Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
File:                     RFc3PhpobWtZ7oXcN4mdBlMThuU.mft (raw, json)
Hash identifier:          hMKrJ82PxpCp1HjBCT3cR5jP4zhMqhsDc5idV9O9Kz0=
Subject key identifier:   D4:6E:70:84:C2:24:C8:F0:A3:80:C4:72:36:D8:C1:64:CA:06:34:5C
Authority key identifier: 44:57:37:3E:1A:68:6D:6B:59:EE:85:DC:37:89:9D:06:53:13:86:E5
Certificate issuer:       /CN=4457373e1a686d6b59ee85dc37899d06531386e5
Certificate serial:       019760CB505538FC2350CE202D75AB3DA4F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
Manifest number:          0308
Signing time:             Wed 11 Jun 2025 21:00:26 +0000
Manifest this update:     Wed 11 Jun 2025 21:00:26 +0000
Manifest next update:     Thu 12 Jun 2025 21:00:26 +0000
Files and hashes:         1: RFc3PhpobWtZ7oXcN4mdBlMThuU.crl (hash: RUArNjLftGar40VW8JOUcNrbwGtzKorCBvys6UUAZts=)
                          2: XMirD3qG50TrikmGR0PujWf3jjs.roa (hash: iR/AZzWdddK7a5E0N2BfP3yz4LyY5Uji67zQAihWnBU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 21:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:60:cb:50:55:38:fc:23:50:ce:20:2d:75:ab:3d:a4:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4457373e1a686d6b59ee85dc37899d06531386e5
        Validity
            Not Before: Jun 11 21:00:26 2025 GMT
            Not After : Jun 12 21:00:26 2025 GMT
        Subject: CN=d46e7084c224c8f0a380c47236d8c164ca06345c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d5:9f:d5:9d:83:ca:e6:74:76:12:f2:0e:61:
                    a3:4a:80:b7:35:01:d4:a8:47:ea:25:cc:a9:3a:b0:
                    0e:ea:be:89:d4:11:03:58:36:43:16:c1:4a:f2:ea:
                    e9:3a:90:d6:72:0b:a2:a2:fe:37:bd:a3:2b:61:a8:
                    3c:3a:92:b6:27:ff:bb:c3:de:d9:18:c4:1c:73:a5:
                    a4:ec:21:ee:49:94:6f:03:8b:e2:b7:98:e1:ab:5b:
                    f9:ee:c6:17:a2:47:fc:e0:93:79:5c:26:5f:2c:4b:
                    56:12:77:34:a7:a8:bd:1c:3d:2c:92:8c:77:9a:82:
                    c4:35:30:1c:3d:5d:66:b8:6d:3a:aa:c4:93:40:15:
                    d0:bf:2e:5f:0e:56:8a:16:30:6e:a3:6a:bb:79:f3:
                    53:ea:61:a3:01:8e:05:c7:f6:11:96:0a:4c:cf:34:
                    5c:22:6b:7c:04:84:a4:1c:1b:c8:ac:68:63:39:6d:
                    21:2b:97:c8:4a:88:0b:6b:c3:66:26:f1:e6:a4:8c:
                    ef:25:eb:37:57:30:7c:4a:c3:50:a9:eb:c6:cb:f9:
                    e7:40:8b:c5:75:d6:75:c3:de:de:da:24:3b:69:4e:
                    49:c4:74:81:ec:83:48:ce:23:28:05:8b:dd:4f:77:
                    d3:50:46:aa:76:49:43:b7:36:9b:58:52:3b:d8:14:
                    22:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:6E:70:84:C2:24:C8:F0:A3:80:C4:72:36:D8:C1:64:CA:06:34:5C
            X509v3 Authority Key Identifier:
                keyid:44:57:37:3E:1A:68:6D:6B:59:EE:85:DC:37:89:9D:06:53:13:86:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:89:b9:6c:a2:ce:38:cd:c0:ed:e4:c8:46:87:8c:bc:c1:b7:
         39:e4:78:9f:44:ad:d8:b2:00:f7:57:99:6e:5b:ff:fc:7a:3a:
         b5:b3:7a:5b:ce:34:26:aa:ef:93:8c:7b:d6:e8:6e:2d:9f:cb:
         10:d5:a3:87:2e:b3:a9:9d:0b:9a:1e:dc:b9:eb:32:52:53:8b:
         05:77:26:92:b9:82:ea:50:6a:45:c3:09:54:7b:19:3d:cd:8c:
         e5:8e:8c:bf:7a:c4:2a:ff:16:a1:2e:9e:9d:26:1e:25:f1:9c:
         3b:bf:53:0d:af:08:82:3a:a5:7c:6f:eb:d6:59:90:da:1e:a3:
         65:3e:9a:ce:49:d7:4e:28:8e:15:7c:1a:d6:92:26:39:5f:4b:
         a2:3c:f2:3e:11:a5:c6:fc:3a:1e:82:7c:b3:22:07:ed:55:89:
         06:f3:70:06:d0:20:d8:f8:7c:4c:58:1b:31:11:f9:01:e1:d4:
         01:5a:bd:6d:d1:f3:4b:3d:6b:0d:59:37:bd:4a:ca:1f:d9:db:
         1f:74:5a:3a:8d:51:e6:ec:52:dd:53:ef:ea:13:3c:0d:aa:73:
         e2:d8:ff:77:85:e0:18:6d:f2:09:96:ca:75:63:8a:cb:65:dd:
         56:e0:ec:b1:24:57:08:51:54:e0:1a:75:61:7e:7f:2f:bc:8f:
         f5:2f:de:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdgy1BVOPwjUM4gLXWrPaTwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTczNzNlMWE2ODZkNmI1OWVlODVkYzM3ODk5ZDA2NTMx
Mzg2ZTUwHhcNMjUwNjExMjEwMDI2WhcNMjUwNjEyMjEwMDI2WjAzMTEwLwYDVQQD
EyhkNDZlNzA4NGMyMjRjOGYwYTM4MGM0NzIzNmQ4YzE2NGNhMDYzNDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdWf1Z2DyuZ0dhLyDmGjSoC3NQHU
qEfqJcypOrAO6r6J1BEDWDZDFsFK8urpOpDWcguiov43vaMrYag8OpK2J/+7w97Z
GMQcc6Wk7CHuSZRvA4vit5jhq1v57sYXokf84JN5XCZfLEtWEnc0p6i9HD0skox3
moLENTAcPV1muG06qsSTQBXQvy5fDlaKFjBuo2q7efNT6mGjAY4Fx/YRlgpMzzRc
Imt8BISkHBvIrGhjOW0hK5fISogLa8NmJvHmpIzvJes3VzB8SsNQqevGy/nnQIvF
ddZ1w97e2iQ7aU5JxHSB7INIziMoBYvdT3fTUEaqdklDtzabWFI72BQi8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNRucITCJMjwo4DEcjbYwWTKBjRcMB8GA1UdIwQY
MBaAFERXNz4aaG1rWe6F3DeJnQZTE4blMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZjM1BocG9iV3RaN29YY040bWRCbE1UaHVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84ODYyNTMtODQxNy00ZTQ1LThlMjYt
OWU4NjQzNjg1MTMzLzEvUkZjM1BocG9iV3RaN29YY040bWRCbE1UaHVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84ODYyNTMtODQxNy00ZTQ1LThlMjYtOWU4NjQzNjg1MTMz
LzEvUkZjM1BocG9iV3RaN29YY040bWRCbE1UaHVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlIm5bKLO
OM3A7eTIRoeMvMG3OeR4n0St2LIA91eZblv//Ho6tbN6W840Jqrvk4x71uhuLZ/L
ENWjhy6zqZ0Lmh7cuesyUlOLBXcmkrmC6lBqRcMJVHsZPc2M5Y6Mv3rEKv8WoS6e
nSYeJfGcO79TDa8IgjqlfG/r1lmQ2h6jZT6azknXTiiOFXwa1pImOV9LojzyPhGl
xvw6HoJ8syIH7VWJBvNwBtAg2Ph8TFgbMRH5AeHUAVq9bdHzSz1rDVk3vUrKH9nb
H3RaOo1R5uxS3VPv6hM8Dapz4tj/d4XgGG3yCZbKdWOKy2XdVuDssSRXCFFU4Bp1
YX5/L7yP9S/ehw==
-----END CERTIFICATE-----
Generated at Thu Jun 12 04:50:53 2025 by rpki-client