Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
File:                     lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft (raw, json)
Hash identifier:          fLyrfo8slYLJfEI2L1/j0HXexqyPk44kyG9SiGDNH6I=
Subject key identifier:   61:65:A5:CF:3A:47:13:8B:FA:CF:B8:82:D7:B5:4E:59:F0:E9:00:2B
Authority key identifier: 95:52:46:B1:B6:5C:95:04:62:59:C2:24:8C:1D:30:6F:F1:35:B9:84
Certificate issuer:       /CN=955246b1b65c95046259c2248c1d306ff135b984
Certificate serial:       01975A5BF3FE944D21CBBD895F960D2BFEC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
Manifest number:          10C9
Signing time:             Tue 10 Jun 2025 15:01:05 +0000
Manifest this update:     Tue 10 Jun 2025 15:01:05 +0000
Manifest next update:     Wed 11 Jun 2025 15:01:05 +0000
Files and hashes:         1: d62eL6CZy4sqfG2HJBBtw2_a_Xo.roa (hash: VQJVLEqVpBvW0EhwHp75V7iW+dHN3GO38t078QYSo/g=)
                          2: lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl (hash: R9XCpC5P1QrnQXeK17ZUsXL/77AQEdh1Oo5IuRY+Xt0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 14:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5a:5b:f3:fe:94:4d:21:cb:bd:89:5f:96:0d:2b:fe:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=955246b1b65c95046259c2248c1d306ff135b984
        Validity
            Not Before: Jun 10 15:01:05 2025 GMT
            Not After : Jun 11 15:01:05 2025 GMT
        Subject: CN=6165a5cf3a47138bfacfb882d7b54e59f0e9002b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b3:04:4b:7f:3a:e1:77:ed:37:06:d7:5e:45:
                    8a:8d:de:50:09:c8:53:ca:ec:70:37:6c:4a:9d:3e:
                    36:5a:3d:76:75:36:6b:b8:f4:c8:fb:4d:aa:7c:96:
                    9d:3f:0c:b8:35:95:a3:34:c5:2d:d8:08:14:f9:2b:
                    d3:99:e1:24:67:b4:d2:e4:49:09:3a:7d:86:54:24:
                    df:b3:a1:d0:91:4a:ef:77:31:4e:b6:57:3e:6f:23:
                    6e:62:a8:de:e8:d5:b9:77:29:5b:cd:9e:4e:e0:5e:
                    92:c9:60:e8:b2:a5:91:61:a1:a8:1b:22:5a:74:38:
                    a8:ab:f2:02:6a:0b:3c:2d:38:91:e8:14:96:3a:76:
                    e0:58:36:0f:40:fc:c5:ed:64:19:15:75:e9:dd:51:
                    83:b9:dc:f9:ac:99:ca:d6:28:85:cd:60:da:a8:06:
                    f0:d2:7a:c7:61:b9:67:15:e4:10:1c:f6:7a:1f:4b:
                    b2:32:08:32:f8:7f:f0:fa:f5:c3:e7:f2:71:ee:bf:
                    f8:63:c1:21:cc:c7:37:71:64:0d:bb:a0:e8:7b:77:
                    fa:c4:52:5d:3e:73:1a:ce:62:6a:9f:63:7b:b8:2b:
                    bf:0d:58:c7:4b:68:2f:b7:75:dc:bc:aa:99:db:ff:
                    7c:1a:d0:03:f3:06:c6:00:0e:ea:cf:c4:42:8e:73:
                    cc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:65:A5:CF:3A:47:13:8B:FA:CF:B8:82:D7:B5:4E:59:F0:E9:00:2B
            X509v3 Authority Key Identifier:
                keyid:95:52:46:B1:B6:5C:95:04:62:59:C2:24:8C:1D:30:6F:F1:35:B9:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:4d:9d:78:e1:76:0a:86:6f:7d:a6:e7:52:2e:9e:66:93:c4:
         70:58:2a:a6:9f:78:82:ac:e2:d4:58:73:e3:9c:7d:74:aa:2f:
         69:7d:ee:f6:c8:55:28:cb:80:23:c3:11:4c:cb:9a:d1:7e:2d:
         b1:74:54:83:98:a9:bf:6f:bd:17:c5:fb:38:61:2c:3a:25:c4:
         51:41:aa:d0:10:cc:fa:0f:b3:6b:f6:83:0a:6c:59:7a:5e:89:
         d4:e7:42:db:4b:c7:e2:a1:c6:7a:7c:d4:9f:aa:48:84:52:b2:
         6b:ca:62:80:05:ac:05:58:88:5f:9d:94:5f:ff:a8:ce:1e:f5:
         44:1f:05:07:f0:54:d9:c9:48:84:3e:5c:c8:b7:b0:53:1d:ca:
         92:84:d1:b1:f2:9a:db:25:5b:ca:59:e9:d2:f9:69:0d:42:a4:
         8b:b1:b8:4a:8e:64:72:f1:fc:25:d2:7e:a6:04:86:ac:36:08:
         40:f7:60:4b:5f:a4:ea:2d:c2:ef:af:ac:91:bd:b1:9a:81:ff:
         9f:ba:4b:e4:7f:fc:42:a0:81:f8:4f:3e:1f:d3:14:cf:19:94:
         28:8b:ef:5e:d7:ea:c6:13:31:e7:5f:cd:64:03:8d:c8:fc:29:
         7b:5a:37:47:98:b8:33:ab:86:61:87:bb:d9:90:e9:94:ac:37:
         b0:39:d2:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdaW/P+lE0hy72JX5YNK/7HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NTI0NmIxYjY1Yzk1MDQ2MjU5YzIyNDhjMWQzMDZmZjEz
NWI5ODQwHhcNMjUwNjEwMTUwMTA1WhcNMjUwNjExMTUwMTA1WjAzMTEwLwYDVQQD
Eyg2MTY1YTVjZjNhNDcxMzhiZmFjZmI4ODJkN2I1NGU1OWYwZTkwMDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrMES3864XftNwbXXkWKjd5QCchT
yuxwN2xKnT42Wj12dTZruPTI+02qfJadPwy4NZWjNMUt2AgU+SvTmeEkZ7TS5EkJ
On2GVCTfs6HQkUrvdzFOtlc+byNuYqje6NW5dylbzZ5O4F6SyWDosqWRYaGoGyJa
dDioq/ICags8LTiR6BSWOnbgWDYPQPzF7WQZFXXp3VGDudz5rJnK1iiFzWDaqAbw
0nrHYblnFeQQHPZ6H0uyMggy+H/w+vXD5/Jx7r/4Y8EhzMc3cWQNu6Doe3f6xFJd
PnMazmJqn2N7uCu/DVjHS2gvt3XcvKqZ2/98GtAD8wbGAA7qz8RCjnPM8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFlpc86RxOL+s+4gte1Tlnw6QArMB8GA1UdIwQY
MBaAFJVSRrG2XJUEYlnCJIwdMG/xNbmEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFZKR3NiWmNsUVJpV2NJa2pCMHdiX0UxdVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9hN2M4ZDAtYzkyZC00NWQwLTkxYTMt
MjhjMjJhYmYwOGQwLzEvbFZKR3NiWmNsUVJpV2NJa2pCMHdiX0UxdVlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9hN2M4ZDAtYzkyZC00NWQwLTkxYTMtMjhjMjJhYmYwOGQw
LzEvbFZKR3NiWmNsUVJpV2NJa2pCMHdiX0UxdVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU02deOF2
CoZvfabnUi6eZpPEcFgqpp94gqzi1Fhz45x9dKovaX3u9shVKMuAI8MRTMua0X4t
sXRUg5ipv2+9F8X7OGEsOiXEUUGq0BDM+g+za/aDCmxZel6J1OdC20vH4qHGenzU
n6pIhFKya8pigAWsBViIX52UX/+ozh71RB8FB/BU2clIhD5cyLewUx3KkoTRsfKa
2yVbylnp0vlpDUKki7G4So5kcvH8JdJ+pgSGrDYIQPdgS1+k6i3C76+skb2xmoH/
n7pL5H/8QqCB+E8+H9MUzxmUKIvvXtfqxhMx51/NZAONyPwpe1o3R5i4M6uGYYe7
2ZDplKw3sDnS4A==
-----END CERTIFICATE-----
Generated at Tue Jun 10 20:44:12 2025 by rpki-client