Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.mft
File:                     jRvvcwUnquHs-PswhWWdb9_u15c.mft (raw, json)
Hash identifier:          yv7hvq108Z/drMyW1fJsi+q5RZYzWmWZbRE4zRfSAdE=
Subject key identifier:   99:B8:95:50:6B:12:AD:24:92:B5:A0:87:70:2C:30:30:CE:00:BD:E5
Authority key identifier: 8D:1B:EF:73:05:27:AA:E1:EC:F8:FB:30:85:65:9D:6F:DF:EE:D7:97
Certificate issuer:       /CN=8d1bef730527aae1ecf8fb3085659d6fdfeed797
Certificate serial:       0197488CEC78491DD4CCCD470E5B030ADFAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jRvvcwUnquHs-PswhWWdb9_u15c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.mft
Manifest number:          059B
Signing time:             Sat 07 Jun 2025 04:01:24 +0000
Manifest this update:     Sat 07 Jun 2025 04:01:24 +0000
Manifest next update:     Sun 08 Jun 2025 04:01:24 +0000
Files and hashes:         1: h6RNwx35cY5Ou4EEvMzeH5bf3AY.roa (hash: MWzq5pbXjbxkHMC4iAdZ1JJ8dIigq4BPHOpnjCOlKBw=)
                          2: jRvvcwUnquHs-PswhWWdb9_u15c.crl (hash: ymSuX1QxEcgthJApW44gySYslyfHJq/fy2HMq0FZqfI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jRvvcwUnquHs-PswhWWdb9_u15c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:ec:78:49:1d:d4:cc:cd:47:0e:5b:03:0a:df:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d1bef730527aae1ecf8fb3085659d6fdfeed797
        Validity
            Not Before: Jun  7 04:01:24 2025 GMT
            Not After : Jun  8 04:01:24 2025 GMT
        Subject: CN=99b895506b12ad2492b5a087702c3030ce00bde5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b5:64:80:88:a2:b0:48:41:3a:06:eb:5a:2e:
                    df:62:ca:2f:4b:c0:8e:dd:5d:e6:de:1b:66:7e:5d:
                    92:07:2d:f7:1e:b2:e1:50:d8:10:17:4b:7e:15:1c:
                    c9:ed:0a:dc:52:34:d6:27:e4:e7:ca:f5:9f:67:52:
                    7c:78:20:37:c2:2d:40:dc:2f:b5:cd:09:66:7e:2c:
                    5c:6a:04:ce:a1:6b:25:e1:54:f4:95:53:f0:cb:a1:
                    47:ce:4a:eb:ab:7e:4f:b3:4d:27:41:15:d9:94:e8:
                    62:fe:df:b3:d9:71:ad:50:1e:76:04:0c:a2:e2:c3:
                    8a:11:3e:88:a0:f7:74:44:29:6c:82:fd:6d:a4:fc:
                    b8:fe:fa:45:b3:66:34:ac:9d:a4:23:66:de:fb:b6:
                    33:e7:ae:46:37:65:7b:65:ea:0a:52:74:2a:d1:16:
                    94:27:72:3b:9b:f5:6d:49:0c:61:7e:80:b4:e7:be:
                    c8:b3:6e:89:3a:ab:e3:fb:db:28:95:d7:06:46:b0:
                    4b:ce:b1:83:c1:53:97:a3:4c:67:90:3c:da:63:37:
                    ca:35:2b:59:5e:2a:af:bb:23:5d:74:2f:0f:70:1a:
                    d3:1c:d8:50:e3:00:28:9f:7e:62:62:3c:61:bf:06:
                    24:ef:47:7d:5a:15:a9:fd:4e:c0:fc:0d:26:ee:0f:
                    00:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B8:95:50:6B:12:AD:24:92:B5:A0:87:70:2C:30:30:CE:00:BD:E5
            X509v3 Authority Key Identifier:
                keyid:8D:1B:EF:73:05:27:AA:E1:EC:F8:FB:30:85:65:9D:6F:DF:EE:D7:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRvvcwUnquHs-PswhWWdb9_u15c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:20:ad:b1:9c:91:2a:ad:bd:74:98:79:50:0d:5f:e3:b1:4b:
         70:94:50:be:56:d8:31:d8:36:19:ef:22:a9:27:a2:7e:aa:0b:
         a7:ba:00:28:ff:d0:5f:64:84:6f:59:6c:58:c9:c0:2f:be:fa:
         0b:12:1f:f7:fe:9d:c7:90:96:a6:9c:73:04:65:a4:77:c2:4e:
         9c:b2:8e:90:fc:1f:3e:b8:a8:1b:88:85:ae:71:df:b3:c2:3a:
         96:59:79:ac:78:02:f4:4a:94:1e:05:34:6c:2f:63:6a:cd:87:
         2a:03:47:a7:35:24:d3:2e:b3:42:0d:ed:ae:4a:39:b1:08:2e:
         5c:61:cc:7e:57:7f:25:fa:da:13:68:9d:38:ee:89:fd:bd:ac:
         f5:95:67:b9:79:0f:ab:cf:0e:b4:a7:81:e7:21:52:b3:b9:b3:
         25:45:e5:09:ee:b6:17:7e:42:50:27:7d:65:63:c1:40:14:e6:
         3a:7a:3e:dd:0f:b0:3f:c7:92:a7:9d:92:a5:fe:af:3e:a3:ba:
         68:29:cd:3f:c3:e7:92:4f:63:7a:60:8e:83:3c:f1:f1:19:03:
         aa:b4:c3:20:06:f3:3e:8b:78:d8:0c:04:5d:64:29:9f:31:9d:
         c8:84:76:da:0a:dc:91:ab:ca:f9:94:47:d7:23:2f:96:f3:fb:
         cc:7f:c0:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjOx4SR3UzM1HDlsDCt+qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMWJlZjczMDUyN2FhZTFlY2Y4ZmIzMDg1NjU5ZDZmZGZl
ZWQ3OTcwHhcNMjUwNjA3MDQwMTI0WhcNMjUwNjA4MDQwMTI0WjAzMTEwLwYDVQQD
Eyg5OWI4OTU1MDZiMTJhZDI0OTJiNWEwODc3MDJjMzAzMGNlMDBiZGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07VkgIiisEhBOgbrWi7fYsovS8CO
3V3m3htmfl2SBy33HrLhUNgQF0t+FRzJ7QrcUjTWJ+TnyvWfZ1J8eCA3wi1A3C+1
zQlmfixcagTOoWsl4VT0lVPwy6FHzkrrq35Ps00nQRXZlOhi/t+z2XGtUB52BAyi
4sOKET6IoPd0RClsgv1tpPy4/vpFs2Y0rJ2kI2be+7Yz565GN2V7ZeoKUnQq0RaU
J3I7m/VtSQxhfoC0577Is26JOqvj+9soldcGRrBLzrGDwVOXo0xnkDzaYzfKNStZ
XiqvuyNddC8PcBrTHNhQ4wAon35iYjxhvwYk70d9WhWp/U7A/A0m7g8AqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJm4lVBrEq0kkrWgh3AsMDDOAL3lMB8GA1UdIwQY
MBaAFI0b73MFJ6rh7Pj7MIVlnW/f7teXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalJ2dmN3VW5xdUhzLVBzd2hXV2RiOV91MTVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iNzE2YWQtZWQwNC00ZGU0LWI5OTQt
NGFhYjJkNjhmYTVhLzEvalJ2dmN3VW5xdUhzLVBzd2hXV2RiOV91MTVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9iNzE2YWQtZWQwNC00ZGU0LWI5OTQtNGFhYjJkNjhmYTVh
LzEvalJ2dmN3VW5xdUhzLVBzd2hXV2RiOV91MTVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJyCtsZyR
Kq29dJh5UA1f47FLcJRQvlbYMdg2Ge8iqSeifqoLp7oAKP/QX2SEb1lsWMnAL776
CxIf9/6dx5CWppxzBGWkd8JOnLKOkPwfPrioG4iFrnHfs8I6lll5rHgC9EqUHgU0
bC9jas2HKgNHpzUk0y6zQg3trko5sQguXGHMfld/JfraE2idOO6J/b2s9ZVnuXkP
q88OtKeB5yFSs7mzJUXlCe62F35CUCd9ZWPBQBTmOno+3Q+wP8eSp52Spf6vPqO6
aCnNP8Pnkk9jemCOgzzx8RkDqrTDIAbzPot42AwEXWQpnzGdyIR22grckavK+ZRH
1yMvlvP7zH/ABw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:18:51 2025 by rpki-client