Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft
File:                     fzXVrkF_Re6FBdds6qGzTEWDlKA.mft (raw, json)
Hash identifier:          9GkJlN7PgARSeRDBVEsZnFH1FK1z43nm1WLKGOrMajU=
Subject key identifier:   06:C6:81:64:CC:41:C7:B3:84:4B:7C:F2:EF:0A:50:DD:89:C2:07:90
Authority key identifier: 7F:35:D5:AE:41:7F:45:EE:85:05:D7:6C:EA:A1:B3:4C:45:83:94:A0
Certificate issuer:       /CN=7f35d5ae417f45ee8505d76ceaa1b34c458394a0
Certificate serial:       01974A7AD596F54EA651E87D655B7C3B6D4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft
Manifest number:          0E57
Signing time:             Sat 07 Jun 2025 13:00:53 +0000
Manifest this update:     Sat 07 Jun 2025 13:00:53 +0000
Manifest next update:     Sun 08 Jun 2025 13:00:53 +0000
Files and hashes:         1: 60SN0C5WIf6xee2zdPp6NtBUZT4.roa (hash: 4gepFS/5lwBJIpO8Zj2TAgVElFJH/stJp2iOcS189VA=)
                          2: fzXVrkF_Re6FBdds6qGzTEWDlKA.crl (hash: 2KZ+3T6xLkil0yK93wDzec5XmzSdSYF42ct8ApGgarI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:d5:96:f5:4e:a6:51:e8:7d:65:5b:7c:3b:6d:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f35d5ae417f45ee8505d76ceaa1b34c458394a0
        Validity
            Not Before: Jun  7 13:00:53 2025 GMT
            Not After : Jun  8 13:00:53 2025 GMT
        Subject: CN=06c68164cc41c7b3844b7cf2ef0a50dd89c20790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ae:f3:73:08:30:8c:ff:f6:36:00:2a:cc:6d:
                    50:4f:9a:81:41:e3:df:21:d9:5b:84:8d:f7:59:58:
                    8f:e2:cb:3c:7a:cf:a2:45:d9:d7:66:d1:6e:ba:43:
                    47:95:00:b8:13:ae:14:68:e4:79:45:1d:a9:b8:e6:
                    ae:cf:1e:53:44:85:84:5c:f0:bd:3e:f6:31:89:f2:
                    c4:c8:b4:3a:e0:31:a7:20:cc:cd:80:42:09:0c:c4:
                    7b:ad:c9:b9:a8:c0:b5:a5:1a:78:70:ae:7b:f5:0b:
                    49:ee:cd:6b:30:44:bb:3a:13:8b:49:53:5c:e6:a3:
                    55:96:17:8a:6f:2a:97:61:c7:de:3a:fc:4a:c5:24:
                    16:18:e8:91:2f:d2:17:fb:2a:5f:54:65:30:04:da:
                    2d:86:8c:52:e4:46:6d:77:04:f7:9c:cb:50:c4:97:
                    90:55:a2:fa:61:03:c0:47:b8:25:72:59:b2:f2:ff:
                    44:58:9d:0f:95:bf:ad:a2:82:1e:48:93:9b:0a:fd:
                    2c:06:4a:f3:53:4e:b2:f2:d2:09:7a:af:49:7d:d4:
                    79:70:1c:88:9d:34:d7:29:bd:b4:4f:cd:8e:95:73:
                    73:f2:87:48:12:89:fb:c8:d6:bc:b7:c2:d6:68:90:
                    5f:f8:13:51:65:91:4a:0c:71:d3:e6:8c:f3:67:f0:
                    6c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C6:81:64:CC:41:C7:B3:84:4B:7C:F2:EF:0A:50:DD:89:C2:07:90
            X509v3 Authority Key Identifier:
                keyid:7F:35:D5:AE:41:7F:45:EE:85:05:D7:6C:EA:A1:B3:4C:45:83:94:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:06:1d:d2:f1:2a:4c:96:89:ae:8d:70:09:fe:d4:aa:8f:ea:
         cb:30:8c:6f:fa:67:e8:2e:92:3b:cd:b9:d8:a7:26:a3:e1:0f:
         bd:7a:3c:9a:2b:dc:25:6e:3f:0a:ea:01:39:3c:8d:a9:dc:48:
         18:a8:3c:fb:80:b2:10:35:94:12:99:a6:f6:6e:21:f3:8f:c3:
         4f:a4:e4:8c:a7:11:c2:c1:59:52:f3:90:dc:09:f4:cb:95:7b:
         eb:cc:54:4b:ff:28:36:63:f2:d6:8a:73:c9:52:59:3a:8e:7a:
         e7:a9:52:a7:d8:5f:cd:47:06:13:3e:98:44:92:8f:5f:f7:7c:
         12:2c:34:f6:45:d3:23:e9:ba:cc:b1:2c:95:ca:9c:80:12:16:
         8f:90:bd:01:2a:a8:81:a7:94:c6:35:09:4e:6c:42:62:d7:e5:
         cd:55:3f:3f:e3:b8:0f:78:e8:40:e3:dc:61:e9:fb:57:48:e4:
         a7:ee:13:28:ef:af:89:34:2a:f7:fd:00:82:2e:b0:31:c5:6a:
         ab:10:ca:77:7c:d9:81:c1:db:60:e3:48:78:55:d0:05:13:e5:
         35:b7:41:81:70:5a:fa:31:05:35:5e:a1:17:a3:fc:b7:f5:7e:
         35:59:3c:8a:20:ae:ef:d1:3f:82:92:8b:1e:5f:48:e8:2e:9a:
         cf:66:44:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKetWW9U6mUeh9ZVt8O21KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMzVkNWFlNDE3ZjQ1ZWU4NTA1ZDc2Y2VhYTFiMzRjNDU4
Mzk0YTAwHhcNMjUwNjA3MTMwMDUzWhcNMjUwNjA4MTMwMDUzWjAzMTEwLwYDVQQD
EygwNmM2ODE2NGNjNDFjN2IzODQ0YjdjZjJlZjBhNTBkZDg5YzIwNzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv67zcwgwjP/2NgAqzG1QT5qBQePf
IdlbhI33WViP4ss8es+iRdnXZtFuukNHlQC4E64UaOR5RR2puOauzx5TRIWEXPC9
PvYxifLEyLQ64DGnIMzNgEIJDMR7rcm5qMC1pRp4cK579QtJ7s1rMES7OhOLSVNc
5qNVlheKbyqXYcfeOvxKxSQWGOiRL9IX+ypfVGUwBNothoxS5EZtdwT3nMtQxJeQ
VaL6YQPAR7glclmy8v9EWJ0Plb+tooIeSJObCv0sBkrzU06y8tIJeq9JfdR5cByI
nTTXKb20T82OlXNz8odIEon7yNa8t8LWaJBf+BNRZZFKDHHT5ozzZ/BsDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbGgWTMQcezhEt88u8KUN2JwgeQMB8GA1UdIwQY
MBaAFH811a5Bf0XuhQXXbOqhs0xFg5SgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnpYVnJrRl9SZTZGQmRkczZxR3pURVdEbEtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9jNTQ2N2ItMzk2Mi00Yjc0LWFlMGQt
MzQ0NzNiYzkxZDgwLzEvZnpYVnJrRl9SZTZGQmRkczZxR3pURVdEbEtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9jNTQ2N2ItMzk2Mi00Yjc0LWFlMGQtMzQ0NzNiYzkxZDgw
LzEvZnpYVnJrRl9SZTZGQmRkczZxR3pURVdEbEtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATAYd0vEq
TJaJro1wCf7Uqo/qyzCMb/pn6C6SO8252Kcmo+EPvXo8mivcJW4/CuoBOTyNqdxI
GKg8+4CyEDWUEpmm9m4h84/DT6TkjKcRwsFZUvOQ3An0y5V768xUS/8oNmPy1opz
yVJZOo5656lSp9hfzUcGEz6YRJKPX/d8Eiw09kXTI+m6zLEslcqcgBIWj5C9ASqo
gaeUxjUJTmxCYtflzVU/P+O4D3joQOPcYen7V0jkp+4TKO+viTQq9/0Agi6wMcVq
qxDKd3zZgcHbYONIeFXQBRPlNbdBgXBa+jEFNV6hF6P8t/V+NVk8iiCu79E/gpKL
Hl9I6C6az2ZE9A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 17:59:37 2025 by rpki-client