Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
File:                     kpWx8dzY-mrB73iCeMSJ4V6srnA.mft (raw, json)
Hash identifier:          OJdcxJQeU7XccgiKmA0Gwa2PzT9L0GOwmxZd8RqApuw=
Subject key identifier:   F7:23:38:78:41:1A:55:8E:31:83:05:68:D0:9C:A7:65:0B:7B:2A:5E
Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
Certificate issuer:       /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Certificate serial:       019747B10222A5BCAEC8C8086F6E43C2DF73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
Manifest number:          1594
Signing time:             Sat 07 Jun 2025 00:01:12 +0000
Manifest this update:     Sat 07 Jun 2025 00:01:12 +0000
Manifest next update:     Sun 08 Jun 2025 00:01:12 +0000
Files and hashes:         1: 6npgTxI5Fj08aQhqLUstesa74qU.roa (hash: enkyXzDFZ9cSJQ7fnIhqclT0EtGx7IlDRG5jg6xN4Mk=)
                          2: MZiHSobp59WQqC8uBm95hOdBXsI.roa (hash: fjadJjOlL1+6DsHUuKfvwBZj90/AlszWfNgb3uQbb9s=)
                          3: NbSoMWFGWBCHoJlGwWivjFTCFBY.roa (hash: k5rJPB0kkBNvDa1kkQgwmYoySN8P077TC//BMQ29qA0=)
                          4: PbFbHAKPLxJYS1QXxrsUxtB4s-o.roa (hash: WcV8ew9W91HI/E1+ymAnsmr3gyEWsOwlvTaJN4weKdM=)
                          5: _kWdENGz02qFbJgsVzh0I7ssKSM.roa (hash: CgY6OFKCaRvJTJIO/HpUioGU0QKLzsGxcD6MJClnWYM=)
                          6: kpWx8dzY-mrB73iCeMSJ4V6srnA.crl (hash: 0p0nMLbX+VIUL7CBbCqaGn4DJflXwG9MalP0s4LO/8s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:b1:02:22:a5:bc:ae:c8:c8:08:6f:6e:43:c2:df:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
        Validity
            Not Before: Jun  7 00:01:12 2025 GMT
            Not After : Jun  8 00:01:12 2025 GMT
        Subject: CN=f7233878411a558e31830568d09ca7650b7b2a5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:03:3c:79:fd:06:2a:b7:b9:04:98:4e:42:c7:
                    45:39:4a:49:06:2a:17:3f:4d:f4:9d:79:11:d4:50:
                    70:0c:76:13:32:3e:e3:94:63:7e:4a:e5:ea:85:c8:
                    7a:78:8f:ac:a0:2e:51:ad:6a:de:f1:1d:61:ee:a6:
                    e0:a7:9d:32:e6:13:e6:14:b0:a0:89:88:f7:c6:a5:
                    d3:e7:ac:e3:c3:98:a5:a8:d7:34:5f:cb:b0:a0:c9:
                    03:ec:7c:72:89:ed:d7:a0:ae:47:3a:98:72:b3:c5:
                    45:09:38:60:21:e0:5d:e5:7d:41:69:6b:74:be:2b:
                    46:e9:ad:9f:14:fd:48:ea:27:44:83:71:5f:5e:50:
                    8c:c4:94:12:c2:a4:35:b9:51:fa:33:db:ae:53:5e:
                    7e:65:3d:f6:b8:55:17:8d:17:fb:72:93:8d:74:49:
                    a3:ff:17:60:67:86:eb:3b:17:47:f5:94:c5:17:42:
                    be:91:85:09:b8:70:b8:36:d2:ec:84:1d:0c:61:a2:
                    c7:b6:f8:0a:c6:f8:8b:b6:9c:22:dd:2e:80:cf:93:
                    e1:3a:df:f9:e0:a7:1f:c0:29:02:86:b6:79:20:4a:
                    f7:31:f3:32:e6:76:15:96:84:01:24:2a:8f:33:fb:
                    59:ea:4e:64:06:13:43:c2:9b:f9:43:44:55:bd:01:
                    18:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:23:38:78:41:1A:55:8E:31:83:05:68:D0:9C:A7:65:0B:7B:2A:5E
            X509v3 Authority Key Identifier:
                keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:8d:b3:ac:e9:b3:48:f1:a8:90:b9:49:73:09:12:3d:9b:00:
         6e:d4:95:89:41:fe:82:5d:6b:ff:90:19:6f:93:40:4b:39:47:
         5b:ee:d8:61:ff:85:e5:27:0b:98:5e:b7:e2:b9:65:c4:f4:57:
         04:e8:8a:79:d2:54:ca:41:ff:d8:7e:6a:4b:68:42:2d:84:13:
         de:5d:46:58:ee:07:de:bd:5b:dc:54:6d:59:27:48:ad:ac:31:
         31:55:52:34:ec:62:c6:d7:ef:83:10:7c:a0:4c:6b:51:4d:c2:
         ff:3e:d6:70:a6:80:34:91:ec:8c:84:ad:13:13:76:4c:d2:34:
         c3:d3:03:78:1c:f7:61:10:b2:b9:b4:08:2d:03:75:f5:f9:5b:
         ed:de:7d:a6:9f:b4:15:f7:56:2b:dc:37:6b:fa:4c:65:8a:38:
         96:ca:38:67:00:81:f0:f7:ac:62:37:3a:f7:dd:e7:b4:88:e6:
         38:bf:c0:ae:02:52:a5:52:4b:20:ab:77:f1:7b:77:96:d8:af:
         e6:1c:ec:59:14:de:fa:65:41:af:16:1c:3a:ba:c3:8f:84:19:
         f4:18:af:5c:69:2f:11:2c:6d:f5:29:4f:46:2a:cf:4f:bf:34:
         4a:5f:76:34:5d:8b:d7:dd:af:6e:2c:4d:a4:c8:2d:b3:7e:29:
         02:ca:aa:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHsQIipbyuyMgIb25Dwt9zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyOTViMWYxZGNkOGZhNmFjMWVmNzg4Mjc4YzQ4OWUxNWVh
Y2FlNzAwHhcNMjUwNjA3MDAwMTEyWhcNMjUwNjA4MDAwMTEyWjAzMTEwLwYDVQQD
EyhmNzIzMzg3ODQxMWE1NThlMzE4MzA1NjhkMDljYTc2NTBiN2IyYTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgM8ef0GKre5BJhOQsdFOUpJBioX
P030nXkR1FBwDHYTMj7jlGN+SuXqhch6eI+soC5RrWre8R1h7qbgp50y5hPmFLCg
iYj3xqXT56zjw5ilqNc0X8uwoMkD7Hxyie3XoK5HOphys8VFCThgIeBd5X1BaWt0
vitG6a2fFP1I6idEg3FfXlCMxJQSwqQ1uVH6M9uuU15+ZT32uFUXjRf7cpONdEmj
/xdgZ4brOxdH9ZTFF0K+kYUJuHC4NtLshB0MYaLHtvgKxviLtpwi3S6Az5PhOt/5
4KcfwCkChrZ5IEr3MfMy5nYVloQBJCqPM/tZ6k5kBhNDwpv5Q0RVvQEYHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcjOHhBGlWOMYMFaNCcp2ULeypeMB8GA1UdIwQY
MBaAFJKVsfHc2Ppqwe94gnjEieFerK5wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3BXeDhkelktbXJCNzNpQ2VNU0o0VjZzcm5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wZmJjMmUtZmQ4OC00ZGYyLWFhZTMt
OWViNDBjYzVmNjhiLzEva3BXeDhkelktbXJCNzNpQ2VNU0o0VjZzcm5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8wZmJjMmUtZmQ4OC00ZGYyLWFhZTMtOWViNDBjYzVmNjhi
LzEva3BXeDhkelktbXJCNzNpQ2VNU0o0VjZzcm5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdY2zrOmz
SPGokLlJcwkSPZsAbtSViUH+gl1r/5AZb5NASzlHW+7YYf+F5ScLmF634rllxPRX
BOiKedJUykH/2H5qS2hCLYQT3l1GWO4H3r1b3FRtWSdIrawxMVVSNOxixtfvgxB8
oExrUU3C/z7WcKaANJHsjIStExN2TNI0w9MDeBz3YRCyubQILQN19flb7d59pp+0
FfdWK9w3a/pMZYo4lso4ZwCB8PesYjc6993ntIjmOL/ArgJSpVJLIKt38Xt3ltiv
5hzsWRTe+mVBrxYcOrrDj4QZ9BivXGkvESxt9SlPRirPT780Sl92NF2L192vbixN
pMgts34pAsqq3w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:10:10 2025 by rpki-client