Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft
File:                     B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft (raw, json)
Hash identifier:          MvfQpOopkFUe+kUSEUBReA+vzGbeHW2Nz280uiHui60=
Subject key identifier:   86:32:AD:47:04:23:0A:F2:F7:B5:F9:22:7E:46:D0:25:C3:DD:6B:FE
Authority key identifier: 07:73:08:62:DF:B7:40:16:6D:F4:53:FB:6E:9C:85:08:AF:5D:9C:56
Certificate issuer:       /CN=07730862dfb740166df453fb6e9c8508af5d9c56
Certificate serial:       01984219BF0F5591B0F1D61F81D36A383E42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B3MIYt-3QBZt9FP7bpyFCK9dnFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft
Manifest number:          13AF
Signing time:             Fri 25 Jul 2025 15:00:40 +0000
Manifest this update:     Fri 25 Jul 2025 15:00:40 +0000
Manifest next update:     Sat 26 Jul 2025 15:00:40 +0000
Files and hashes:         1: B3MIYt-3QBZt9FP7bpyFCK9dnFY.crl (hash: cCJzQj32DVUek687iGv4/zMuCF0jcFIBlPMsU19BYGk=)
                          2: z09mXVSXSd7UAacEzfV20oFsmYY.roa (hash: 1yRcdJ+SBO6uBICs/lRiYWbJ7McXCDERo9p2CuxM7s0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B3MIYt-3QBZt9FP7bpyFCK9dnFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 15:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:42:19:bf:0f:55:91:b0:f1:d6:1f:81:d3:6a:38:3e:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07730862dfb740166df453fb6e9c8508af5d9c56
        Validity
            Not Before: Jul 25 15:00:40 2025 GMT
            Not After : Jul 26 15:00:40 2025 GMT
        Subject: CN=8632ad4704230af2f7b5f9227e46d025c3dd6bfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:23:95:48:cc:bf:f6:ef:be:20:ad:b1:2b:a0:
                    e5:0d:6e:64:55:c4:fc:fa:90:21:80:79:d8:27:dc:
                    8b:42:14:a4:de:b8:f0:4e:46:78:d8:c9:b4:f9:56:
                    49:e8:12:dc:bc:4f:96:7a:ae:62:df:60:e0:0b:c8:
                    dc:85:81:4b:18:53:07:ea:d4:55:f2:32:40:ea:c0:
                    fb:53:eb:19:42:e9:ff:15:36:05:df:fc:cc:2f:75:
                    89:ce:a6:2d:ce:e9:3f:ac:e6:7d:ce:cc:da:7d:e2:
                    0a:86:88:6a:e6:9c:98:e0:35:23:7b:b5:03:39:ab:
                    c8:a8:8f:04:de:05:26:70:0b:b6:10:b9:31:a2:dc:
                    6a:ad:16:17:20:52:ee:ba:25:67:45:9f:bf:95:13:
                    44:c5:82:a9:28:8c:33:31:ba:d9:39:e8:6c:e0:f1:
                    a9:40:01:00:d1:44:37:86:42:7a:db:32:2a:c3:f7:
                    cf:5f:28:0c:de:10:77:cc:ce:3a:43:ff:16:ae:1c:
                    18:50:1d:70:b0:e6:02:44:e5:7c:d0:f0:20:4c:d0:
                    b9:58:71:0d:d7:68:0e:14:fd:15:9e:e4:c4:33:8e:
                    fe:95:0e:18:e3:85:ec:ef:a8:04:7e:50:37:2b:8b:
                    fd:10:8f:0f:2d:59:0a:45:d9:fb:8c:38:82:27:12:
                    19:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:32:AD:47:04:23:0A:F2:F7:B5:F9:22:7E:46:D0:25:C3:DD:6B:FE
            X509v3 Authority Key Identifier:
                keyid:07:73:08:62:DF:B7:40:16:6D:F4:53:FB:6E:9C:85:08:AF:5D:9C:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3MIYt-3QBZt9FP7bpyFCK9dnFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:a3:80:d2:da:43:d7:35:90:b0:0e:b6:e2:43:b5:27:76:69:
         2f:3f:66:e2:26:d8:7d:e8:b2:92:d9:14:4d:39:94:51:39:42:
         ff:0e:7d:55:43:24:9e:73:f5:81:fe:0d:9d:10:29:77:fe:f8:
         52:57:df:39:32:21:2f:17:97:c2:90:83:48:dc:87:1b:81:63:
         b2:8e:13:1a:6e:a4:26:03:42:c0:34:99:e5:91:01:7b:7a:38:
         ad:3f:41:aa:c3:8d:02:3c:e2:aa:43:77:4d:87:b1:b9:b7:cf:
         cc:d1:0c:09:1e:07:e0:4b:8f:c4:70:2a:59:cb:67:61:b5:9b:
         f3:e4:9c:b0:30:d6:85:57:f5:23:a5:f3:c1:4f:3c:c2:d8:c7:
         61:33:1d:65:ac:b3:3a:e8:07:1c:c3:7b:a0:8d:88:c4:5c:48:
         b9:f4:63:22:76:c8:31:51:8f:78:81:8f:60:7f:f2:95:4b:b3:
         e4:26:3a:c1:00:d9:ac:00:ef:6e:30:41:9e:f7:22:89:80:a4:
         f3:af:3c:84:0e:e6:1e:a7:8e:fe:b8:16:b2:af:cb:20:cf:dd:
         c6:6c:50:2e:73:94:a3:30:b5:54:e2:af:b1:6a:94:73:57:6a:
         28:4d:ec:f4:6b:bc:af:ee:4d:7a:5b:64:b2:39:7b:ac:40:64:
         4e:10:7f:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhCGb8PVZGw8dYfgdNqOD5CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NzMwODYyZGZiNzQwMTY2ZGY0NTNmYjZlOWM4NTA4YWY1
ZDljNTYwHhcNMjUwNzI1MTUwMDQwWhcNMjUwNzI2MTUwMDQwWjAzMTEwLwYDVQQD
Eyg4NjMyYWQ0NzA0MjMwYWYyZjdiNWY5MjI3ZTQ2ZDAyNWMzZGQ2YmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SOVSMy/9u++IK2xK6DlDW5kVcT8
+pAhgHnYJ9yLQhSk3rjwTkZ42Mm0+VZJ6BLcvE+Weq5i32DgC8jchYFLGFMH6tRV
8jJA6sD7U+sZQun/FTYF3/zML3WJzqYtzuk/rOZ9zszafeIKhohq5pyY4DUje7UD
OavIqI8E3gUmcAu2ELkxotxqrRYXIFLuuiVnRZ+/lRNExYKpKIwzMbrZOehs4PGp
QAEA0UQ3hkJ62zIqw/fPXygM3hB3zM46Q/8WrhwYUB1wsOYCROV80PAgTNC5WHEN
12gOFP0VnuTEM47+lQ4Y44Xs76gEflA3K4v9EI8PLVkKRdn7jDiCJxIZjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYyrUcEIwry97X5In5G0CXD3Wv+MB8GA1UdIwQY
MBaAFAdzCGLft0AWbfRT+26chQivXZxWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjNNSVl0LTNRQlp0OUZQN2JweUZDSzlkbkZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi81YzA2YzMtYjQ0Zi00YmU5LThiMmUt
NWVlYmUzNTM1MmU4LzEvQjNNSVl0LTNRQlp0OUZQN2JweUZDSzlkbkZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi81YzA2YzMtYjQ0Zi00YmU5LThiMmUtNWVlYmUzNTM1MmU4
LzEvQjNNSVl0LTNRQlp0OUZQN2JweUZDSzlkbkZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI6OA0tpD
1zWQsA624kO1J3ZpLz9m4ibYfeiyktkUTTmUUTlC/w59VUMknnP1gf4NnRApd/74
UlffOTIhLxeXwpCDSNyHG4Fjso4TGm6kJgNCwDSZ5ZEBe3o4rT9BqsONAjziqkN3
TYexubfPzNEMCR4H4EuPxHAqWctnYbWb8+ScsDDWhVf1I6XzwU88wtjHYTMdZayz
OugHHMN7oI2IxFxIufRjInbIMVGPeIGPYH/ylUuz5CY6wQDZrADvbjBBnvciiYCk
8688hA7mHqeO/rgWsq/LIM/dxmxQLnOUozC1VOKvsWqUc1dqKE3s9Gu8r+5Neltk
sjl7rEBkThB/Jw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:22:16 2025 by rpki-client