Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
File:                     I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft (raw, json)
Hash identifier:          RHongZ+EHGgehkww6HCC1ovCl+9GU1IFz8krAXQOI0I=
Subject key identifier:   93:54:15:AD:63:80:9C:31:06:D5:6A:D3:AE:F0:FC:16:AB:CD:6B:A7
Authority key identifier: 23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14
Certificate issuer:       /CN=2347aaab2206c08128f543730064a145a3effa14
Certificate serial:       019761A7B4CDF0D24C15EE92E71A495C82DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
Manifest number:          159C
Signing time:             Thu 12 Jun 2025 01:01:09 +0000
Manifest this update:     Thu 12 Jun 2025 01:01:09 +0000
Manifest next update:     Fri 13 Jun 2025 01:01:09 +0000
Files and hashes:         1: GdDoydsiseWesyFp8nfXLAwY-Ss.roa (hash: ZX3EqP0ya1H5H5fx2BO7+jv6fp5rUfEUzpZL5ygfDiA=)
                          2: I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl (hash: bfAlUbd7xqqdq599VQkOVDAPG2lGoThoM7JwpKhWxu0=)
                          3: VNOgNSigRRAb70bKyLVuHiqWqcg.roa (hash: 0V+O6nfILt11f/kT8RnWqxjr5DCANmAANaaUT4hQ8EI=)
                          4: yujM9boXq2owCDALS6fBRuV-QS4.roa (hash: uBWZxd0MuVhnf/a/H4XCYeoko2cyqYwJN4ZzBnbQh88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:61:a7:b4:cd:f0:d2:4c:15:ee:92:e7:1a:49:5c:82:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2347aaab2206c08128f543730064a145a3effa14
        Validity
            Not Before: Jun 12 01:01:09 2025 GMT
            Not After : Jun 13 01:01:09 2025 GMT
        Subject: CN=935415ad63809c3106d56ad3aef0fc16abcd6ba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c6:1c:4b:15:7c:09:bc:52:7e:4e:da:cb:a0:
                    72:3f:c0:40:11:d7:e2:0f:3d:e3:bd:77:e3:9c:c6:
                    24:cc:0a:f5:32:05:1c:40:ab:ba:86:ea:f4:25:60:
                    cb:90:60:41:34:ec:7c:38:4a:47:8a:9b:60:37:89:
                    3e:6b:89:d1:9e:10:48:82:90:44:4e:99:28:7d:6f:
                    7d:bd:09:6e:a6:84:c3:5c:70:b1:c7:02:0b:c1:e4:
                    f5:10:5f:ce:df:63:55:dd:94:96:ff:a9:ee:5c:e5:
                    b1:84:17:08:a4:6d:3a:30:89:c3:db:04:4c:de:ae:
                    45:83:19:36:d1:c2:d5:5f:3a:61:b2:59:69:71:1e:
                    9e:48:f9:b7:35:35:4d:dd:fe:e7:f3:7c:f8:06:ed:
                    ed:51:b2:44:b7:21:39:fd:73:a2:89:d9:b8:b2:08:
                    3a:08:0c:49:af:3b:73:54:44:f3:5f:d5:3a:d6:12:
                    c3:db:8d:e4:b4:76:0a:6d:1e:ea:04:22:7b:c0:71:
                    04:fd:77:c2:56:32:94:61:e5:e8:f3:51:fe:0f:64:
                    58:cd:49:50:29:11:aa:ef:aa:5d:07:41:b3:3c:c5:
                    9a:0c:01:17:49:f4:c1:14:03:72:ea:83:e9:ab:3f:
                    a0:83:ac:85:d4:1d:a1:a1:26:f5:ea:cd:ef:fd:11:
                    f6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:54:15:AD:63:80:9C:31:06:D5:6A:D3:AE:F0:FC:16:AB:CD:6B:A7
            X509v3 Authority Key Identifier:
                keyid:23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:ae:f9:fd:b5:16:7d:0a:80:bb:5e:63:80:58:06:90:05:3a:
         51:ba:44:9c:26:f7:93:96:e0:c5:dd:75:9b:f1:93:8a:42:f2:
         41:fd:b3:6c:56:b4:89:7d:7e:c6:58:3c:9a:ab:ae:d1:10:07:
         4c:3b:2f:61:fc:5a:14:95:b5:66:9c:df:0e:c8:bb:2a:b3:f5:
         c6:15:ac:89:40:16:1a:ec:5f:3d:8e:2b:b7:ea:cb:8b:47:94:
         5c:e8:b2:bd:16:62:41:bc:dd:8e:7b:de:88:2a:af:b2:e7:ef:
         3b:50:da:16:8d:8b:bc:83:6f:2d:24:09:77:bd:65:08:ac:fd:
         67:34:36:bc:9c:83:d5:b2:10:9c:d1:6f:ed:d7:6d:f3:8b:a0:
         9f:74:99:50:bd:4f:d7:d0:e0:f8:06:ba:04:ba:37:95:38:21:
         81:29:d0:41:a7:01:bf:d8:f4:1f:22:68:32:49:72:a1:8d:79:
         7b:d5:58:71:7a:29:26:f3:62:26:e2:9f:e9:dc:d5:b5:d2:e9:
         6e:8c:4a:95:2a:d3:38:af:58:c8:c8:cf:8e:f1:71:f1:85:3e:
         b1:b4:7f:ed:46:8f:5b:59:00:9d:54:fa:ff:34:03:61:4c:8d:
         6d:3a:63:46:4a:0c:57:3f:5b:20:da:55:d9:55:b7:60:22:66:
         7d:fe:d6:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdhp7TN8NJMFe6S5xpJXILcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNDdhYWFiMjIwNmMwODEyOGY1NDM3MzAwNjRhMTQ1YTNl
ZmZhMTQwHhcNMjUwNjEyMDEwMTA5WhcNMjUwNjEzMDEwMTA5WjAzMTEwLwYDVQQD
Eyg5MzU0MTVhZDYzODA5YzMxMDZkNTZhZDNhZWYwZmMxNmFiY2Q2YmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8YcSxV8CbxSfk7ay6ByP8BAEdfi
Dz3jvXfjnMYkzAr1MgUcQKu6hur0JWDLkGBBNOx8OEpHiptgN4k+a4nRnhBIgpBE
TpkofW99vQlupoTDXHCxxwILweT1EF/O32NV3ZSW/6nuXOWxhBcIpG06MInD2wRM
3q5Fgxk20cLVXzphsllpcR6eSPm3NTVN3f7n83z4Bu3tUbJEtyE5/XOiidm4sgg6
CAxJrztzVETzX9U61hLD243ktHYKbR7qBCJ7wHEE/XfCVjKUYeXo81H+D2RYzUlQ
KRGq76pdB0GzPMWaDAEXSfTBFANy6oPpqz+gg6yF1B2hoSb16s3v/RH2TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJNUFa1jgJwxBtVq067w/BarzWunMB8GA1UdIwQY
MBaAFCNHqqsiBsCBKPVDcwBkoUWj7/oUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTBlcXF5SUd3SUVvOVVOekFHU2hSYVB2LWhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9lZjlmMGQtZDg0MC00MzcxLWFkYzQt
NzU4NDA2NjFlYWY1LzEvSTBlcXF5SUd3SUVvOVVOekFHU2hSYVB2LWhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9lZjlmMGQtZDg0MC00MzcxLWFkYzQtNzU4NDA2NjFlYWY1
LzEvSTBlcXF5SUd3SUVvOVVOekFHU2hSYVB2LWhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU675/bUW
fQqAu15jgFgGkAU6UbpEnCb3k5bgxd11m/GTikLyQf2zbFa0iX1+xlg8mquu0RAH
TDsvYfxaFJW1ZpzfDsi7KrP1xhWsiUAWGuxfPY4rt+rLi0eUXOiyvRZiQbzdjnve
iCqvsufvO1DaFo2LvINvLSQJd71lCKz9ZzQ2vJyD1bIQnNFv7ddt84ugn3SZUL1P
19Dg+Aa6BLo3lTghgSnQQacBv9j0HyJoMklyoY15e9VYcXopJvNiJuKf6dzVtdLp
boxKlSrTOK9YyMjPjvFx8YU+sbR/7UaPW1kAnVT6/zQDYUyNbTpjRkoMVz9bINpV
2VW3YCJmff7WZg==
-----END CERTIFICATE-----
Generated at Thu Jun 12 08:29:59 2025 by rpki-client