Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
File:                     4QBqBtxJCZf_j8OkLs84m-090Xg.mft (raw, json)
Hash identifier:          /Bvz4ptwPdv4jNr6daaVj7huKJ8kzGgsRDfY8tc98DY=
Subject key identifier:   B4:2D:28:A7:7D:8E:3C:54:DE:DB:DB:69:DE:34:38:C8:E7:29:71:4E
Authority key identifier: E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78
Certificate issuer:       /CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178
Certificate serial:       019748F9D263BBEDB6F80C9B5DBF862F540F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
Manifest number:          157C
Signing time:             Sat 07 Jun 2025 06:00:21 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:21 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:21 +0000
Files and hashes:         1: 4QBqBtxJCZf_j8OkLs84m-090Xg.crl (hash: thIMzzcMJumCpTTnRTMtUCQ6py0JtM7iLOfukw7ymPw=)
                          2: LnqHoulK3VATGmKEAn72iWxo7SM.roa (hash: yf2dP1AEzVPcio054NYKJ4SAhZkRjptLQTGykKC3qEs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:f9:d2:63:bb:ed:b6:f8:0c:9b:5d:bf:86:2f:54:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178
        Validity
            Not Before: Jun  7 06:00:21 2025 GMT
            Not After : Jun  8 06:00:21 2025 GMT
        Subject: CN=b42d28a77d8e3c54dedbdb69de3438c8e729714e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c1:99:56:71:99:2e:eb:82:25:f2:60:b0:26:
                    f3:92:7c:c1:b5:46:17:27:9f:9d:77:9d:f3:bb:57:
                    f7:be:44:ae:a9:96:fd:3b:f3:af:58:15:e6:5a:a7:
                    b6:0f:e9:d5:84:7e:d7:f3:fe:1a:f3:b7:bc:51:49:
                    85:fc:84:64:ad:bb:3c:76:6c:89:19:c8:81:65:d3:
                    48:80:b3:bd:65:ee:6f:76:11:2c:5c:03:75:33:4b:
                    26:9f:ae:93:d2:d7:ec:0f:84:b4:f0:2b:11:fa:1a:
                    32:a1:0c:3b:f7:23:38:04:80:c1:83:f2:63:50:e5:
                    8a:af:61:aa:af:59:a7:d5:cd:74:c8:b3:08:c5:10:
                    d3:22:53:4e:dc:20:a5:8d:89:05:56:3a:b5:f8:96:
                    97:bd:76:6f:54:e6:8f:8a:4b:e5:f4:b4:64:c1:e0:
                    ba:a5:2e:76:93:7a:fa:a7:e0:45:c6:f4:aa:90:5a:
                    5c:f2:71:c6:38:f5:27:09:a8:78:85:3b:e6:d5:22:
                    33:db:f9:a4:a3:d6:18:97:40:83:c1:4b:8b:b1:e1:
                    0c:c1:60:34:77:15:86:73:d3:57:4b:dc:df:ae:10:
                    63:03:c6:c6:7f:ab:7d:ca:26:e0:ea:71:d5:e7:77:
                    0b:a3:b1:99:d9:a3:4d:44:e3:ca:83:aa:4f:75:97:
                    22:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2D:28:A7:7D:8E:3C:54:DE:DB:DB:69:DE:34:38:C8:E7:29:71:4E
            X509v3 Authority Key Identifier:
                keyid:E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:cd:bb:23:a1:cf:4a:a9:08:cc:99:45:23:3d:5b:a1:97:d0:
         84:c0:5a:5d:70:02:c2:25:85:cf:fb:7f:3e:55:e8:73:4b:97:
         cf:82:b2:97:e7:99:27:f1:b6:7d:fe:71:f1:d9:c1:ce:9c:55:
         22:c5:6f:32:e6:76:92:05:c3:6d:71:b6:98:ad:3b:03:b6:3d:
         61:80:fa:55:31:de:2a:3a:48:1e:92:85:bb:20:e5:58:e7:06:
         76:16:48:33:b6:c9:eb:33:61:d6:84:03:41:d2:80:25:3e:95:
         e6:5c:92:a7:cc:40:8f:f1:15:77:a5:be:53:07:c9:31:c8:bb:
         56:92:65:e2:a5:fe:d8:b0:4a:a8:79:8e:82:89:b6:b6:ad:0c:
         57:e2:17:f7:73:08:ee:5e:6a:1f:f5:9f:cc:5e:c3:e9:a3:c7:
         27:11:5f:da:e0:42:63:91:cf:26:57:91:b0:91:e1:fb:6c:0b:
         aa:23:12:ad:a0:f3:7b:b0:24:79:9e:56:cf:5b:d6:20:41:d8:
         b1:05:8c:6d:0d:41:2b:74:4c:fa:08:39:f4:1d:9f:99:b1:d4:
         32:28:d6:97:83:1d:42:04:1d:55:89:e4:66:71:60:0e:f5:75:
         d1:5d:50:83:f7:3b:93:e4:a8:15:ba:13:be:aa:83:00:8d:af:
         11:09:52:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+dJju+22+AybXb+GL1QPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMDA2YTA2ZGM0OTA5OTdmZjhmYzNhNDJlY2YzODliZWQz
ZGQxNzgwHhcNMjUwNjA3MDYwMDIxWhcNMjUwNjA4MDYwMDIxWjAzMTEwLwYDVQQD
EyhiNDJkMjhhNzdkOGUzYzU0ZGVkYmRiNjlkZTM0MzhjOGU3Mjk3MTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMGZVnGZLuuCJfJgsCbzknzBtUYX
J5+dd53zu1f3vkSuqZb9O/OvWBXmWqe2D+nVhH7X8/4a87e8UUmF/IRkrbs8dmyJ
GciBZdNIgLO9Ze5vdhEsXAN1M0smn66T0tfsD4S08CsR+hoyoQw79yM4BIDBg/Jj
UOWKr2Gqr1mn1c10yLMIxRDTIlNO3CCljYkFVjq1+JaXvXZvVOaPikvl9LRkweC6
pS52k3r6p+BFxvSqkFpc8nHGOPUnCah4hTvm1SIz2/mko9YYl0CDwUuLseEMwWA0
dxWGc9NXS9zfrhBjA8bGf6t9yibg6nHV53cLo7GZ2aNNROPKg6pPdZci8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQtKKd9jjxU3tvbad40OMjnKXFOMB8GA1UdIwQY
MBaAFOEAagbcSQmX/4/DpC7POJvtPdF4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFFCcUJ0eEpDWmZfajhPa0xzODRtLTA5MFhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi84MzBiNWMtYjZjOC00OTc5LWE1M2Ut
NDk0ZTI2NDkxNzk2LzEvNFFCcUJ0eEpDWmZfajhPa0xzODRtLTA5MFhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi84MzBiNWMtYjZjOC00OTc5LWE1M2UtNDk0ZTI2NDkxNzk2
LzEvNFFCcUJ0eEpDWmZfajhPa0xzODRtLTA5MFhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASc27I6HP
SqkIzJlFIz1boZfQhMBaXXACwiWFz/t/PlXoc0uXz4Kyl+eZJ/G2ff5x8dnBzpxV
IsVvMuZ2kgXDbXG2mK07A7Y9YYD6VTHeKjpIHpKFuyDlWOcGdhZIM7bJ6zNh1oQD
QdKAJT6V5lySp8xAj/EVd6W+UwfJMci7VpJl4qX+2LBKqHmOgom2tq0MV+IX93MI
7l5qH/WfzF7D6aPHJxFf2uBCY5HPJleRsJHh+2wLqiMSraDze7AkeZ5Wz1vWIEHY
sQWMbQ1BK3RM+gg59B2fmbHUMijWl4MdQgQdVYnkZnFgDvV10V1Qg/c7k+SoFboT
vqqDAI2vEQlSQw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:40:33 2025 by rpki-client