTRkNTNhMmIyZTFl
OGM0ZGUwHhcNMjUwNjI4MTUwMTI0WhcNMjUwNjI5MTUwMTI0WjAzMTEwLwYDVQQD
Eyg0NmZjYWRiM2JhZGY1MGQ1Y2ViNGI4ZWE1MzliODcxNTM1ODNkMTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhL4TQoCd+e/WhUQd5JeEp1jF9k1+
wJTk5ue2goKg5HQsG3cBDPXuYQj08ZflR4VI8RyJ5kPQZTt53ch8sT9lfseDBNPL
GD9ktY9lXrx162aZ3DkZE9AqOkxHUfMfR67cuuQgo+D2SP7u4gS5t5KluiDe2iku
SE666mTkZ4hGrtwlm+CetgJoV+SWIsiV1O3panH0LpAUInxUUA4CsbD956YUYdT/
65GBOXsYsRjXjyABX7J+miKU/5FHEBYrLYE26AWVKjYSg1djNzdfvyABtqOHGC1u
E6RLTcp/FnLebJAwZFRWBCJOFgp2y/6/OK1xl0JxKIu+7lXUG+CQDMjJywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEb8rbO631DVzrS46lObhxU1g9ExMB8GA1UdIwQY
MBaAFNwf0Aff+lCPMAY/vk1TorLh6MTeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0JfUUI5XzZVSTh3QmotLVRWT2lzdUhveE40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8wNzUzNzctZTQyNi00OTJmLWE1OWMt
YWU0Yzk1Yzk0MDA1LzEvM0JfUUI5XzZVSTh3QmotLVRWT2lzdUhveE40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8wNzUzNzctZTQyNi00OTJmLWE1OWMtYWU0Yzk1Yzk0MDA1
LzEvM0JfUUI5XzZVSTh3QmotLVRWT2lzdUhveE40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASHf/Nr9u
yYQeqLaU4f4aZrzVB7/MpMD0F+CUtR+ppyrk+0Z2HvOBnunnFqh82ewNx+9a1WPC
nSpFIX2nXhFjTolebiQxEbOD0/F/R+akTWS7AVCbTupg4Rclvm2+HB6qPQYU5YLB
4i4cwJWr5EiiOUKVa2R26GMMa4auni8sFTNIlNx1vYzTOqzJio7ov/pDn14VQ1tJ
tVmkMLIeeyOBfhMJa+OXjJeo4QFKcYvbw3tdBxqBTzwGxxE8lBdbINBLfKv7Exok
ivDH3ODA2mljW38NfhGIEKzcwGYc2Z7XQ5TEbgrf6+mzTH1TnXoJPIIGe+sjwxO/
J2yJb0cayjNYew==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:14 2025 by rpki-client