Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
File:                     3UftWIupBpRXoqiY_HoMuXfR-B4.mft (raw, json)
Hash identifier:          iV9SWrkwBJ8xwrFDEj1IKCY3zU7wIMX+o1OI3FPDZB4=
Subject key identifier:   41:FF:06:E0:74:E6:C5:A1:9E:1D:2F:DB:D3:C6:E4:0E:1F:3A:3B:51
Authority key identifier: DD:47:ED:58:8B:A9:06:94:57:A2:A8:98:FC:7A:0C:B9:77:D1:F8:1E
Certificate issuer:       /CN=dd47ed588ba9069457a2a898fc7a0cb977d1f81e
Certificate serial:       01974FD809A91E5106F7A316DA745A3A136C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
Manifest number:          1584
Signing time:             Sun 08 Jun 2025 14:00:47 +0000
Manifest this update:     Sun 08 Jun 2025 14:00:47 +0000
Manifest next update:     Mon 09 Jun 2025 14:00:47 +0000
Files and hashes:         1: 3UftWIupBpRXoqiY_HoMuXfR-B4.crl (hash: sJsdS5rNoLJY+vXA7VzGLVptFxzqocDVB12IIBtNFxM=)
                          2: NjNc1F_noFOuVoizuwyNmIiyikg.roa (hash: IrtAGIN7Mq5Prcg2l/Rn0ppsqJX7JmRhzfI5wRDO3Ps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:d8:09:a9:1e:51:06:f7:a3:16:da:74:5a:3a:13:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd47ed588ba9069457a2a898fc7a0cb977d1f81e
        Validity
            Not Before: Jun  8 14:00:47 2025 GMT
            Not After : Jun  9 14:00:47 2025 GMT
        Subject: CN=41ff06e074e6c5a19e1d2fdbd3c6e40e1f3a3b51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ea:47:20:9a:e2:27:5b:6f:49:74:7c:84:38:
                    1b:a2:a2:82:7a:56:09:df:57:50:7d:04:d0:e2:bc:
                    f2:01:21:ad:fb:ef:ed:94:fa:31:2c:2e:1f:df:00:
                    a9:3c:d6:d9:c6:8f:37:12:0e:5d:93:ee:97:b0:a2:
                    c9:da:d2:2e:36:7a:8c:17:77:fa:3d:cc:91:1a:79:
                    f9:07:ea:ac:7e:b0:5a:77:b6:f3:7b:52:38:d3:20:
                    cb:7e:0c:0b:30:12:66:b1:49:30:82:b1:e0:61:69:
                    a2:c6:53:6e:27:fb:20:47:23:a8:80:06:8f:86:30:
                    f3:c1:2f:5d:78:d4:c5:eb:2d:0a:3d:5d:00:f0:f7:
                    1a:39:ec:7e:52:66:43:e4:28:ab:46:64:fd:6e:7d:
                    a9:41:24:7e:94:1a:2f:e1:99:92:9f:62:d3:3d:54:
                    14:ad:1a:b3:c2:5d:97:23:e9:ec:fb:27:6a:8f:ce:
                    f3:2c:9d:8d:db:70:aa:df:12:93:1b:b0:47:3e:01:
                    f3:b6:9e:d6:2e:b1:52:7b:6e:e0:19:de:6a:c7:bb:
                    6e:35:3e:e7:b5:28:57:cc:e8:b5:e4:d4:7b:6f:aa:
                    d3:3f:e6:39:b9:da:13:07:ed:e3:d7:37:d4:93:63:
                    ec:88:5a:58:25:85:f0:8b:a6:6c:45:09:7d:30:b8:
                    1e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:FF:06:E0:74:E6:C5:A1:9E:1D:2F:DB:D3:C6:E4:0E:1F:3A:3B:51
            X509v3 Authority Key Identifier:
                keyid:DD:47:ED:58:8B:A9:06:94:57:A2:A8:98:FC:7A:0C:B9:77:D1:F8:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:0a:70:18:cd:03:df:1a:8d:91:b4:0e:40:76:8a:4e:82:f1:
         8f:57:e2:dd:9c:83:d5:61:0f:ce:68:36:3d:a9:72:e9:ee:ce:
         ea:49:15:79:70:e6:ac:b2:60:f3:cd:be:50:d2:95:c8:58:00:
         48:50:12:a0:80:21:6c:13:39:5c:18:5b:0f:87:1a:66:a6:9e:
         c4:73:a5:e7:f1:2e:f5:1f:7c:87:a5:3c:e6:d3:ec:f0:78:10:
         1f:63:9f:e9:82:3a:ee:fa:12:0e:85:81:9c:9c:a3:3d:a5:81:
         81:4b:c1:f8:36:6a:90:76:2b:46:c4:81:b8:dd:c2:cd:dd:81:
         b3:35:8c:7f:34:e9:af:2e:27:a2:9f:3c:6c:32:df:f1:66:09:
         37:4e:91:61:45:85:93:f9:74:6c:5a:bf:40:b3:fa:25:64:d9:
         14:85:8d:c3:05:56:fb:48:1c:e5:c3:1c:de:d7:9a:79:b8:19:
         e6:b6:95:6c:7b:aa:cc:89:b8:b1:5f:48:fc:49:f8:88:0e:ec:
         6d:32:29:eb:4f:d9:27:7d:57:be:82:36:b7:5c:b8:62:d1:aa:
         de:52:27:01:4a:41:5b:9d:ea:f8:a3:c5:3b:21:a3:d4:83:ef:
         ac:e0:77:8f:43:31:7b:ab:ab:7a:6c:cb:14:da:f5:66:19:fb:
         e9:d7:1f:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdP2AmpHlEG96MW2nRaOhNsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNDdlZDU4OGJhOTA2OTQ1N2EyYTg5OGZjN2EwY2I5Nzdk
MWY4MWUwHhcNMjUwNjA4MTQwMDQ3WhcNMjUwNjA5MTQwMDQ3WjAzMTEwLwYDVQQD
Eyg0MWZmMDZlMDc0ZTZjNWExOWUxZDJmZGJkM2M2ZTQwZTFmM2EzYjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+pHIJriJ1tvSXR8hDgboqKCelYJ
31dQfQTQ4rzyASGt++/tlPoxLC4f3wCpPNbZxo83Eg5dk+6XsKLJ2tIuNnqMF3f6
PcyRGnn5B+qsfrBad7bze1I40yDLfgwLMBJmsUkwgrHgYWmixlNuJ/sgRyOogAaP
hjDzwS9deNTF6y0KPV0A8PcaOex+UmZD5CirRmT9bn2pQSR+lBov4ZmSn2LTPVQU
rRqzwl2XI+ns+ydqj87zLJ2N23Cq3xKTG7BHPgHztp7WLrFSe27gGd5qx7tuNT7n
tShXzOi15NR7b6rTP+Y5udoTB+3j1zfUk2PsiFpYJYXwi6ZsRQl9MLgejwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEH/BuB05sWhnh0v29PG5A4fOjtRMB8GA1UdIwQY
MBaAFN1H7ViLqQaUV6KomPx6DLl30fgeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1VmdFdJdXBCcFJYb3FpWV9Ib011WGZSLUI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny80NTgxYjctMzViYy00YmM4LTg1YjMt
ZjQ1OTZlNzc2N2E4LzEvM1VmdFdJdXBCcFJYb3FpWV9Ib011WGZSLUI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny80NTgxYjctMzViYy00YmM4LTg1YjMtZjQ1OTZlNzc2N2E4
LzEvM1VmdFdJdXBCcFJYb3FpWV9Ib011WGZSLUI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGgpwGM0D
3xqNkbQOQHaKToLxj1fi3ZyD1WEPzmg2Paly6e7O6kkVeXDmrLJg882+UNKVyFgA
SFASoIAhbBM5XBhbD4caZqaexHOl5/Eu9R98h6U85tPs8HgQH2Of6YI67voSDoWB
nJyjPaWBgUvB+DZqkHYrRsSBuN3Czd2BszWMfzTpry4nop88bDLf8WYJN06RYUWF
k/l0bFq/QLP6JWTZFIWNwwVW+0gc5cMc3teaebgZ5raVbHuqzIm4sV9I/En4iA7s
bTIp60/ZJ31XvoI2t1y4YtGq3lInAUpBW53q+KPFOyGj1IPvrOB3j0Mxe6uremzL
FNr1Zhn76dcf/Q==
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:13:30 2025 by rpki-client