Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
File:                     4Zd4WdBx9xUIN7KstDU_8z79gxw.mft (raw, json)
Hash identifier:          +ubJ6XVvBsqY+KQqYLsUa5IkyKvF9TxaXxZUbQjbU/M=
Subject key identifier:   07:C3:B2:DF:BB:47:17:99:6B:3F:66:0B:1D:74:6A:11:84:E5:A9:0F
Authority key identifier: E1:97:78:59:D0:71:F7:15:08:37:B2:AC:B4:35:3F:F3:3E:FD:83:1C
Certificate issuer:       /CN=e1977859d071f7150837b2acb4353ff33efd831c
Certificate serial:       01974A0C98E88C340969EFB8D5328120B399
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
Manifest number:          134D
Signing time:             Sat 07 Jun 2025 11:00:28 +0000
Manifest this update:     Sat 07 Jun 2025 11:00:28 +0000
Manifest next update:     Sun 08 Jun 2025 11:00:28 +0000
Files and hashes:         1: 4Zd4WdBx9xUIN7KstDU_8z79gxw.crl (hash: BRlv3QQTjbRpOpwCzr4CMMSeIxyJ7/cvBU2+o3ntZuc=)
                          2: yF44GfEIvZjG1b-fqxz7IcsVaik.roa (hash: Nr6aX1S4xhUfVJHe+PzjETZYUXFy6RKCIH4m44as1jw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:0c:98:e8:8c:34:09:69:ef:b8:d5:32:81:20:b3:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1977859d071f7150837b2acb4353ff33efd831c
        Validity
            Not Before: Jun  7 11:00:28 2025 GMT
            Not After : Jun  8 11:00:28 2025 GMT
        Subject: CN=07c3b2dfbb4717996b3f660b1d746a1184e5a90f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1f:d6:00:34:f3:25:25:28:7f:7d:34:c3:af:
                    02:34:ef:74:63:40:84:bf:64:d4:67:a5:33:e5:5a:
                    e2:ad:b4:0f:e9:78:99:02:ca:1a:4a:ab:44:92:ee:
                    d3:29:2d:31:ca:6f:2f:f8:c3:d8:6a:8b:36:fe:6c:
                    08:ce:2b:4c:dc:ff:74:fc:8c:c8:78:a9:3d:86:e0:
                    cc:ee:50:6a:98:e6:6e:45:7d:1c:cd:ab:b0:06:bf:
                    f2:06:76:00:40:b7:a1:aa:ed:98:a1:5a:12:08:62:
                    f8:c4:7f:95:93:c4:67:1b:18:31:5f:27:27:65:cc:
                    5d:c8:bc:87:b3:93:7b:09:ec:ff:77:04:5a:84:fe:
                    13:6f:13:c4:47:a0:4e:b2:a7:96:0b:a8:d0:a9:7c:
                    78:26:a0:ae:8e:99:65:73:43:6a:a2:70:fe:08:d7:
                    ef:6c:fb:43:c1:8d:ca:d5:48:ca:8c:89:4c:07:79:
                    7c:48:1c:11:c7:c8:89:4d:f9:c3:fe:45:c0:7b:33:
                    3b:34:fe:b3:f9:bd:c2:19:66:2f:a2:2f:00:96:14:
                    85:7b:d7:b7:58:2a:25:66:cb:77:ce:56:02:db:7d:
                    c9:54:b1:47:1a:1f:37:7f:cd:15:5c:74:e7:8a:14:
                    5f:7b:9b:b2:40:cb:f4:37:e7:7f:b7:c3:01:c0:16:
                    69:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C3:B2:DF:BB:47:17:99:6B:3F:66:0B:1D:74:6A:11:84:E5:A9:0F
            X509v3 Authority Key Identifier:
                keyid:E1:97:78:59:D0:71:F7:15:08:37:B2:AC:B4:35:3F:F3:3E:FD:83:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:a2:65:9f:7b:17:52:3e:18:25:91:43:c2:4a:0c:95:02:c8:
         19:88:da:c6:80:d7:e0:94:8d:ef:2f:9d:ba:c1:92:55:7d:92:
         45:a1:d1:ff:26:30:50:aa:e1:f0:c4:f5:bb:b9:28:b3:d0:12:
         85:16:a5:01:b6:e0:2e:04:4e:3a:b2:f1:a7:94:23:01:2b:d0:
         cb:9a:e0:1e:ff:e4:ef:53:87:18:58:5f:0c:fb:05:f8:56:9d:
         43:20:88:2f:9a:4e:fd:87:f2:79:e0:b8:f4:27:53:dd:40:ff:
         b4:ff:8c:66:6b:83:13:f3:f3:4b:18:35:bd:27:8c:32:8a:3a:
         6f:88:01:c9:8b:f5:21:d1:b6:5e:21:8a:99:9e:c2:e1:b4:6d:
         72:bd:62:0b:72:3a:cf:68:ee:66:40:37:65:2d:c6:68:01:95:
         cc:9e:e8:96:c4:ad:ca:8e:0e:aa:fe:bb:c9:d3:16:3c:21:72:
         34:98:0b:d5:90:60:29:1b:f0:f7:f0:93:bb:64:ca:0d:ab:50:
         a0:1c:f7:a1:14:6f:67:eb:bd:10:34:8f:f2:b3:cc:f5:18:fb:
         de:c0:21:56:60:1b:36:14:d6:18:fd:67:e5:17:80:c4:b9:e3:
         65:30:15:e9:93:5a:5b:09:ee:2c:d3:fb:47:ec:89:c0:8f:96:
         92:78:e3:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKDJjojDQJae+41TKBILOZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxOTc3ODU5ZDA3MWY3MTUwODM3YjJhY2I0MzUzZmYzM2Vm
ZDgzMWMwHhcNMjUwNjA3MTEwMDI4WhcNMjUwNjA4MTEwMDI4WjAzMTEwLwYDVQQD
EygwN2MzYjJkZmJiNDcxNzk5NmIzZjY2MGIxZDc0NmExMTg0ZTVhOTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvB/WADTzJSUof300w68CNO90Y0CE
v2TUZ6Uz5VrirbQP6XiZAsoaSqtEku7TKS0xym8v+MPYaos2/mwIzitM3P90/IzI
eKk9huDM7lBqmOZuRX0czauwBr/yBnYAQLehqu2YoVoSCGL4xH+Vk8RnGxgxXycn
ZcxdyLyHs5N7Cez/dwRahP4TbxPER6BOsqeWC6jQqXx4JqCujpllc0NqonD+CNfv
bPtDwY3K1UjKjIlMB3l8SBwRx8iJTfnD/kXAezM7NP6z+b3CGWYvoi8AlhSFe9e3
WColZst3zlYC233JVLFHGh83f80VXHTnihRfe5uyQMv0N+d/t8MBwBZpxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfDst+7RxeZaz9mCx10ahGE5akPMB8GA1UdIwQY
MBaAFOGXeFnQcfcVCDeyrLQ1P/M+/YMcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFpkNFdkQng5eFVJTjdLc3REVV84ejc5Z3h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85ZDdjZDctZWU2My00ODg2LThmZTEt
YjVjZTZiNmZkNGQxLzEvNFpkNFdkQng5eFVJTjdLc3REVV84ejc5Z3h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni85ZDdjZDctZWU2My00ODg2LThmZTEtYjVjZTZiNmZkNGQx
LzEvNFpkNFdkQng5eFVJTjdLc3REVV84ejc5Z3h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnKJln3sX
Uj4YJZFDwkoMlQLIGYjaxoDX4JSN7y+dusGSVX2SRaHR/yYwUKrh8MT1u7kos9AS
hRalAbbgLgROOrLxp5QjASvQy5rgHv/k71OHGFhfDPsF+FadQyCIL5pO/YfyeeC4
9CdT3UD/tP+MZmuDE/PzSxg1vSeMMoo6b4gByYv1IdG2XiGKmZ7C4bRtcr1iC3I6
z2juZkA3ZS3GaAGVzJ7olsStyo4Oqv67ydMWPCFyNJgL1ZBgKRvw9/CTu2TKDatQ
oBz3oRRvZ+u9EDSP8rPM9Rj73sAhVmAbNhTWGP1n5ReAxLnjZTAV6ZNaWwnuLNP7
R+yJwI+WknjjuA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:47:54 2025 by rpki-client