Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft
File:                     x67yqz8unZrAH3J_cwr33x0EGA8.mft (raw, json)
Hash identifier:          UZ97VHw65QOkN/r9sznoLyzQaPodYVjOvgNZkHdZsN0=
Subject key identifier:   FF:38:BC:16:40:B5:C5:48:2B:C1:6D:FC:5F:2B:03:EA:75:58:B4:B4
Authority key identifier: C7:AE:F2:AB:3F:2E:9D:9A:C0:1F:72:7F:73:0A:F7:DF:1D:04:18:0F
Certificate issuer:       /CN=c7aef2ab3f2e9d9ac01f727f730af7df1d04180f
Certificate serial:       0197470BBE99F527F854D153214A8F928FA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft
Manifest number:          1491
Signing time:             Fri 06 Jun 2025 21:00:41 +0000
Manifest this update:     Fri 06 Jun 2025 21:00:41 +0000
Manifest next update:     Sat 07 Jun 2025 21:00:41 +0000
Files and hashes:         1: DxifjliCAIMd-eDzduM7cNAzSqk.roa (hash: k6vDWiqYMoUqtaBDC4CmzDCftBkvIoXMd8Al1paV0vg=)
                          2: x67yqz8unZrAH3J_cwr33x0EGA8.crl (hash: JW7eTS3oJ0w+a7yj4OWotqjePbnN8PPteSE1lZJ2CN4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 21:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0b:be:99:f5:27:f8:54:d1:53:21:4a:8f:92:8f:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7aef2ab3f2e9d9ac01f727f730af7df1d04180f
        Validity
            Not Before: Jun  6 21:00:41 2025 GMT
            Not After : Jun  7 21:00:41 2025 GMT
        Subject: CN=ff38bc1640b5c5482bc16dfc5f2b03ea7558b4b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ec:57:34:01:94:1a:cd:c1:74:0c:c9:a5:26:
                    2a:2b:5d:64:b5:bc:f7:a6:a9:55:ed:80:d0:96:9c:
                    34:df:37:2e:59:3b:ae:f8:9e:22:b8:12:01:fb:79:
                    ba:9e:03:9e:d1:9d:1c:4a:3f:f0:4b:4e:73:bc:31:
                    78:ea:eb:33:8b:52:5f:2c:f7:63:ed:66:59:53:06:
                    e8:ef:fe:13:47:72:6d:0e:8e:56:a8:fc:34:a3:ba:
                    81:d2:1a:9b:87:21:6b:eb:5e:7d:80:c1:9d:f0:bc:
                    74:c4:fb:5b:88:75:b3:a6:ff:4f:88:37:8a:bb:25:
                    33:ac:b4:53:e1:df:2d:41:93:df:d7:23:9b:52:1d:
                    ad:1b:30:b7:03:ee:4c:17:ba:5d:b6:a6:78:95:16:
                    dc:3c:3a:be:20:08:3d:fe:2c:ba:d3:8d:21:b8:da:
                    ca:4a:3b:3a:07:c0:62:37:4e:a7:75:c8:ac:95:16:
                    ed:8c:a5:92:ef:0f:a7:9d:54:90:91:4e:47:0c:71:
                    6d:6f:6c:31:a1:9f:96:3c:01:b4:42:d8:60:95:b0:
                    1c:33:1d:cf:31:43:11:0c:4f:3b:40:5c:04:a4:67:
                    00:d0:e4:0a:b5:cd:0c:68:c0:41:ab:df:2f:38:b0:
                    ca:2c:00:37:0b:bb:fa:19:62:55:f3:5f:15:40:c8:
                    a6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:38:BC:16:40:B5:C5:48:2B:C1:6D:FC:5F:2B:03:EA:75:58:B4:B4
            X509v3 Authority Key Identifier:
                keyid:C7:AE:F2:AB:3F:2E:9D:9A:C0:1F:72:7F:73:0A:F7:DF:1D:04:18:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:37:a0:72:32:bf:eb:3a:3c:37:32:c1:f2:17:fc:10:90:5a:
         42:fe:7f:cd:08:4a:07:84:dc:e7:c7:d6:5d:ee:54:ad:f3:fd:
         0e:0b:8a:80:2a:94:0a:01:4d:d8:ba:e8:a0:83:1a:85:82:74:
         99:c0:8a:e7:b6:12:e0:a1:08:f2:52:76:22:ca:d1:26:aa:23:
         39:4d:ed:f2:0f:b0:b0:e2:a9:13:75:4b:86:29:d1:7c:b2:3f:
         57:f9:80:20:27:71:51:e0:9a:bd:ac:59:5c:a2:7c:40:bc:51:
         d1:87:87:39:d8:5f:93:69:86:12:76:07:90:ac:6f:7e:6d:64:
         13:0d:46:df:9c:ea:d5:27:f0:a1:d6:a4:2f:12:31:f9:37:74:
         ec:02:b3:c8:06:30:f8:8c:52:34:07:de:93:2c:f5:9b:6d:94:
         f1:81:bd:34:ae:20:8e:73:2d:e8:9f:37:3f:22:b3:99:42:f6:
         0d:18:c1:db:ef:02:be:5c:74:7d:99:dd:cd:31:6e:04:6e:7b:
         b7:59:b2:89:52:f4:5f:03:39:4f:3c:57:9f:05:0b:63:19:a2:
         2c:9b:03:fe:ab:6a:67:36:19:10:5f:1c:6c:cb:8c:91:bd:cf:
         31:61:3e:65:b8:ac:ed:0d:1f:e3:3f:e5:04:71:47:8c:3d:cf:
         0f:ec:50:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHC76Z9Sf4VNFTIUqPko+pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3YWVmMmFiM2YyZTlkOWFjMDFmNzI3ZjczMGFmN2RmMWQw
NDE4MGYwHhcNMjUwNjA2MjEwMDQxWhcNMjUwNjA3MjEwMDQxWjAzMTEwLwYDVQQD
EyhmZjM4YmMxNjQwYjVjNTQ4MmJjMTZkZmM1ZjJiMDNlYTc1NThiNGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+xXNAGUGs3BdAzJpSYqK11ktbz3
pqlV7YDQlpw03zcuWTuu+J4iuBIB+3m6ngOe0Z0cSj/wS05zvDF46uszi1JfLPdj
7WZZUwbo7/4TR3JtDo5WqPw0o7qB0hqbhyFr6159gMGd8Lx0xPtbiHWzpv9PiDeK
uyUzrLRT4d8tQZPf1yObUh2tGzC3A+5MF7pdtqZ4lRbcPDq+IAg9/iy6040huNrK
Sjs6B8BiN06ndcislRbtjKWS7w+nnVSQkU5HDHFtb2wxoZ+WPAG0QthglbAcMx3P
MUMRDE87QFwEpGcA0OQKtc0MaMBBq98vOLDKLAA3C7v6GWJV818VQMimfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP84vBZAtcVIK8Ft/F8rA+p1WLS0MB8GA1UdIwQY
MBaAFMeu8qs/Lp2awB9yf3MK998dBBgPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDY3eXF6OHVuWnJBSDNKX2N3cjMzeDBFR0E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9mMzRmMmItMzY2Mi00MWM0LTgyNzAt
OTJlZDJhMDAwZjFmLzEveDY3eXF6OHVuWnJBSDNKX2N3cjMzeDBFR0E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9mMzRmMmItMzY2Mi00MWM0LTgyNzAtOTJlZDJhMDAwZjFm
LzEveDY3eXF6OHVuWnJBSDNKX2N3cjMzeDBFR0E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAujegcjK/
6zo8NzLB8hf8EJBaQv5/zQhKB4Tc58fWXe5UrfP9DguKgCqUCgFN2LrooIMahYJ0
mcCK57YS4KEI8lJ2IsrRJqojOU3t8g+wsOKpE3VLhinRfLI/V/mAICdxUeCavaxZ
XKJ8QLxR0YeHOdhfk2mGEnYHkKxvfm1kEw1G35zq1SfwodakLxIx+Td07AKzyAYw
+IxSNAfekyz1m22U8YG9NK4gjnMt6J83PyKzmUL2DRjB2+8Cvlx0fZndzTFuBG57
t1myiVL0XwM5TzxXnwULYxmiLJsD/qtqZzYZEF8cbMuMkb3PMWE+Zbis7Q0f4z/l
BHFHjD3PD+xQLw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:36:33 2025 by rpki-client