Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.mft
File:                     SlyG9c47cLXbUxXWqp1XoAG81oY.mft (raw, json)
Hash identifier:          Rs692ZLdlQimd3qLNHFHJBkzCsqDqmmEZPgL9M+0uIY=
Subject key identifier:   1E:78:20:0F:B7:BF:05:7E:24:B6:AC:6D:0C:71:C6:33:A6:17:F9:CD
Authority key identifier: 4A:5C:86:F5:CE:3B:70:B5:DB:53:15:D6:AA:9D:57:A0:01:BC:D6:86
Certificate issuer:       /CN=4a5c86f5ce3b70b5db5315d6aa9d57a001bcd686
Certificate serial:       01974BC41E92E4ED67EDC0B927F8A8C9848D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SlyG9c47cLXbUxXWqp1XoAG81oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.mft
Manifest number:          0683
Signing time:             Sat 07 Jun 2025 19:00:33 +0000
Manifest this update:     Sat 07 Jun 2025 19:00:33 +0000
Manifest next update:     Sun 08 Jun 2025 19:00:33 +0000
Files and hashes:         1: SlyG9c47cLXbUxXWqp1XoAG81oY.crl (hash: aeaRy3hjcdOVnN/rY5XEXYSvf0cBUQk3B3zNzeBs7f4=)
                          2: npLLh9RrcQH8xkykt9enwrNvhXQ.roa (hash: +AU9dB6ggcPcc7d+ifQcSn4cZAw7WXAjX0hF7llZTBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SlyG9c47cLXbUxXWqp1XoAG81oY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:c4:1e:92:e4:ed:67:ed:c0:b9:27:f8:a8:c9:84:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a5c86f5ce3b70b5db5315d6aa9d57a001bcd686
        Validity
            Not Before: Jun  7 19:00:33 2025 GMT
            Not After : Jun  8 19:00:33 2025 GMT
        Subject: CN=1e78200fb7bf057e24b6ac6d0c71c633a617f9cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6d:78:60:f9:3d:77:38:04:21:e6:79:60:9c:
                    88:0d:ff:ea:04:d8:96:b5:00:9a:bd:c4:fd:8f:c3:
                    56:81:53:03:ea:e2:89:ea:23:05:85:9b:06:f6:f0:
                    02:6a:87:66:88:0d:c8:ff:1a:f3:a5:ac:14:5c:f5:
                    b4:9f:40:b2:62:24:0f:d5:fc:ab:72:c5:f9:67:ab:
                    d0:99:51:54:cb:7c:ed:fd:b4:64:14:53:72:be:12:
                    f2:77:ad:d6:8a:31:e6:9f:1f:b8:60:0a:f8:12:8a:
                    71:b5:c1:8d:63:75:0d:bb:85:82:a8:a1:0e:9c:0b:
                    e4:8a:51:43:5b:5d:91:7e:ea:f2:4d:9b:d5:8b:83:
                    1a:15:95:e4:4c:33:df:ba:b5:c4:ab:cf:b1:ee:c3:
                    eb:a3:b3:3c:95:7b:62:11:52:63:39:c0:3a:b2:6d:
                    d0:b8:a1:0a:1b:7f:ff:d1:c3:93:5a:5f:6e:64:0e:
                    09:f7:51:03:9a:09:1d:25:c7:4b:19:00:cb:ee:9e:
                    a8:b2:4f:0b:4c:80:8f:39:1b:78:a4:b5:c8:60:dc:
                    83:f6:73:6f:8a:49:6a:11:e8:c3:7b:c4:a4:17:cb:
                    4c:f5:d4:b7:2e:01:71:db:6d:8a:d7:1f:00:fa:b1:
                    2e:28:90:48:c4:7e:95:9d:9e:95:3d:32:32:c3:87:
                    bc:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:78:20:0F:B7:BF:05:7E:24:B6:AC:6D:0C:71:C6:33:A6:17:F9:CD
            X509v3 Authority Key Identifier:
                keyid:4A:5C:86:F5:CE:3B:70:B5:DB:53:15:D6:AA:9D:57:A0:01:BC:D6:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SlyG9c47cLXbUxXWqp1XoAG81oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:68:71:77:9d:13:92:f5:2c:03:7e:19:59:d8:a4:97:a4:60:
         79:be:1f:f8:89:03:88:ec:23:fa:f8:9a:1e:8b:05:bd:12:a8:
         78:7c:50:05:aa:9c:70:f0:3a:ad:11:a6:b5:55:b1:99:5e:ca:
         93:37:d8:32:f3:04:62:f3:dc:ab:b5:16:44:8e:f0:be:e2:ad:
         ca:95:85:a3:74:5c:51:22:0b:a0:b0:58:de:c3:3c:cb:f9:3b:
         89:cb:15:5c:28:8c:f5:4e:8a:77:b9:a3:ec:fe:36:51:62:02:
         7d:6b:14:f7:c6:d6:4a:1f:b8:d1:f5:7b:19:44:a3:d5:33:6f:
         d6:1b:aa:f5:ed:0c:a2:e8:dd:d9:bf:c5:e9:29:d5:33:0c:1e:
         19:3b:6f:22:2a:31:d4:bc:bc:4a:ff:3f:05:5f:db:c9:61:20:
         85:d1:1e:e5:bb:81:cd:14:d3:34:c4:5d:8c:be:87:bf:12:5e:
         e2:09:07:eb:f8:23:b1:41:1c:3d:5c:9a:9b:72:1e:ac:36:80:
         00:4b:3c:43:9f:d9:94:43:66:16:00:4b:04:99:e0:bf:0d:57:
         a7:d9:81:0f:02:0a:c7:08:61:b0:84:b0:83:97:6a:27:fc:eb:
         b7:96:e9:2a:91:2e:68:5f:7f:b8:6b:41:1c:af:58:0e:a9:d5:
         72:95:7a:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLxB6S5O1n7cC5J/ioyYSNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNWM4NmY1Y2UzYjcwYjVkYjUzMTVkNmFhOWQ1N2EwMDFi
Y2Q2ODYwHhcNMjUwNjA3MTkwMDMzWhcNMjUwNjA4MTkwMDMzWjAzMTEwLwYDVQQD
EygxZTc4MjAwZmI3YmYwNTdlMjRiNmFjNmQwYzcxYzYzM2E2MTdmOWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy214YPk9dzgEIeZ5YJyIDf/qBNiW
tQCavcT9j8NWgVMD6uKJ6iMFhZsG9vACaodmiA3I/xrzpawUXPW0n0CyYiQP1fyr
csX5Z6vQmVFUy3zt/bRkFFNyvhLyd63WijHmnx+4YAr4EopxtcGNY3UNu4WCqKEO
nAvkilFDW12RfuryTZvVi4MaFZXkTDPfurXEq8+x7sPro7M8lXtiEVJjOcA6sm3Q
uKEKG3//0cOTWl9uZA4J91EDmgkdJcdLGQDL7p6osk8LTICPORt4pLXIYNyD9nNv
iklqEejDe8SkF8tM9dS3LgFx222K1x8A+rEuKJBIxH6VnZ6VPTIyw4e8OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB54IA+3vwV+JLasbQxxxjOmF/nNMB8GA1UdIwQY
MBaAFEpchvXOO3C121MV1qqdV6ABvNaGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2x5RzljNDdjTFhiVXhYV3FwMVhvQUc4MW9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi85ZTJiYzItNWJjMi00YjZmLTgxYTct
NDc3ODNlMjNmYjU5LzEvU2x5RzljNDdjTFhiVXhYV3FwMVhvQUc4MW9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi85ZTJiYzItNWJjMi00YjZmLTgxYTctNDc3ODNlMjNmYjU5
LzEvU2x5RzljNDdjTFhiVXhYV3FwMVhvQUc4MW9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwGhxd50T
kvUsA34ZWdikl6Rgeb4f+IkDiOwj+viaHosFvRKoeHxQBaqccPA6rRGmtVWxmV7K
kzfYMvMEYvPcq7UWRI7wvuKtypWFo3RcUSILoLBY3sM8y/k7icsVXCiM9U6Kd7mj
7P42UWICfWsU98bWSh+40fV7GUSj1TNv1huq9e0Moujd2b/F6SnVMwweGTtvIiox
1Ly8Sv8/BV/byWEghdEe5buBzRTTNMRdjL6HvxJe4gkH6/gjsUEcPVyam3IerDaA
AEs8Q5/ZlENmFgBLBJngvw1Xp9mBDwIKxwhhsISwg5dqJ/zrt5bpKpEuaF9/uGtB
HK9YDqnVcpV6pQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 01:48:59 2025 by rpki-client