Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
File:                     lkM1Vj2bb54-KN42jYWYi8FBNx4.mft (raw, json)
Hash identifier:          gf+YeJSDnBRwrM0plDoa0LBznxGf9+wExClugoLpLgo=
Subject key identifier:   19:12:8D:41:F2:56:A8:D3:64:D7:7A:5B:7A:65:B3:27:41:B6:4E:B3
Authority key identifier: 96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E
Certificate issuer:       /CN=964335563d9b6f9e3e28de368d85988bc141371e
Certificate serial:       01976BBCEE018E2D6CC758DDB585997D9ABF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
Manifest number:          13D6
Signing time:             Sat 14 Jun 2025 00:00:33 +0000
Manifest this update:     Sat 14 Jun 2025 00:00:33 +0000
Manifest next update:     Sun 15 Jun 2025 00:00:33 +0000
Files and hashes:         1: J5AX7Ye4ZjtlJFShqhgdOlDreek.roa (hash: A32lKX9VWGahKxeBlyvikvJD4hfkRzNyARSGOop4E+w=)
                          2: i4xZsK__v3rFAdp2I4QUrGdulkA.roa (hash: 7y/IXk7zUN3UVxHCXKQjh1FoBdjvSc3K/G/mRr6+6Gg=)
                          3: lkM1Vj2bb54-KN42jYWYi8FBNx4.crl (hash: ymDnZpYbOhc7GcQy4MXWHXL80eOyUnvSHmmSUFUaFnU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 00:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:bc:ee:01:8e:2d:6c:c7:58:dd:b5:85:99:7d:9a:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=964335563d9b6f9e3e28de368d85988bc141371e
        Validity
            Not Before: Jun 14 00:00:33 2025 GMT
            Not After : Jun 15 00:00:33 2025 GMT
        Subject: CN=19128d41f256a8d364d77a5b7a65b32741b64eb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9d:cd:16:20:ed:c9:44:f3:aa:8f:69:15:4e:
                    fb:d0:e6:72:33:e3:8a:fa:46:ca:12:32:21:93:c7:
                    5f:97:8f:b7:77:65:d5:ac:6e:8d:2e:1b:24:e0:04:
                    a1:c1:db:61:82:a8:92:b7:6c:2b:82:56:86:db:02:
                    a9:8c:05:03:73:61:f8:d3:54:d9:96:ad:a9:da:80:
                    fb:e0:0d:bc:1a:28:8f:c5:19:a7:9c:59:b0:06:4d:
                    e8:7a:c6:45:a6:f3:bc:67:9d:08:7a:56:e8:be:e0:
                    7d:cf:5b:e3:0e:b2:9f:3d:66:a5:e5:b0:48:0e:ca:
                    63:98:05:13:c3:f2:bf:ff:f8:58:87:05:16:fc:57:
                    b3:f2:60:76:f7:fe:15:e7:25:9a:a7:ae:44:cf:6d:
                    16:c7:ac:cd:4a:0b:2f:8f:3d:eb:f1:02:6d:0a:85:
                    a8:05:f9:f7:e8:1e:b5:b4:7f:b3:2b:a8:f0:6c:53:
                    87:94:fb:7b:db:65:a5:85:0b:37:9c:4f:0a:37:a7:
                    56:d5:30:3b:d3:b5:7d:6c:eb:41:6d:51:e6:da:95:
                    32:48:b4:59:c7:39:18:10:fe:d2:40:57:08:50:5c:
                    3d:53:2e:d2:ff:ec:85:2b:59:f0:2e:f0:24:3c:5d:
                    1d:f6:82:0d:47:ae:ea:43:97:1e:66:0d:c9:fd:34:
                    32:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:12:8D:41:F2:56:A8:D3:64:D7:7A:5B:7A:65:B3:27:41:B6:4E:B3
            X509v3 Authority Key Identifier:
                keyid:96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:8a:7e:b2:22:7d:f2:54:7c:05:ec:37:6b:7b:ce:1f:f4:fb:
         de:a5:a6:a3:96:94:e7:74:f5:3f:79:fe:f5:01:26:59:d8:ba:
         59:88:10:cb:74:bf:94:e5:0d:8e:82:cc:7c:5e:75:db:4e:48:
         48:ab:e3:ee:a9:0d:c4:2d:2d:97:d8:4c:be:75:a1:bb:d0:1e:
         7e:b6:0d:33:bd:c2:59:ac:bc:e2:fa:1c:32:3f:4f:3b:10:83:
         40:8f:ea:ab:19:5f:e2:9a:cd:2f:73:55:85:21:41:5d:35:02:
         de:9a:1e:f2:83:7e:e2:2f:cf:8c:89:ff:2a:7b:0c:27:8d:cd:
         5e:bd:18:c2:77:42:83:3d:41:7a:f6:5c:be:a6:62:4b:36:46:
         44:45:45:6f:09:3a:a2:98:23:4c:e4:e9:42:56:5a:e6:c5:a2:
         9e:94:f7:4c:5a:dd:4d:f0:35:47:44:82:74:be:a3:2e:64:38:
         af:18:ee:3b:89:44:3b:24:1d:f7:09:fd:25:95:54:67:cf:1e:
         b0:3d:9d:bf:0b:11:93:64:37:99:a5:1b:5a:4c:8b:8b:8a:1f:
         8c:33:30:6c:9d:7a:52:48:f6:63:fa:d8:10:66:61:71:a4:c9:
         37:f4:17:a2:79:a8:d4:ee:cf:e6:85:61:c9:83:a4:62:df:81:
         c4:77:a7:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdrvO4Bji1sx1jdtYWZfZq/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NDMzNTU2M2Q5YjZmOWUzZTI4ZGUzNjhkODU5ODhiYzE0
MTM3MWUwHhcNMjUwNjE0MDAwMDMzWhcNMjUwNjE1MDAwMDMzWjAzMTEwLwYDVQQD
EygxOTEyOGQ0MWYyNTZhOGQzNjRkNzdhNWI3YTY1YjMyNzQxYjY0ZWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsp3NFiDtyUTzqo9pFU770OZyM+OK
+kbKEjIhk8dfl4+3d2XVrG6NLhsk4AShwdthgqiSt2wrglaG2wKpjAUDc2H401TZ
lq2p2oD74A28GiiPxRmnnFmwBk3oesZFpvO8Z50IelbovuB9z1vjDrKfPWal5bBI
DspjmAUTw/K///hYhwUW/Fez8mB29/4V5yWap65Ez20Wx6zNSgsvjz3r8QJtCoWo
Bfn36B61tH+zK6jwbFOHlPt722WlhQs3nE8KN6dW1TA707V9bOtBbVHm2pUySLRZ
xzkYEP7SQFcIUFw9Uy7S/+yFK1nwLvAkPF0d9oINR67qQ5ceZg3J/TQyBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBkSjUHyVqjTZNd6W3plsydBtk6zMB8GA1UdIwQY
MBaAFJZDNVY9m2+ePijeNo2FmIvBQTceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGtNMVZqMmJiNTQtS040MmpZV1lpOEZCTng0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8xODZhOTMtOGU5My00NjUyLTkyODkt
N2VkNTFjYTVhZjUxLzEvbGtNMVZqMmJiNTQtS040MmpZV1lpOEZCTng0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC8xODZhOTMtOGU5My00NjUyLTkyODktN2VkNTFjYTVhZjUx
LzEvbGtNMVZqMmJiNTQtS040MmpZV1lpOEZCTng0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApop+siJ9
8lR8Bew3a3vOH/T73qWmo5aU53T1P3n+9QEmWdi6WYgQy3S/lOUNjoLMfF51205I
SKvj7qkNxC0tl9hMvnWhu9AefrYNM73CWay84vocMj9POxCDQI/qqxlf4prNL3NV
hSFBXTUC3poe8oN+4i/PjIn/KnsMJ43NXr0YwndCgz1BevZcvqZiSzZGREVFbwk6
opgjTOTpQlZa5sWinpT3TFrdTfA1R0SCdL6jLmQ4rxjuO4lEOyQd9wn9JZVUZ88e
sD2dvwsRk2Q3maUbWkyLi4ofjDMwbJ16Ukj2Y/rYEGZhcaTJN/QXonmo1O7P5oVh
yYOkYt+BxHenQg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:47:26 2025 by rpki-client