Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
File:                     Vk6tOAljA7xLah8rAuG5G-SEkUY.mft (raw, json)
Hash identifier:          6bjVAKLyMV6JSzQUgUB9Dx77AcXXdWJtmri7LD+J2TI=
Subject key identifier:   09:97:42:78:DF:B8:26:A5:AD:34:06:59:C9:FE:0B:15:C1:66:35:4C
Authority key identifier: 56:4E:AD:38:09:63:03:BC:4B:6A:1F:2B:02:E1:B9:1B:E4:84:91:46
Certificate issuer:       /CN=564ead38096303bc4b6a1f2b02e1b91be4849146
Certificate serial:       019765F1934D15DC849101B8193FC59438D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
Manifest number:          0AD2
Signing time:             Thu 12 Jun 2025 21:00:19 +0000
Manifest this update:     Thu 12 Jun 2025 21:00:19 +0000
Manifest next update:     Fri 13 Jun 2025 21:00:19 +0000
Files and hashes:         1: Q1FzunJJgm72n4cjnOFriVc18KU.roa (hash: 9QqXBfYauaWBi+EvcV0793mlb9DkJUiHomWOWZ5zJGk=)
                          2: Vk6tOAljA7xLah8rAuG5G-SEkUY.crl (hash: TSfdAdqA8mD7SYaY/NoOIzAB2nsgdjnImQqCawsNAHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 15:17:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:65:f1:93:4d:15:dc:84:91:01:b8:19:3f:c5:94:38:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=564ead38096303bc4b6a1f2b02e1b91be4849146
        Validity
            Not Before: Jun 12 21:00:19 2025 GMT
            Not After : Jun 13 21:00:19 2025 GMT
        Subject: CN=09974278dfb826a5ad340659c9fe0b15c166354c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:92:70:0a:c9:c0:54:05:22:e4:fc:cf:0e:e3:
                    7d:a1:29:13:2c:0d:0b:d9:3e:4e:63:0d:64:f3:21:
                    54:9a:c0:ae:a5:4d:20:31:63:fe:e0:f6:84:dd:79:
                    ed:c7:c6:77:dd:db:86:52:d4:ea:ba:cd:66:19:d1:
                    eb:06:9a:91:af:f0:98:4b:c7:f6:5c:04:d1:51:14:
                    07:05:16:f6:95:9e:f4:c2:6b:4a:31:b9:3a:3e:21:
                    d5:d7:0f:40:7d:87:31:ed:87:48:4a:96:e5:ab:6f:
                    f7:50:62:3a:03:db:6e:03:fa:02:70:ba:55:1c:16:
                    12:08:1d:3f:56:b7:74:75:22:03:42:70:3b:1e:28:
                    89:36:a9:1a:1f:a9:1f:d7:13:25:38:32:59:5e:8b:
                    69:a7:0c:99:03:49:b8:19:77:aa:c6:7d:f1:b8:0d:
                    81:0d:36:0a:b8:d6:bf:70:2c:29:ed:78:ed:6d:e7:
                    60:06:de:1e:ab:07:d6:32:0a:b4:c8:a1:e1:de:6a:
                    c9:8d:fa:5d:26:f4:f9:f7:33:76:9a:5c:1f:f2:ee:
                    60:b8:8e:67:59:46:6f:4b:f3:15:7f:ca:d3:8f:31:
                    84:cd:4f:e8:f8:c7:98:d2:ad:04:c0:ca:bc:53:c6:
                    9f:cd:f0:8c:46:ec:da:c0:fd:00:d4:fd:20:04:19:
                    40:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:97:42:78:DF:B8:26:A5:AD:34:06:59:C9:FE:0B:15:C1:66:35:4C
            X509v3 Authority Key Identifier:
                keyid:56:4E:AD:38:09:63:03:BC:4B:6A:1F:2B:02:E1:B9:1B:E4:84:91:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:a6:83:fa:f8:b1:16:61:ff:a0:89:d0:97:d9:b3:12:9f:ed:
         4a:86:b5:40:4e:71:58:8d:5c:43:1b:95:a8:1b:71:38:7e:ef:
         54:1c:b3:28:55:f1:de:ba:87:fb:9e:37:be:ae:35:1a:bb:42:
         98:d7:15:aa:ce:f7:94:63:43:04:e7:53:a8:7c:6a:53:96:90:
         52:0e:81:77:83:29:72:69:35:a4:2f:86:8d:97:c7:3b:c7:05:
         ca:b7:33:5d:9d:65:1f:00:4c:96:ca:26:4a:12:74:f3:a8:29:
         00:5a:5d:c9:38:83:3a:91:59:50:52:66:ab:59:31:85:59:a6:
         70:62:15:35:dd:df:60:5a:37:4c:a0:22:73:83:d0:fb:aa:a6:
         c2:53:9a:4d:d6:a2:01:cf:03:bc:b3:5c:8b:0b:e2:62:04:a7:
         df:b5:9d:5f:8c:39:2c:d3:2d:57:c8:f8:1d:02:55:a6:f0:e8:
         83:38:60:43:19:89:27:6b:ed:4d:c8:3f:f4:68:4b:2d:b6:93:
         43:ab:34:ad:f2:9c:28:80:63:f4:f0:f8:c5:cf:a5:7b:13:9a:
         56:22:cf:63:59:0e:80:c8:5f:44:f4:e9:02:46:be:45:09:d6:
         6a:e4:c5:ae:3d:4a:58:e3:85:ba:1c:ac:63:5f:ad:8b:00:3d:
         a0:07:19:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdl8ZNNFdyEkQG4GT/FlDjWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NGVhZDM4MDk2MzAzYmM0YjZhMWYyYjAyZTFiOTFiZTQ4
NDkxNDYwHhcNMjUwNjEyMjEwMDE5WhcNMjUwNjEzMjEwMDE5WjAzMTEwLwYDVQQD
EygwOTk3NDI3OGRmYjgyNmE1YWQzNDA2NTljOWZlMGIxNWMxNjYzNTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJJwCsnAVAUi5PzPDuN9oSkTLA0L
2T5OYw1k8yFUmsCupU0gMWP+4PaE3Xntx8Z33duGUtTqus1mGdHrBpqRr/CYS8f2
XATRURQHBRb2lZ70wmtKMbk6PiHV1w9AfYcx7YdISpblq2/3UGI6A9tuA/oCcLpV
HBYSCB0/Vrd0dSIDQnA7HiiJNqkaH6kf1xMlODJZXotppwyZA0m4GXeqxn3xuA2B
DTYKuNa/cCwp7XjtbedgBt4eqwfWMgq0yKHh3mrJjfpdJvT59zN2mlwf8u5guI5n
WUZvS/MVf8rTjzGEzU/o+MeY0q0EwMq8U8afzfCMRuzawP0A1P0gBBlAlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmXQnjfuCalrTQGWcn+CxXBZjVMMB8GA1UdIwQY
MBaAFFZOrTgJYwO8S2ofKwLhuRvkhJFGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVms2dE9BbGpBN3hMYWg4ckF1RzVHLVNFa1VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8xNDI1YTYtMTg2My00MmEwLTgzMjMt
M2M3Mjk2N2ZmN2MxLzEvVms2dE9BbGpBN3hMYWg4ckF1RzVHLVNFa1VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8xNDI1YTYtMTg2My00MmEwLTgzMjMtM2M3Mjk2N2ZmN2Mx
LzEvVms2dE9BbGpBN3hMYWg4ckF1RzVHLVNFa1VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHqaD+vix
FmH/oInQl9mzEp/tSoa1QE5xWI1cQxuVqBtxOH7vVByzKFXx3rqH+543vq41GrtC
mNcVqs73lGNDBOdTqHxqU5aQUg6Bd4Mpcmk1pC+GjZfHO8cFyrczXZ1lHwBMlsom
ShJ086gpAFpdyTiDOpFZUFJmq1kxhVmmcGIVNd3fYFo3TKAic4PQ+6qmwlOaTdai
Ac8DvLNciwviYgSn37WdX4w5LNMtV8j4HQJVpvDogzhgQxmJJ2vtTcg/9GhLLbaT
Q6s0rfKcKIBj9PD4xc+lexOaViLPY1kOgMhfRPTpAka+RQnWauTFrj1KWOOFuhys
Y1+tiwA9oAcZNQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 00:23:12 2025 by rpki-client