Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
File:                     g8bKhlGbVtTRhzr24lfefpfzyKw.mft (raw, json)
Hash identifier:          6hBMWeBnuN57vUsId+wZSh6O8n9CUjGhlmKsWAEcEn8=
Subject key identifier:   05:3D:DE:96:E1:33:71:38:3B:41:AB:ED:E7:DC:2E:F3:2E:36:B2:91
Authority key identifier: 83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC
Certificate issuer:       /CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac
Certificate serial:       019761705D5D0EE3C15D1F661126F7E17626
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
Manifest number:          0A83
Signing time:             Thu 12 Jun 2025 00:00:43 +0000
Manifest this update:     Thu 12 Jun 2025 00:00:43 +0000
Manifest next update:     Fri 13 Jun 2025 00:00:43 +0000
Files and hashes:         1: VgjHvOxBU8eTA_iP_fNUCn81xQg.roa (hash: JJu0mzqFx7iO9SO/UVIC5Bf9dy6p0refWuwflirPpkA=)
                          2: g8bKhlGbVtTRhzr24lfefpfzyKw.crl (hash: YRWGJQdPcuD7oHQdVBLrk5KjX5jr4+PvrV8Z0ed+z5E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 21:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:61:70:5d:5d:0e:e3:c1:5d:1f:66:11:26:f7:e1:76:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac
        Validity
            Not Before: Jun 12 00:00:43 2025 GMT
            Not After : Jun 13 00:00:43 2025 GMT
        Subject: CN=053dde96e13371383b41abede7dc2ef32e36b291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7d:48:98:f2:fa:c7:89:ac:55:b4:a3:9f:be:
                    22:3f:53:3c:ba:e6:bc:6d:18:42:1c:60:c9:a4:f5:
                    cc:e2:11:18:aa:5e:e2:e3:48:55:d1:5d:a7:93:79:
                    f8:db:6e:e9:cf:02:c9:b7:af:63:60:1c:5e:c3:87:
                    df:26:8f:3f:b2:6d:c7:49:aa:6f:22:d5:31:90:60:
                    62:c4:5a:62:5e:52:3f:0e:f6:8f:db:8b:74:4c:14:
                    5d:9c:52:7d:d5:ef:04:1b:3d:1d:99:fd:3a:4f:5e:
                    48:29:a7:bd:9e:7f:6f:8b:e0:7f:93:61:01:23:c8:
                    e0:24:29:1b:aa:40:7d:96:00:75:af:2d:fd:0b:70:
                    fe:72:2d:71:ba:8b:2a:b0:c6:fd:db:f7:0c:41:21:
                    13:67:f3:81:92:de:af:e5:e0:11:bb:cc:eb:85:5a:
                    c4:23:a2:50:fa:43:6c:c8:04:bb:dd:a6:c4:c7:70:
                    4d:d0:f4:0e:c5:eb:56:a6:88:87:65:56:06:4a:07:
                    8d:f8:04:60:77:5c:81:2d:7f:01:16:b0:58:d5:6c:
                    90:46:6f:24:a4:d8:76:96:9e:27:83:0e:b9:c0:41:
                    50:eb:a9:32:c2:76:ff:39:9d:a5:62:cf:45:c0:64:
                    6d:53:65:df:81:a4:cc:d6:45:9c:06:9d:b5:31:61:
                    55:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3D:DE:96:E1:33:71:38:3B:41:AB:ED:E7:DC:2E:F3:2E:36:B2:91
            X509v3 Authority Key Identifier:
                keyid:83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:0e:62:e4:b1:73:7f:d8:82:35:6f:bc:90:b8:ec:a4:95:bb:
         1d:0b:85:ff:aa:21:72:e3:ab:9d:aa:51:39:bd:b2:f8:24:ce:
         b9:ce:8f:53:96:41:61:69:24:5e:bc:e1:28:0e:2e:eb:51:21:
         2b:90:c8:63:9e:cd:b1:84:2a:e8:fd:47:78:43:8a:07:18:42:
         ac:78:91:c5:d8:5d:af:94:f3:d4:67:e6:c1:b8:bf:5b:63:c5:
         9e:85:d2:c7:19:b8:d1:70:13:6d:ac:0b:e3:68:b5:5c:9f:7f:
         bd:03:7a:cb:e4:fd:63:90:c9:63:f2:ab:14:48:5e:19:bf:19:
         ca:39:c0:63:5a:f6:54:89:ac:6a:8b:be:a1:22:5e:40:17:2a:
         2b:4e:5f:5c:70:9b:e0:3a:35:86:c3:2a:8d:da:a9:67:89:06:
         01:8a:ee:36:fb:e6:8a:a1:e5:89:0f:65:f9:c1:08:c0:35:28:
         3b:0f:ec:78:9f:d3:9e:72:f1:e8:b3:fc:d1:f3:42:34:39:d7:
         d4:ad:1f:70:68:10:99:aa:25:f5:be:45:07:0b:fc:d5:b9:37:
         a4:3b:4b:72:b4:db:10:d7:db:0e:69:50:99:ae:83:69:ab:27:
         ee:ec:3a:6f:cb:4d:11:9a:c4:ea:30:a2:d8:ab:77:7e:95:8e:
         8e:74:cc:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdhcF1dDuPBXR9mESb34XYmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYzZjYTg2NTE5YjU2ZDRkMTg3M2FmNmUyNTdkZTdlOTdm
M2M4YWMwHhcNMjUwNjEyMDAwMDQzWhcNMjUwNjEzMDAwMDQzWjAzMTEwLwYDVQQD
EygwNTNkZGU5NmUxMzM3MTM4M2I0MWFiZWRlN2RjMmVmMzJlMzZiMjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0H1ImPL6x4msVbSjn74iP1M8uua8
bRhCHGDJpPXM4hEYql7i40hV0V2nk3n4227pzwLJt69jYBxew4ffJo8/sm3HSapv
ItUxkGBixFpiXlI/DvaP24t0TBRdnFJ91e8EGz0dmf06T15IKae9nn9vi+B/k2EB
I8jgJCkbqkB9lgB1ry39C3D+ci1xuosqsMb92/cMQSETZ/OBkt6v5eARu8zrhVrE
I6JQ+kNsyAS73abEx3BN0PQOxetWpoiHZVYGSgeN+ARgd1yBLX8BFrBY1WyQRm8k
pNh2lp4ngw65wEFQ66kywnb/OZ2lYs9FwGRtU2XfgaTM1kWcBp21MWFV3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAU93pbhM3E4O0Gr7efcLvMuNrKRMB8GA1UdIwQY
MBaAFIPGyoZRm1bU0Yc69uJX3n6X88isMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzhiS2hsR2JWdFRSaHpyMjRsZmVmcGZ6eUt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85OTgyOTYtOTQ2NC00ZmIyLTk4ZTYt
Y2E4YWY0ZjUzNTZjLzEvZzhiS2hsR2JWdFRSaHpyMjRsZmVmcGZ6eUt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni85OTgyOTYtOTQ2NC00ZmIyLTk4ZTYtY2E4YWY0ZjUzNTZj
LzEvZzhiS2hsR2JWdFRSaHpyMjRsZmVmcGZ6eUt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYw5i5LFz
f9iCNW+8kLjspJW7HQuF/6ohcuOrnapROb2y+CTOuc6PU5ZBYWkkXrzhKA4u61Eh
K5DIY57NsYQq6P1HeEOKBxhCrHiRxdhdr5Tz1Gfmwbi/W2PFnoXSxxm40XATbawL
42i1XJ9/vQN6y+T9Y5DJY/KrFEheGb8ZyjnAY1r2VImsaou+oSJeQBcqK05fXHCb
4Do1hsMqjdqpZ4kGAYruNvvmiqHliQ9l+cEIwDUoOw/seJ/TnnLx6LP80fNCNDnX
1K0fcGgQmaol9b5FBwv81bk3pDtLcrTbENfbDmlQma6Daasn7uw6b8tNEZrE6jCi
2Kt3fpWOjnTMjA==
-----END CERTIFICATE-----
Generated at Thu Jun 12 02:17:43 2025 by rpki-client