Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft
File:                     o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft (raw, json)
Hash identifier:          gSK8byij0AE2m60TJbeNIbEK3zvZDlDPRWGYGq+H3EM=
Subject key identifier:   9A:AE:E2:F4:07:88:DC:3B:F3:24:43:C5:36:2D:E2:7C:C8:5B:10:8F
Authority key identifier: A3:C5:6E:C1:30:D9:8A:F2:D0:D2:94:59:F2:0F:A7:9B:D6:35:90:15
Certificate issuer:       /CN=a3c56ec130d98af2d0d29459f20fa79bd6359015
Certificate serial:       019766295B520A189FCA8007B3DEC3B6A815
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft
Manifest number:          050F
Signing time:             Thu 12 Jun 2025 22:01:15 +0000
Manifest this update:     Thu 12 Jun 2025 22:01:15 +0000
Manifest next update:     Fri 13 Jun 2025 22:01:15 +0000
Files and hashes:         1: o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.crl (hash: hrXZNqtmt4jk/dbgIllG40x56IipGcaycAR2i428yaw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:66:29:5b:52:0a:18:9f:ca:80:07:b3:de:c3:b6:a8:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3c56ec130d98af2d0d29459f20fa79bd6359015
        Validity
            Not Before: Jun 12 22:01:15 2025 GMT
            Not After : Jun 13 22:01:15 2025 GMT
        Subject: CN=9aaee2f40788dc3bf32443c5362de27cc85b108f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:58:7d:d6:2b:59:ac:3e:d5:fc:71:82:dd:19:
                    47:68:3a:f6:a3:e6:86:00:1b:4c:e4:71:89:e7:44:
                    a6:01:10:74:2a:7c:8d:2b:a4:92:23:eb:f5:a4:c6:
                    26:23:2b:bc:44:bc:05:72:3b:ba:37:23:bd:d2:99:
                    66:ed:4f:91:59:be:b7:5d:b6:1d:55:01:29:c3:f1:
                    9c:fb:22:cd:f4:a7:1f:05:79:22:36:75:49:66:ae:
                    94:ef:ac:eb:ef:9f:64:33:80:f2:b2:c1:cc:c6:93:
                    30:b2:2a:6e:4b:10:75:0c:69:db:99:d8:1a:80:ee:
                    4c:56:28:13:27:62:73:b3:95:9d:ab:95:36:23:bc:
                    69:ea:75:53:85:dd:60:25:09:0c:14:6d:c4:1f:16:
                    97:43:f1:08:45:84:a6:d5:34:50:39:2a:55:89:cb:
                    28:51:9a:e8:8b:09:8e:44:36:ee:ab:90:fe:f1:ce:
                    09:6c:d0:ec:9b:cc:d5:32:35:10:31:7c:21:3c:0d:
                    61:01:31:61:e2:9a:00:7b:d0:2b:ec:3d:ed:83:22:
                    9b:26:58:e6:88:7e:51:f6:23:27:70:ad:e7:d7:db:
                    63:22:e3:9c:42:48:b0:06:94:07:c4:61:dd:d8:4e:
                    83:43:6a:e6:f5:a9:8a:ae:73:1c:3e:0d:f4:c9:ba:
                    1f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:AE:E2:F4:07:88:DC:3B:F3:24:43:C5:36:2D:E2:7C:C8:5B:10:8F
            X509v3 Authority Key Identifier:
                keyid:A3:C5:6E:C1:30:D9:8A:F2:D0:D2:94:59:F2:0F:A7:9B:D6:35:90:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:8c:5c:4d:ef:73:7e:b5:c8:be:0b:4c:30:12:b3:3f:dd:c8:
         da:65:81:31:0c:57:fb:8f:df:7b:9c:84:53:ae:2a:3b:7c:3f:
         54:6e:d4:18:af:d6:a5:fe:17:92:6c:a6:7e:53:51:23:69:6e:
         d8:7a:89:5d:d4:c7:1d:55:80:24:53:9c:01:d9:15:fb:7d:0a:
         be:4e:51:4e:c6:64:63:95:6d:e7:0f:da:aa:8b:5f:3c:8a:bf:
         a3:34:35:1c:f0:4c:e7:0b:33:f5:d0:dc:e1:9e:18:27:1a:f1:
         f0:3c:f6:b3:55:bf:0d:48:2b:c4:27:d6:e4:a0:3d:9e:39:09:
         ef:d1:b4:46:8b:6e:fd:14:c4:b1:47:49:8a:0a:f1:a5:c6:a2:
         ca:6d:9d:7c:1a:f2:95:2c:79:66:d0:87:16:a1:63:7f:07:e4:
         33:03:f0:eb:84:b7:6c:50:7e:d7:e8:e7:23:46:cd:37:07:e8:
         ac:ca:c4:03:25:6d:99:fd:05:df:bf:36:7a:39:3d:74:06:7a:
         0f:0f:10:53:d0:de:d7:fa:33:18:0a:73:28:e1:10:20:ba:88:
         52:9d:de:60:26:49:ef:ff:6a:ac:a1:58:5b:78:ee:a6:53:9d:
         24:de:bd:5f:1f:55:df:1d:42:49:28:84:c5:ff:4b:42:e7:bb:
         81:a2:0a:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdmKVtSChifyoAHs97DtqgVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYzU2ZWMxMzBkOThhZjJkMGQyOTQ1OWYyMGZhNzliZDYz
NTkwMTUwHhcNMjUwNjEyMjIwMTE1WhcNMjUwNjEzMjIwMTE1WjAzMTEwLwYDVQQD
Eyg5YWFlZTJmNDA3ODhkYzNiZjMyNDQzYzUzNjJkZTI3Y2M4NWIxMDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllh91itZrD7V/HGC3RlHaDr2o+aG
ABtM5HGJ50SmARB0KnyNK6SSI+v1pMYmIyu8RLwFcju6NyO90plm7U+RWb63XbYd
VQEpw/Gc+yLN9KcfBXkiNnVJZq6U76zr759kM4DyssHMxpMwsipuSxB1DGnbmdga
gO5MVigTJ2Jzs5Wdq5U2I7xp6nVThd1gJQkMFG3EHxaXQ/EIRYSm1TRQOSpVicso
UZroiwmORDbuq5D+8c4JbNDsm8zVMjUQMXwhPA1hATFh4poAe9Ar7D3tgyKbJljm
iH5R9iMncK3n19tjIuOcQkiwBpQHxGHd2E6DQ2rm9amKrnMcPg30ybofoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqu4vQHiNw78yRDxTYt4nzIWxCPMB8GA1UdIwQY
MBaAFKPFbsEw2Yry0NKUWfIPp5vWNZAVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzhWdXdURFppdkxRMHBSWjhnLW5tOVkxa0JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8yMGQ5Y2MtMTQzZi00ZWU4LThjNjkt
YjNlOWJlNzQyODk0LzEvbzhWdXdURFppdkxRMHBSWjhnLW5tOVkxa0JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8yMGQ5Y2MtMTQzZi00ZWU4LThjNjktYjNlOWJlNzQyODk0
LzEvbzhWdXdURFppdkxRMHBSWjhnLW5tOVkxa0JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAioxcTe9z
frXIvgtMMBKzP93I2mWBMQxX+4/fe5yEU64qO3w/VG7UGK/Wpf4XkmymflNRI2lu
2HqJXdTHHVWAJFOcAdkV+30Kvk5RTsZkY5Vt5w/aqotfPIq/ozQ1HPBM5wsz9dDc
4Z4YJxrx8Dz2s1W/DUgrxCfW5KA9njkJ79G0Rotu/RTEsUdJigrxpcaiym2dfBry
lSx5ZtCHFqFjfwfkMwPw64S3bFB+1+jnI0bNNwforMrEAyVtmf0F3782ejk9dAZ6
Dw8QU9De1/ozGApzKOEQILqIUp3eYCZJ7/9qrKFYW3juplOdJN69Xx9V3x1CSSiE
xf9LQue7gaIKmg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 04:31:49 2025 by rpki-client