Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
File:                     sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft (raw, json)
Hash identifier:          J3y+HzqmzkT8Ml02ALc2IgI7rnAG/rVCbQflHGA65p0=
Subject key identifier:   97:FE:C8:62:E5:4E:24:EA:33:DB:F1:1D:B9:A7:E5:96:05:97:00:52
Authority key identifier: B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6
Certificate issuer:       /CN=b094780ffbb06b7b57f0214e84552b964c5041d6
Certificate serial:       0197504634956D2DF9B26CCB0AD1E8F6610D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
Manifest number:          1582
Signing time:             Sun 08 Jun 2025 16:01:07 +0000
Manifest this update:     Sun 08 Jun 2025 16:01:07 +0000
Manifest next update:     Mon 09 Jun 2025 16:01:07 +0000
Files and hashes:         1: ReBd6XpLAEdQnq22AyigT28YEek.roa (hash: RhoXTgASpblnjFEdfG3nqoqUpEixf7i2FKnJEh2Jo/g=)
                          2: sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl (hash: ZfKofhY+MRV4Ouy9Y+ij2ie+sAfy6FXUMMVnrggZbw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 16:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:46:34:95:6d:2d:f9:b2:6c:cb:0a:d1:e8:f6:61:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b094780ffbb06b7b57f0214e84552b964c5041d6
        Validity
            Not Before: Jun  8 16:01:07 2025 GMT
            Not After : Jun  9 16:01:07 2025 GMT
        Subject: CN=97fec862e54e24ea33dbf11db9a7e59605970052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0e:de:47:d0:63:a9:9a:ca:2d:c9:13:fd:e5:
                    b8:b3:71:ac:18:9e:b5:41:c6:9c:e5:ee:92:33:83:
                    95:8d:91:25:7e:f4:0c:a9:8f:1a:52:6f:09:12:dc:
                    b4:b4:f6:c0:e2:ba:d6:36:70:f8:20:35:35:bd:03:
                    a8:0f:b3:f2:e2:e8:aa:0b:de:fd:22:14:91:cd:1c:
                    8e:de:e2:c2:8d:bc:6d:0a:05:0a:2a:d7:93:30:15:
                    07:07:87:79:bd:49:ff:04:ef:a1:f9:55:a6:2b:da:
                    96:6f:44:f1:01:6f:29:a1:c7:3c:4f:22:c8:20:62:
                    f4:32:5e:0e:9c:ce:c6:c7:8e:30:bb:8e:99:1d:ab:
                    83:fc:30:ee:af:82:5e:7a:a3:67:6d:ca:34:83:ca:
                    20:57:d7:14:5d:82:df:09:6a:a1:6e:21:1c:f4:29:
                    aa:09:7a:80:f6:e0:94:59:81:77:53:9f:eb:53:d2:
                    d5:c6:40:e8:10:f2:4a:17:60:c1:b9:d9:3f:6c:6a:
                    6f:2f:71:49:37:63:5d:ee:e9:6c:9c:3c:9c:ff:54:
                    89:23:b0:e2:ea:df:95:83:6c:44:85:2e:1b:72:d1:
                    fb:0b:c9:e4:6b:cc:df:3a:78:a7:33:35:2a:22:87:
                    3b:28:3c:7d:89:5c:a5:7f:36:02:c6:a5:7f:d8:c1:
                    de:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:FE:C8:62:E5:4E:24:EA:33:DB:F1:1D:B9:A7:E5:96:05:97:00:52
            X509v3 Authority Key Identifier:
                keyid:B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:5c:d2:14:0a:c1:25:97:20:d1:a2:e7:f1:ab:b2:3e:79:21:
         eb:da:6b:c0:9d:e0:3b:23:d1:4a:16:0c:72:4d:1e:c9:49:fb:
         41:ce:cb:80:0a:3c:9e:9b:c9:57:fa:91:dc:58:11:d1:05:30:
         8b:6b:4d:b0:b5:52:a1:0e:47:b9:6d:55:5a:1e:2e:3a:10:0b:
         a3:14:67:63:bc:3a:5c:f4:ba:a5:cc:5e:99:22:75:f2:23:58:
         a7:86:aa:45:9d:ac:54:f0:43:53:ce:c6:f5:46:69:4b:18:2c:
         eb:a0:4f:38:c5:fb:47:de:87:d4:da:d7:8f:a6:0a:01:1a:78:
         00:8c:ce:43:c3:05:b2:c5:5d:0a:6b:81:1b:32:f0:47:a2:01:
         cc:87:d6:53:76:c2:59:2c:7b:08:9b:ba:fd:82:b3:16:57:48:
         c4:69:21:f0:73:20:b0:1f:2f:65:f5:6e:21:b3:82:c3:d7:73:
         ce:b4:e3:74:9d:01:3c:02:62:d3:e5:30:b3:d8:bd:55:57:85:
         28:ce:fa:20:cf:49:ce:61:62:a6:63:ef:83:a6:af:03:c3:76:
         14:b2:9f:c6:19:8d:e4:59:5a:7d:ec:78:02:78:06:ef:a9:f5:
         d8:f1:23:84:66:16:e2:e0:25:0f:64:95:df:85:ab:45:06:06:
         98:2e:79:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQRjSVbS35smzLCtHo9mENMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwOTQ3ODBmZmJiMDZiN2I1N2YwMjE0ZTg0NTUyYjk2NGM1
MDQxZDYwHhcNMjUwNjA4MTYwMTA3WhcNMjUwNjA5MTYwMTA3WjAzMTEwLwYDVQQD
Eyg5N2ZlYzg2MmU1NGUyNGVhMzNkYmYxMWRiOWE3ZTU5NjA1OTcwMDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQ7eR9BjqZrKLckT/eW4s3GsGJ61
Qcac5e6SM4OVjZElfvQMqY8aUm8JEty0tPbA4rrWNnD4IDU1vQOoD7Py4uiqC979
IhSRzRyO3uLCjbxtCgUKKteTMBUHB4d5vUn/BO+h+VWmK9qWb0TxAW8pocc8TyLI
IGL0Ml4OnM7Gx44wu46ZHauD/DDur4JeeqNnbco0g8ogV9cUXYLfCWqhbiEc9Cmq
CXqA9uCUWYF3U5/rU9LVxkDoEPJKF2DBudk/bGpvL3FJN2Nd7ulsnDyc/1SJI7Di
6t+Vg2xEhS4bctH7C8nka8zfOninMzUqIoc7KDx9iVylfzYCxqV/2MHe2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJf+yGLlTiTqM9vxHbmn5ZYFlwBSMB8GA1UdIwQY
MBaAFLCUeA/7sGt7V/AhToRVK5ZMUEHWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0pSNERfdXdhM3RYOENGT2hGVXJsa3hRUWRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82NjgzY2EtYTY4OC00MTQxLWFkNDEt
OGFkZjBkYTIyNTQ1LzEvc0pSNERfdXdhM3RYOENGT2hGVXJsa3hRUWRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS82NjgzY2EtYTY4OC00MTQxLWFkNDEtOGFkZjBkYTIyNTQ1
LzEvc0pSNERfdXdhM3RYOENGT2hGVXJsa3hRUWRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB1zSFArB
JZcg0aLn8auyPnkh69prwJ3gOyPRShYMck0eyUn7Qc7LgAo8npvJV/qR3FgR0QUw
i2tNsLVSoQ5HuW1VWh4uOhALoxRnY7w6XPS6pcxemSJ18iNYp4aqRZ2sVPBDU87G
9UZpSxgs66BPOMX7R96H1NrXj6YKARp4AIzOQ8MFssVdCmuBGzLwR6IBzIfWU3bC
WSx7CJu6/YKzFldIxGkh8HMgsB8vZfVuIbOCw9dzzrTjdJ0BPAJi0+Uws9i9VVeF
KM76IM9JzmFipmPvg6avA8N2FLKfxhmN5Flafex4AngG76n12PEjhGYW4uAlD2SV
34WrRQYGmC55dA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 02:39:33 2025 by rpki-client