Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
File:                     L28OoBJ6bjkhlWljgL5bsEdLAd8.mft (raw, json)
Hash identifier:          SPAI07NRiZFC0SuggYhd9xvB+1h6IEKWi6GQ1vkSDoE=
Subject key identifier:   DA:7C:C4:45:64:AB:AD:B7:BB:38:BD:62:C5:66:83:97:2B:54:4D:CB
Authority key identifier: 2F:6F:0E:A0:12:7A:6E:39:21:95:69:63:80:BE:5B:B0:47:4B:01:DF
Certificate issuer:       /CN=2f6f0ea0127a6e392195696380be5bb0474b01df
Certificate serial:       01974D0D794AAFD2C6CE130BD3886226D6D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
Manifest number:          157D
Signing time:             Sun 08 Jun 2025 01:00:17 +0000
Manifest this update:     Sun 08 Jun 2025 01:00:17 +0000
Manifest next update:     Mon 09 Jun 2025 01:00:17 +0000
Files and hashes:         1: L28OoBJ6bjkhlWljgL5bsEdLAd8.crl (hash: hU5XtQ9lKzA/QqOEH6UJw0zrAS8IrLcCa/NhT4eFOhw=)
                          2: vqiF7KHwgC4hKANJve3WilTtCaA.roa (hash: ViWg/cb4ZOWXmU8DGPzhe6lMZyYPSAoJx2DnUl9cMUQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:0d:79:4a:af:d2:c6:ce:13:0b:d3:88:62:26:d6:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f6f0ea0127a6e392195696380be5bb0474b01df
        Validity
            Not Before: Jun  8 01:00:17 2025 GMT
            Not After : Jun  9 01:00:17 2025 GMT
        Subject: CN=da7cc44564abadb7bb38bd62c56683972b544dcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1b:06:15:4c:84:eb:c9:d2:1a:9d:cd:75:58:
                    17:25:a3:f6:ab:de:a5:e1:18:47:ef:a5:cd:ef:73:
                    f7:52:1d:07:d3:55:d1:72:e4:da:a6:fc:33:54:cb:
                    fa:8f:5d:14:d3:10:88:4e:4f:0d:00:e5:70:27:75:
                    05:03:d1:8c:26:55:b2:b6:d8:aa:05:9a:34:9a:17:
                    c3:fa:62:44:f9:eb:82:93:af:23:e8:9a:ab:5c:f0:
                    80:bc:e2:0d:78:de:d4:77:7b:6c:05:00:7f:7e:49:
                    f3:ea:ac:3e:3b:9d:e3:d5:c3:d8:bb:f0:cf:3f:54:
                    7d:38:5a:56:f8:3f:8d:47:d8:a5:ba:20:26:c5:27:
                    d5:73:a2:28:35:7e:b8:68:fc:44:80:b9:dc:43:5f:
                    b2:2d:f9:0f:54:67:9b:19:ca:ad:ce:e4:4e:3b:84:
                    4c:72:55:9b:b7:d5:74:14:9d:50:52:f4:e8:a0:7c:
                    2a:ab:44:5a:60:c9:e8:f7:c0:bf:5b:03:71:a8:97:
                    29:22:be:f5:bf:95:ec:9a:7e:56:25:1d:60:e6:34:
                    28:fd:a0:92:be:40:9e:7d:74:8f:67:26:ff:14:74:
                    4f:15:38:54:d5:24:da:b6:6e:14:64:76:52:85:f0:
                    00:34:d8:00:85:8e:29:64:1e:f8:75:c7:ba:42:62:
                    a4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7C:C4:45:64:AB:AD:B7:BB:38:BD:62:C5:66:83:97:2B:54:4D:CB
            X509v3 Authority Key Identifier:
                keyid:2F:6F:0E:A0:12:7A:6E:39:21:95:69:63:80:BE:5B:B0:47:4B:01:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:2b:ba:79:2a:86:ec:95:70:35:0d:9d:16:fa:85:a9:de:d1:
         74:76:48:10:0c:17:dc:ba:49:f9:ad:38:e6:c0:91:f8:62:bd:
         c2:d9:ff:a7:c7:76:11:6c:ed:8a:b6:e2:56:f9:57:30:67:82:
         2e:2d:bb:cf:dc:45:a9:49:27:ed:38:27:f0:40:5f:83:4f:9d:
         ca:3c:69:f7:57:a5:8e:5c:54:a2:77:40:16:39:d8:c1:08:c8:
         d8:a9:b2:f9:78:56:19:04:13:09:17:43:35:8b:6d:da:ec:d2:
         3f:2b:c9:92:11:74:13:7a:f0:6d:2e:a6:bb:82:aa:41:c0:3a:
         1d:95:71:a1:84:c3:a5:8f:db:1a:25:0c:8a:18:cd:6f:71:a8:
         ef:86:d3:0e:2a:29:07:cd:36:60:73:1c:c5:1e:66:b9:1d:59:
         c9:b8:1c:95:32:02:de:34:12:6d:8f:37:85:53:bf:93:11:6e:
         b1:5b:a9:5e:bf:a5:85:7e:95:b8:d1:c8:75:7d:fd:67:30:2e:
         08:94:76:68:17:e6:b2:47:58:f5:f1:f5:ab:38:aa:7b:40:c3:
         69:f8:44:6f:0f:99:ea:4d:94:d8:ef:2a:5f:93:81:de:77:82:
         08:30:77:6d:1c:8b:bf:62:10:40:cd:66:3a:5d:56:ec:b8:32:
         1e:7d:f8:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNDXlKr9LGzhML04hiJtbZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNmYwZWEwMTI3YTZlMzkyMTk1Njk2MzgwYmU1YmIwNDc0
YjAxZGYwHhcNMjUwNjA4MDEwMDE3WhcNMjUwNjA5MDEwMDE3WjAzMTEwLwYDVQQD
EyhkYTdjYzQ0NTY0YWJhZGI3YmIzOGJkNjJjNTY2ODM5NzJiNTQ0ZGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RsGFUyE68nSGp3NdVgXJaP2q96l
4RhH76XN73P3Uh0H01XRcuTapvwzVMv6j10U0xCITk8NAOVwJ3UFA9GMJlWyttiq
BZo0mhfD+mJE+euCk68j6JqrXPCAvOINeN7Ud3tsBQB/fknz6qw+O53j1cPYu/DP
P1R9OFpW+D+NR9iluiAmxSfVc6IoNX64aPxEgLncQ1+yLfkPVGebGcqtzuROO4RM
clWbt9V0FJ1QUvTooHwqq0RaYMno98C/WwNxqJcpIr71v5Xsmn5WJR1g5jQo/aCS
vkCefXSPZyb/FHRPFThU1STatm4UZHZShfAANNgAhY4pZB74dce6QmKkUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNp8xEVkq623uzi9YsVmg5crVE3LMB8GA1UdIwQY
MBaAFC9vDqASem45IZVpY4C+W7BHSwHfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDI4T29CSjZiamtobFdsamdMNWJzRWRMQWQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS82MjY0MWYtY2Y5OS00NTE0LWI3ZDct
YjJhMjMyNDZlNjE0LzEvTDI4T29CSjZiamtobFdsamdMNWJzRWRMQWQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS82MjY0MWYtY2Y5OS00NTE0LWI3ZDctYjJhMjMyNDZlNjE0
LzEvTDI4T29CSjZiamtobFdsamdMNWJzRWRMQWQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVSu6eSqG
7JVwNQ2dFvqFqd7RdHZIEAwX3LpJ+a045sCR+GK9wtn/p8d2EWztirbiVvlXMGeC
Li27z9xFqUkn7Tgn8EBfg0+dyjxp91eljlxUondAFjnYwQjI2Kmy+XhWGQQTCRdD
NYtt2uzSPyvJkhF0E3rwbS6mu4KqQcA6HZVxoYTDpY/bGiUMihjNb3Go74bTDiop
B802YHMcxR5muR1ZybgclTIC3jQSbY83hVO/kxFusVupXr+lhX6VuNHIdX39ZzAu
CJR2aBfmskdY9fH1qziqe0DDafhEbw+Z6k2U2O8qX5OB3neCCDB3bRyLv2IQQM1m
Ol1W7LgyHn34pg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:55:49 2025 by rpki-client