Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
File:                     dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft (raw, json)
Hash identifier:          jBzsxW0GpTOCHsJh/kxSvbHQJ1p4ehFS5op4JeDZqrQ=
Subject key identifier:   F3:6A:40:D8:D3:F5:87:C3:D0:9F:D6:E3:8B:F6:13:AC:33:A0:0E:41
Authority key identifier: 76:54:B0:CC:2C:3F:6B:75:7F:F5:2C:BA:16:5D:9F:FA:88:CE:D3:0F
Certificate issuer:       /CN=7654b0cc2c3f6b757ff52cba165d9ffa88ced30f
Certificate serial:       01974DB28C6A0CEFC4592F830ECA0BAF1CAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
Manifest number:          1582
Signing time:             Sun 08 Jun 2025 04:00:36 +0000
Manifest this update:     Sun 08 Jun 2025 04:00:36 +0000
Manifest next update:     Mon 09 Jun 2025 04:00:36 +0000
Files and hashes:         1: dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl (hash: zu3KFY0thFi/j0YSmfxjz381nmxRd7aIn8+Vkle+czU=)
                          2: lcvUmc0LhKo6ANY0ugW3mmP3-ik.roa (hash: +B49PEbia08zz2cV1E64Pu8VSfW83hABBkamjBdKnyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:b2:8c:6a:0c:ef:c4:59:2f:83:0e:ca:0b:af:1c:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7654b0cc2c3f6b757ff52cba165d9ffa88ced30f
        Validity
            Not Before: Jun  8 04:00:36 2025 GMT
            Not After : Jun  9 04:00:36 2025 GMT
        Subject: CN=f36a40d8d3f587c3d09fd6e38bf613ac33a00e41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:80:e0:27:dc:5d:cc:3d:34:6e:c1:c2:fc:1b:
                    4c:7d:bb:fe:64:be:82:53:88:ab:29:80:7e:96:36:
                    cf:33:e9:0c:73:73:09:b7:69:ec:38:ae:38:4d:69:
                    92:7d:47:66:66:39:a2:ce:e4:c9:98:1c:45:50:9b:
                    e3:50:00:8a:c8:11:a3:65:8d:43:66:7d:85:c2:50:
                    bf:8e:0a:70:61:e1:de:54:ad:56:cb:b5:6e:ac:94:
                    60:c4:d2:df:a7:54:60:74:90:cf:10:dc:d4:95:e4:
                    0c:f3:c1:5b:c3:8c:1d:7c:51:65:a6:bd:e0:0c:8b:
                    99:91:44:1b:ce:5d:6a:cb:2a:be:59:8d:65:00:c0:
                    39:33:4f:06:d7:99:90:3a:12:5e:5b:97:a6:2d:f7:
                    f0:52:bb:bc:f7:2e:01:8b:08:43:e9:ff:f6:54:89:
                    d2:13:76:5c:19:cc:ac:35:61:ff:54:71:a9:35:24:
                    47:bc:63:c0:a4:2b:9e:a8:90:09:86:df:0f:ed:5c:
                    ef:07:66:7b:75:f2:c6:c0:cb:00:5a:bb:07:50:e8:
                    be:ec:3b:54:79:3c:60:95:12:c8:e5:4c:07:f4:c6:
                    ac:8d:c8:39:75:c0:4b:54:b5:da:b7:0d:7c:09:ef:
                    c5:12:5b:6b:e6:3d:18:bf:77:91:71:08:dc:9f:13:
                    fa:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:6A:40:D8:D3:F5:87:C3:D0:9F:D6:E3:8B:F6:13:AC:33:A0:0E:41
            X509v3 Authority Key Identifier:
                keyid:76:54:B0:CC:2C:3F:6B:75:7F:F5:2C:BA:16:5D:9F:FA:88:CE:D3:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:c3:e5:d1:f3:38:31:43:41:7d:45:57:8e:27:01:47:8a:39:
         22:0f:26:41:15:ad:93:31:b8:c4:41:0c:99:cc:b3:74:41:28:
         97:f1:eb:05:29:b5:77:0d:db:22:04:4c:86:ef:76:e4:ea:5b:
         96:b8:92:2b:ae:ca:22:a8:c9:f0:32:52:50:29:75:fd:94:01:
         c2:86:bb:34:91:4f:d9:8a:0d:b4:bd:cf:39:ac:d2:aa:26:7f:
         c6:70:b7:9f:2f:6d:ef:1e:a3:8f:6e:6c:70:cd:32:c6:b6:80:
         57:00:fc:34:a3:82:ad:dc:34:73:97:21:bc:6d:9c:89:9d:06:
         10:66:de:d5:dc:88:45:f0:95:8d:12:00:40:3f:f7:38:9c:06:
         33:59:07:9f:19:05:11:ce:47:0c:e6:e6:55:b9:51:82:02:00:
         1f:79:cd:3f:0d:1e:f8:f2:56:d4:9b:f3:80:e0:4b:11:61:10:
         a9:1a:ce:7d:79:90:23:66:f7:ad:a6:ca:af:13:26:84:bf:83:
         67:ea:2a:a0:33:63:78:48:51:95:26:84:ee:75:ad:f8:be:93:
         42:ac:85:92:02:01:3e:77:93:9e:56:a5:fc:44:bc:a1:94:42:
         4f:02:80:2e:c9:8a:b4:97:f6:65:e9:2e:8a:6d:b8:41:a9:ed:
         ef:4c:3f:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNsoxqDO/EWS+DDsoLrxytMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NTRiMGNjMmMzZjZiNzU3ZmY1MmNiYTE2NWQ5ZmZhODhj
ZWQzMGYwHhcNMjUwNjA4MDQwMDM2WhcNMjUwNjA5MDQwMDM2WjAzMTEwLwYDVQQD
EyhmMzZhNDBkOGQzZjU4N2MzZDA5ZmQ2ZTM4YmY2MTNhYzMzYTAwZTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIDgJ9xdzD00bsHC/BtMfbv+ZL6C
U4irKYB+ljbPM+kMc3MJt2nsOK44TWmSfUdmZjmizuTJmBxFUJvjUACKyBGjZY1D
Zn2FwlC/jgpwYeHeVK1Wy7VurJRgxNLfp1RgdJDPENzUleQM88Fbw4wdfFFlpr3g
DIuZkUQbzl1qyyq+WY1lAMA5M08G15mQOhJeW5emLffwUru89y4BiwhD6f/2VInS
E3ZcGcysNWH/VHGpNSRHvGPApCueqJAJht8P7VzvB2Z7dfLGwMsAWrsHUOi+7DtU
eTxglRLI5UwH9Masjcg5dcBLVLXatw18Ce/FEltr5j0Yv3eRcQjcnxP6yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPNqQNjT9YfD0J/W44v2E6wzoA5BMB8GA1UdIwQY
MBaAFHZUsMwsP2t1f/UsuhZdn/qIztMPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGxTd3pDd19hM1ZfOVN5NkZsMmYtb2pPMHc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xMjI2NDEtNzFhZi00NTljLWI5YzEt
OGIxNTZkYjRmZjM1LzEvZGxTd3pDd19hM1ZfOVN5NkZsMmYtb2pPMHc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xMjI2NDEtNzFhZi00NTljLWI5YzEtOGIxNTZkYjRmZjM1
LzEvZGxTd3pDd19hM1ZfOVN5NkZsMmYtb2pPMHc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbsPl0fM4
MUNBfUVXjicBR4o5Ig8mQRWtkzG4xEEMmcyzdEEol/HrBSm1dw3bIgRMhu925Opb
lriSK67KIqjJ8DJSUCl1/ZQBwoa7NJFP2YoNtL3POazSqiZ/xnC3ny9t7x6jj25s
cM0yxraAVwD8NKOCrdw0c5chvG2ciZ0GEGbe1dyIRfCVjRIAQD/3OJwGM1kHnxkF
Ec5HDObmVblRggIAH3nNPw0e+PJW1JvzgOBLEWEQqRrOfXmQI2b3rabKrxMmhL+D
Z+oqoDNjeEhRlSaE7nWt+L6TQqyFkgIBPneTnlal/ES8oZRCTwKALsmKtJf2Zeku
im24Qant70w/Zw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:33:52 2025 by rpki-client