Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
File:                     1ZVssui7tNQpco4B4g_TyOBfMyg.mft (raw, json)
Hash identifier:          lJtEIL/wv3pBUUIVasFwbP3fNvoBok7noO2yjjbowo4=
Subject key identifier:   ED:3F:B8:0B:26:3C:73:EE:6B:D0:BC:A8:2E:77:E3:85:2D:34:9D:7B
Authority key identifier: D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28
Certificate issuer:       /CN=d5956cb2e8bbb4d429728e01e20fd3c8e05f3328
Certificate serial:       019751C673D038A8544A589588F92331E00B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
Manifest number:          04EC
Signing time:             Sun 08 Jun 2025 23:00:49 +0000
Manifest this update:     Sun 08 Jun 2025 23:00:49 +0000
Manifest next update:     Mon 09 Jun 2025 23:00:49 +0000
Files and hashes:         1: 1ZVssui7tNQpco4B4g_TyOBfMyg.crl (hash: d0DMcbpTrMKLkJVYtfuK7VM18gRauvOo+XEfGBiwZ4E=)
                          2: oZt6wOeBPRzgxfrSHyQvaXZ61CE.roa (hash: 0c3+xTwK5KGYXpDaZhmc1MdZZB2Ym1lrAvZHlgXOKE4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:51:c6:73:d0:38:a8:54:4a:58:95:88:f9:23:31:e0:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5956cb2e8bbb4d429728e01e20fd3c8e05f3328
        Validity
            Not Before: Jun  8 23:00:49 2025 GMT
            Not After : Jun  9 23:00:49 2025 GMT
        Subject: CN=ed3fb80b263c73ee6bd0bca82e77e3852d349d7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:28:66:d6:48:b2:11:e7:62:ff:10:90:f3:d2:
                    bc:21:72:68:12:ff:48:5f:e5:d9:f6:54:d3:d0:e0:
                    51:0f:7a:7f:4d:19:b8:06:87:e4:ef:b2:ed:3b:84:
                    a0:f3:17:c3:34:0d:a3:4d:71:b4:0b:09:c9:01:b7:
                    8e:94:23:14:a5:0a:c0:8b:bb:41:1c:22:58:62:7b:
                    88:c0:af:e7:37:99:45:75:23:7e:50:0b:95:87:59:
                    a0:1b:9b:86:4d:97:97:aa:56:99:4a:19:ba:3b:4c:
                    ca:d7:29:9e:0e:b6:d6:f4:19:64:da:3d:44:1f:ae:
                    fe:d2:69:76:4a:02:1c:db:78:1f:2b:f7:13:93:78:
                    b2:27:4f:2b:4c:55:da:58:c0:31:77:69:bf:04:5a:
                    e1:1d:22:fd:55:54:5c:8c:f0:00:c3:73:31:91:14:
                    08:28:dc:86:69:e6:97:98:07:7e:4f:85:02:c7:bb:
                    87:eb:b9:f8:df:8f:22:64:e0:05:5c:c1:24:70:04:
                    a2:38:38:4d:71:34:c8:cb:60:4a:ab:63:bf:8d:98:
                    52:e7:21:cb:75:ac:de:d9:68:b4:6d:56:cc:56:19:
                    ad:08:09:ad:b1:ec:cd:62:f7:61:a3:52:d9:e7:23:
                    d0:8f:d4:ee:d4:d5:9a:7c:fc:06:95:57:42:04:a4:
                    7b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:3F:B8:0B:26:3C:73:EE:6B:D0:BC:A8:2E:77:E3:85:2D:34:9D:7B
            X509v3 Authority Key Identifier:
                keyid:D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:67:ae:56:0c:26:38:7b:82:22:6e:f8:8d:bb:a8:43:0f:82:
         24:e1:ca:f9:83:ba:82:49:1f:b7:05:16:98:b8:2f:a9:a5:20:
         f7:cc:7b:c2:d7:ef:c0:72:11:79:eb:ff:59:6a:24:d7:38:f1:
         00:f5:32:c3:ea:34:30:02:de:b5:04:40:4d:ed:17:14:af:4b:
         76:dc:9f:16:2b:b2:40:44:40:e0:4b:fc:c5:1d:c9:56:c9:2a:
         37:48:59:94:83:a2:0d:51:27:a0:b1:ed:f7:e2:9c:88:76:85:
         1e:c0:d4:c7:39:69:dd:0c:ce:56:59:c0:82:8c:ce:3a:3a:bc:
         39:59:55:bb:f0:85:bf:7a:ca:34:aa:a6:0b:a1:7c:f8:22:77:
         9f:1c:44:9e:1a:32:9f:99:a2:b4:7b:77:64:e5:9a:8c:05:10:
         14:c8:1b:7d:0f:42:51:38:4c:e6:37:02:42:ff:24:5c:e7:fc:
         c3:36:a4:9c:d9:26:1d:17:41:54:5f:87:ad:bc:3b:df:3b:bc:
         96:60:34:a4:45:2c:5c:89:2d:22:fa:34:2a:8d:de:d5:26:02:
         d0:3e:2b:75:69:ed:81:8b:ae:67:14:fb:01:32:48:42:8d:ba:
         16:32:26:4e:25:ed:16:14:7d:0f:7b:ce:bd:13:23:f3:c9:39:
         d3:ae:c7:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdRxnPQOKhUSliViPkjMeALMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1OTU2Y2IyZThiYmI0ZDQyOTcyOGUwMWUyMGZkM2M4ZTA1
ZjMzMjgwHhcNMjUwNjA4MjMwMDQ5WhcNMjUwNjA5MjMwMDQ5WjAzMTEwLwYDVQQD
EyhlZDNmYjgwYjI2M2M3M2VlNmJkMGJjYTgyZTc3ZTM4NTJkMzQ5ZDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuChm1kiyEedi/xCQ89K8IXJoEv9I
X+XZ9lTT0OBRD3p/TRm4Bofk77LtO4Sg8xfDNA2jTXG0CwnJAbeOlCMUpQrAi7tB
HCJYYnuIwK/nN5lFdSN+UAuVh1mgG5uGTZeXqlaZShm6O0zK1ymeDrbW9Blk2j1E
H67+0ml2SgIc23gfK/cTk3iyJ08rTFXaWMAxd2m/BFrhHSL9VVRcjPAAw3MxkRQI
KNyGaeaXmAd+T4UCx7uH67n4348iZOAFXMEkcASiODhNcTTIy2BKq2O/jZhS5yHL
daze2Wi0bVbMVhmtCAmtsezNYvdho1LZ5yPQj9Tu1NWafPwGlVdCBKR7CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO0/uAsmPHPua9C8qC5344UtNJ17MB8GA1UdIwQY
MBaAFNWVbLLou7TUKXKOAeIP08jgXzMoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVpWc3N1aTd0TlFwY280QjRnX1R5T0JmTXlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jYmE3MTgtYWE3My00ZDM3LTlhMDQt
OThkYWJlM2UyNjYyLzEvMVpWc3N1aTd0TlFwY280QjRnX1R5T0JmTXlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9jYmE3MTgtYWE3My00ZDM3LTlhMDQtOThkYWJlM2UyNjYy
LzEvMVpWc3N1aTd0TlFwY280QjRnX1R5T0JmTXlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeWeuVgwm
OHuCIm74jbuoQw+CJOHK+YO6gkkftwUWmLgvqaUg98x7wtfvwHIReev/WWok1zjx
APUyw+o0MALetQRATe0XFK9LdtyfFiuyQERA4Ev8xR3JVskqN0hZlIOiDVEnoLHt
9+KciHaFHsDUxzlp3QzOVlnAgozOOjq8OVlVu/CFv3rKNKqmC6F8+CJ3nxxEnhoy
n5mitHt3ZOWajAUQFMgbfQ9CUThM5jcCQv8kXOf8wzaknNkmHRdBVF+Hrbw73zu8
lmA0pEUsXIktIvo0Ko3e1SYC0D4rdWntgYuuZxT7ATJIQo26FjImTiXtFhR9D3vO
vRMj88k5067HKA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 08:16:02 2025 by rpki-client