Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
File:                     sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft (raw, json)
Hash identifier:          Ln3zK5YIGN6Nhin/OSp2ps2MnvcEAGuxJH6/n4a6C20=
Subject key identifier:   15:AD:7A:19:79:54:D4:03:80:F1:64:1B:49:6D:53:C5:06:03:1B:E3
Authority key identifier: B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
Certificate issuer:       /CN=b1cdc26d44eaf85654481e9581043e14887765b4
Certificate serial:       01974BC40551C0B61AFA94059AEA49B20746
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
Manifest number:          10D6
Signing time:             Sat 07 Jun 2025 19:00:26 +0000
Manifest this update:     Sat 07 Jun 2025 19:00:26 +0000
Manifest next update:     Sun 08 Jun 2025 19:00:26 +0000
Files and hashes:         1: G1Dy1jIdJhnPg1RR07SyKW4TRdA.roa (hash: DeuawucuklWfQxVupMFlWsFVrFr6ThqGmaVCsW6hwCg=)
                          2: MRwWdWt562qFAJPbbIblGOiEamc.roa (hash: HBxjXaaWOR1gt1kLDIaGluOQUgmhyXoAYpcX/2J2fWA=)
                          3: nzP88bjh-XEZ2kCW3oiiu2uSEHc.roa (hash: Kf5r0P3IvTLCYpsr+vk6c4IGLFB/DHZsFGgImWavBWE=)
                          4: sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl (hash: FlbuyksnRz5twal4vATBfKbbdpJeDdTlrkn5PTOdg6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:c4:05:51:c0:b6:1a:fa:94:05:9a:ea:49:b2:07:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1cdc26d44eaf85654481e9581043e14887765b4
        Validity
            Not Before: Jun  7 19:00:26 2025 GMT
            Not After : Jun  8 19:00:26 2025 GMT
        Subject: CN=15ad7a197954d40380f1641b496d53c506031be3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:25:36:cb:de:74:49:cf:57:ef:71:bd:0a:ea:
                    63:c7:10:51:65:f1:a9:30:c6:94:00:dd:9e:f8:05:
                    bf:0e:86:4b:d2:ad:20:77:e5:e5:b9:36:da:0a:2c:
                    2f:be:90:0c:71:42:50:bb:5d:a1:9d:39:48:a9:15:
                    01:24:ea:bd:7c:41:b9:a6:30:36:8c:1a:78:a6:34:
                    5e:75:48:ab:b4:7c:e4:a4:d8:df:b7:40:09:ab:69:
                    6b:3e:3f:6e:65:49:26:ff:a5:3f:08:7f:e0:74:4e:
                    3d:2c:bb:1f:11:31:82:d7:7d:49:7e:41:29:ea:ad:
                    41:db:39:66:1f:c9:c4:3b:60:e7:c2:be:33:3b:d3:
                    bb:59:6e:65:e9:30:f5:bf:eb:02:0c:28:9b:47:c5:
                    9c:9c:bf:bb:1e:66:2f:13:10:0a:44:be:76:d7:81:
                    29:2e:a8:1d:9f:63:69:a2:28:2d:a0:e6:f2:53:8d:
                    9c:68:50:86:49:20:b7:1e:76:e7:bc:d8:47:df:e0:
                    f9:c4:0a:dd:e6:51:0d:40:cb:5f:dc:03:6c:15:1b:
                    d2:46:4b:2a:42:9d:67:8d:72:e0:32:5b:32:61:79:
                    26:f5:c8:92:4a:9d:8f:25:a3:b5:f0:2f:b2:6e:79:
                    08:9f:1b:aa:fa:92:17:f6:7d:15:81:bb:72:7e:f1:
                    69:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:AD:7A:19:79:54:D4:03:80:F1:64:1B:49:6D:53:C5:06:03:1B:E3
            X509v3 Authority Key Identifier:
                keyid:B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:41:1a:19:48:df:40:b7:7a:30:d0:33:09:36:f6:3d:b7:ee:
         1f:77:f3:0a:8a:59:86:79:ff:f2:ea:1f:3c:55:73:a9:dd:14:
         52:f8:a3:e1:cf:f9:c8:2e:da:dd:74:a0:f4:06:ce:b8:f4:92:
         2e:c7:c6:d3:83:fb:a6:3b:40:5c:64:ae:dc:b8:da:d6:c0:ef:
         9b:f2:14:8f:8c:11:0a:ab:2a:21:9f:22:a1:76:a4:0b:89:f3:
         53:09:76:3b:b6:08:f1:3a:5d:0e:78:79:21:19:80:6d:e1:7c:
         34:4b:fa:3f:4e:e1:98:7e:1a:57:5e:29:53:fe:b2:68:02:89:
         15:ac:13:68:12:03:11:ec:41:07:99:7b:49:b8:0c:1f:32:e2:
         d4:c3:2f:21:6f:98:84:a1:0e:a7:f9:4d:07:ec:85:4f:a2:61:
         c3:e9:0d:9b:c3:9c:bb:a6:45:41:01:3f:76:d6:e2:ad:ac:23:
         8d:89:ab:05:7b:99:65:0e:37:f6:46:c7:01:aa:5e:50:51:91:
         5a:81:e9:4b:49:1c:00:2a:4d:3e:e1:1d:cc:a2:24:a5:be:04:
         92:c6:1e:94:2c:89:a1:34:5b:9e:6f:2e:7c:66:c7:84:2c:91:
         69:63:c8:12:23:fc:3f:fc:eb:f3:4e:9e:8c:fe:45:73:7d:70:
         92:bc:c6:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLxAVRwLYa+pQFmupJsgdGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxY2RjMjZkNDRlYWY4NTY1NDQ4MWU5NTgxMDQzZTE0ODg3
NzY1YjQwHhcNMjUwNjA3MTkwMDI2WhcNMjUwNjA4MTkwMDI2WjAzMTEwLwYDVQQD
EygxNWFkN2ExOTc5NTRkNDAzODBmMTY0MWI0OTZkNTNjNTA2MDMxYmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSU2y950Sc9X73G9CupjxxBRZfGp
MMaUAN2e+AW/DoZL0q0gd+XluTbaCiwvvpAMcUJQu12hnTlIqRUBJOq9fEG5pjA2
jBp4pjRedUirtHzkpNjft0AJq2lrPj9uZUkm/6U/CH/gdE49LLsfETGC131JfkEp
6q1B2zlmH8nEO2Dnwr4zO9O7WW5l6TD1v+sCDCibR8WcnL+7HmYvExAKRL5214Ep
Lqgdn2NpoigtoObyU42caFCGSSC3HnbnvNhH3+D5xArd5lENQMtf3ANsFRvSRksq
Qp1njXLgMlsyYXkm9ciSSp2PJaO18C+ybnkInxuq+pIX9n0VgbtyfvFpowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBWtehl5VNQDgPFkG0ltU8UGAxvjMB8GA1UdIwQY
MBaAFLHNwm1E6vhWVEgelYEEPhSId2W0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2MzQ2JVVHEtRlpVU0I2VmdRUS1GSWgzWmJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9hYWFkYWMtNDgwOS00OTU1LWFjNjIt
OGY5Y2EwZWJjY2FiLzEvc2MzQ2JVVHEtRlpVU0I2VmdRUS1GSWgzWmJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9hYWFkYWMtNDgwOS00OTU1LWFjNjItOGY5Y2EwZWJjY2Fi
LzEvc2MzQ2JVVHEtRlpVU0I2VmdRUS1GSWgzWmJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT0EaGUjf
QLd6MNAzCTb2PbfuH3fzCopZhnn/8uofPFVzqd0UUvij4c/5yC7a3XSg9AbOuPSS
LsfG04P7pjtAXGSu3Lja1sDvm/IUj4wRCqsqIZ8ioXakC4nzUwl2O7YI8TpdDnh5
IRmAbeF8NEv6P07hmH4aV14pU/6yaAKJFawTaBIDEexBB5l7SbgMHzLi1MMvIW+Y
hKEOp/lNB+yFT6Jhw+kNm8Ocu6ZFQQE/dtbirawjjYmrBXuZZQ439kbHAapeUFGR
WoHpS0kcACpNPuEdzKIkpb4EksYelCyJoTRbnm8ufGbHhCyRaWPIEiP8P/zr806e
jP5Fc31wkrzGAA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:41:23 2025 by rpki-client