Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft
File:                     DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft (raw, json)
Hash identifier:          pkPjIJues/JH/FoRxZ7AWfZDMInrk8Z6/cRqUFhyr7g=
Subject key identifier:   39:DA:76:94:91:B0:ED:BB:8B:C4:86:65:06:0A:D0:7E:A9:DD:3E:E5
Authority key identifier: 0E:11:7A:3E:0D:0D:05:D4:B0:AB:82:30:80:E7:BF:6C:FD:4B:37:76
Certificate issuer:       /CN=0e117a3e0d0d05d4b0ab823080e7bf6cfd4b3776
Certificate serial:       019748559AAA205E83AC6ADA9A1F02BD5755
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft
Manifest number:          02BC
Signing time:             Sat 07 Jun 2025 03:00:58 +0000
Manifest this update:     Sat 07 Jun 2025 03:00:58 +0000
Manifest next update:     Sun 08 Jun 2025 03:00:58 +0000
Files and hashes:         1: DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.crl (hash: iHeA0K6/z0aq7fHyChpMq1mGLvS2a/YUkmKpfVthfJA=)
                          2: WBCctmrLBY9TZchWHVefCJRpgwo.roa (hash: ha4SM2FYKNPb6uYgJ7O/6N/bp7uHsy7szwwtLn89ZkM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:55:9a:aa:20:5e:83:ac:6a:da:9a:1f:02:bd:57:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e117a3e0d0d05d4b0ab823080e7bf6cfd4b3776
        Validity
            Not Before: Jun  7 03:00:58 2025 GMT
            Not After : Jun  8 03:00:58 2025 GMT
        Subject: CN=39da769491b0edbb8bc48665060ad07ea9dd3ee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:73:b0:df:7a:9c:56:0e:bb:0d:a4:69:e7:f7:
                    a1:99:5d:98:55:47:a3:94:06:a8:bb:5b:b1:c6:44:
                    08:ce:9b:f1:42:a7:ea:a3:21:c0:b2:5a:f0:63:28:
                    4b:c4:97:25:71:15:1c:d0:65:6a:d0:c9:26:5f:bc:
                    d2:78:2f:21:2d:d1:5d:d6:0a:e5:6d:4e:92:f2:b8:
                    9b:b3:25:11:77:87:52:16:48:e8:26:83:2a:75:d3:
                    41:fc:43:a5:c7:36:37:64:3c:0b:41:89:3b:b8:69:
                    96:34:44:6e:27:7a:9e:f3:03:0f:7d:95:16:0d:b8:
                    f6:68:ef:dd:c0:32:a1:44:4f:9a:54:0d:33:2c:29:
                    06:c7:a5:2f:f9:f9:40:94:4e:4e:45:44:f3:1e:0e:
                    6f:44:6c:75:2c:df:ce:77:3b:11:b5:a1:3e:10:c8:
                    f5:82:eb:fd:5f:65:c8:1e:22:45:cf:b9:fd:5f:cd:
                    88:af:0a:f0:bb:71:07:c9:3f:70:4c:d7:c1:bd:ed:
                    63:01:19:69:5b:65:4c:c5:25:1e:56:dd:68:80:a2:
                    b7:39:15:ba:55:ab:53:3c:3b:e7:96:2f:e7:c1:62:
                    1e:b3:97:7e:66:cc:46:e0:fb:bf:81:e5:ff:f3:a5:
                    4b:67:db:a1:8e:55:26:c8:2d:a9:d2:d6:25:9d:3f:
                    55:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:DA:76:94:91:B0:ED:BB:8B:C4:86:65:06:0A:D0:7E:A9:DD:3E:E5
            X509v3 Authority Key Identifier:
                keyid:0E:11:7A:3E:0D:0D:05:D4:B0:AB:82:30:80:E7:BF:6C:FD:4B:37:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:cb:39:ad:39:65:e4:fe:e0:2f:44:e8:5f:67:a7:55:a7:21:
         5b:ac:62:37:01:fe:4b:50:65:7a:f2:fa:76:de:ae:df:ea:e8:
         a6:a6:89:44:2d:ee:7e:56:57:87:57:49:3f:94:90:d4:13:4b:
         84:c9:a3:31:50:e8:9e:22:35:a8:53:fe:f0:63:05:f3:fa:3e:
         8e:3c:43:ea:7b:3c:fc:fb:5c:45:53:12:35:7f:c9:ff:1d:59:
         0b:3d:61:77:4a:1c:87:15:90:0c:76:e3:26:88:26:62:f6:1a:
         77:1e:5a:d5:1f:12:62:3b:d8:d0:ef:9c:59:4c:1d:a2:ce:0d:
         aa:8d:56:d7:b5:19:c5:9f:f8:c9:31:5c:24:d2:0c:bb:9c:54:
         f4:c4:73:5f:e9:83:11:c8:0f:f1:3e:c8:53:b4:ae:99:b2:96:
         42:2e:c0:84:bf:f4:f6:4b:3c:ad:35:28:78:0b:76:50:58:4d:
         ab:14:dd:a3:e6:dc:4e:20:53:c7:e8:af:d3:35:31:0a:fa:c5:
         ea:05:bb:ff:87:a5:25:16:0c:d6:24:04:d6:84:16:3b:bd:c0:
         c8:10:cf:2c:53:c5:13:eb:7d:44:90:47:92:a1:93:a3:da:cb:
         4d:d6:d6:a7:e6:f6:8d:e6:21:bf:9b:9c:f4:56:da:38:96:bb:
         df:14:7e:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIVZqqIF6DrGramh8CvVdVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMTE3YTNlMGQwZDA1ZDRiMGFiODIzMDgwZTdiZjZjZmQ0
YjM3NzYwHhcNMjUwNjA3MDMwMDU4WhcNMjUwNjA4MDMwMDU4WjAzMTEwLwYDVQQD
EygzOWRhNzY5NDkxYjBlZGJiOGJjNDg2NjUwNjBhZDA3ZWE5ZGQzZWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3Ow33qcVg67DaRp5/ehmV2YVUej
lAaou1uxxkQIzpvxQqfqoyHAslrwYyhLxJclcRUc0GVq0MkmX7zSeC8hLdFd1grl
bU6S8ribsyURd4dSFkjoJoMqddNB/EOlxzY3ZDwLQYk7uGmWNERuJ3qe8wMPfZUW
Dbj2aO/dwDKhRE+aVA0zLCkGx6Uv+flAlE5ORUTzHg5vRGx1LN/OdzsRtaE+EMj1
guv9X2XIHiJFz7n9X82Irwrwu3EHyT9wTNfBve1jARlpW2VMxSUeVt1ogKK3ORW6
VatTPDvnli/nwWIes5d+ZsxG4Pu/geX/86VLZ9uhjlUmyC2p0tYlnT9VVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDnadpSRsO27i8SGZQYK0H6p3T7lMB8GA1UdIwQY
MBaAFA4Rej4NDQXUsKuCMIDnv2z9Szd2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGhGNlBnME5CZFN3cTRJd2dPZV9iUDFMTjNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xNDIyZmEtZTgyYi00YzBiLWIyM2It
ZDg0NzVmMTg0NjRlLzEvRGhGNlBnME5CZFN3cTRJd2dPZV9iUDFMTjNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8xNDIyZmEtZTgyYi00YzBiLWIyM2ItZDg0NzVmMTg0NjRl
LzEvRGhGNlBnME5CZFN3cTRJd2dPZV9iUDFMTjNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAocs5rTll
5P7gL0ToX2enVachW6xiNwH+S1BlevL6dt6u3+ropqaJRC3uflZXh1dJP5SQ1BNL
hMmjMVDoniI1qFP+8GMF8/o+jjxD6ns8/PtcRVMSNX/J/x1ZCz1hd0ochxWQDHbj
JogmYvYadx5a1R8SYjvY0O+cWUwdos4Nqo1W17UZxZ/4yTFcJNIMu5xU9MRzX+mD
EcgP8T7IU7SumbKWQi7AhL/09ks8rTUoeAt2UFhNqxTdo+bcTiBTx+iv0zUxCvrF
6gW7/4elJRYM1iQE1oQWO73AyBDPLFPFE+t9RJBHkqGTo9rLTdbWp+b2jeYhv5uc
9FbaOJa73xR+aA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:24:55 2025 by rpki-client