Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.mft
File:                     u_mPikT9YO72t0nSFOVsgRiXZgw.mft (raw, json)
Hash identifier:          CozvxnmMflBvZPWHsMYUPQ7ndS7jVqKAG4hZtBsOgBU=
Subject key identifier:   BB:79:C9:73:50:DB:57:DC:93:E1:77:07:8E:43:7D:80:57:49:50:8C
Authority key identifier: BB:F9:8F:8A:44:FD:60:EE:F6:B7:49:D2:14:E5:6C:81:18:97:66:0C
Certificate issuer:       /CN=bbf98f8a44fd60eef6b749d214e56c811897660c
Certificate serial:       019750EAAADF7EB9F44523A7989CA617A01A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u_mPikT9YO72t0nSFOVsgRiXZgw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.mft
Manifest number:          6C
Signing time:             Sun 08 Jun 2025 19:00:45 +0000
Manifest this update:     Sun 08 Jun 2025 19:00:45 +0000
Manifest next update:     Mon 09 Jun 2025 19:00:45 +0000
Files and hashes:         1: u_mPikT9YO72t0nSFOVsgRiXZgw.crl (hash: /CIfJin3ijFseuz2PpnAh6xZ0SE73CipdTWDkkwOw0E=)
                          2: xkzazz831mQOXNGmSz3uWho6Ohk.roa (hash: kcYkLf+1B2AuNTj7vUuf68FA8ProRpgWzdWOYFENYJM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u_mPikT9YO72t0nSFOVsgRiXZgw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:ea:aa:df:7e:b9:f4:45:23:a7:98:9c:a6:17:a0:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbf98f8a44fd60eef6b749d214e56c811897660c
        Validity
            Not Before: Jun  8 19:00:45 2025 GMT
            Not After : Jun  9 19:00:45 2025 GMT
        Subject: CN=bb79c97350db57dc93e177078e437d805749508c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:45:21:e0:d9:60:fd:86:4e:e1:47:b8:3d:28:
                    e7:9f:39:0a:39:b7:6f:86:b4:7a:4e:6b:61:d7:39:
                    00:e3:aa:f4:83:e1:81:8d:58:3a:3f:71:4a:24:ff:
                    30:ae:0a:8f:ca:6d:a3:09:e7:16:f1:ba:2f:6d:87:
                    26:36:32:86:e9:6f:72:d3:05:89:4f:2e:ea:7e:15:
                    0b:a0:84:dc:d1:b5:26:af:04:58:24:6e:ef:59:31:
                    75:21:68:01:04:69:86:97:d4:b0:84:8f:b8:17:05:
                    57:a3:2e:e6:02:f6:71:5e:67:50:45:1f:d4:22:a8:
                    12:f9:9f:ba:1a:df:e0:90:a2:19:93:03:76:d4:f0:
                    bb:8e:50:be:02:3f:30:d9:71:25:5a:c9:25:ac:59:
                    f5:32:75:4c:23:b1:f4:a6:cf:ba:2a:92:94:bf:6c:
                    06:e6:69:33:68:3c:7c:c0:bc:ab:f8:20:79:af:74:
                    b0:40:9a:39:76:1f:b3:5a:80:ae:41:d1:ab:8e:33:
                    0e:d2:0d:92:39:4d:57:2e:7e:bf:c3:44:7d:c0:43:
                    22:68:fd:81:54:5b:d4:8c:5d:e0:6f:6f:e5:d0:9d:
                    ba:e7:96:75:c5:e6:3e:8c:16:12:c7:5f:d4:a1:17:
                    e5:84:69:24:e2:5e:98:7d:c8:57:22:67:f2:49:10:
                    50:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:79:C9:73:50:DB:57:DC:93:E1:77:07:8E:43:7D:80:57:49:50:8C
            X509v3 Authority Key Identifier:
                keyid:BB:F9:8F:8A:44:FD:60:EE:F6:B7:49:D2:14:E5:6C:81:18:97:66:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_mPikT9YO72t0nSFOVsgRiXZgw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:5b:82:a6:21:e8:93:77:c8:bc:6d:aa:c6:05:dd:e3:cd:69:
         21:22:0a:ba:a0:ec:6b:93:c9:ad:3a:78:a8:84:ee:ed:1e:b9:
         58:2b:42:4a:d1:a1:8e:f8:5f:ed:29:6e:67:97:03:ed:c6:54:
         98:b3:ae:31:75:c7:ae:86:f6:8d:8f:00:68:f6:74:32:bd:53:
         2f:e0:e4:27:de:35:ac:9a:9a:da:59:9b:72:30:cd:c5:7d:93:
         c7:6c:84:2b:4b:7f:09:28:33:69:b8:20:7b:53:27:98:5d:8d:
         7c:30:37:df:05:11:ae:f4:76:1d:b7:6d:c4:e7:9e:b6:9f:0e:
         c5:ea:cc:c3:44:0c:52:21:3b:2e:f3:2d:0a:97:8c:10:b7:37:
         0e:fb:69:f5:a2:82:08:9f:f5:4c:bf:cd:7a:c4:90:ba:c1:f9:
         79:de:cb:38:3f:b0:c5:8f:90:96:a7:47:6c:11:31:78:68:0b:
         83:da:26:6f:9e:bf:4c:16:91:9c:19:f4:91:cf:c4:96:03:bf:
         88:13:10:28:94:cc:f1:40:0e:88:c6:2e:49:2a:8d:2d:84:28:
         c8:66:01:b9:67:92:16:47:24:f9:93:75:84:be:35:0e:20:b8:
         87:a7:8f:8e:d8:83:8a:ad:d5:76:96:2c:2d:61:46:74:fb:90:
         43:a2:9b:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQ6qrffrn0RSOnmJymF6AaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZjk4ZjhhNDRmZDYwZWVmNmI3NDlkMjE0ZTU2YzgxMTg5
NzY2MGMwHhcNMjUwNjA4MTkwMDQ1WhcNMjUwNjA5MTkwMDQ1WjAzMTEwLwYDVQQD
EyhiYjc5Yzk3MzUwZGI1N2RjOTNlMTc3MDc4ZTQzN2Q4MDU3NDk1MDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EUh4Nlg/YZO4Ue4PSjnnzkKObdv
hrR6Tmth1zkA46r0g+GBjVg6P3FKJP8wrgqPym2jCecW8bovbYcmNjKG6W9y0wWJ
Ty7qfhULoITc0bUmrwRYJG7vWTF1IWgBBGmGl9SwhI+4FwVXoy7mAvZxXmdQRR/U
IqgS+Z+6Gt/gkKIZkwN21PC7jlC+Aj8w2XElWsklrFn1MnVMI7H0ps+6KpKUv2wG
5mkzaDx8wLyr+CB5r3SwQJo5dh+zWoCuQdGrjjMO0g2SOU1XLn6/w0R9wEMiaP2B
VFvUjF3gb2/l0J2655Z1xeY+jBYSx1/UoRflhGkk4l6YfchXImfySRBQyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLt5yXNQ21fck+F3B45DfYBXSVCMMB8GA1UdIwQY
MBaAFLv5j4pE/WDu9rdJ0hTlbIEYl2YMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9tUGlrVDlZTzcydDBuU0ZPVnNnUmlYWmd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wYjRiNzAtNmQ2MS00M2M2LTg5ODYt
NDE5MzM5NTViNzNmLzEvdV9tUGlrVDlZTzcydDBuU0ZPVnNnUmlYWmd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8wYjRiNzAtNmQ2MS00M2M2LTg5ODYtNDE5MzM5NTViNzNm
LzEvdV9tUGlrVDlZTzcydDBuU0ZPVnNnUmlYWmd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbFuCpiHo
k3fIvG2qxgXd481pISIKuqDsa5PJrTp4qITu7R65WCtCStGhjvhf7SluZ5cD7cZU
mLOuMXXHrob2jY8AaPZ0Mr1TL+DkJ941rJqa2lmbcjDNxX2Tx2yEK0t/CSgzabgg
e1MnmF2NfDA33wURrvR2HbdtxOeetp8OxerMw0QMUiE7LvMtCpeMELc3Dvtp9aKC
CJ/1TL/NesSQusH5ed7LOD+wxY+QlqdHbBExeGgLg9omb56/TBaRnBn0kc/ElgO/
iBMQKJTM8UAOiMYuSSqNLYQoyGYBuWeSFkck+ZN1hL41DiC4h6ePjtiDiq3VdpYs
LWFGdPuQQ6Kbjw==
-----END CERTIFICATE-----
Generated at Mon Jun 9 02:16:47 2025 by rpki-client