Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
File:                     rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft (raw, json)
Hash identifier:          2l2YM854JXTCZL7Tb2mKNbM5mbiRDb/oKyiWzq8bxE0=
Subject key identifier:   AD:C4:C9:19:8B:47:93:9A:CF:86:9C:EF:C0:BB:E5:3E:04:CD:D0:E4
Authority key identifier: AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA
Certificate issuer:       /CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa
Certificate serial:       0197477A0196E8DD8DDB37EF801210CA6CFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
Manifest number:          0A99
Signing time:             Fri 06 Jun 2025 23:01:07 +0000
Manifest this update:     Fri 06 Jun 2025 23:01:07 +0000
Manifest next update:     Sat 07 Jun 2025 23:01:07 +0000
Files and hashes:         1: nd2mEoM182MlqnyU97QFBEBtYLc.roa (hash: H4CTJi+dex4a2tP/U9S7boExXOmFzvTZ0iE52ANC1z0=)
                          2: rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl (hash: I1SMm5q3eWde+VixrrRtk94Z4B4DpCQiYCYjGjFvGr4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:7a:01:96:e8:dd:8d:db:37:ef:80:12:10:ca:6c:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa
        Validity
            Not Before: Jun  6 23:01:07 2025 GMT
            Not After : Jun  7 23:01:07 2025 GMT
        Subject: CN=adc4c9198b47939acf869cefc0bbe53e04cdd0e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f5:31:13:54:ad:76:04:3a:c5:19:3e:27:40:
                    b5:b4:51:d9:ec:86:32:58:84:6b:c6:56:78:e4:0e:
                    ee:2f:d5:16:0d:20:99:fb:79:7c:82:e2:f7:f5:26:
                    69:56:6c:ad:7f:8a:66:0f:fa:cc:e2:f5:8b:a8:07:
                    54:f6:05:86:f4:53:c4:c5:53:ed:aa:59:f0:03:ff:
                    8b:cf:7d:d9:d0:d6:01:02:fc:f1:af:e3:c6:b6:32:
                    14:73:84:e5:11:ff:bc:0d:a1:e4:25:00:04:96:5c:
                    2d:53:df:0f:50:c5:55:c0:a2:24:2a:06:bb:a1:07:
                    3e:15:57:82:5e:f0:1d:c8:75:b1:8c:64:90:dd:93:
                    c7:04:e1:c2:76:1e:d7:ef:87:84:bb:13:c2:bc:ac:
                    d3:b9:25:da:67:31:f4:f9:ce:53:5e:54:16:6a:ed:
                    d3:2b:e9:37:5d:0f:8f:85:17:95:6a:20:18:cd:e7:
                    13:02:55:eb:91:11:06:cf:ec:cc:50:58:f7:7c:47:
                    9b:f6:91:08:63:97:bb:4d:a5:15:d8:08:9e:42:8a:
                    ae:17:81:dd:58:d4:a8:c8:1c:9c:04:0f:1a:ef:09:
                    63:f1:0c:14:04:65:3e:47:ef:22:eb:6b:e1:95:7e:
                    95:1d:6b:dd:fd:e9:a9:aa:97:15:8e:ff:9e:ee:aa:
                    f4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C4:C9:19:8B:47:93:9A:CF:86:9C:EF:C0:BB:E5:3E:04:CD:D0:E4
            X509v3 Authority Key Identifier:
                keyid:AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:a8:35:44:2c:83:21:14:83:f5:a1:88:c3:0d:b6:d3:d0:50:
         fb:f2:99:36:44:2b:c5:6f:46:48:b9:49:53:4c:ed:3e:60:31:
         da:4c:7d:87:fa:b8:4f:16:f5:b2:f5:d9:08:97:b5:dd:cc:93:
         50:ab:7f:90:85:c5:50:40:df:8d:8e:0e:76:82:06:fb:5c:66:
         10:b7:d9:79:fe:ff:47:4c:52:64:1d:3f:1e:49:fc:68:25:87:
         eb:3d:c5:ec:34:5a:52:78:49:a9:d2:ab:d6:ac:fa:e2:51:79:
         7e:10:3c:85:1a:86:fd:a9:57:37:f0:53:ee:79:9e:35:9c:82:
         32:a4:0b:4a:47:5b:a0:7c:85:4f:d6:39:d7:b0:15:ee:c2:df:
         fc:3d:85:d3:35:de:6e:8e:8d:f5:87:10:12:5a:3f:ac:ad:62:
         71:88:d8:6b:68:bf:bd:0f:ef:3f:24:dd:82:16:c6:22:34:b8:
         09:e5:89:f6:44:66:8e:5c:47:49:98:95:0c:6a:d5:50:1b:f6:
         0c:22:fd:85:2f:c6:5d:da:4b:ed:2c:a8:cc:44:21:a8:a7:08:
         f1:c4:a0:b5:4e:fe:34:f2:05:2f:cf:87:0f:a9:87:27:d8:2e:
         9b:75:3f:86:5a:40:da:5f:f3:8d:53:4d:6c:ad:d2:11:ce:57:
         c7:70:ee:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHegGW6N2N2zfvgBIQymz9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMjExOTE3OGJmZDkyM2E0YjVlYzQwNmQ5ZmUxNDUyYjI3
NzZlZmEwHhcNMjUwNjA2MjMwMTA3WhcNMjUwNjA3MjMwMTA3WjAzMTEwLwYDVQQD
EyhhZGM0YzkxOThiNDc5MzlhY2Y4NjljZWZjMGJiZTUzZTA0Y2RkMGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPUxE1StdgQ6xRk+J0C1tFHZ7IYy
WIRrxlZ45A7uL9UWDSCZ+3l8guL39SZpVmytf4pmD/rM4vWLqAdU9gWG9FPExVPt
qlnwA/+Lz33Z0NYBAvzxr+PGtjIUc4TlEf+8DaHkJQAEllwtU98PUMVVwKIkKga7
oQc+FVeCXvAdyHWxjGSQ3ZPHBOHCdh7X74eEuxPCvKzTuSXaZzH0+c5TXlQWau3T
K+k3XQ+PhReVaiAYzecTAlXrkREGz+zMUFj3fEeb9pEIY5e7TaUV2AieQoquF4Hd
WNSoyBycBA8a7wlj8QwUBGU+R+8i62vhlX6VHWvd/empqpcVjv+e7qr0oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK3EyRmLR5Oaz4ac78C75T4EzdDkMB8GA1UdIwQY
MBaAFKwhGReL/ZI6S17EBtn+FFKyd276MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckNFWkY0djlranBMWHNRRzJmNFVVckozYnZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yYThmN2UtZTYwNS00MTE0LTkwZTgt
ZjYwMGQwZmQwM2NlLzEvckNFWkY0djlranBMWHNRRzJmNFVVckozYnZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8yYThmN2UtZTYwNS00MTE0LTkwZTgtZjYwMGQwZmQwM2Nl
LzEvckNFWkY0djlranBMWHNRRzJmNFVVckozYnZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB6g1RCyD
IRSD9aGIww2209BQ+/KZNkQrxW9GSLlJU0ztPmAx2kx9h/q4Txb1svXZCJe13cyT
UKt/kIXFUEDfjY4OdoIG+1xmELfZef7/R0xSZB0/Hkn8aCWH6z3F7DRaUnhJqdKr
1qz64lF5fhA8hRqG/alXN/BT7nmeNZyCMqQLSkdboHyFT9Y517AV7sLf/D2F0zXe
bo6N9YcQElo/rK1icYjYa2i/vQ/vPyTdghbGIjS4CeWJ9kRmjlxHSZiVDGrVUBv2
DCL9hS/GXdpL7SyozEQhqKcI8cSgtU7+NPIFL8+HD6mHJ9gum3U/hlpA2l/zjVNN
bK3SEc5Xx3DuOg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:13:05 2025 by rpki-client