Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
File:                     0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft (raw, json)
Hash identifier:          tY7yidd5lnP7MDHaM4JrsVkGNS3EC8ePhxppAbkPJQU=
Subject key identifier:   71:52:96:8F:33:DF:01:68:62:6E:0D:0F:E9:B6:E8:19:96:3C:FA:7A
Authority key identifier: D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
Certificate issuer:       /CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Certificate serial:       01975C813249DC2F785AC43689CC8CA9ADF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
Manifest number:          12BD
Signing time:             Wed 11 Jun 2025 01:01:00 +0000
Manifest this update:     Wed 11 Jun 2025 01:01:00 +0000
Manifest next update:     Thu 12 Jun 2025 01:01:00 +0000
Files and hashes:         1: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl (hash: 37u9LNRLBuYG4hWnlaMIXi21O3asTRFKYouCxCNoh0A=)
                          2: mVZaVH1Pcezupl88BB4A9aDh2ik.roa (hash: x9LGsO42G/kG8E6OK/kSND1fo/r1Rn2Jod3oqumsnE8=)
                          3: pXbNNPwN94jiY7_-VrGgRRgnbvM.roa (hash: iGkJvRDhgHWubYW0daL/Fj7V8HneaI44eRUKNiVEAEM=)
                          4: rVK1f_dmH8IkDbuaYgLPIHaLhTw.roa (hash: ZQMoKPh7bf4f+FY2EcEyUK7kit9BSmoiMPRby8M1WLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 01:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5c:81:32:49:dc:2f:78:5a:c4:36:89:cc:8c:a9:ad:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d283616f1362c25d82ec2a70c4b9750565b1197f
        Validity
            Not Before: Jun 11 01:01:00 2025 GMT
            Not After : Jun 12 01:01:00 2025 GMT
        Subject: CN=7152968f33df0168626e0d0fe9b6e819963cfa7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:be:76:2a:33:20:ba:6e:a9:21:1f:e3:26:63:
                    f3:fe:20:13:97:97:a0:31:ae:41:a6:57:fc:90:76:
                    d0:ab:7c:99:37:bf:cb:b5:28:5d:7d:62:3e:93:67:
                    18:9c:2d:1c:3c:11:7f:4b:b5:59:50:2a:14:95:f9:
                    d9:af:06:3d:a9:f8:ac:1a:cc:8f:ac:fc:59:31:9f:
                    fa:3e:35:d9:c4:c2:89:a5:e2:49:99:ea:8d:06:da:
                    9b:04:3d:fe:0d:b1:08:ab:2a:27:59:d7:82:8a:ab:
                    1f:78:4d:4d:b6:ed:a6:fc:05:d7:61:87:c8:6e:bd:
                    d6:12:93:22:87:75:37:ba:36:d8:e3:a2:19:4c:3b:
                    aa:65:b4:67:56:4c:27:50:bf:14:e6:91:9d:b4:f6:
                    10:2f:56:69:3f:d0:77:d5:e1:ef:9a:d6:d2:96:01:
                    0a:51:24:be:fd:7e:bc:7f:82:a2:30:33:35:d5:d8:
                    a3:54:c0:9e:08:38:16:19:b7:30:30:19:ae:1d:13:
                    59:7f:4e:a8:33:ff:3c:fc:47:cc:72:39:d4:b3:81:
                    b9:14:d7:b7:cf:7d:fd:de:2d:ed:12:b3:9f:0e:48:
                    43:f6:a4:e6:c9:46:f1:5b:97:88:8b:b3:d8:50:c3:
                    aa:a9:67:da:3d:1f:79:11:ca:02:be:87:14:f0:dc:
                    8b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:52:96:8F:33:DF:01:68:62:6E:0D:0F:E9:B6:E8:19:96:3C:FA:7A
            X509v3 Authority Key Identifier:
                keyid:D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:12:0c:f9:28:b2:c9:71:ea:0a:7b:39:10:11:b6:db:23:18:
         5b:55:c9:e1:c5:f4:d3:8a:94:18:af:a6:b8:e4:1f:96:ee:62:
         50:72:3d:95:dd:d4:06:7c:7d:c2:5f:5d:f0:ef:32:a3:d0:46:
         ba:cf:60:42:94:f1:42:bc:04:86:67:6f:04:86:32:40:a2:3c:
         40:df:b7:9a:6f:50:fb:11:a9:a6:98:94:4c:ad:71:1f:62:4e:
         f4:88:05:d4:8c:a4:1a:7f:23:2d:9d:6a:60:ce:45:a5:76:a5:
         50:b6:a2:60:cf:a6:3f:42:dd:cb:d8:5b:95:e2:19:16:1e:c8:
         a1:2f:4c:cb:ad:47:88:24:ff:19:9d:d4:e9:be:85:ea:26:4f:
         50:71:79:69:9e:01:f2:d7:7c:12:a5:01:87:72:f0:9b:50:ba:
         c0:62:ae:79:45:b6:71:47:85:53:a9:3e:a9:e2:ab:04:80:78:
         7b:44:60:1c:e3:6f:5d:f2:d4:3f:cc:41:8a:f0:e8:28:53:aa:
         cc:ca:5c:df:bf:a4:04:d6:51:24:1d:24:26:72:a5:42:2c:6d:
         58:ec:af:de:5d:b3:1e:32:a2:0b:15:a0:cb:a0:e8:99:bb:fb:
         37:0a:9e:6b:1c:14:32:b1:0a:8f:ca:12:79:2e:f0:80:6c:de:
         65:0a:b2:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdcgTJJ3C94WsQ2icyMqa3wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyODM2MTZmMTM2MmMyNWQ4MmVjMmE3MGM0Yjk3NTA1NjVi
MTE5N2YwHhcNMjUwNjExMDEwMTAwWhcNMjUwNjEyMDEwMTAwWjAzMTEwLwYDVQQD
Eyg3MTUyOTY4ZjMzZGYwMTY4NjI2ZTBkMGZlOWI2ZTgxOTk2M2NmYTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8752KjMgum6pIR/jJmPz/iATl5eg
Ma5Bplf8kHbQq3yZN7/LtShdfWI+k2cYnC0cPBF/S7VZUCoUlfnZrwY9qfisGsyP
rPxZMZ/6PjXZxMKJpeJJmeqNBtqbBD3+DbEIqyonWdeCiqsfeE1Ntu2m/AXXYYfI
br3WEpMih3U3ujbY46IZTDuqZbRnVkwnUL8U5pGdtPYQL1ZpP9B31eHvmtbSlgEK
USS+/X68f4KiMDM11dijVMCeCDgWGbcwMBmuHRNZf06oM/88/EfMcjnUs4G5FNe3
z3393i3tErOfDkhD9qTmyUbxW5eIi7PYUMOqqWfaPR95EcoCvocU8NyLbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHFSlo8z3wFoYm4ND+m26BmWPPp6MB8GA1UdIwQY
MBaAFNKDYW8TYsJdguwqcMS5dQVlsRl/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG9OaGJ4Tml3bDJDN0Nwd3hMbDFCV1d4R1g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8yZmJjY2MtNjRiNi00ZjY2LTg5Njkt
YTZkMjdjNDMxODE4LzEvMG9OaGJ4Tml3bDJDN0Nwd3hMbDFCV1d4R1g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8yZmJjY2MtNjRiNi00ZjY2LTg5NjktYTZkMjdjNDMxODE4
LzEvMG9OaGJ4Tml3bDJDN0Nwd3hMbDFCV1d4R1g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfRIM+Siy
yXHqCns5EBG22yMYW1XJ4cX004qUGK+muOQflu5iUHI9ld3UBnx9wl9d8O8yo9BG
us9gQpTxQrwEhmdvBIYyQKI8QN+3mm9Q+xGpppiUTK1xH2JO9IgF1IykGn8jLZ1q
YM5FpXalULaiYM+mP0Ldy9hbleIZFh7IoS9My61HiCT/GZ3U6b6F6iZPUHF5aZ4B
8td8EqUBh3Lwm1C6wGKueUW2cUeFU6k+qeKrBIB4e0RgHONvXfLUP8xBivDoKFOq
zMpc37+kBNZRJB0kJnKlQixtWOyv3l2zHjKiCxWgy6Dombv7NwqeaxwUMrEKj8oS
eS7wgGzeZQqy7A==
-----END CERTIFICATE-----
Generated at Wed Jun 11 11:20:44 2025 by rpki-client