Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft
File:                     V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft (raw, json)
Hash identifier:          zS0n1QvezWoxvXN84HZRa+D7FjqQnCWP2HBvUiM9XLQ=
Subject key identifier:   51:DA:EA:29:AC:30:81:A3:F7:93:7E:64:1E:5F:EA:E5:A1:F7:97:E1
Authority key identifier: 57:50:24:FA:22:2D:09:F6:ED:99:D0:C8:E6:B7:CE:D1:68:E3:A7:75
Certificate issuer:       /CN=575024fa222d09f6ed99d0c8e6b7ced168e3a775
Certificate serial:       0197B5C48D033EDECDC48F6DF51B91C210D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft
Manifest number:          15BC
Signing time:             Sat 28 Jun 2025 09:00:46 +0000
Manifest this update:     Sat 28 Jun 2025 09:00:46 +0000
Manifest next update:     Sun 29 Jun 2025 09:00:46 +0000
Files and hashes:         1: CmGGaWB9_WmWpyhCzFVUlN7rb6c.roa (hash: wxQvo+G+ZM9xHSY4rXReEADz55sy+G82AZg77QhhlvE=)
                          2: V1Ak-iItCfbtmdDI5rfO0Wjjp3U.crl (hash: nYr9BOVMtjbgAElG6y5dIeCD8DP7bbZkpNy4fC20Ci4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 09:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:c4:8d:03:3e:de:cd:c4:8f:6d:f5:1b:91:c2:10:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=575024fa222d09f6ed99d0c8e6b7ced168e3a775
        Validity
            Not Before: Jun 28 09:00:46 2025 GMT
            Not After : Jun 29 09:00:46 2025 GMT
        Subject: CN=51daea29ac3081a3f7937e641e5feae5a1f797e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d0:c6:1b:cc:08:23:ea:5b:fb:a9:5e:33:55:
                    96:e1:19:6d:f8:6d:90:4f:e9:03:09:3d:d1:0b:e6:
                    82:fb:83:5a:e8:60:0c:ad:43:35:b2:9f:bd:06:29:
                    33:54:35:48:71:f4:31:4e:04:21:db:e4:a3:53:06:
                    dd:86:ab:5c:e2:60:19:81:3e:51:76:08:68:c9:f8:
                    41:df:bf:83:01:df:33:62:13:24:84:ce:56:bb:0e:
                    90:fd:be:6c:bc:3e:75:32:66:05:62:80:20:e4:cf:
                    93:28:03:fc:35:38:e9:19:97:1e:2c:1c:95:f4:d0:
                    de:7d:c5:55:e5:9a:a3:99:55:e8:da:98:a5:b5:11:
                    8d:d2:08:3d:4e:be:89:f1:23:c6:21:13:87:85:f3:
                    11:ae:1d:3c:83:4c:62:db:d6:14:b9:ea:45:c6:96:
                    c3:ab:86:d8:dd:b2:ac:fe:9a:a2:b7:3b:fd:9c:08:
                    63:9d:74:7e:d7:b7:29:03:2a:f5:81:52:9c:ce:5b:
                    3f:05:52:1f:9c:62:66:8a:df:48:6b:7a:a5:1e:19:
                    91:ef:ad:7b:ae:0f:5c:02:76:db:1b:8f:77:9f:89:
                    7b:17:1a:76:88:13:64:0b:70:6d:e3:dd:9b:bd:0e:
                    65:ad:49:69:b1:82:d6:43:68:42:20:cc:56:82:f5:
                    6f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:DA:EA:29:AC:30:81:A3:F7:93:7E:64:1E:5F:EA:E5:A1:F7:97:E1
            X509v3 Authority Key Identifier:
                keyid:57:50:24:FA:22:2D:09:F6:ED:99:D0:C8:E6:B7:CE:D1:68:E3:A7:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:ed:68:9f:b7:ff:cd:eb:f3:1a:f1:e1:64:a6:1d:7d:1b:5a:
         8a:30:4a:e1:16:af:f9:62:3a:e4:4a:26:7d:84:af:f7:a9:0f:
         3e:74:16:b6:53:33:9c:d7:d0:e7:90:bb:1c:ac:ba:24:d7:3b:
         19:eb:b7:72:86:11:2e:4e:ee:6c:56:70:a7:0f:7b:9c:b9:c3:
         58:d1:52:47:59:8a:10:68:a2:96:b6:0b:17:23:3a:70:4d:0b:
         15:dd:bc:ea:17:04:40:71:72:4a:95:55:a6:1e:63:7e:62:4a:
         5c:7c:2a:a7:9d:80:19:37:01:94:1b:14:98:a5:2d:1d:b8:4e:
         8a:49:90:64:af:ac:72:51:f6:02:76:e7:84:9a:46:81:71:46:
         df:49:14:df:6e:e8:80:bd:a6:66:a1:c2:db:54:ac:4a:24:88:
         10:e9:ba:56:9f:ee:d5:12:58:19:60:2d:55:56:be:3c:0c:71:
         7a:97:83:08:2c:ad:a6:62:97:e0:53:3d:3d:e5:7f:63:eb:b8:
         2b:d3:aa:8b:c0:fa:f2:e1:44:71:e6:52:9d:a4:00:f7:f6:30:
         eb:c2:ba:83:81:b0:8e:3b:e3:89:0d:82:bf:52:62:91:3d:e2:
         80:72:c0:c8:3d:02:a7:21:bb:05:f0:74:58:12:4e:63:7c:8c:
         b5:10:cd:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1xI0DPt7NxI9t9RuRwhDRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NTAyNGZhMjIyZDA5ZjZlZDk5ZDBjOGU2YjdjZWQxNjhl
M2E3NzUwHhcNMjUwNjI4MDkwMDQ2WhcNMjUwNjI5MDkwMDQ2WjAzMTEwLwYDVQQD
Eyg1MWRhZWEyOWFjMzA4MWEzZjc5MzdlNjQxZTVmZWFlNWExZjc5N2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9DGG8wII+pb+6leM1WW4Rlt+G2Q
T+kDCT3RC+aC+4Na6GAMrUM1sp+9BikzVDVIcfQxTgQh2+SjUwbdhqtc4mAZgT5R
dghoyfhB37+DAd8zYhMkhM5Wuw6Q/b5svD51MmYFYoAg5M+TKAP8NTjpGZceLByV
9NDefcVV5ZqjmVXo2piltRGN0gg9Tr6J8SPGIROHhfMRrh08g0xi29YUuepFxpbD
q4bY3bKs/pqitzv9nAhjnXR+17cpAyr1gVKczls/BVIfnGJmit9Ia3qlHhmR7617
rg9cAnbbG493n4l7Fxp2iBNkC3Bt492bvQ5lrUlpsYLWQ2hCIMxWgvVvjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHa6imsMIGj95N+ZB5f6uWh95fhMB8GA1UdIwQY
MBaAFFdQJPoiLQn27ZnQyOa3ztFo46d1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjFBay1pSXRDZmJ0bWRESTVyZk8wV2pqcDNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lMTJmNjItYzlhYi00Y2YwLWFlNjAt
ZTY2MTg2YzdhNjg5LzEvVjFBay1pSXRDZmJ0bWRESTVyZk8wV2pqcDNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9lMTJmNjItYzlhYi00Y2YwLWFlNjAtZTY2MTg2YzdhNjg5
LzEvVjFBay1pSXRDZmJ0bWRESTVyZk8wV2pqcDNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApu1on7f/
zevzGvHhZKYdfRtaijBK4Rav+WI65EomfYSv96kPPnQWtlMznNfQ55C7HKy6JNc7
Geu3coYRLk7ubFZwpw97nLnDWNFSR1mKEGiilrYLFyM6cE0LFd286hcEQHFySpVV
ph5jfmJKXHwqp52AGTcBlBsUmKUtHbhOikmQZK+sclH2AnbnhJpGgXFG30kU327o
gL2mZqHC21SsSiSIEOm6Vp/u1RJYGWAtVVa+PAxxepeDCCytpmKX4FM9PeV/Y+u4
K9Oqi8D68uFEceZSnaQA9/Yw68K6g4GwjjvjiQ2Cv1JikT3igHLAyD0CpyG7BfB0
WBJOY3yMtRDNig==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:56 2025 by rpki-client