Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.mft
File:                     fCypuamhkyJ5l3TnoXn0qnLMN0E.mft (raw, json)
Hash identifier:          zGOvZmzOVftnMY/za6T/PAARJ/UFI5vP4DyLUvyLwkc=
Subject key identifier:   80:67:40:72:B6:16:04:E0:5D:64:45:D4:FC:6A:AD:D4:56:07:BE:73
Authority key identifier: 7C:2C:A9:B9:A9:A1:93:22:79:97:74:E7:A1:79:F4:AA:72:CC:37:41
Certificate issuer:       /CN=7c2ca9b9a9a19322799774e7a179f4aa72cc3741
Certificate serial:       019750B390C87B40BAF1D2627B606E60FA6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fCypuamhkyJ5l3TnoXn0qnLMN0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.mft
Manifest number:          157F
Signing time:             Sun 08 Jun 2025 18:00:34 +0000
Manifest this update:     Sun 08 Jun 2025 18:00:34 +0000
Manifest next update:     Mon 09 Jun 2025 18:00:34 +0000
Files and hashes:         1: 6B9KDmaoJ3rOhd-DXQ38naI0D4Y.roa (hash: ynSoGLNXCvZga5FxofhRDHQzU/lO6RFc2BKWCKFwLDc=)
                          2: fCypuamhkyJ5l3TnoXn0qnLMN0E.crl (hash: g5KMLejfAZgkVyYhX5I0gzIFadvAnFry8ueK3otqVCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fCypuamhkyJ5l3TnoXn0qnLMN0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:b3:90:c8:7b:40:ba:f1:d2:62:7b:60:6e:60:fa:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c2ca9b9a9a19322799774e7a179f4aa72cc3741
        Validity
            Not Before: Jun  8 18:00:34 2025 GMT
            Not After : Jun  9 18:00:34 2025 GMT
        Subject: CN=80674072b61604e05d6445d4fc6aadd45607be73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:36:2c:c2:17:db:e1:20:ff:f4:ba:78:98:94:
                    89:0c:91:79:da:c2:39:61:b1:25:2e:b0:7f:72:bb:
                    5d:16:1a:40:17:45:de:e1:44:7d:00:56:89:c7:5b:
                    48:91:90:a3:25:d2:99:d6:f8:f3:d1:36:7a:cf:8d:
                    42:c8:29:78:50:c5:1f:2e:3e:80:f8:d3:6a:75:7b:
                    7c:9c:24:a4:54:73:f6:bf:94:f8:5e:da:9f:74:51:
                    d3:d1:70:85:1e:cf:19:68:17:db:63:f7:80:ce:a5:
                    da:49:4f:38:55:b4:e8:89:19:d0:1a:eb:1f:86:39:
                    41:a6:94:ec:eb:72:d2:f5:11:2b:99:79:10:12:d7:
                    1d:02:63:26:9f:d9:9e:ec:2b:c3:0c:53:67:7e:a5:
                    46:f6:52:ba:e0:cd:e0:7a:e7:3b:4b:fa:d0:f6:80:
                    29:e5:5f:53:05:8f:3d:d1:4b:16:cc:34:1f:63:ef:
                    a4:aa:cf:03:25:91:79:25:eb:97:e5:63:ea:18:c9:
                    5c:4c:93:9b:8e:96:22:f9:13:be:b1:38:8e:9d:81:
                    cc:6c:d6:6d:12:e5:b4:df:ed:59:65:ed:36:78:0d:
                    a9:62:fd:9f:a5:c9:f4:cc:27:c7:62:e0:f1:38:29:
                    21:25:be:cc:f3:0c:b5:05:52:ec:de:d3:99:44:b7:
                    8c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:67:40:72:B6:16:04:E0:5D:64:45:D4:FC:6A:AD:D4:56:07:BE:73
            X509v3 Authority Key Identifier:
                keyid:7C:2C:A9:B9:A9:A1:93:22:79:97:74:E7:A1:79:F4:AA:72:CC:37:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCypuamhkyJ5l3TnoXn0qnLMN0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:1a:1d:bf:78:c3:af:c7:cd:8c:95:67:5b:2a:fd:74:b9:9c:
         41:1d:4e:2c:94:4d:14:23:3f:67:66:ea:f0:43:77:68:50:a9:
         f2:b6:1a:3b:1c:78:06:f1:99:98:16:c7:2c:06:6b:2f:04:e3:
         11:09:68:e6:22:71:d8:96:4c:c4:e1:6d:a5:c2:a7:2f:e1:07:
         e6:15:33:b0:73:5b:6c:c9:f9:7a:f1:4b:4e:ef:9a:e2:e0:f7:
         4a:7d:14:5e:f8:37:23:9f:d8:2f:a2:12:a7:9e:28:a8:39:79:
         b1:3c:48:da:b5:80:c2:f7:37:ea:86:1d:4c:2c:35:aa:35:75:
         f8:e3:e7:45:86:b2:df:77:73:61:82:18:1d:30:1f:85:fd:ae:
         00:5d:63:c9:30:6f:8a:87:d2:52:d9:3a:7f:97:18:65:14:3e:
         d5:ac:84:1d:0d:75:b8:08:bc:aa:51:91:ec:fe:d4:6b:70:65:
         8e:1d:e4:72:a5:40:bd:d2:37:9f:aa:77:6d:cb:0b:05:9f:6e:
         19:9d:85:7b:b2:21:81:0d:c9:63:4a:f0:28:95:39:3f:67:77:
         80:d9:ff:a5:d5:96:be:95:0e:8c:2c:99:9a:74:fa:ae:c7:4d:
         e0:8b:cf:73:7f:d9:7e:89:21:74:b2:dd:ad:87:3b:6c:05:96:
         c8:e7:2a:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQs5DIe0C68dJie2BuYPprMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjMmNhOWI5YTlhMTkzMjI3OTk3NzRlN2ExNzlmNGFhNzJj
YzM3NDEwHhcNMjUwNjA4MTgwMDM0WhcNMjUwNjA5MTgwMDM0WjAzMTEwLwYDVQQD
Eyg4MDY3NDA3MmI2MTYwNGUwNWQ2NDQ1ZDRmYzZhYWRkNDU2MDdiZTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjYswhfb4SD/9Lp4mJSJDJF52sI5
YbElLrB/crtdFhpAF0Xe4UR9AFaJx1tIkZCjJdKZ1vjz0TZ6z41CyCl4UMUfLj6A
+NNqdXt8nCSkVHP2v5T4XtqfdFHT0XCFHs8ZaBfbY/eAzqXaSU84VbToiRnQGusf
hjlBppTs63LS9RErmXkQEtcdAmMmn9me7CvDDFNnfqVG9lK64M3geuc7S/rQ9oAp
5V9TBY890UsWzDQfY++kqs8DJZF5JeuX5WPqGMlcTJObjpYi+RO+sTiOnYHMbNZt
EuW03+1ZZe02eA2pYv2fpcn0zCfHYuDxOCkhJb7M8wy1BVLs3tOZRLeMLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIBnQHK2FgTgXWRF1PxqrdRWB75zMB8GA1UdIwQY
MBaAFHwsqbmpoZMieZd056F59KpyzDdBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkN5cHVhbWhreUo1bDNUbm9YbjBxbkxNTjBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS81MzQ2ZWMtNDUwYS00ZmUyLWJlNjQt
ZTRjYzA0NWFiOWZmLzEvZkN5cHVhbWhreUo1bDNUbm9YbjBxbkxNTjBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS81MzQ2ZWMtNDUwYS00ZmUyLWJlNjQtZTRjYzA0NWFiOWZm
LzEvZkN5cHVhbWhreUo1bDNUbm9YbjBxbkxNTjBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmhodv3jD
r8fNjJVnWyr9dLmcQR1OLJRNFCM/Z2bq8EN3aFCp8rYaOxx4BvGZmBbHLAZrLwTj
EQlo5iJx2JZMxOFtpcKnL+EH5hUzsHNbbMn5evFLTu+a4uD3Sn0UXvg3I5/YL6IS
p54oqDl5sTxI2rWAwvc36oYdTCw1qjV1+OPnRYay33dzYYIYHTAfhf2uAF1jyTBv
iofSUtk6f5cYZRQ+1ayEHQ11uAi8qlGR7P7Ua3Bljh3kcqVAvdI3n6p3bcsLBZ9u
GZ2Fe7IhgQ3JY0rwKJU5P2d3gNn/pdWWvpUOjCyZmnT6rsdN4IvPc3/ZfokhdLLd
rYc7bAWWyOcqAA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 22:38:39 2025 by rpki-client