Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
File:                     DJvBsU8NllP1FOwWd3G3dVmsY8w.mft (raw, json)
Hash identifier:          bPDLHvI2ToYTem2/Zi113IooFsbaE7MvaPEoluamAwM=
Subject key identifier:   96:C6:AF:BF:60:2C:00:4C:DB:1F:95:77:E1:DE:E5:AC:F4:61:BD:57
Authority key identifier: 0C:9B:C1:B1:4F:0D:96:53:F5:14:EC:16:77:71:B7:75:59:AC:63:CC
Certificate issuer:       /CN=0c9bc1b14f0d9653f514ec167771b77559ac63cc
Certificate serial:       01974C9FB6D841C420731CD67479D43532E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
Manifest number:          157F
Signing time:             Sat 07 Jun 2025 23:00:24 +0000
Manifest this update:     Sat 07 Jun 2025 23:00:24 +0000
Manifest next update:     Sun 08 Jun 2025 23:00:24 +0000
Files and hashes:         1: DJvBsU8NllP1FOwWd3G3dVmsY8w.crl (hash: C2JSP9ZHP6CPVUHXa0UKyS3e/Y9Kp8OXyuLnzTcjxwk=)
                          2: YeUbav6EAp2mAnn2v72RBK_mFZw.roa (hash: 6lsjmApYWIJWgcJbH7Xr/EBHcstui66uMy/hUDB8r3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 23:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:9f:b6:d8:41:c4:20:73:1c:d6:74:79:d4:35:32:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c9bc1b14f0d9653f514ec167771b77559ac63cc
        Validity
            Not Before: Jun  7 23:00:24 2025 GMT
            Not After : Jun  8 23:00:24 2025 GMT
        Subject: CN=96c6afbf602c004cdb1f9577e1dee5acf461bd57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:74:9a:29:d5:d6:6e:f7:87:9b:fb:18:15:b0:
                    c9:83:ef:27:dc:7c:e1:62:5b:ed:9a:8a:97:4f:07:
                    e7:a9:9c:36:38:4c:84:90:83:49:d1:5b:c3:85:7c:
                    fc:de:97:ed:ef:c5:8b:72:9e:33:2e:d0:e4:1f:be:
                    48:cb:24:8f:f4:b0:74:2f:23:61:8c:17:17:7b:cd:
                    40:4f:2a:2c:9e:2a:2c:10:a0:76:59:a8:2c:aa:aa:
                    c1:4f:04:83:cb:17:03:69:b7:4a:17:2f:65:9d:2a:
                    44:cd:80:34:e1:f1:65:1a:8b:1e:f4:ba:63:42:47:
                    c2:0f:ea:12:46:ba:9a:0f:a4:45:a2:f4:22:97:a0:
                    dd:fd:c1:46:0a:22:d2:50:be:ca:f0:de:28:fc:c3:
                    56:53:bd:52:a4:8b:a4:69:80:67:87:d7:29:de:05:
                    fc:fc:86:4b:70:dd:13:41:67:81:0f:77:70:1c:c7:
                    cd:98:2c:f8:67:f7:b9:56:48:61:3e:4b:84:cb:9a:
                    a6:32:53:c2:5e:32:7b:95:6b:9e:8c:54:3c:a9:4e:
                    29:4f:66:5c:b8:c5:b8:b8:a4:98:b9:4c:44:61:9e:
                    1f:be:b1:22:6d:ea:4f:32:c6:fd:bc:1a:d6:71:03:
                    5e:1e:2c:c3:a7:71:c9:59:11:4f:ee:07:60:d7:d8:
                    fa:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C6:AF:BF:60:2C:00:4C:DB:1F:95:77:E1:DE:E5:AC:F4:61:BD:57
            X509v3 Authority Key Identifier:
                keyid:0C:9B:C1:B1:4F:0D:96:53:F5:14:EC:16:77:71:B7:75:59:AC:63:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:76:1f:3a:15:80:18:50:8f:ff:d4:11:0e:94:ae:98:0b:ca:
         04:e5:d3:97:89:2e:d8:bc:6d:12:2a:72:d4:ce:cb:79:fd:06:
         4b:89:a1:4a:fe:2f:8e:c4:d3:0d:c6:b8:6c:ce:5b:38:09:c0:
         c0:14:31:1e:04:53:29:ea:be:49:2f:e4:e5:9e:b6:07:0c:25:
         bd:42:dd:b6:1e:73:f9:4e:a7:25:ec:c9:48:7e:91:88:90:ca:
         55:b8:14:07:67:16:96:d3:c1:1b:d0:cf:6d:3e:30:26:94:52:
         1e:d7:73:98:98:01:42:a6:d7:fa:87:b0:a9:99:f8:7c:22:73:
         18:54:e6:7a:f3:cf:29:3f:67:46:b9:b3:d9:48:33:a8:7e:a4:
         9f:6b:32:c6:63:52:44:6d:6e:2c:9f:0c:df:65:44:ea:2d:9a:
         32:48:64:4c:6d:29:43:f7:21:ff:ac:19:b3:f1:69:a0:c8:45:
         21:7e:66:17:33:8f:10:40:a6:77:5f:82:8d:70:59:a6:ee:ac:
         b9:48:a8:7b:b2:08:80:a3:5e:0c:90:55:ac:fb:9a:3b:2a:0a:
         53:25:e0:84:96:db:79:92:63:c7:4b:91:ca:3d:91:cb:5f:17:
         3d:7f:f9:ac:77:f2:5c:2a:b0:00:16:bf:70:5d:9d:d1:a0:59:
         2d:38:a4:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMn7bYQcQgcxzWdHnUNTLhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjOWJjMWIxNGYwZDk2NTNmNTE0ZWMxNjc3NzFiNzc1NTlh
YzYzY2MwHhcNMjUwNjA3MjMwMDI0WhcNMjUwNjA4MjMwMDI0WjAzMTEwLwYDVQQD
Eyg5NmM2YWZiZjYwMmMwMDRjZGIxZjk1NzdlMWRlZTVhY2Y0NjFiZDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXSaKdXWbveHm/sYFbDJg+8n3Hzh
YlvtmoqXTwfnqZw2OEyEkINJ0VvDhXz83pft78WLcp4zLtDkH75IyySP9LB0LyNh
jBcXe81ATyosniosEKB2WagsqqrBTwSDyxcDabdKFy9lnSpEzYA04fFlGose9Lpj
QkfCD+oSRrqaD6RFovQil6Dd/cFGCiLSUL7K8N4o/MNWU71SpIukaYBnh9cp3gX8
/IZLcN0TQWeBD3dwHMfNmCz4Z/e5VkhhPkuEy5qmMlPCXjJ7lWuejFQ8qU4pT2Zc
uMW4uKSYuUxEYZ4fvrEibepPMsb9vBrWcQNeHizDp3HJWRFP7gdg19j6mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJbGr79gLABM2x+Vd+He5az0Yb1XMB8GA1UdIwQY
MBaAFAybwbFPDZZT9RTsFndxt3VZrGPMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREp2QnNVOE5sbFAxRk93V2QzRzNkVm1zWTh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YzM4ZjQtNWRhZS00ZDJjLTgyMDgt
MWQxOTQ5OWQwOThmLzEvREp2QnNVOE5sbFAxRk93V2QzRzNkVm1zWTh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS83YzM4ZjQtNWRhZS00ZDJjLTgyMDgtMWQxOTQ5OWQwOThm
LzEvREp2QnNVOE5sbFAxRk93V2QzRzNkVm1zWTh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaHYfOhWA
GFCP/9QRDpSumAvKBOXTl4ku2LxtEipy1M7Lef0GS4mhSv4vjsTTDca4bM5bOAnA
wBQxHgRTKeq+SS/k5Z62BwwlvULdth5z+U6nJezJSH6RiJDKVbgUB2cWltPBG9DP
bT4wJpRSHtdzmJgBQqbX+oewqZn4fCJzGFTmevPPKT9nRrmz2UgzqH6kn2syxmNS
RG1uLJ8M32VE6i2aMkhkTG0pQ/ch/6wZs/FpoMhFIX5mFzOPEECmd1+CjXBZpu6s
uUioe7IIgKNeDJBVrPuaOyoKUyXghJbbeZJjx0uRyj2Ry18XPX/5rHfyXCqwABa/
cF2d0aBZLTikYw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 08:54:10 2025 by rpki-client