Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft
File:                     c2Na428t9PaNPlcqMT4aGKogt1c.mft (raw, json)
Hash identifier:          OsobD+zozxrpUf3CcYKGU6+AvEjoF6oO/Dmq36i4fqo=
Subject key identifier:   FA:5A:37:59:EE:0A:C1:A5:0B:D8:19:D2:35:27:70:7F:FE:D0:83:2B
Authority key identifier: 73:63:5A:E3:6F:2D:F4:F6:8D:3E:57:2A:31:3E:1A:18:AA:20:B7:57
Certificate issuer:       /CN=73635ae36f2df4f68d3e572a313e1a18aa20b757
Certificate serial:       0197673B6A4B73BB44C367BC0FBC99F004E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft
Manifest number:          158E
Signing time:             Fri 13 Jun 2025 03:00:36 +0000
Manifest this update:     Fri 13 Jun 2025 03:00:36 +0000
Manifest next update:     Sat 14 Jun 2025 03:00:36 +0000
Files and hashes:         1: c2Na428t9PaNPlcqMT4aGKogt1c.crl (hash: q84mPwKKnUCTnJ0lSeNpb2Ij3CsNwreajkenXRcOt1Q=)
                          2: itE9wE1JCUjzPQMC17zph5bag1o.roa (hash: 6Zu8xe2ZQ7G9CqeB+rTfVIr8D7nrhuN4O3af8BzjF8E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 03:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:67:3b:6a:4b:73:bb:44:c3:67:bc:0f:bc:99:f0:04:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73635ae36f2df4f68d3e572a313e1a18aa20b757
        Validity
            Not Before: Jun 13 03:00:36 2025 GMT
            Not After : Jun 14 03:00:36 2025 GMT
        Subject: CN=fa5a3759ee0ac1a50bd819d23527707ffed0832b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6c:27:af:ca:b9:8c:f2:aa:08:e1:d0:9c:71:
                    66:f4:81:30:fe:d9:cb:0f:f2:ad:1e:e9:ed:f1:b5:
                    b4:db:af:22:0f:9d:44:6f:82:3c:d7:ac:b3:5e:ce:
                    b6:c9:55:da:d1:7b:65:6c:53:7b:8b:14:d6:b7:9a:
                    c0:86:9c:b2:1c:ee:02:c3:0d:3f:7c:0d:65:b6:4f:
                    da:2f:ff:78:32:8c:c6:9c:ea:75:dd:d5:e9:66:63:
                    cf:58:27:b0:d5:10:d1:0f:3e:6e:c0:3f:f7:84:7e:
                    6e:0a:9f:44:fa:39:24:43:86:47:af:c8:d8:7a:75:
                    0f:58:51:b4:08:b0:80:09:a0:ed:9c:9f:6c:36:bc:
                    cb:fc:10:fe:f7:47:19:28:4a:11:3e:ed:ea:ee:fe:
                    e9:65:8c:85:ed:5c:e1:c8:5a:75:5a:38:d6:9a:8d:
                    9b:23:14:5c:0b:34:6d:44:b9:db:6b:af:b9:9f:ae:
                    4e:91:94:f1:1d:99:20:69:dd:96:4d:10:f2:07:5e:
                    46:c7:ef:95:20:04:64:6d:24:2e:f4:22:5f:f3:f2:
                    0b:57:40:c5:5e:62:aa:4b:af:69:a3:f2:a8:48:5b:
                    ff:bd:90:22:3d:5c:12:f8:2e:3d:44:4b:f6:a5:34:
                    22:7f:53:cb:7e:6e:51:38:99:aa:99:0d:06:3e:eb:
                    69:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:5A:37:59:EE:0A:C1:A5:0B:D8:19:D2:35:27:70:7F:FE:D0:83:2B
            X509v3 Authority Key Identifier:
                keyid:73:63:5A:E3:6F:2D:F4:F6:8D:3E:57:2A:31:3E:1A:18:AA:20:B7:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:ab:a9:ac:ed:7a:8e:29:97:de:8f:d8:c6:9b:8f:b5:66:68:
         4e:8c:7e:6b:8d:9c:81:5d:be:b6:c8:65:9d:01:7e:32:b1:9f:
         12:c7:80:f7:f5:f1:9a:9a:24:4f:ab:73:23:47:92:cf:2e:0f:
         b9:d5:cf:6c:40:62:11:6c:d3:d5:1c:76:6a:43:0f:1a:28:62:
         89:c0:bd:c1:53:60:56:f2:5f:9f:81:46:3b:e7:c8:f8:3b:3a:
         20:ad:87:d3:58:92:92:3d:a3:5c:8e:39:3e:4e:c4:ac:9f:90:
         4f:80:bb:d4:6f:dd:59:41:7c:0c:c6:9e:b3:5b:91:6d:68:f4:
         43:fb:8a:61:f3:4f:b8:97:f2:9d:97:b4:38:c9:31:22:03:14:
         e9:9d:86:cf:70:a2:eb:49:a2:38:27:d7:ca:89:78:d6:0c:61:
         60:9b:ed:cb:ef:bf:8b:ae:57:41:3b:3b:d7:7b:6d:4e:e7:b7:
         f4:a0:53:07:d7:3a:d2:37:33:11:e5:46:5b:72:ee:95:26:a8:
         49:48:2b:d9:df:90:56:1d:eb:1c:15:60:2d:a6:23:8d:00:9a:
         8c:01:f6:ad:e9:75:c6:bb:a4:47:22:46:b0:dc:9e:fa:c7:24:
         e6:36:18:6b:19:60:fe:34:11:57:3b:84:db:d2:d6:ef:c7:9f:
         59:39:05:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdnO2pLc7tEw2e8D7yZ8ATnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNjM1YWUzNmYyZGY0ZjY4ZDNlNTcyYTMxM2UxYTE4YWEy
MGI3NTcwHhcNMjUwNjEzMDMwMDM2WhcNMjUwNjE0MDMwMDM2WjAzMTEwLwYDVQQD
EyhmYTVhMzc1OWVlMGFjMWE1MGJkODE5ZDIzNTI3NzA3ZmZlZDA4MzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mwnr8q5jPKqCOHQnHFm9IEw/tnL
D/KtHunt8bW0268iD51Eb4I816yzXs62yVXa0XtlbFN7ixTWt5rAhpyyHO4Cww0/
fA1ltk/aL/94MozGnOp13dXpZmPPWCew1RDRDz5uwD/3hH5uCp9E+jkkQ4ZHr8jY
enUPWFG0CLCACaDtnJ9sNrzL/BD+90cZKEoRPu3q7v7pZYyF7VzhyFp1WjjWmo2b
IxRcCzRtRLnba6+5n65OkZTxHZkgad2WTRDyB15Gx++VIARkbSQu9CJf8/ILV0DF
XmKqS69po/KoSFv/vZAiPVwS+C49REv2pTQif1PLfm5ROJmqmQ0GPutpZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpaN1nuCsGlC9gZ0jUncH/+0IMrMB8GA1UdIwQY
MBaAFHNjWuNvLfT2jT5XKjE+GhiqILdXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzJOYTQyOHQ5UGFOUGxjcU1UNGFHS29ndDFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9jMGQyODEtZDQwZC00MGUwLTkzZWEt
NWJhZTM3NWNmODVhLzEvYzJOYTQyOHQ5UGFOUGxjcU1UNGFHS29ndDFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9jMGQyODEtZDQwZC00MGUwLTkzZWEtNWJhZTM3NWNmODVh
LzEvYzJOYTQyOHQ5UGFOUGxjcU1UNGFHS29ndDFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASKuprO16
jimX3o/YxpuPtWZoTox+a42cgV2+tshlnQF+MrGfEseA9/XxmpokT6tzI0eSzy4P
udXPbEBiEWzT1Rx2akMPGihiicC9wVNgVvJfn4FGO+fI+Ds6IK2H01iSkj2jXI45
Pk7ErJ+QT4C71G/dWUF8DMaes1uRbWj0Q/uKYfNPuJfynZe0OMkxIgMU6Z2Gz3Ci
60miOCfXyol41gxhYJvty++/i65XQTs713ttTue39KBTB9c60jczEeVGW3LulSao
SUgr2d+QVh3rHBVgLaYjjQCajAH2rel1xrukRyJGsNye+sck5jYYaxlg/jQRVzuE
29LW78efWTkFfw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 12:31:42 2025 by rpki-client