Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft
File:                     tyWIwA7vcVgJ61_dbWcXzCjA36w.mft (raw, json)
Hash identifier:          JT+txiXGsV/mooS08uKUWNdyOyKZqY+Ee9/rwyFCyQY=
Subject key identifier:   F7:53:06:E1:17:95:36:A1:BC:68:2F:65:BA:DA:3C:AD:69:27:B3:0B
Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
Certificate issuer:       /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Certificate serial:       019751C658B08A5CB619BA41EE6EF236B8AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft
Manifest number:          1593
Signing time:             Sun 08 Jun 2025 23:00:42 +0000
Manifest this update:     Sun 08 Jun 2025 23:00:42 +0000
Manifest next update:     Mon 09 Jun 2025 23:00:42 +0000
Files and hashes:         1: 30BxK6_jpie3YrLCVwh_L1trwzk.roa (hash: X9FbkEMlA2QphV+O7rBHZ0meCsmOLXe9r7nPMvJuQcE=)
                          2: 57saHwwtMFtKDHtko2YaGKrGjJo.roa (hash: tuKl3wIrDMzULngL+WH+D2haKacyphB+9VZ5+FTHHpM=)
                          3: Dbj9xuGjig4FQD4z5CtOr-cvTeI.roa (hash: Kh8CzaShn4hw0xJ/eT2H0TnUMB7Vdu0F94Rtfvnict8=)
                          4: EuktsmR6HvXm2m5YsC5Wyo5ecw4.roa (hash: JZi+DlaPt3ZWFPrgsMEzdF/6HYunSwsq7ugQUzVGcAU=)
                          5: F-P_HvBB3WeH7KniyH81o28KKbo.roa (hash: 8sYaDjHEHJUFW2fXpmzCzQDMt9L045SyDdjIlOEUNco=)
                          6: WBOYQCAoKRyLsa6JAYAHwgmZIqI.roa (hash: lyZfLnKwP7kxcM63676+jKHGePevi3n5oMgldGNu5qA=)
                          7: WR7z7m7JZCweB81LV8VsoLwZDDI.roa (hash: n+zNUpOUwgPN3iy+Ul6bCia4Bw0P9Lb0d3EbTWyw+/I=)
                          8: eNRtwGVQ1VdkNKBRZ8o9uf4Ec24.roa (hash: syspd0kan424RvhNNvOMRktLryIova5s5SuLnxOMs4I=)
                          9: inKVgfg6tkDW3-Ko2Fj1q9U9rjM.roa (hash: m3IZ4E9iTFBEvHgMwMmb/F3F5jQFINfkwm1zng7j3wE=)
                          10: jmu-RUwAGlfdjyuIX4pdgwp2S_c.roa (hash: 0w/XwzNScEN/vprJx5SJRgxW5WArgctvQM2YSDSFtog=)
                          11: tLlGubJJap72E2l8gRh9Uuu4S8A.roa (hash: jBh5pu7FnbvAeJHH3DMpIfaMMsMyb9LyPf0qd9sE/90=)
                          12: tyWIwA7vcVgJ61_dbWcXzCjA36w.crl (hash: 65TIClzGaNZDBwKzLfWXtDTfPgHhsjf+iDQ/HPOr5xo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:51:c6:58:b0:8a:5c:b6:19:ba:41:ee:6e:f2:36:b8:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
        Validity
            Not Before: Jun  8 23:00:42 2025 GMT
            Not After : Jun  9 23:00:42 2025 GMT
        Subject: CN=f75306e1179536a1bc682f65bada3cad6927b30b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:dd:94:6b:8d:4f:15:57:f5:08:95:14:23:a9:
                    96:33:71:e4:30:5b:9d:0c:a1:f5:b8:6d:d1:ef:4a:
                    b9:98:70:44:74:26:a0:32:8a:f4:d6:35:cd:40:40:
                    93:33:1b:85:33:f3:c7:49:41:49:3a:32:c8:a0:07:
                    e1:d3:98:c7:4b:a9:4a:9f:08:2d:af:ad:fe:ad:74:
                    33:60:73:b9:04:ab:a1:7e:c4:f4:e6:f9:0c:42:51:
                    89:a1:ad:66:23:4b:17:a6:07:26:ff:40:a4:3d:93:
                    02:4c:c8:c0:e4:46:9c:08:87:8b:23:9a:a4:56:71:
                    56:af:c4:69:f3:15:78:ac:27:36:87:ce:f3:16:0a:
                    b7:6d:fa:dd:ee:1c:3d:3c:f5:e3:a5:f8:40:4b:16:
                    06:d0:b5:78:c9:10:7e:5d:b4:31:09:95:77:ac:56:
                    e1:15:0c:c3:74:c6:89:24:99:57:b9:38:eb:58:0b:
                    15:4d:7b:06:ef:44:2d:26:3d:99:a4:e6:cf:99:fd:
                    b9:cb:23:b2:be:55:3a:68:9e:f5:46:c5:36:9d:cc:
                    a7:68:49:8f:4d:91:46:40:62:7c:75:b1:75:55:78:
                    d5:5f:c7:f2:d2:86:19:24:9e:2a:76:3e:17:90:f5:
                    eb:43:82:56:ea:e7:e7:5d:be:87:9f:1f:6d:4a:81:
                    a4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:53:06:E1:17:95:36:A1:BC:68:2F:65:BA:DA:3C:AD:69:27:B3:0B
            X509v3 Authority Key Identifier:
                keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:bd:2a:6d:52:46:4b:07:d5:d6:16:c1:da:93:89:0c:ed:ed:
         15:13:18:1c:e2:97:f2:17:fb:cc:cf:28:58:ca:c5:f3:60:ab:
         2f:d2:f6:85:70:2b:e5:76:05:fa:69:2d:50:b2:ab:a4:29:db:
         77:29:18:5d:6a:87:be:ac:3e:e7:ca:56:82:1c:92:33:db:b0:
         58:59:8e:8c:e1:c7:84:bf:aa:a4:23:e1:a8:18:05:b7:c7:ff:
         83:7c:46:c1:51:64:14:49:7f:e3:70:5a:03:a9:97:23:85:6c:
         c1:7d:34:02:6f:33:f7:de:40:e3:34:39:d1:38:4f:31:5e:15:
         25:12:96:7a:ea:18:c8:b3:cc:8d:49:50:55:c5:f8:a9:2f:49:
         bf:06:88:9c:d9:87:d6:4f:82:33:0e:80:26:1d:d5:5d:21:81:
         9d:e9:71:44:ee:f3:d2:b8:7e:d4:2a:5b:94:a2:ec:8b:f9:06:
         b2:f3:ad:51:b6:f7:e0:ba:40:35:15:ed:b6:ed:70:c5:67:2e:
         11:27:d8:fc:4a:10:59:28:1b:e3:54:b6:0b:b3:09:55:c7:4a:
         df:2d:e7:1f:ee:9e:1b:ce:45:4a:f6:04:30:91:a1:de:50:75:
         bd:d6:8f:f5:e2:e9:9e:7e:f8:41:41:f9:1a:16:00:ab:78:e5:
         b0:96:95:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdRxliwily2GbpB7m7yNrivMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MjU4OGMwMGVlZjcxNTgwOWViNWZkZDZkNjcxN2NjMjhj
MGRmYWMwHhcNMjUwNjA4MjMwMDQyWhcNMjUwNjA5MjMwMDQyWjAzMTEwLwYDVQQD
EyhmNzUzMDZlMTE3OTUzNmExYmM2ODJmNjViYWRhM2NhZDY5MjdiMzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA792Ua41PFVf1CJUUI6mWM3HkMFud
DKH1uG3R70q5mHBEdCagMor01jXNQECTMxuFM/PHSUFJOjLIoAfh05jHS6lKnwgt
r63+rXQzYHO5BKuhfsT05vkMQlGJoa1mI0sXpgcm/0CkPZMCTMjA5EacCIeLI5qk
VnFWr8Rp8xV4rCc2h87zFgq3bfrd7hw9PPXjpfhASxYG0LV4yRB+XbQxCZV3rFbh
FQzDdMaJJJlXuTjrWAsVTXsG70QtJj2ZpObPmf25yyOyvlU6aJ71RsU2ncynaEmP
TZFGQGJ8dbF1VXjVX8fy0oYZJJ4qdj4XkPXrQ4JW6ufnXb6Hnx9tSoGkEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPdTBuEXlTahvGgvZbraPK1pJ7MLMB8GA1UdIwQY
MBaAFLcliMAO73FYCetf3W1nF8wowN+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUt
N2E0MTI1NGVhYWNhLzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUtN2E0MTI1NGVhYWNh
LzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfr0qbVJG
SwfV1hbB2pOJDO3tFRMYHOKX8hf7zM8oWMrF82CrL9L2hXAr5XYF+mktULKrpCnb
dykYXWqHvqw+58pWghySM9uwWFmOjOHHhL+qpCPhqBgFt8f/g3xGwVFkFEl/43Ba
A6mXI4VswX00Am8z995A4zQ50ThPMV4VJRKWeuoYyLPMjUlQVcX4qS9JvwaInNmH
1k+CMw6AJh3VXSGBnelxRO7z0rh+1CpblKLsi/kGsvOtUbb34LpANRXttu1wxWcu
ESfY/EoQWSgb41S2C7MJVcdK3y3nH+6eG85FSvYEMJGh3lB1vdaP9eLpnn74QUH5
GhYAq3jlsJaViQ==
-----END CERTIFICATE-----
Generated at Mon Jun 9 04:25:43 2025 by rpki-client