Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
File:                     ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft (raw, json)
Hash identifier:          bpxHX4vaKEomG+m18e3ME4bWS+XYA/CnqHT8qnQfmFg=
Subject key identifier:   B4:F3:4C:0F:10:3A:DC:0F:F9:A9:55:79:0C:E6:CF:51:7B:ED:AE:33
Authority key identifier: 20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04
Certificate issuer:       /CN=20b5100e798fab7577bf725ac9569ea80e6c2a04
Certificate serial:       0197B745569B0FDAEBC41ADCFEA15B6DAB6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
Manifest number:          0A46
Signing time:             Sat 28 Jun 2025 16:01:03 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:03 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:03 +0000
Files and hashes:         1: 0WfJoxMemQt8nwlwlbf0-N5ZBgI.roa (hash: lHb75yOft9Kv2xRvC1d+Vx96c+J/4+jIL8gOSIRqeFs=)
                          2: 5RlzUCtoZ32Oa93A2fEfoYArcWM.roa (hash: iA8YpgMYI54//mfKtXnw0NA6/nJYpojDOe0q+RA30ZU=)
                          3: ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl (hash: o7GH4Rrh+Wj+JI80MgI8IiV+Tv0V9yp+djtC1kuvwoU=)
                          4: zmJ9lE5vi4Jqc9Z9iVsq8OjO3sw.roa (hash: b4eeLp19myrQzh9AuX2bzcABMyXzCxCR666FaiLOLYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:56:9b:0f:da:eb:c4:1a:dc:fe:a1:5b:6d:ab:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20b5100e798fab7577bf725ac9569ea80e6c2a04
        Validity
            Not Before: Jun 28 16:01:03 2025 GMT
            Not After : Jun 29 16:01:03 2025 GMT
        Subject: CN=b4f34c0f103adc0ff9a955790ce6cf517bedae33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c1:99:3b:21:c5:dc:14:4f:0d:11:8e:e7:34:
                    79:91:47:48:4b:99:60:bd:a6:0a:56:fe:0b:fb:87:
                    0a:bb:f0:91:88:57:07:8f:db:63:24:27:6e:8d:bb:
                    3d:03:76:7c:89:6d:1f:51:da:98:bc:bf:07:e6:d4:
                    49:ae:be:81:02:3f:60:75:46:85:71:f5:df:b4:9a:
                    60:11:78:a9:56:6d:98:63:83:e2:3c:d7:5d:3a:31:
                    69:ef:e6:eb:6d:df:a3:b6:bf:30:18:6b:25:9e:0c:
                    ed:65:8a:c3:38:de:c5:f0:2a:9d:d2:b7:65:00:c7:
                    92:66:52:09:6e:bd:39:51:de:87:43:fb:1f:10:5e:
                    09:ba:67:24:a0:a7:82:c0:a3:82:51:aa:26:7c:08:
                    2d:f6:f2:db:e8:ad:e1:0d:a5:8b:a9:08:71:2e:ec:
                    98:68:31:ad:31:c5:10:80:2a:7e:54:93:8a:e3:83:
                    7f:77:4f:04:bf:c3:94:9f:9f:8a:44:cd:bd:3e:cc:
                    fe:6f:69:54:cc:67:29:68:10:56:d7:40:a0:83:b7:
                    1a:5d:c7:73:7a:9f:93:bb:e0:b1:92:a1:2f:41:15:
                    7b:21:90:6a:4e:9d:a4:04:8c:d1:3c:c1:78:6a:57:
                    4a:c8:08:5e:89:61:76:28:89:a5:7b:b9:46:de:af:
                    1d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F3:4C:0F:10:3A:DC:0F:F9:A9:55:79:0C:E6:CF:51:7B:ED:AE:33
            X509v3 Authority Key Identifier:
                keyid:20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:b7:27:36:1f:2c:68:38:89:b2:8a:dd:a7:ac:dd:e4:6a:44:
         87:6e:46:63:7a:df:7d:52:6c:d3:27:98:7e:e4:a4:c5:04:6f:
         77:e1:12:5c:43:94:64:d8:e4:ee:b1:50:63:e5:dc:4e:40:db:
         ab:3c:de:17:59:68:bb:90:d5:c9:9b:36:2d:7c:9f:71:c1:91:
         52:74:a7:43:b6:e6:b9:b6:9b:e5:d4:48:d5:a4:27:8b:f9:ac:
         5e:0c:0f:76:2d:d4:07:ad:2a:34:6d:50:ef:dd:89:fc:05:00:
         ea:14:f2:25:cd:88:b2:f9:16:1b:e1:07:6d:8b:c2:4c:15:0f:
         28:32:ca:45:58:d3:fa:bf:80:69:dc:e9:4a:3c:ff:f6:c9:b8:
         97:f4:7f:6c:ae:2a:b5:95:ee:76:d8:3a:7c:fc:08:b4:ad:62:
         6b:c7:c8:30:70:fd:2b:d2:1f:f4:14:41:e1:3b:25:dd:38:ad:
         ee:6f:0d:ce:60:b4:ba:6a:1a:a0:08:28:24:2b:ed:b4:77:44:
         93:7a:fc:18:4f:15:02:bd:6a:3d:f4:fd:07:8a:8e:dc:f5:c4:
         62:79:68:75:ae:bd:d1:8f:9c:66:7e:9c:e0:2e:c7:3c:b5:0a:
         10:a1:df:c7:ef:5f:6a:34:a6:24:dc:a0:ee:e0:b9:e6:b6:b3:
         7f:80:05:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RVabD9rrxBrc/qFbbatsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYjUxMDBlNzk4ZmFiNzU3N2JmNzI1YWM5NTY5ZWE4MGU2
YzJhMDQwHhcNMjUwNjI4MTYwMTAzWhcNMjUwNjI5MTYwMTAzWjAzMTEwLwYDVQQD
EyhiNGYzNGMwZjEwM2FkYzBmZjlhOTU1NzkwY2U2Y2Y1MTdiZWRhZTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysGZOyHF3BRPDRGO5zR5kUdIS5lg
vaYKVv4L+4cKu/CRiFcHj9tjJCdujbs9A3Z8iW0fUdqYvL8H5tRJrr6BAj9gdUaF
cfXftJpgEXipVm2YY4PiPNddOjFp7+brbd+jtr8wGGslngztZYrDON7F8Cqd0rdl
AMeSZlIJbr05Ud6HQ/sfEF4JumckoKeCwKOCUaomfAgt9vLb6K3hDaWLqQhxLuyY
aDGtMcUQgCp+VJOK44N/d08Ev8OUn5+KRM29Psz+b2lUzGcpaBBW10Cgg7caXcdz
ep+Tu+CxkqEvQRV7IZBqTp2kBIzRPMF4aldKyAheiWF2KImle7lG3q8dzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTzTA8QOtwP+alVeQzmz1F77a4zMB8GA1UdIwQY
MBaAFCC1EA55j6t1d79yWslWnqgObCoEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUxVUURubVBxM1YzdjNKYXlWYWVxQTVzS2dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS85ZTQ5ZmYtNDI2NC00NjQ3LTk1YTQt
ODAzNzk2NTY5M2EyLzEvSUxVUURubVBxM1YzdjNKYXlWYWVxQTVzS2dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS85ZTQ5ZmYtNDI2NC00NjQ3LTk1YTQtODAzNzk2NTY5M2Ey
LzEvSUxVUURubVBxM1YzdjNKYXlWYWVxQTVzS2dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASbcnNh8s
aDiJsordp6zd5GpEh25GY3rffVJs0yeYfuSkxQRvd+ESXEOUZNjk7rFQY+XcTkDb
qzzeF1lou5DVyZs2LXyfccGRUnSnQ7bmubab5dRI1aQni/msXgwPdi3UB60qNG1Q
792J/AUA6hTyJc2IsvkWG+EHbYvCTBUPKDLKRVjT+r+AadzpSjz/9sm4l/R/bK4q
tZXudtg6fPwItK1ia8fIMHD9K9If9BRB4Tsl3Tit7m8NzmC0umoaoAgoJCvttHdE
k3r8GE8VAr1qPfT9B4qO3PXEYnloda690Y+cZn6c4C7HPLUKEKHfx+9fajSmJNyg
7uC55razf4AFHg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:36:00 2025 by rpki-client