Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
File:                     u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft (raw, json)
Hash identifier:          HVenyPZilDnXwlyuWeFUkhc4xIfK4PkVRryViugg4oE=
Subject key identifier:   55:27:53:01:61:A6:E8:D4:4C:D5:CF:6B:7A:90:86:31:98:9E:68:8F
Authority key identifier: BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA
Certificate issuer:       /CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea
Certificate serial:       0196741DA404ECE3D7033DD095C6623DE303
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
Manifest number:          1512
Signing time:             Sat 26 Apr 2025 22:00:21 +0000
Manifest this update:     Sat 26 Apr 2025 22:00:21 +0000
Manifest next update:     Sun 27 Apr 2025 22:00:21 +0000
Files and hashes:         1: u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl (hash: 2fHPrZigqkb4zI1mIlqBMAZOzzx6swSR2g+998Mix6I=)
                          2: zqm8sqmxX0F8ohqYYWfQXp8iRJ4.roa (hash: dDiUuU6g/ottfUPpI3HwKpho2gKA2x4esWjcJownMww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 22:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:1d:a4:04:ec:e3:d7:03:3d:d0:95:c6:62:3d:e3:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea
        Validity
            Not Before: Apr 26 22:00:21 2025 GMT
            Not After : Apr 27 22:00:21 2025 GMT
        Subject: CN=5527530161a6e8d44cd5cf6b7a908631989e688f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4a:bd:ff:49:3a:88:6a:33:26:1c:44:ca:17:
                    50:06:b2:63:bd:50:66:7b:c8:2f:cf:f6:37:94:ff:
                    b2:fe:03:87:43:84:d5:be:91:5d:2f:07:be:f9:30:
                    76:30:f3:37:e3:74:d8:4a:55:4f:ea:7a:18:99:1e:
                    66:7a:fd:b6:9f:63:e4:50:b8:3e:cd:98:32:78:32:
                    55:98:eb:e0:5f:0e:4b:17:ce:69:59:6a:4a:4d:24:
                    ce:b9:9f:86:fa:8b:61:33:fb:03:df:66:7b:c7:0b:
                    fb:3a:94:ec:bb:7a:ed:2d:ed:5c:d3:e1:67:24:0b:
                    ae:50:79:fa:30:a5:34:13:41:d8:3e:63:08:10:54:
                    b6:5a:d9:82:ac:67:35:4b:ca:1f:d3:fb:09:d1:32:
                    a7:63:55:38:e1:70:71:c9:d0:29:ae:ee:f9:4f:b5:
                    c8:29:86:39:63:91:50:de:34:ad:b8:74:78:dc:78:
                    35:2d:05:08:95:be:90:d5:1b:6e:86:c2:bc:1b:54:
                    9c:23:5c:98:01:71:dc:d7:f9:3a:fa:b7:ac:61:f5:
                    12:ad:ae:e5:2e:a5:ba:30:d6:51:79:65:fc:c6:aa:
                    65:2a:4a:ea:c6:34:34:21:cb:92:bb:f0:c3:42:17:
                    29:d3:45:ed:6b:3a:05:12:23:8d:68:a1:fa:26:f7:
                    ee:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:27:53:01:61:A6:E8:D4:4C:D5:CF:6B:7A:90:86:31:98:9E:68:8F
            X509v3 Authority Key Identifier:
                keyid:BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:56:37:bf:56:3d:24:05:8c:22:92:99:8f:28:73:f5:a9:81:
         ac:fd:b0:a6:87:c2:e8:e9:a9:13:7b:73:e7:19:ed:b9:67:f0:
         9b:1c:b2:4b:e5:a9:19:4c:8a:c5:d3:1d:1c:f1:4e:7f:35:e7:
         76:69:f0:85:bf:ec:fa:70:d2:38:59:96:40:5e:68:9b:c6:58:
         2c:27:f6:97:f4:3a:cd:d2:38:17:08:84:86:f3:5e:27:a7:e4:
         0a:10:e8:fd:dc:51:a2:b3:aa:76:c8:ee:2a:89:98:0f:c1:c3:
         d2:76:64:e4:6c:48:ac:32:2a:4b:6d:6f:ac:98:89:bd:26:16:
         31:58:64:c3:d4:a0:0f:c8:81:71:52:34:c9:40:74:c1:ae:32:
         87:d1:f7:ea:52:f9:2f:b3:38:60:df:d5:47:d7:15:15:8c:4f:
         79:2f:66:de:7f:7d:d9:80:79:28:86:23:da:82:41:73:f9:db:
         3f:14:e8:c6:66:d8:70:6c:ce:c7:d7:37:25:2a:14:38:a0:18:
         56:33:fd:07:34:3d:e8:fb:cb:70:9d:5f:71:38:7a:a4:b4:4f:
         42:7f:21:fc:d7:d6:32:15:be:d6:51:aa:b4:5a:c3:9a:f7:5a:
         ea:03:65:56:03:6b:eb:56:25:e5:a7:66:3e:b4:4d:e2:4d:ad:
         f0:2f:bf:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0HaQE7OPXAz3QlcZiPeMDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNTc1NjFjYTJkYmY3NTBlOGY1ZTBiNzM4OWVmMDljZTli
NWJjZWEwHhcNMjUwNDI2MjIwMDIxWhcNMjUwNDI3MjIwMDIxWjAzMTEwLwYDVQQD
Eyg1NTI3NTMwMTYxYTZlOGQ0NGNkNWNmNmI3YTkwODYzMTk4OWU2ODhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40q9/0k6iGozJhxEyhdQBrJjvVBm
e8gvz/Y3lP+y/gOHQ4TVvpFdLwe++TB2MPM343TYSlVP6noYmR5mev22n2PkULg+
zZgyeDJVmOvgXw5LF85pWWpKTSTOuZ+G+othM/sD32Z7xwv7OpTsu3rtLe1c0+Fn
JAuuUHn6MKU0E0HYPmMIEFS2WtmCrGc1S8of0/sJ0TKnY1U44XBxydApru75T7XI
KYY5Y5FQ3jStuHR43Hg1LQUIlb6Q1RtuhsK8G1ScI1yYAXHc1/k6+resYfUSra7l
LqW6MNZReWX8xqplKkrqxjQ0IcuSu/DDQhcp00XtazoFEiONaKH6JvfutwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFUnUwFhpujUTNXPa3qQhjGYnmiPMB8GA1UdIwQY
MBaAFLtXVhyi2/dQ6PXgtzie8JzptbzqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTFkV0hLTGI5MURvOWVDM09KN3duT20xdk9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kNWY5YWEtMzM3Yi00ZDYwLThmNWUt
MDIxMjVlNDRlM2E4LzEvdTFkV0hLTGI5MURvOWVDM09KN3duT20xdk9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9kNWY5YWEtMzM3Yi00ZDYwLThmNWUtMDIxMjVlNDRlM2E4
LzEvdTFkV0hLTGI5MURvOWVDM09KN3duT20xdk9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi1Y3v1Y9
JAWMIpKZjyhz9amBrP2wpofC6OmpE3tz5xntuWfwmxyyS+WpGUyKxdMdHPFOfzXn
dmnwhb/s+nDSOFmWQF5om8ZYLCf2l/Q6zdI4FwiEhvNeJ6fkChDo/dxRorOqdsju
KomYD8HD0nZk5GxIrDIqS21vrJiJvSYWMVhkw9SgD8iBcVI0yUB0wa4yh9H36lL5
L7M4YN/VR9cVFYxPeS9m3n992YB5KIYj2oJBc/nbPxToxmbYcGzOx9c3JSoUOKAY
VjP9BzQ96PvLcJ1fcTh6pLRPQn8h/NfWMhW+1lGqtFrDmvda6gNlVgNr61Yl5adm
PrRN4k2t8C+/Hw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:43:47 2025 by rpki-client