Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft
File:                     1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft (raw, json)
Hash identifier:          p5XzBcUhJutjVHmF4jxjbq+jqLH6UdHkW+D/FGoQLIA=
Subject key identifier:   85:F1:14:CC:AE:10:2B:11:61:50:20:28:4F:EE:C1:68:9C:C4:B3:EE
Authority key identifier: D6:EE:A5:FB:35:B5:12:F9:10:09:4D:C6:24:59:C1:67:9B:58:3E:3F
Certificate issuer:       /CN=d6eea5fb35b512f910094dc62459c1679b583e3f
Certificate serial:       01974EFC0EFF0BB8CDB68C1EF1D8BF1C526D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft
Manifest number:          150E
Signing time:             Sun 08 Jun 2025 10:00:31 +0000
Manifest this update:     Sun 08 Jun 2025 10:00:31 +0000
Manifest next update:     Mon 09 Jun 2025 10:00:31 +0000
Files and hashes:         1: 1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl (hash: 6wCDiLmZHK5HK61DN6q2Xkk+CT70PKjwEhK3XATaacw=)
                          2: fv18O4bn8ClOlAw3EqxhUtMaRVY.roa (hash: MbAls5bVgABIPeLPzkQqKtmDDsHJg+H22oDVZlLG+lQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 10:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:fc:0e:ff:0b:b8:cd:b6:8c:1e:f1:d8:bf:1c:52:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6eea5fb35b512f910094dc62459c1679b583e3f
        Validity
            Not Before: Jun  8 10:00:31 2025 GMT
            Not After : Jun  9 10:00:31 2025 GMT
        Subject: CN=85f114ccae102b11615020284feec1689cc4b3ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d2:68:f2:3f:34:d7:08:20:fb:e8:47:ee:03:
                    df:d4:8d:e9:8d:78:a4:07:7c:1d:e3:89:c3:90:ca:
                    ca:cc:b7:9b:c9:e2:9e:1e:4e:18:c8:5a:b3:f4:11:
                    f4:33:11:da:ea:87:05:a5:d5:c6:63:ac:0e:a8:9a:
                    52:ed:74:3d:f9:7d:3a:ef:e9:56:a0:18:67:21:a5:
                    2a:56:cf:70:69:e3:ae:6a:06:6d:5c:39:97:1e:77:
                    ca:2f:af:00:fc:65:03:6b:b5:e4:01:40:5d:27:02:
                    f7:74:06:ab:a1:d2:20:0e:cd:61:3c:d6:91:50:b5:
                    28:13:4e:af:0f:97:5f:95:01:69:56:1c:6d:24:0a:
                    f4:b3:e4:5a:7f:e8:4c:01:ba:53:af:10:ee:95:90:
                    a0:ff:ce:80:6f:24:e5:e1:25:d6:cf:91:12:d8:c0:
                    f3:0d:46:bf:44:9d:71:4b:4b:2d:da:64:e4:1b:b5:
                    9e:a2:cb:85:9f:02:00:46:0a:22:98:c1:58:59:9a:
                    a8:b4:4d:0e:7e:b8:b5:02:64:99:95:62:3c:5d:ce:
                    0e:1d:c1:2b:55:10:80:18:90:25:d4:65:34:92:1b:
                    ed:37:a5:6a:a8:1d:ea:48:fd:99:c2:9e:d4:56:5b:
                    7e:73:6b:bf:2e:d4:e2:58:d6:84:4c:7e:b8:ae:6b:
                    60:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F1:14:CC:AE:10:2B:11:61:50:20:28:4F:EE:C1:68:9C:C4:B3:EE
            X509v3 Authority Key Identifier:
                keyid:D6:EE:A5:FB:35:B5:12:F9:10:09:4D:C6:24:59:C1:67:9B:58:3E:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:9a:58:42:06:21:5b:8a:2e:dc:10:b7:bc:d8:1d:35:0d:53:
         3e:b5:fd:c9:f8:b8:80:7d:bb:99:5c:4e:e3:41:a0:d0:52:4e:
         06:2f:b2:e4:68:60:78:fa:72:1f:be:e1:af:43:22:16:fe:10:
         d6:d1:03:f3:e3:9e:27:89:82:b5:02:52:ae:27:1f:b2:a8:6d:
         6c:32:9c:91:ef:a8:29:da:fc:44:3e:b7:85:c8:52:7a:26:62:
         9a:37:77:f2:41:61:41:32:01:d1:95:1a:c4:23:81:30:f5:e6:
         fa:72:b1:cb:a6:3c:31:2e:ab:59:40:da:68:44:b8:d0:f7:e5:
         e6:ee:7d:9d:73:86:90:86:d1:06:99:f8:6f:04:36:93:89:95:
         76:e1:7f:98:a9:1a:34:62:91:37:80:15:87:18:5e:23:fa:27:
         4d:da:74:e9:a5:1f:d3:0f:68:21:dc:16:39:51:d2:10:a2:4e:
         4f:2e:46:6d:0e:a2:37:6d:d0:f0:4a:12:ab:50:20:2b:6c:8a:
         be:48:c6:af:14:b7:dd:a9:e0:79:c7:8d:e8:09:94:5b:15:33:
         46:45:2a:d3:42:d9:c9:74:34:5f:1e:dd:20:75:c0:d9:fe:15:
         e8:41:00:43:f8:97:47:54:a3:8c:a6:c5:6e:28:0d:0f:fe:c7:
         47:fd:02:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdO/A7/C7jNtowe8di/HFJtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZWVhNWZiMzViNTEyZjkxMDA5NGRjNjI0NTljMTY3OWI1
ODNlM2YwHhcNMjUwNjA4MTAwMDMxWhcNMjUwNjA5MTAwMDMxWjAzMTEwLwYDVQQD
Eyg4NWYxMTRjY2FlMTAyYjExNjE1MDIwMjg0ZmVlYzE2ODljYzRiM2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtJo8j801wgg++hH7gPf1I3pjXik
B3wd44nDkMrKzLebyeKeHk4YyFqz9BH0MxHa6ocFpdXGY6wOqJpS7XQ9+X067+lW
oBhnIaUqVs9waeOuagZtXDmXHnfKL68A/GUDa7XkAUBdJwL3dAarodIgDs1hPNaR
ULUoE06vD5dflQFpVhxtJAr0s+Raf+hMAbpTrxDulZCg/86AbyTl4SXWz5ES2MDz
DUa/RJ1xS0st2mTkG7WeosuFnwIARgoimMFYWZqotE0Ofri1AmSZlWI8Xc4OHcEr
VRCAGJAl1GU0khvtN6VqqB3qSP2Zwp7UVlt+c2u/LtTiWNaETH64rmtgZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXxFMyuECsRYVAgKE/uwWicxLPuMB8GA1UdIwQY
MBaAFNbupfs1tRL5EAlNxiRZwWebWD4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXU2bC16VzFFdmtRQ1UzR0pGbkJaNXRZUGo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hMjM1NjItMzRkZi00OWQ1LTliZjQt
NThmYzk0ZDBkNDE0LzEvMXU2bC16VzFFdmtRQ1UzR0pGbkJaNXRZUGo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hMjM1NjItMzRkZi00OWQ1LTliZjQtNThmYzk0ZDBkNDE0
LzEvMXU2bC16VzFFdmtRQ1UzR0pGbkJaNXRZUGo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz5pYQgYh
W4ou3BC3vNgdNQ1TPrX9yfi4gH27mVxO40Gg0FJOBi+y5GhgePpyH77hr0MiFv4Q
1tED8+OeJ4mCtQJSricfsqhtbDKcke+oKdr8RD63hchSeiZimjd38kFhQTIB0ZUa
xCOBMPXm+nKxy6Y8MS6rWUDaaES40Pfl5u59nXOGkIbRBpn4bwQ2k4mVduF/mKka
NGKRN4AVhxheI/onTdp06aUf0w9oIdwWOVHSEKJOTy5GbQ6iN23Q8EoSq1AgK2yK
vkjGrxS33angeceN6AmUWxUzRkUq00LZyXQ0Xx7dIHXA2f4V6EEAQ/iXR1SjjKbF
bigND/7HR/0CPw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:58:20 2025 by rpki-client