Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft
File:                     aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft (raw, json)
Hash identifier:          xCKulJNTOqgKOdRguJB7A3dUpg4AYYSzxIPM/P3u7eg=
Subject key identifier:   B1:D8:D8:1B:0E:16:42:C6:E1:9D:B5:FA:7E:65:C8:9A:D7:E5:AB:AD
Authority key identifier: 69:E0:1C:C8:F8:E6:E5:EC:75:09:60:D9:A7:04:51:0D:FF:95:72:F7
Certificate issuer:       /CN=69e01cc8f8e6e5ec750960d9a704510dff9572f7
Certificate serial:       0197B6A23C7935E3BDDFD0F520CF1A73475B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft
Manifest number:          14B3
Signing time:             Sat 28 Jun 2025 13:02:54 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:54 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:54 +0000
Files and hashes:         1: ARb5ZPDad5FfTT7dZ8xHZ7gMy6A.roa (hash: 8snm/YmhdjNlAruJqhnmmmr90GFSb4amikZSdNm3KvA=)
                          2: aeAcyPjm5ex1CWDZpwRRDf-Vcvc.crl (hash: zifZYZXeVmi8gDr8Ttxy7T4ndrlbpCNz5xNK1R48eb8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a2:3c:79:35:e3:bd:df:d0:f5:20:cf:1a:73:47:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69e01cc8f8e6e5ec750960d9a704510dff9572f7
        Validity
            Not Before: Jun 28 13:02:54 2025 GMT
            Not After : Jun 29 13:02:54 2025 GMT
        Subject: CN=b1d8d81b0e1642c6e19db5fa7e65c89ad7e5abad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:da:8e:50:1d:cf:88:e1:b5:7a:00:ca:2c:17:
                    e9:02:09:2a:6f:27:02:8a:58:56:fc:e9:39:d0:60:
                    61:bf:ab:51:14:3d:6a:fc:82:3a:e3:cd:eb:f2:1c:
                    e2:07:86:31:13:1b:1c:65:b9:f5:fa:95:39:a9:be:
                    cb:39:0b:cf:43:33:06:1f:a4:ab:67:e6:38:65:90:
                    bf:2a:6c:3a:59:20:a7:c2:1b:56:c5:f3:21:f9:04:
                    a1:2c:12:e0:82:14:ec:e0:72:15:4c:cd:e9:d0:e1:
                    d0:2f:51:cf:39:a7:7e:54:1f:6e:8b:60:98:de:35:
                    8b:e6:36:a7:35:be:30:e1:d6:ef:50:d6:9c:33:d5:
                    c2:6b:c8:29:54:2a:d9:ad:94:20:83:26:a1:05:0f:
                    83:85:ce:22:d7:71:fd:7a:57:bc:fc:6d:36:20:d5:
                    f4:1a:46:a2:68:52:10:6f:33:6f:ae:60:bf:d7:66:
                    13:18:63:62:3e:bc:c6:33:af:fc:b1:d7:94:d1:df:
                    aa:eb:08:ee:c1:d5:bf:92:3d:92:a3:3e:68:0c:a3:
                    d8:59:de:56:12:ec:fe:9c:24:71:d1:1a:2a:0c:8d:
                    de:86:9e:b7:2c:58:0e:60:2b:f1:b1:61:4a:c1:68:
                    8e:bc:9d:8f:2c:a3:e9:54:88:35:76:7f:99:cd:b6:
                    de:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D8:D8:1B:0E:16:42:C6:E1:9D:B5:FA:7E:65:C8:9A:D7:E5:AB:AD
            X509v3 Authority Key Identifier:
                keyid:69:E0:1C:C8:F8:E6:E5:EC:75:09:60:D9:A7:04:51:0D:FF:95:72:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:17:92:04:53:91:68:eb:33:13:4a:5a:b1:97:12:d3:9b:d8:
         71:4b:7f:9b:6b:86:16:eb:d0:da:2d:29:de:e5:34:0c:b9:d7:
         fb:b4:49:05:b2:55:94:4f:9c:95:77:20:d3:02:7d:4a:89:09:
         db:8a:31:88:a6:2a:b9:4f:70:50:61:b5:b8:e9:58:06:24:46:
         cb:65:d2:9f:25:fa:48:b8:83:9a:b8:d7:90:4d:97:01:93:86:
         49:0a:90:1e:7c:c1:3f:e1:cb:db:e2:13:83:b3:f3:a9:83:41:
         87:3e:13:c8:8f:a2:d3:45:13:b5:60:42:d1:d8:a8:c6:9e:3c:
         3e:bc:ec:12:2a:c8:e9:5d:a7:49:2f:f3:dd:11:fc:73:05:f5:
         a0:13:60:74:39:fa:14:0a:e5:17:2d:3f:44:ef:11:43:63:9d:
         5b:bc:e0:45:c9:c9:c8:fc:6d:53:f1:62:6f:b5:70:9b:08:ef:
         c5:cc:4b:26:73:46:48:5a:2e:ac:7e:50:98:3e:c7:51:92:1b:
         2c:5f:39:2d:7c:01:09:c8:2b:76:5f:fb:10:e9:ac:d5:02:a9:
         80:2e:d6:09:68:3e:7f:02:e0:cd:1d:bd:c3:bc:c5:c8:6d:03:
         d1:ae:0f:66:90:4f:ec:f9:ad:c4:1d:ca:03:ea:d2:2e:81:56:
         fa:30:0e:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2ojx5NeO939D1IM8ac0dbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZTAxY2M4ZjhlNmU1ZWM3NTA5NjBkOWE3MDQ1MTBkZmY5
NTcyZjcwHhcNMjUwNjI4MTMwMjU0WhcNMjUwNjI5MTMwMjU0WjAzMTEwLwYDVQQD
EyhiMWQ4ZDgxYjBlMTY0MmM2ZTE5ZGI1ZmE3ZTY1Yzg5YWQ3ZTVhYmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdqOUB3PiOG1egDKLBfpAgkqbycC
ilhW/Ok50GBhv6tRFD1q/II6483r8hziB4YxExscZbn1+pU5qb7LOQvPQzMGH6Sr
Z+Y4ZZC/Kmw6WSCnwhtWxfMh+QShLBLgghTs4HIVTM3p0OHQL1HPOad+VB9ui2CY
3jWL5janNb4w4dbvUNacM9XCa8gpVCrZrZQggyahBQ+Dhc4i13H9ele8/G02INX0
GkaiaFIQbzNvrmC/12YTGGNiPrzGM6/8sdeU0d+q6wjuwdW/kj2Soz5oDKPYWd5W
Euz+nCRx0RoqDI3ehp63LFgOYCvxsWFKwWiOvJ2PLKPpVIg1dn+ZzbbeKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLHY2BsOFkLG4Z21+n5lyJrX5autMB8GA1UdIwQY
MBaAFGngHMj45uXsdQlg2acEUQ3/lXL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWVBY3lQam01ZXgxQ1dEWnB3UlJEZi1WY3ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC83NDRlZWItZTA2NC00ZmVmLTllOTAt
NTY4NmQ0MzEzNTk1LzEvYWVBY3lQam01ZXgxQ1dEWnB3UlJEZi1WY3ZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC83NDRlZWItZTA2NC00ZmVmLTllOTAtNTY4NmQ0MzEzNTk1
LzEvYWVBY3lQam01ZXgxQ1dEWnB3UlJEZi1WY3ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbheSBFOR
aOszE0pasZcS05vYcUt/m2uGFuvQ2i0p3uU0DLnX+7RJBbJVlE+clXcg0wJ9SokJ
24oxiKYquU9wUGG1uOlYBiRGy2XSnyX6SLiDmrjXkE2XAZOGSQqQHnzBP+HL2+IT
g7PzqYNBhz4TyI+i00UTtWBC0dioxp48PrzsEirI6V2nSS/z3RH8cwX1oBNgdDn6
FArlFy0/RO8RQ2OdW7zgRcnJyPxtU/Fib7VwmwjvxcxLJnNGSFourH5QmD7HUZIb
LF85LXwBCcgrdl/7EOms1QKpgC7WCWg+fwLgzR29w7zFyG0D0a4PZpBP7PmtxB3K
A+rSLoFW+jAOEg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:28:59 2025 by rpki-client