Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
File:                     CiebQDjgAue9ZOUHbRo56-lvI8Q.mft (raw, json)
Hash identifier:          oTvVHrjN8orbPhVppETPeIICRy9Nbp8dULd7J/UGyH8=
Subject key identifier:   79:FA:42:C0:B8:26:F3:37:47:9B:AD:C8:90:AD:F8:6C:E0:64:95:BF
Authority key identifier: 0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4
Certificate issuer:       /CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4
Certificate serial:       01974A43795364A014FC0F8171FDB009AE8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
Manifest number:          062C
Signing time:             Sat 07 Jun 2025 12:00:25 +0000
Manifest this update:     Sat 07 Jun 2025 12:00:25 +0000
Manifest next update:     Sun 08 Jun 2025 12:00:25 +0000
Files and hashes:         1: CiebQDjgAue9ZOUHbRo56-lvI8Q.crl (hash: l3HUfjiz+I8yj1tMifq4AD1Dr4af5TSqJQKywYMRjAQ=)
                          2: XgZiHyWgL10sySKObf_Bjn8Hh_Q.roa (hash: 2Dl4jp91F4zOnOBtmwjhJgpK+aRbbY/cT57xX5iOAng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:43:79:53:64:a0:14:fc:0f:81:71:fd:b0:09:ae:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4
        Validity
            Not Before: Jun  7 12:00:25 2025 GMT
            Not After : Jun  8 12:00:25 2025 GMT
        Subject: CN=79fa42c0b826f337479badc890adf86ce06495bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3a:e5:0a:a4:8c:15:66:4b:3c:5a:fc:14:41:
                    29:39:31:52:19:2f:de:1a:04:b2:96:87:f6:87:fb:
                    4e:f2:61:3a:d3:92:d3:db:43:17:b3:c5:fe:13:ae:
                    cb:4b:4e:e6:6e:1d:6b:e2:f5:c3:6f:63:03:d9:c7:
                    3e:c7:56:4a:bb:f0:30:a0:cc:35:57:f4:7e:25:a3:
                    96:56:b3:3e:ba:41:a3:97:f9:66:d3:22:e4:67:ac:
                    54:39:9b:cc:3f:a5:56:16:a1:34:b6:fa:fc:a1:58:
                    ad:08:6a:e1:a2:d2:d6:3c:c0:00:2c:d4:e0:e6:e7:
                    ec:32:ba:82:44:dc:10:ae:00:6d:fe:9c:b0:46:a9:
                    80:42:35:6d:2e:15:4f:d5:da:84:ec:06:7f:4e:d8:
                    dd:52:42:32:5c:c6:07:f4:a7:fd:52:a0:25:78:6d:
                    70:5f:d2:f2:41:ad:b5:dd:7a:91:34:8e:24:ad:68:
                    64:6f:80:9a:28:a9:fb:32:3f:ea:79:a1:61:52:bf:
                    76:9c:0a:63:44:db:9b:1d:8f:3a:00:18:88:2a:0c:
                    7c:28:68:36:4e:c9:a0:f9:e4:6b:ec:3f:43:8e:17:
                    5a:f2:12:6b:34:3a:5b:b2:3f:87:17:c4:30:45:f1:
                    96:31:12:26:b2:6a:39:fb:0a:8e:f6:a0:c1:12:9e:
                    36:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FA:42:C0:B8:26:F3:37:47:9B:AD:C8:90:AD:F8:6C:E0:64:95:BF
            X509v3 Authority Key Identifier:
                keyid:0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:1f:e0:36:18:73:c3:7e:21:df:39:a4:96:44:8e:52:70:c4:
         b9:99:97:ed:c7:08:83:86:f3:cd:ca:28:29:a1:e8:47:e5:bb:
         e9:10:d7:70:79:f4:4e:88:20:52:a2:d3:01:74:e0:a4:2f:2e:
         ce:47:f8:9c:dd:04:b6:7a:43:f1:7d:12:e8:6b:a7:12:cd:81:
         15:7f:96:14:73:ee:03:23:fb:26:8c:f7:71:a1:0d:43:b9:e1:
         a6:4b:0a:1b:64:3e:0c:fe:b7:ff:c4:cf:6d:06:d7:9e:60:bf:
         1a:d5:71:ea:3a:35:ca:13:72:a5:b7:e3:72:e7:cf:d6:38:ea:
         c8:3f:7f:3c:c4:29:b1:61:8f:16:4a:6c:47:6d:05:5c:b4:80:
         b1:91:a5:d8:3f:9a:ff:c9:ee:fd:79:ea:26:a1:92:65:d5:3d:
         01:36:2c:b6:08:eb:35:52:29:40:c4:53:a7:e9:1c:84:d4:64:
         55:d1:08:b6:20:14:ea:d3:ac:e1:a6:89:0a:18:5a:e4:bf:0c:
         8e:43:69:ec:2d:59:05:ca:05:cd:4f:eb:75:fb:6c:47:3a:a8:
         de:e9:c8:b1:f0:b7:c3:0f:ba:90:80:8d:24:58:24:e8:85:fe:
         95:6f:33:17:b1:f5:97:69:11:35:5a:61:76:07:bb:7b:ac:97:
         09:eb:ac:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKQ3lTZKAU/A+Bcf2wCa6PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMjc5YjQwMzhlMDAyZTdiZDY0ZTUwNzZkMWEzOWViZTk2
ZjIzYzQwHhcNMjUwNjA3MTIwMDI1WhcNMjUwNjA4MTIwMDI1WjAzMTEwLwYDVQQD
Eyg3OWZhNDJjMGI4MjZmMzM3NDc5YmFkYzg5MGFkZjg2Y2UwNjQ5NWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDrlCqSMFWZLPFr8FEEpOTFSGS/e
GgSylof2h/tO8mE605LT20MXs8X+E67LS07mbh1r4vXDb2MD2cc+x1ZKu/AwoMw1
V/R+JaOWVrM+ukGjl/lm0yLkZ6xUOZvMP6VWFqE0tvr8oVitCGrhotLWPMAALNTg
5ufsMrqCRNwQrgBt/pywRqmAQjVtLhVP1dqE7AZ/TtjdUkIyXMYH9Kf9UqAleG1w
X9LyQa213XqRNI4krWhkb4CaKKn7Mj/qeaFhUr92nApjRNubHY86ABiIKgx8KGg2
Tsmg+eRr7D9Djhda8hJrNDpbsj+HF8QwRfGWMRImsmo5+wqO9qDBEp42GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHn6QsC4JvM3R5utyJCt+GzgZJW/MB8GA1UdIwQY
MBaAFAonm0A44ALnvWTlB20aOevpbyPEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2llYlFEamdBdWU5Wk9VSGJSbzU2LWx2SThRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC84NTFkNDUtMTQyMi00YjMxLWJkOGYt
Nzk5M2I5ZTAzYjBmLzEvQ2llYlFEamdBdWU5Wk9VSGJSbzU2LWx2SThRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC84NTFkNDUtMTQyMi00YjMxLWJkOGYtNzk5M2I5ZTAzYjBm
LzEvQ2llYlFEamdBdWU5Wk9VSGJSbzU2LWx2SThRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHx/gNhhz
w34h3zmklkSOUnDEuZmX7ccIg4bzzcooKaHoR+W76RDXcHn0ToggUqLTAXTgpC8u
zkf4nN0EtnpD8X0S6GunEs2BFX+WFHPuAyP7Joz3caENQ7nhpksKG2Q+DP63/8TP
bQbXnmC/GtVx6jo1yhNypbfjcufP1jjqyD9/PMQpsWGPFkpsR20FXLSAsZGl2D+a
/8nu/XnqJqGSZdU9ATYstgjrNVIpQMRTp+kchNRkVdEItiAU6tOs4aaJChha5L8M
jkNp7C1ZBcoFzU/rdftsRzqo3unIsfC3ww+6kICNJFgk6IX+lW8zF7H1l2kRNVph
dge7e6yXCeusJQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:56:12 2025 by rpki-client