Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
File:                     vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft (raw, json)
Hash identifier:          FAjlavN3nIJojHf5+/uHZ8wq/hchP6NTrDi3ULn/0kQ=
Subject key identifier:   84:E1:5B:2F:78:F4:62:0A:87:80:F9:D3:C5:7F:FA:5F:42:43:92:53
Authority key identifier: BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B
Certificate issuer:       /CN=beb12ce6a91030e27d5abad146df27bc2880652b
Certificate serial:       0197692A1AA0610F3D31673F7D5EC326D597
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
Manifest number:          1593
Signing time:             Fri 13 Jun 2025 12:00:56 +0000
Manifest this update:     Fri 13 Jun 2025 12:00:56 +0000
Manifest next update:     Sat 14 Jun 2025 12:00:56 +0000
Files and hashes:         1: KDP9W_m_0hLGFtgf73aWlnZ_iQc.roa (hash: lcUH+LFQ+UVivSdKcSpqJQp9Eg8xuBIT9bPnxngbu68=)
                          2: KHg46KpwJnmv6hNomrXATVqpzV8.roa (hash: WJsuWbqQXojOAqeQ80N/VH6AOxmAzbUb+3keyWT7yfw=)
                          3: e7SUl4mSjdeGsAW__A2CvddXoNY.roa (hash: CZDiVjjgs0Krs+aiXIc/FeDFsKFYjTe8hPduuFN8E2k=)
                          4: vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl (hash: fUrzd+vsMbnkCcvGF2KSTe8A/hA1y3w2MMBXw0DkT04=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:2a:1a:a0:61:0f:3d:31:67:3f:7d:5e:c3:26:d5:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beb12ce6a91030e27d5abad146df27bc2880652b
        Validity
            Not Before: Jun 13 12:00:56 2025 GMT
            Not After : Jun 14 12:00:56 2025 GMT
        Subject: CN=84e15b2f78f4620a8780f9d3c57ffa5f42439253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6d:19:0a:bf:a6:c7:56:29:35:62:5f:59:61:
                    ab:19:c4:1a:be:51:51:34:94:9e:dd:f1:49:c0:52:
                    6b:4a:bc:ea:63:ea:3d:f6:00:31:39:3c:58:28:45:
                    76:f0:8f:b8:fe:61:88:70:1c:f7:7d:e1:46:07:c6:
                    42:78:c5:1c:7a:c1:f5:c2:fe:50:cf:cb:71:ef:bc:
                    f9:82:7f:b1:28:60:4d:7b:52:12:bd:66:7a:46:49:
                    28:eb:72:cc:bd:21:56:79:c1:21:82:06:79:61:bd:
                    db:c0:8c:53:b0:b8:40:74:8a:b2:dc:93:a1:80:d8:
                    9a:74:3a:e0:9a:7f:97:27:ff:ac:6f:4a:3d:76:05:
                    d0:77:ad:68:52:b0:d5:e4:fa:98:52:d3:57:71:73:
                    63:85:57:27:7a:07:1a:3f:bf:1a:08:48:56:2b:9d:
                    76:2d:9a:d3:9b:69:1b:5a:25:b0:50:2e:46:26:f5:
                    e0:7b:be:95:e3:97:ed:87:7b:ae:05:7e:62:a5:1c:
                    a3:20:f3:c5:03:b3:76:56:54:58:9b:73:b4:02:0f:
                    3d:d2:62:b8:19:af:1c:6c:01:a9:76:d0:88:f4:02:
                    17:53:18:fa:47:01:6b:72:d6:00:be:be:1b:a7:22:
                    29:ee:53:2b:b4:5d:18:75:52:36:24:0e:33:63:24:
                    64:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E1:5B:2F:78:F4:62:0A:87:80:F9:D3:C5:7F:FA:5F:42:43:92:53
            X509v3 Authority Key Identifier:
                keyid:BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:f9:44:29:b1:cb:b3:6b:19:19:e1:8f:c0:d3:25:5d:53:e1:
         9c:e9:d5:fe:cf:4c:3d:5d:57:df:26:0d:4e:62:af:db:7a:28:
         26:c0:6a:e1:f6:77:13:90:89:79:48:bf:b8:eb:32:93:eb:f5:
         64:1a:f2:a4:b2:34:04:32:22:07:0d:f9:8e:59:91:42:7c:07:
         10:47:73:57:5f:97:52:f6:ef:7d:58:92:39:b6:6e:fa:7c:69:
         68:e7:22:b3:cf:29:9f:e8:ec:31:e1:3e:18:ed:9a:45:2a:4c:
         19:61:d7:06:c7:c4:42:ab:07:26:4a:1a:f7:03:87:0d:c5:ed:
         91:ce:e9:0e:89:3a:51:1b:f7:ba:28:48:71:2b:8e:42:b9:6d:
         8f:67:ec:51:51:a2:75:2e:88:53:41:cf:2c:ba:e3:69:9b:20:
         27:56:97:ce:4a:c2:13:d7:97:5b:bb:47:32:4a:37:d5:52:48:
         42:37:be:1c:9b:5e:8a:27:7f:c8:a0:10:b4:bc:ac:13:13:f5:
         bd:7d:36:19:31:55:ee:25:b9:5d:14:6c:cb:d0:61:be:62:cc:
         3f:e9:20:82:3c:87:b9:05:e1:aa:ab:ff:83:9c:27:f9:22:62:
         d2:24:3d:ab:e8:80:79:d7:4f:19:9d:bf:27:5e:e8:ce:8f:69:
         e6:c6:99:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpKhqgYQ89MWc/fV7DJtWXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYjEyY2U2YTkxMDMwZTI3ZDVhYmFkMTQ2ZGYyN2JjMjg4
MDY1MmIwHhcNMjUwNjEzMTIwMDU2WhcNMjUwNjE0MTIwMDU2WjAzMTEwLwYDVQQD
Eyg4NGUxNWIyZjc4ZjQ2MjBhODc4MGY5ZDNjNTdmZmE1ZjQyNDM5MjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmm0ZCr+mx1YpNWJfWWGrGcQavlFR
NJSe3fFJwFJrSrzqY+o99gAxOTxYKEV28I+4/mGIcBz3feFGB8ZCeMUcesH1wv5Q
z8tx77z5gn+xKGBNe1ISvWZ6Rkko63LMvSFWecEhggZ5Yb3bwIxTsLhAdIqy3JOh
gNiadDrgmn+XJ/+sb0o9dgXQd61oUrDV5PqYUtNXcXNjhVcnegcaP78aCEhWK512
LZrTm2kbWiWwUC5GJvXge76V45fth3uuBX5ipRyjIPPFA7N2VlRYm3O0Ag890mK4
Ga8cbAGpdtCI9AIXUxj6RwFrctYAvr4bpyIp7lMrtF0YdVI2JA4zYyRkPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIThWy949GIKh4D508V/+l9CQ5JTMB8GA1UdIwQY
MBaAFL6xLOapEDDifVq60UbfJ7wogGUrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnJFczVxa1FNT0o5V3JyUlJ0OG52Q2lBWlNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC83NDk0MGEtZDlmYS00NTUyLWJlNWMt
YTdhZGU0MzRkNDUxLzEvdnJFczVxa1FNT0o5V3JyUlJ0OG52Q2lBWlNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC83NDk0MGEtZDlmYS00NTUyLWJlNWMtYTdhZGU0MzRkNDUx
LzEvdnJFczVxa1FNT0o5V3JyUlJ0OG52Q2lBWlNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARvlEKbHL
s2sZGeGPwNMlXVPhnOnV/s9MPV1X3yYNTmKv23ooJsBq4fZ3E5CJeUi/uOsyk+v1
ZBrypLI0BDIiBw35jlmRQnwHEEdzV1+XUvbvfViSObZu+nxpaOcis88pn+jsMeE+
GO2aRSpMGWHXBsfEQqsHJkoa9wOHDcXtkc7pDok6URv3uihIcSuOQrltj2fsUVGi
dS6IU0HPLLrjaZsgJ1aXzkrCE9eXW7tHMko31VJIQje+HJteiid/yKAQtLysExP1
vX02GTFV7iW5XRRsy9BhvmLMP+kggjyHuQXhqqv/g5wn+SJi0iQ9q+iAeddPGZ2/
J17ozo9p5saZyw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 16:36:56 2025 by rpki-client