Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
File:                     zisQ2JtVN5E1AxJ-uHImr7idGy0.mft (raw, json)
Hash identifier:          uqjE3Pq0difH3YcBX4AJe+cfoZr4sRtrEXzit4FrhyI=
Subject key identifier:   5F:97:AE:E3:76:61:A9:41:90:69:2C:4B:AF:9E:1F:D4:A1:8F:3D:23
Authority key identifier: CE:2B:10:D8:9B:55:37:91:35:03:12:7E:B8:72:26:AF:B8:9D:1B:2D
Certificate issuer:       /CN=ce2b10d89b5537913503127eb87226afb89d1b2d
Certificate serial:       0197B745959714AE0452343D71646A5872CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 16:01:20 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:20 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:20 +0000
Files and hashes:         1: puw08h74TtFA6oc3LqSJELivWac.roa (hash: 6izoAc/QEsoM8sPaZbI92YMt+TMYy+EV7r4bwPmo4dA=)
                          2: zisQ2JtVN5E1AxJ-uHImr7idGy0.crl (hash: u2nJJZOcCHp6s/UnZdsSWIuTU5ozeqVcPyoxaWsdZss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:95:97:14:ae:04:52:34:3d:71:64:6a:58:72:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce2b10d89b5537913503127eb87226afb89d1b2d
        Validity
            Not Before: Jun 28 16:01:20 2025 GMT
            Not After : Jun 29 16:01:20 2025 GMT
        Subject: CN=5f97aee37661a94190692c4baf9e1fd4a18f3d23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:93:54:2e:59:d5:ed:c9:9b:97:c0:ec:b1:5c:
                    36:b2:e4:5e:b7:21:9b:48:4d:f3:b4:00:c3:9a:30:
                    fc:3b:4f:bc:a7:87:83:62:5f:ff:42:2f:96:0f:9e:
                    62:54:ac:95:ab:46:90:8c:04:35:28:90:54:cf:72:
                    96:7a:17:3f:4f:cf:7b:e6:ce:cd:1d:44:e8:cc:00:
                    90:29:45:83:b9:0c:8b:cb:7f:75:94:f0:25:36:a2:
                    c3:c7:f1:d5:d4:9b:88:eb:54:14:a3:8c:d9:23:04:
                    51:20:9a:8c:5c:f8:fb:2b:34:8c:5e:a5:4d:b7:01:
                    ba:37:7d:8a:3c:8f:d8:7c:64:64:50:7f:7a:3d:2f:
                    56:6f:29:93:d8:50:7c:70:ff:07:a6:13:7b:04:a5:
                    73:39:ec:7f:d5:80:b2:ab:5d:50:5e:3b:cd:a5:10:
                    70:71:45:d4:97:46:30:98:8c:42:28:e3:8b:94:97:
                    1f:71:3f:02:0d:f7:f9:ee:78:93:f7:ab:b9:01:e2:
                    ef:1e:fa:19:22:ab:12:78:c5:f5:07:0e:f8:f9:60:
                    34:73:e0:86:e3:a2:40:9e:d0:3e:7a:df:35:1c:e2:
                    80:c0:03:6b:05:6a:3d:47:17:b9:c5:e7:c5:64:b5:
                    3c:4d:8f:7f:8a:67:91:65:6d:cd:bc:da:6b:4d:9f:
                    a9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:97:AE:E3:76:61:A9:41:90:69:2C:4B:AF:9E:1F:D4:A1:8F:3D:23
            X509v3 Authority Key Identifier:
                keyid:CE:2B:10:D8:9B:55:37:91:35:03:12:7E:B8:72:26:AF:B8:9D:1B:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:91:41:8b:3e:4c:87:d1:f9:55:6e:f3:3f:f5:24:64:35:67:
         b3:ad:bc:bb:ac:75:23:13:0b:89:bf:a9:c5:34:c5:dc:f7:7c:
         65:25:0e:77:a9:3a:04:fa:07:14:5b:6c:4e:fc:08:17:96:bd:
         22:ce:42:4e:01:8d:99:4a:fb:0b:d7:d5:a1:ef:ba:fd:18:48:
         87:27:bc:cf:32:ee:61:ef:ac:31:b1:09:fd:3a:b2:a8:6c:69:
         29:cb:45:68:f7:a7:66:9c:ce:65:57:e6:ba:7b:39:61:de:a5:
         b8:aa:24:d8:72:b0:4c:21:0d:7f:a2:a7:47:8c:d8:df:02:fe:
         ca:85:60:16:ed:b4:4b:f3:83:53:c9:78:be:14:a6:ad:b6:2b:
         83:4d:e6:3c:fa:a0:e1:2d:4c:69:fb:3c:e6:82:55:3f:6e:e5:
         5b:47:a7:ec:f1:cd:83:08:1b:92:43:f4:f2:41:05:df:d9:43:
         91:10:87:e5:6c:bf:e7:8f:a6:db:a7:66:e0:83:05:ea:13:c4:
         70:98:8d:b2:4d:5c:4b:26:4c:c0:44:56:98:44:e3:2a:2c:90:
         fc:12:56:01:97:c1:41:99:88:52:1d:a1:80:8d:b7:1a:2a:a0:
         df:b1:28:60:a5:e0:0a:59:2f:48:11:b0:ca:fb:84:ed:ec:a5:
         f5:9e:72:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RZWXFK4EUjQ9cWRqWHLLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMmIxMGQ4OWI1NTM3OTEzNTAzMTI3ZWI4NzIyNmFmYjg5
ZDFiMmQwHhcNMjUwNjI4MTYwMTIwWhcNMjUwNjI5MTYwMTIwWjAzMTEwLwYDVQQD
Eyg1Zjk3YWVlMzc2NjFhOTQxOTA2OTJjNGJhZjllMWZkNGExOGYzZDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypNULlnV7cmbl8DssVw2suRetyGb
SE3ztADDmjD8O0+8p4eDYl//Qi+WD55iVKyVq0aQjAQ1KJBUz3KWehc/T8975s7N
HUTozACQKUWDuQyLy391lPAlNqLDx/HV1JuI61QUo4zZIwRRIJqMXPj7KzSMXqVN
twG6N32KPI/YfGRkUH96PS9WbymT2FB8cP8HphN7BKVzOex/1YCyq11QXjvNpRBw
cUXUl0YwmIxCKOOLlJcfcT8CDff57niT96u5AeLvHvoZIqsSeMX1Bw74+WA0c+CG
46JAntA+et81HOKAwANrBWo9Rxe5xefFZLU8TY9/imeRZW3NvNprTZ+p1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+XruN2YalBkGksS6+eH9Shjz0jMB8GA1UdIwQY
MBaAFM4rENibVTeRNQMSfrhyJq+4nRstMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemlzUTJKdFZONUUxQXhKLXVISW1yN2lkR3kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9kM2IyNjMtYjBmMS00YTZiLTkxMmUt
MzczZGRhNDNmNzkyLzEvemlzUTJKdFZONUUxQXhKLXVISW1yN2lkR3kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9kM2IyNjMtYjBmMS00YTZiLTkxMmUtMzczZGRhNDNmNzky
LzEvemlzUTJKdFZONUUxQXhKLXVISW1yN2lkR3kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc5FBiz5M
h9H5VW7zP/UkZDVns628u6x1IxMLib+pxTTF3Pd8ZSUOd6k6BPoHFFtsTvwIF5a9
Is5CTgGNmUr7C9fVoe+6/RhIhye8zzLuYe+sMbEJ/TqyqGxpKctFaPenZpzOZVfm
uns5Yd6luKok2HKwTCENf6KnR4zY3wL+yoVgFu20S/ODU8l4vhSmrbYrg03mPPqg
4S1Mafs85oJVP27lW0en7PHNgwgbkkP08kEF39lDkRCH5Wy/54+m26dm4IMF6hPE
cJiNsk1cSyZMwERWmETjKiyQ/BJWAZfBQZmIUh2hgI23Giqg37EoYKXgClkvSBGw
yvuE7eyl9Z5yaA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:40:20 2025 by rpki-client