Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
File:                     deBbwhsqbxAzcR_8pkkcbDDOWko.mft (raw, json)
Hash identifier:          vjajQdR4qoe+2FsnyNShT37DoDdDtQl2Mm5dXUnvsoA=
Subject key identifier:   0F:F3:E2:26:D3:F2:39:B8:66:D5:24:B8:64:73:04:00:D4:C1:34:B7
Authority key identifier: 75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
Certificate issuer:       /CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Certificate serial:       019749682E12D939233891F7547E619E0F17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
Manifest number:          1587
Signing time:             Sat 07 Jun 2025 08:00:53 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:53 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:53 +0000
Files and hashes:         1: UJAjdPQrd8bP5k3ucoOuD61_MT8.roa (hash: ugk9F1DdJco8dK5O++Cvmb5dblVQF4BV4yb8wudILQ0=)
                          2: WkmHxNpKrmAzpx_FXkIaqhpVbpg.roa (hash: +AeFew5fsUdx9Fz3OOuJ7ZKCrATyNvcvfW0fCxc+tvg=)
                          3: deBbwhsqbxAzcR_8pkkcbDDOWko.crl (hash: 7OMwfAFOWYoxgTvwrXDyNytKQMGV8yhUgykybdRLKXc=)
                          4: imLX_iKSVxIt55dbqRMupQNb-6o.roa (hash: OviNWocn0RhLkHHteMWnzyr2rnMguzIPeb1JC9urBc0=)
                          5: iwdwl1HuN2YXg9VICxrnQ2L8T_o.roa (hash: tLBry0LnEHMR25EGcYFuNe2nISzjy4sXmppIiMI5cVo=)
                          6: ju7dlcjXTVtzrpg-cXuTrngFgtw.roa (hash: Odms44ovs7hGv3jdYt/7+590lUec8LGS69mCjmZU8q4=)
                          7: oDzpo9P1CSTveVeS7HO-MB_9-so.roa (hash: TBsZnZ6Hce91sBTky4DlDhCeMhJRvacSOmd1DwZB9+E=)
                          8: rsxSpj9moP8LtPzNvFBSE3jnhTY.roa (hash: EI5toUib0yn2k83FMVjkqamZ8A/+xIBPYiOu2bZVLHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:68:2e:12:d9:39:23:38:91:f7:54:7e:61:9e:0f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
        Validity
            Not Before: Jun  7 08:00:53 2025 GMT
            Not After : Jun  8 08:00:53 2025 GMT
        Subject: CN=0ff3e226d3f239b866d524b864730400d4c134b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6f:8c:ba:3b:0f:54:f5:5f:24:ab:46:0f:0e:
                    d4:55:c1:48:0b:b0:0d:32:5a:bd:d7:27:6b:1c:09:
                    a6:48:58:da:82:0a:de:aa:ba:c3:94:83:14:5b:82:
                    36:81:f0:64:87:d7:e3:65:57:75:01:53:bd:c3:4d:
                    17:d6:47:dd:df:8a:61:80:3b:ea:c4:12:38:ee:ff:
                    0b:45:72:80:0a:93:89:02:25:fa:c8:55:1c:15:31:
                    4c:2d:f1:50:53:22:4e:17:18:2d:97:12:2f:67:74:
                    e5:6f:18:e4:96:a5:5d:fe:1e:35:e4:5d:90:ef:64:
                    0f:79:e5:da:05:8f:64:d9:62:d1:6a:2e:d1:fd:11:
                    73:fe:85:da:a4:70:e1:9a:50:b4:f6:f7:e6:38:d4:
                    4f:80:36:38:0b:c2:86:35:46:c9:50:e8:2c:be:e6:
                    d8:7e:43:7c:6f:cd:57:4b:64:6e:83:e8:05:3d:08:
                    69:f0:9d:66:f8:64:04:d3:9b:18:a9:37:ce:9f:13:
                    78:af:25:84:d1:06:2e:dc:b1:46:f0:aa:a0:01:dc:
                    10:d8:9c:c3:de:49:76:0b:f2:c4:0c:2b:a3:f6:78:
                    04:c7:17:35:51:82:65:a6:6d:7d:9e:36:9d:42:38:
                    96:43:47:bb:5f:eb:e6:db:50:a3:0c:d0:f3:52:71:
                    ca:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F3:E2:26:D3:F2:39:B8:66:D5:24:B8:64:73:04:00:D4:C1:34:B7
            X509v3 Authority Key Identifier:
                keyid:75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:c3:78:e7:ce:4b:dd:d5:09:c1:5b:7f:c0:62:b8:cc:21:95:
         e3:a8:a1:64:88:48:6a:b4:a1:1a:09:6a:c9:f6:ec:43:f0:f3:
         96:d4:b9:77:fc:98:8b:32:7c:87:af:21:b5:57:33:7e:f6:6c:
         60:fb:79:7b:5a:32:0a:ea:c9:01:88:89:d4:c8:2a:3b:85:bd:
         30:06:46:f0:c4:28:d2:62:82:97:e3:b2:5e:55:b6:43:3c:af:
         0e:4a:ce:18:3d:b1:18:ee:ab:98:8e:ac:e2:88:ef:41:4a:a3:
         06:55:04:08:23:9b:db:52:68:aa:1d:56:9e:a5:07:51:3d:0f:
         60:e8:84:7d:47:fa:42:f1:15:e7:4a:cb:2f:f8:55:f9:e6:88:
         92:18:a7:4a:02:65:55:53:76:ea:7d:60:ba:ce:3e:60:30:e1:
         0b:0f:e7:28:17:66:0d:50:73:95:77:ea:e0:48:ca:9e:74:4c:
         8f:51:e0:06:48:0e:9c:9b:ff:6c:37:c9:35:1e:6a:27:58:a6:
         12:a5:93:40:6c:f4:bf:be:27:cd:d8:27:88:d8:28:93:88:c9:
         86:1b:fc:9b:bd:98:7a:91:bb:0a:91:69:a7:8f:e3:65:ca:41:
         f4:bc:ea:bc:a3:d5:b8:da:88:d1:a1:0f:74:95:25:1a:16:29:
         f9:f0:4c:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJaC4S2TkjOJH3VH5hng8XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ZTA1YmMyMWIyYTZmMTAzMzcxMWZmY2E2NDkxYzZjMzBj
ZTVhNGEwHhcNMjUwNjA3MDgwMDUzWhcNMjUwNjA4MDgwMDUzWjAzMTEwLwYDVQQD
EygwZmYzZTIyNmQzZjIzOWI4NjZkNTI0Yjg2NDczMDQwMGQ0YzEzNGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2+MujsPVPVfJKtGDw7UVcFIC7AN
Mlq91ydrHAmmSFjaggreqrrDlIMUW4I2gfBkh9fjZVd1AVO9w00X1kfd34phgDvq
xBI47v8LRXKACpOJAiX6yFUcFTFMLfFQUyJOFxgtlxIvZ3TlbxjklqVd/h415F2Q
72QPeeXaBY9k2WLRai7R/RFz/oXapHDhmlC09vfmONRPgDY4C8KGNUbJUOgsvubY
fkN8b81XS2Rug+gFPQhp8J1m+GQE05sYqTfOnxN4ryWE0QYu3LFG8KqgAdwQ2JzD
3kl2C/LEDCuj9ngExxc1UYJlpm19njadQjiWQ0e7X+vm21CjDNDzUnHKZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/z4ibT8jm4ZtUkuGRzBADUwTS3MB8GA1UdIwQY
MBaAFHXgW8IbKm8QM3Ef/KZJHGwwzlpKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGVCYndoc3FieEF6Y1JfOHBra2NiRERPV2tvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yYjQ5MzQtNGVhMi00NWMxLWFlMDct
ZDQ1YWI3ZGYyZGUxLzEvZGVCYndoc3FieEF6Y1JfOHBra2NiRERPV2tvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8yYjQ5MzQtNGVhMi00NWMxLWFlMDctZDQ1YWI3ZGYyZGUx
LzEvZGVCYndoc3FieEF6Y1JfOHBra2NiRERPV2tvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcsN4585L
3dUJwVt/wGK4zCGV46ihZIhIarShGglqyfbsQ/DzltS5d/yYizJ8h68htVczfvZs
YPt5e1oyCurJAYiJ1MgqO4W9MAZG8MQo0mKCl+OyXlW2QzyvDkrOGD2xGO6rmI6s
4ojvQUqjBlUECCOb21Joqh1WnqUHUT0PYOiEfUf6QvEV50rLL/hV+eaIkhinSgJl
VVN26n1gus4+YDDhCw/nKBdmDVBzlXfq4EjKnnRMj1HgBkgOnJv/bDfJNR5qJ1im
EqWTQGz0v74nzdgniNgok4jJhhv8m72YepG7CpFpp4/jZcpB9LzqvKPVuNqI0aEP
dJUlGhYp+fBMyA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 18:31:12 2025 by rpki-client