Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft
File:                     SLo3AWkdKSivrTobVzWib0yZz_Y.mft (raw, json)
Hash identifier:          XlLOc8fpUZoMwpdjvhQRJXOGYTkbip219NnRBLye3O4=
Subject key identifier:   B6:BE:A7:28:93:70:CE:76:39:FA:27:3C:58:33:38:E0:9A:44:47:D7
Authority key identifier: 48:BA:37:01:69:1D:29:28:AF:AD:3A:1B:57:35:A2:6F:4C:99:CF:F6
Certificate issuer:       /CN=48ba3701691d2928afad3a1b5735a26f4c99cff6
Certificate serial:       019923312B911E2EAA17DDCB0D8B012E605B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft
Manifest number:          1581
Signing time:             Sun 07 Sep 2025 08:00:48 +0000
Manifest this update:     Sun 07 Sep 2025 08:00:48 +0000
Manifest next update:     Mon 08 Sep 2025 08:00:48 +0000
Files and hashes:         1: 2p_ZO09LakS0A7u5Qz0wGibD5fU.roa (hash: dieDhkHaU+F1D9ZZPlcY6giEpQMREkK77VG8/1P3jjc=)
                          2: SLo3AWkdKSivrTobVzWib0yZz_Y.crl (hash: v0Tk9HgALk0GfOXg6toCAIzCuXph1MqfDBRIdWnBggY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:31:2b:91:1e:2e:aa:17:dd:cb:0d:8b:01:2e:60:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48ba3701691d2928afad3a1b5735a26f4c99cff6
        Validity
            Not Before: Sep  7 08:00:48 2025 GMT
            Not After : Sep  8 08:00:48 2025 GMT
        Subject: CN=b6bea7289370ce7639fa273c583338e09a4447d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:72:fb:3e:8e:b3:eb:b4:53:e7:6d:94:b8:de:
                    43:65:9a:5f:f5:42:60:9e:11:60:60:e6:3f:cd:ab:
                    1e:67:80:b1:a3:89:85:0c:86:b6:51:5c:5e:96:69:
                    99:8c:c7:11:5b:99:2d:1a:94:05:35:f1:1e:f4:51:
                    ef:95:4a:93:26:2d:a1:2b:9b:0c:c4:f1:28:5d:ad:
                    aa:7c:0a:ea:ab:4a:c6:95:ba:21:9b:38:d9:71:fc:
                    de:50:8a:8d:38:16:23:23:5f:92:c1:b3:fb:ef:89:
                    f4:82:ae:b4:a9:ee:bc:f1:a5:72:58:ec:85:4c:89:
                    ef:83:3b:63:15:28:cd:b7:d9:60:8c:c1:51:5e:41:
                    87:80:33:09:dc:f9:33:26:38:2d:d6:d0:82:1b:ad:
                    e3:80:ee:a6:28:91:dc:63:c0:7b:a5:1d:36:21:8a:
                    77:95:62:74:19:22:12:6b:b5:8f:c7:be:50:02:5c:
                    2b:d8:c6:ed:c8:a8:96:43:02:78:07:54:21:dc:5a:
                    6d:ba:22:f9:5d:33:cb:61:6a:23:e0:b4:8d:3d:7f:
                    b8:3b:77:29:12:e1:9b:8b:61:82:56:86:f1:0e:0c:
                    92:98:93:a8:28:41:43:84:91:0b:4c:05:b0:43:a9:
                    21:8a:33:7e:58:c0:ab:03:ba:03:fa:64:f7:23:0e:
                    bd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:BE:A7:28:93:70:CE:76:39:FA:27:3C:58:33:38:E0:9A:44:47:D7
            X509v3 Authority Key Identifier:
                keyid:48:BA:37:01:69:1D:29:28:AF:AD:3A:1B:57:35:A2:6F:4C:99:CF:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:c5:1a:7f:c8:98:a6:1d:6e:27:87:3d:4a:8b:3f:f9:28:49:
         35:89:e8:fb:a4:46:6a:d5:bd:9d:ba:d3:c2:75:77:b1:ce:df:
         31:32:d5:e6:a2:24:f5:4f:90:67:5e:17:7a:42:f7:b1:81:e3:
         d9:0a:da:31:5f:58:25:56:ec:3a:72:2f:31:e8:82:4d:c8:d9:
         7b:77:84:37:61:07:1d:6e:c2:b1:a8:6b:10:fb:79:5b:cf:c4:
         50:9d:c7:99:ca:5c:6b:dc:48:b6:48:d2:52:51:38:56:31:90:
         de:b5:fd:8f:54:78:f3:8a:f8:60:84:64:d8:90:05:a0:c2:c2:
         7c:c5:d3:55:62:b3:56:79:28:ba:20:d0:bf:5d:72:df:1e:32:
         91:45:ed:65:b0:c5:30:19:57:b8:87:68:64:46:12:0e:51:df:
         0e:43:56:1b:77:af:bf:ed:49:2c:8d:20:8f:e8:b9:bb:eb:9f:
         96:4b:4c:0a:91:ed:cc:2e:3a:e1:25:5c:81:c7:4b:0c:75:19:
         d9:6e:07:35:d7:43:5f:fc:dd:ea:2c:10:07:49:11:cd:af:c7:
         65:6f:ef:19:75:6f:80:8f:32:38:57:9c:82:ca:f8:22:68:1e:
         17:d6:b5:1a:5f:8d:e4:11:b9:24:af:1d:82:0f:63:c1:4a:b5:
         7a:f8:df:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMSuRHi6qF93LDYsBLmBbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4YmEzNzAxNjkxZDI5MjhhZmFkM2ExYjU3MzVhMjZmNGM5
OWNmZjYwHhcNMjUwOTA3MDgwMDQ4WhcNMjUwOTA4MDgwMDQ4WjAzMTEwLwYDVQQD
EyhiNmJlYTcyODkzNzBjZTc2MzlmYTI3M2M1ODMzMzhlMDlhNDQ0N2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnL7Po6z67RT522UuN5DZZpf9UJg
nhFgYOY/zaseZ4Cxo4mFDIa2UVxelmmZjMcRW5ktGpQFNfEe9FHvlUqTJi2hK5sM
xPEoXa2qfArqq0rGlbohmzjZcfzeUIqNOBYjI1+SwbP774n0gq60qe688aVyWOyF
TInvgztjFSjNt9lgjMFRXkGHgDMJ3PkzJjgt1tCCG63jgO6mKJHcY8B7pR02IYp3
lWJ0GSISa7WPx75QAlwr2MbtyKiWQwJ4B1Qh3FptuiL5XTPLYWoj4LSNPX+4O3cp
EuGbi2GCVobxDgySmJOoKEFDhJELTAWwQ6khijN+WMCrA7oD+mT3Iw69lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLa+pyiTcM52OfonPFgzOOCaREfXMB8GA1UdIwQY
MBaAFEi6NwFpHSkor606G1c1om9Mmc/2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0xvM0FXa2RLU2l2clRvYlZ6V2liMHlael9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83YTg3ODEtZTM2My00NmU0LTk3ZWQt
ZTNlODE1MWE4NzYwLzEvU0xvM0FXa2RLU2l2clRvYlZ6V2liMHlael9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi83YTg3ODEtZTM2My00NmU0LTk3ZWQtZTNlODE1MWE4NzYw
LzEvU0xvM0FXa2RLU2l2clRvYlZ6V2liMHlael9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI8Uaf8iY
ph1uJ4c9Sos/+ShJNYno+6RGatW9nbrTwnV3sc7fMTLV5qIk9U+QZ14XekL3sYHj
2QraMV9YJVbsOnIvMeiCTcjZe3eEN2EHHW7CsahrEPt5W8/EUJ3Hmcpca9xItkjS
UlE4VjGQ3rX9j1R484r4YIRk2JAFoMLCfMXTVWKzVnkouiDQv11y3x4ykUXtZbDF
MBlXuIdoZEYSDlHfDkNWG3evv+1JLI0gj+i5u+uflktMCpHtzC464SVcgcdLDHUZ
2W4HNddDX/zd6iwQB0kRza/HZW/vGXVvgI8yOFecgsr4ImgeF9a1Gl+N5BG5JK8d
gg9jwUq1evjfHw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:32:52 2025 by rpki-client