Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft
File:                     RnSvG73Eykg8ZpxP4L3XZLisFnU.mft (raw, json)
Hash identifier:          g0FVMebsPo6+PEYP84litmsVxywBfdnjMXL4BOcx/yQ=
Subject key identifier:   C2:6B:6D:9D:24:D6:11:BC:45:78:91:B3:07:78:FF:4B:A6:E5:18:73
Authority key identifier: 46:74:AF:1B:BD:C4:CA:48:3C:66:9C:4F:E0:BD:D7:64:B8:AC:16:75
Certificate issuer:       /CN=4674af1bbdc4ca483c669c4fe0bdd764b8ac1675
Certificate serial:       01976C988FE4173DEE220BDC42623A082EF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RnSvG73Eykg8ZpxP4L3XZLisFnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft
Manifest number:          158E
Signing time:             Sat 14 Jun 2025 04:00:27 +0000
Manifest this update:     Sat 14 Jun 2025 04:00:27 +0000
Manifest next update:     Sun 15 Jun 2025 04:00:27 +0000
Files and hashes:         1: RnSvG73Eykg8ZpxP4L3XZLisFnU.crl (hash: PVRMG5P3Py6yUMRoa5k8/z0jmM/RUlDI5bQ5/u0A0Pg=)
                          2: beiTDj2zXTqFS71TOFpPvmffaII.roa (hash: sXUiI9l6myIN9UkpCjgTw8A4sT8JADqa4WvJBsl/hwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RnSvG73Eykg8ZpxP4L3XZLisFnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:98:8f:e4:17:3d:ee:22:0b:dc:42:62:3a:08:2e:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4674af1bbdc4ca483c669c4fe0bdd764b8ac1675
        Validity
            Not Before: Jun 14 04:00:27 2025 GMT
            Not After : Jun 15 04:00:27 2025 GMT
        Subject: CN=c26b6d9d24d611bc457891b30778ff4ba6e51873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8a:60:b4:8a:2a:d9:23:ea:d0:f6:08:80:45:
                    27:17:9f:77:cf:3d:17:34:bd:bb:3b:09:c5:90:35:
                    cc:ea:47:a7:fa:6d:9c:34:78:71:10:9a:fc:62:2c:
                    26:0d:a8:8a:97:d3:e7:7c:a9:e7:8e:ef:1a:4a:86:
                    3c:35:a5:d9:2c:85:88:44:30:3b:9f:4e:e6:f1:3e:
                    04:df:11:02:85:5f:e5:1d:ca:07:39:41:42:26:72:
                    9d:51:b5:e2:4c:b8:f3:fc:a2:bd:16:76:1e:f1:db:
                    64:3b:d2:7a:ac:f1:35:06:ba:46:14:97:29:f0:b4:
                    2c:77:1a:a6:f9:7a:6d:46:0f:be:92:2d:81:7c:98:
                    ce:1d:a7:e8:1b:45:92:5b:bc:bb:6c:90:e9:b6:0c:
                    dc:1f:14:eb:2b:8a:53:1b:34:70:78:4f:ca:ca:0f:
                    e6:66:f4:02:82:86:50:1b:8b:aa:b6:ce:1b:4d:b0:
                    b1:ab:d8:43:db:34:90:01:ee:e7:7e:bd:2c:c9:d9:
                    f8:b5:80:aa:2f:30:e2:85:f1:25:cf:49:9d:53:ef:
                    b1:ef:b7:c6:d3:64:59:f6:08:6d:89:5e:9f:1c:39:
                    ea:9f:0b:8b:0e:a2:34:6a:2d:5a:0d:ac:e3:fd:d1:
                    7f:30:63:ee:fb:e8:57:a0:23:b9:3f:e9:ed:fa:78:
                    7f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:6B:6D:9D:24:D6:11:BC:45:78:91:B3:07:78:FF:4B:A6:E5:18:73
            X509v3 Authority Key Identifier:
                keyid:46:74:AF:1B:BD:C4:CA:48:3C:66:9C:4F:E0:BD:D7:64:B8:AC:16:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RnSvG73Eykg8ZpxP4L3XZLisFnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:c3:1a:a2:16:c5:1d:78:02:61:1c:de:57:f2:1b:77:71:33:
         e2:fe:b8:ee:43:58:3b:56:29:ad:9b:cc:bb:9d:1b:41:f3:b6:
         4e:a4:dd:38:74:7e:29:7f:26:64:f2:74:ca:b9:3e:a7:fe:00:
         70:71:cc:04:b4:32:64:ef:3b:b1:4b:49:90:eb:6f:3a:30:24:
         3e:95:ee:a2:ec:28:4f:40:2d:7f:6e:81:f0:46:48:a8:1e:2f:
         b2:e1:b6:80:c0:1b:42:76:ac:3e:5d:52:6b:db:a6:17:b7:76:
         9c:ac:9a:ad:b6:d2:e7:70:8e:9a:95:db:31:a1:e5:f0:75:cd:
         5f:1d:99:98:51:b9:bc:07:e0:68:10:4c:79:d0:c7:6b:ec:b0:
         6a:b7:78:db:33:54:cd:ef:2e:6b:46:ba:4c:1d:31:06:24:0b:
         9c:af:81:f5:22:b1:52:19:63:f3:73:16:58:64:12:fe:99:27:
         17:69:51:a7:93:e5:aa:75:94:c3:07:79:b0:ae:84:38:34:3d:
         d4:a4:9a:f5:ff:fc:0d:26:ba:cf:94:1c:b1:aa:46:be:a2:f8:
         06:46:15:54:fd:8c:a1:df:53:72:65:78:a8:e7:96:51:62:57:
         85:a8:c7:ed:a8:33:a4:ab:db:ab:bb:bc:5e:f2:46:ff:6d:e5:
         df:e0:fd:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsmI/kFz3uIgvcQmI6CC7yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NzRhZjFiYmRjNGNhNDgzYzY2OWM0ZmUwYmRkNzY0Yjhh
YzE2NzUwHhcNMjUwNjE0MDQwMDI3WhcNMjUwNjE1MDQwMDI3WjAzMTEwLwYDVQQD
EyhjMjZiNmQ5ZDI0ZDYxMWJjNDU3ODkxYjMwNzc4ZmY0YmE2ZTUxODczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIpgtIoq2SPq0PYIgEUnF593zz0X
NL27OwnFkDXM6ken+m2cNHhxEJr8YiwmDaiKl9PnfKnnju8aSoY8NaXZLIWIRDA7
n07m8T4E3xEChV/lHcoHOUFCJnKdUbXiTLjz/KK9FnYe8dtkO9J6rPE1BrpGFJcp
8LQsdxqm+XptRg++ki2BfJjOHafoG0WSW7y7bJDptgzcHxTrK4pTGzRweE/Kyg/m
ZvQCgoZQG4uqts4bTbCxq9hD2zSQAe7nfr0sydn4tYCqLzDihfElz0mdU++x77fG
02RZ9ghtiV6fHDnqnwuLDqI0ai1aDazj/dF/MGPu++hXoCO5P+nt+nh/hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJrbZ0k1hG8RXiRswd4/0um5RhzMB8GA1UdIwQY
MBaAFEZ0rxu9xMpIPGacT+C912S4rBZ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm5Tdkc3M0V5a2c4WnB4UDRMM1haTGlzRm5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kNTQxMzgtMTMwOC00YjQyLWExNzAt
NTQ5MmUwZTRlYmMzLzEvUm5Tdkc3M0V5a2c4WnB4UDRMM1haTGlzRm5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kNTQxMzgtMTMwOC00YjQyLWExNzAtNTQ5MmUwZTRlYmMz
LzEvUm5Tdkc3M0V5a2c4WnB4UDRMM1haTGlzRm5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvsMaohbF
HXgCYRzeV/Ibd3Ez4v647kNYO1YprZvMu50bQfO2TqTdOHR+KX8mZPJ0yrk+p/4A
cHHMBLQyZO87sUtJkOtvOjAkPpXuouwoT0Atf26B8EZIqB4vsuG2gMAbQnasPl1S
a9umF7d2nKyarbbS53COmpXbMaHl8HXNXx2ZmFG5vAfgaBBMedDHa+yward42zNU
ze8ua0a6TB0xBiQLnK+B9SKxUhlj83MWWGQS/pknF2lRp5PlqnWUwwd5sK6EODQ9
1KSa9f/8DSa6z5QcsapGvqL4BkYVVP2Mod9TcmV4qOeWUWJXhajH7agzpKvbq7u8
XvJG/23l3+D9gA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 08:54:37 2025 by rpki-client