Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft
File:                     KXxQjSOzgxW79FtybSIFCkYSe4w.mft (raw, json)
Hash identifier:          jFd0BI4w/QzaHjNWf/6lMUV/MwBSvUqaiMxxhNb4zSY=
Subject key identifier:   99:CD:A3:76:EB:D5:6E:4A:F9:BD:E1:1E:7A:E7:E0:A1:DF:3F:9F:86
Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
Certificate issuer:       /CN=297c508d23b38315bbf45b726d22050a46127b8c
Certificate serial:       01967C7C5ADFC675A3D9EDB290706C0A9C84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft
Manifest number:          151E
Signing time:             Mon 28 Apr 2025 13:00:46 +0000
Manifest this update:     Mon 28 Apr 2025 13:00:46 +0000
Manifest next update:     Tue 29 Apr 2025 13:00:46 +0000
Files and hashes:         1: 6DiazTfSLwiU3nHVXB2_ipX3pSI.roa (hash: GgVQ0c2h8QmAuSALS7AfweuOCzU4KJ/qThY066+SiL8=)
                          2: F9Dj4BH3DTiBJqZUn9Gq6zuqgzw.roa (hash: PvC6qEA55o/ujVGgT7SwQI1kg6RiKLhNPwSFFwPuR5o=)
                          3: FM0AOR7qs5ReYOYfvDzPvyeOFF4.roa (hash: pyPxYA6UMvNM4UkCYSW/CeHul7I1PWvfOpcPGXbUI7A=)
                          4: KXxQjSOzgxW79FtybSIFCkYSe4w.crl (hash: hfLMtSwbsoFXMvaNhlAwluPV85nMZOqF4tCksg5N2Ko=)
                          5: LzFoDYPr7_0gEjtlfJ6xXw6t_lo.roa (hash: rXfhzDDWrE3BbdIp2NtDgdm3XDSADxRFIs8wy+p88S0=)
                          6: OPHuyxpO9PisbasiiAKtaHkvxVA.roa (hash: x3Qa5U665mgT3yS3jj1UddNty1CV91Oaf8NDM/bZhaM=)
                          7: kgi8mKAM2yCVgRH4L9W1E0GBctE.roa (hash: /x/rSNiAHNpL5ZxR6vbLMgxwW3ubNoY4GIMOdVAovVA=)
                          8: wN-88kHsfZoIQbMbBeQSvFTLUAA.roa (hash: TZn5hV31aDddpb82jvBnOx8ugm4e4LbJg3sHA8zL+QM=)
                          9: xDp3K5cwdwo-amBn4Z3yMMAdo3Y.roa (hash: eoBx0TZUtOUgkA8rEPSl3wkXkZ2dgXNZBSrXrhwvq14=)
                          10: zYd_cPkM9NVsX7bTQ07hSv4bWMk.roa (hash: 7m24y9mQHGr+u8/2znCaziY9Qt7M+iB4zeF7KEcBtdg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 13:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7c:7c:5a:df:c6:75:a3:d9:ed:b2:90:70:6c:0a:9c:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c
        Validity
            Not Before: Apr 28 13:00:46 2025 GMT
            Not After : Apr 29 13:00:46 2025 GMT
        Subject: CN=99cda376ebd56e4af9bde11e7ae7e0a1df3f9f86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:91:84:95:be:08:4a:1b:fb:67:04:3c:db:c8:
                    3c:81:61:39:b9:0f:81:fb:b2:0f:e6:94:6a:0c:48:
                    2a:2d:91:04:5e:93:d0:1d:98:34:38:0c:5e:07:a3:
                    1c:7e:cf:4f:2f:b9:df:22:5f:8e:b1:26:d7:b3:04:
                    27:3f:9e:bb:99:ee:51:f6:da:b0:ee:fe:57:d3:41:
                    11:cf:ee:87:ac:2a:2e:f8:8b:58:79:eb:74:85:ac:
                    56:31:85:00:27:96:4e:87:82:57:cc:67:e9:99:3f:
                    29:2f:46:d8:25:53:9d:52:91:76:40:18:e6:be:9d:
                    65:61:e5:04:12:fb:9f:01:dd:8b:a7:7f:19:12:af:
                    ae:25:2a:ad:03:27:54:78:9c:ee:b6:1b:b7:ca:9e:
                    dd:bf:d8:a9:19:80:99:a4:a1:46:64:8c:f0:18:2a:
                    d8:4d:f0:35:a6:07:46:2d:b4:7e:76:30:cf:05:d2:
                    96:46:22:9a:05:7e:38:65:4b:3c:43:fe:3d:96:57:
                    80:36:af:9f:5d:37:1d:74:5a:8b:48:15:16:db:f8:
                    b2:9f:30:66:7a:7e:96:b0:10:f8:26:4c:ee:0f:cd:
                    39:4e:5e:e0:97:9a:78:a4:cb:ba:4f:8e:a4:34:9e:
                    0d:72:1b:ac:b9:d3:0a:50:f4:b3:b0:b0:c5:17:33:
                    5f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:CD:A3:76:EB:D5:6E:4A:F9:BD:E1:1E:7A:E7:E0:A1:DF:3F:9F:86
            X509v3 Authority Key Identifier:
                keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:26:4e:dd:46:2a:ae:12:e0:0b:f3:9d:03:e1:63:d4:c0:e1:
         91:10:69:cf:0c:b6:c3:92:76:91:fb:9d:8e:16:4d:50:d7:7d:
         a6:0b:fa:51:f8:65:91:ed:ea:ab:08:45:73:7f:0a:4f:9b:71:
         b5:e5:67:1c:f7:1e:d1:a0:52:3c:40:3a:9e:ad:2b:eb:92:5c:
         3e:cf:18:73:2c:0f:24:ca:67:43:0a:54:cf:c9:4a:3d:01:04:
         d2:30:3c:6e:93:a6:1b:ed:44:22:2c:4e:f1:a7:05:90:1c:6e:
         c6:4d:c2:8c:94:50:c0:57:d5:78:57:3c:d5:9b:f1:22:e8:4f:
         af:4b:f1:ce:34:df:b2:8e:c7:2f:d0:10:2e:b7:e6:00:32:4e:
         e2:22:92:65:a5:89:21:47:21:c6:3b:28:a9:e9:dc:d2:bb:7b:
         c5:f6:52:cd:a6:dd:d2:4e:66:34:46:45:5a:17:52:fe:95:18:
         02:ec:4b:6d:63:60:c5:3b:3f:f7:9c:fa:0d:89:4d:c2:a5:89:
         82:d7:fd:04:9c:45:5b:d2:ea:65:9c:f0:64:6e:f9:5d:63:da:
         58:89:cc:de:3c:03:67:d2:4c:e6:fa:85:b4:71:3c:f7:2e:c8:
         e7:42:58:b0:ff:bf:dc:31:b3:5b:8b:42:15:41:2d:8c:a9:ed:
         6a:34:68:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ8fFrfxnWj2e2ykHBsCpyEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5N2M1MDhkMjNiMzgzMTViYmY0NWI3MjZkMjIwNTBhNDYx
MjdiOGMwHhcNMjUwNDI4MTMwMDQ2WhcNMjUwNDI5MTMwMDQ2WjAzMTEwLwYDVQQD
Eyg5OWNkYTM3NmViZDU2ZTRhZjliZGUxMWU3YWU3ZTBhMWRmM2Y5Zjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8JGElb4IShv7ZwQ828g8gWE5uQ+B
+7IP5pRqDEgqLZEEXpPQHZg0OAxeB6Mcfs9PL7nfIl+OsSbXswQnP567me5R9tqw
7v5X00ERz+6HrCou+ItYeet0haxWMYUAJ5ZOh4JXzGfpmT8pL0bYJVOdUpF2QBjm
vp1lYeUEEvufAd2Lp38ZEq+uJSqtAydUeJzuthu3yp7dv9ipGYCZpKFGZIzwGCrY
TfA1pgdGLbR+djDPBdKWRiKaBX44ZUs8Q/49lleANq+fXTcddFqLSBUW2/iynzBm
en6WsBD4JkzuD805Tl7gl5p4pMu6T46kNJ4NchusudMKUPSzsLDFFzNfNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnNo3br1W5K+b3hHnrn4KHfP5+GMB8GA1UdIwQY
MBaAFCl8UI0js4MVu/Rbcm0iBQpGEnuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTIt
MzZlOWE3OWJkOTUwLzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTItMzZlOWE3OWJkOTUw
LzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFCZO3UYq
rhLgC/OdA+Fj1MDhkRBpzwy2w5J2kfudjhZNUNd9pgv6Ufhlke3qqwhFc38KT5tx
teVnHPce0aBSPEA6nq0r65JcPs8YcywPJMpnQwpUz8lKPQEE0jA8bpOmG+1EIixO
8acFkBxuxk3CjJRQwFfVeFc81ZvxIuhPr0vxzjTfso7HL9AQLrfmADJO4iKSZaWJ
IUchxjsoqenc0rt7xfZSzabd0k5mNEZFWhdS/pUYAuxLbWNgxTs/95z6DYlNwqWJ
gtf9BJxFW9LqZZzwZG75XWPaWInM3jwDZ9JM5vqFtHE89y7I50JYsP+/3DGzW4tC
FUEtjKntajRoLA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:49:46 2025 by rpki-client