Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
File:                     VY3MXX5oh8lBrjsozjy_L7TyBgM.mft (raw, json)
Hash identifier:          hUHzRfMMU2UfRRhyDjD08AS6Ka0vaivPmU0zpDU3Q0k=
Subject key identifier:   E4:7F:9F:CA:C5:51:A0:FA:C0:AB:F8:9D:4F:11:3E:83:9C:D0:9B:0D
Authority key identifier: 55:8D:CC:5D:7E:68:87:C9:41:AE:3B:28:CE:3C:BF:2F:B4:F2:06:03
Certificate issuer:       /CN=558dcc5d7e6887c941ae3b28ce3cbf2fb4f20603
Certificate serial:       019695CE4A4570D4F64C5BC19B7C518DA86E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VY3MXX5oh8lBrjsozjy_L7TyBgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
Manifest number:          146F
Signing time:             Sat 03 May 2025 11:00:46 +0000
Manifest this update:     Sat 03 May 2025 11:00:46 +0000
Manifest next update:     Sun 04 May 2025 11:00:46 +0000
Files and hashes:         1: O6XxnBxdjAHrB6cqnybF-q5zhEI.roa (hash: I3o5BuOlE43DLGmjrJZTKVLwzcox6qkRQGzuUzhTBPQ=)
                          2: VY3MXX5oh8lBrjsozjy_L7TyBgM.crl (hash: VgQ92v7E/StZcpjXVKw4GPkk+1hRBghto/LqYWxh6NU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VY3MXX5oh8lBrjsozjy_L7TyBgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:95:ce:4a:45:70:d4:f6:4c:5b:c1:9b:7c:51:8d:a8:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558dcc5d7e6887c941ae3b28ce3cbf2fb4f20603
        Validity
            Not Before: May  3 11:00:46 2025 GMT
            Not After : May  4 11:00:46 2025 GMT
        Subject: CN=e47f9fcac551a0fac0abf89d4f113e839cd09b0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8c:e5:be:bc:42:e4:f5:3d:1b:cc:e7:b0:b6:
                    d0:bf:fc:30:5d:57:99:33:0f:81:3b:0f:cb:58:ea:
                    22:0b:d5:65:09:02:58:46:fc:7c:1a:95:e3:7d:49:
                    f5:50:bc:0d:54:3a:ae:e0:f6:0c:03:e8:bf:f5:7d:
                    f6:56:34:f6:5d:aa:7c:46:1a:0d:4f:73:c4:be:f6:
                    b2:43:d4:11:cf:4d:4b:ae:8a:0a:55:dd:d7:7f:c8:
                    f3:ee:28:b3:fc:a8:67:67:21:62:51:f1:fb:35:60:
                    54:bc:15:79:0e:1e:43:71:0b:27:e8:1b:a6:a2:e2:
                    00:25:9b:12:c5:cb:2b:30:92:6a:93:cd:08:29:49:
                    1c:84:ce:c4:9f:2d:db:b1:c2:be:d2:36:23:d5:be:
                    82:30:94:e1:60:35:55:0d:5d:f0:14:20:9a:8b:75:
                    c6:20:01:b9:4a:63:9c:a9:c0:0b:4c:b9:b2:2e:56:
                    04:b0:d5:b6:06:92:0f:ec:23:a1:bc:d5:83:c8:2a:
                    39:bc:63:4d:40:11:3d:2c:95:5b:e9:f9:79:a9:97:
                    dd:69:2d:44:53:d3:6f:c6:2b:48:dc:db:e2:66:c6:
                    5e:83:02:cd:d6:d3:b2:a9:89:02:e2:a5:7a:cd:6f:
                    ab:04:28:0d:c2:c4:f5:5d:5a:6e:53:8b:a3:93:37:
                    94:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:7F:9F:CA:C5:51:A0:FA:C0:AB:F8:9D:4F:11:3E:83:9C:D0:9B:0D
            X509v3 Authority Key Identifier:
                keyid:55:8D:CC:5D:7E:68:87:C9:41:AE:3B:28:CE:3C:BF:2F:B4:F2:06:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VY3MXX5oh8lBrjsozjy_L7TyBgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:97:a7:e1:d9:1b:0b:4d:79:23:a0:49:b1:0b:df:f2:12:a7:
         e3:39:c1:59:8b:6b:ec:dd:5d:ad:a3:ee:55:23:2c:f0:2c:a0:
         d3:ec:03:fd:02:c4:aa:cf:77:03:0f:df:f7:58:94:19:02:3d:
         e7:7b:d8:99:a2:b6:b1:30:c6:7a:c8:9e:e2:e8:a4:11:c9:22:
         13:c3:9e:3a:64:8a:56:9e:de:ee:62:cf:64:9b:28:4f:df:3d:
         5c:a9:dd:58:c2:5c:9e:a2:d5:c3:9c:64:c1:5b:5a:52:92:ec:
         9c:ca:0f:bf:bb:b3:a7:53:8a:1f:9c:50:a6:6b:df:ed:b9:bd:
         c0:6b:82:29:ce:24:d7:58:c9:eb:60:87:15:95:5d:dc:2b:bb:
         11:df:ac:f7:6a:3d:f6:bb:d8:58:a6:a1:45:fb:7d:71:c3:e6:
         82:0c:a9:b4:50:b0:6e:58:ca:91:ef:6a:c9:f7:76:95:83:9a:
         31:3f:7b:3d:56:93:f6:4f:ed:eb:4c:83:80:e1:dd:dd:13:29:
         a5:4c:0d:14:32:05:ea:40:ee:69:33:ec:b4:0e:f7:e9:38:43:
         c5:ee:4f:57:be:1b:46:e0:e4:e3:70:44:ec:54:87:32:bc:6f:
         33:1c:1a:09:a9:18:8c:a9:22:99:d9:4e:8d:a0:48:af:a9:14:
         bf:52:37:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaVzkpFcNT2TFvBm3xRjahuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1OGRjYzVkN2U2ODg3Yzk0MWFlM2IyOGNlM2NiZjJmYjRm
MjA2MDMwHhcNMjUwNTAzMTEwMDQ2WhcNMjUwNTA0MTEwMDQ2WjAzMTEwLwYDVQQD
EyhlNDdmOWZjYWM1NTFhMGZhYzBhYmY4OWQ0ZjExM2U4MzljZDA5YjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYzlvrxC5PU9G8znsLbQv/wwXVeZ
Mw+BOw/LWOoiC9VlCQJYRvx8GpXjfUn1ULwNVDqu4PYMA+i/9X32VjT2Xap8RhoN
T3PEvvayQ9QRz01LrooKVd3Xf8jz7iiz/KhnZyFiUfH7NWBUvBV5Dh5DcQsn6Bum
ouIAJZsSxcsrMJJqk80IKUkchM7Eny3bscK+0jYj1b6CMJThYDVVDV3wFCCai3XG
IAG5SmOcqcALTLmyLlYEsNW2BpIP7COhvNWDyCo5vGNNQBE9LJVb6fl5qZfdaS1E
U9NvxitI3NviZsZegwLN1tOyqYkC4qV6zW+rBCgNwsT1XVpuU4ujkzeUhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOR/n8rFUaD6wKv4nU8RPoOc0JsNMB8GA1UdIwQY
MBaAFFWNzF1+aIfJQa47KM48vy+08gYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlkzTVhYNW9oOGxCcmpzb3pqeV9MN1R5QmdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9mMDRhNTctNWVlOS00YjZhLTlkYTIt
YmQ5YTNiNTVmMTI1LzEvVlkzTVhYNW9oOGxCcmpzb3pqeV9MN1R5QmdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9mMDRhNTctNWVlOS00YjZhLTlkYTItYmQ5YTNiNTVmMTI1
LzEvVlkzTVhYNW9oOGxCcmpzb3pqeV9MN1R5QmdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKZen4dkb
C015I6BJsQvf8hKn4znBWYtr7N1draPuVSMs8Cyg0+wD/QLEqs93Aw/f91iUGQI9
53vYmaK2sTDGesie4uikEckiE8OeOmSKVp7e7mLPZJsoT989XKndWMJcnqLVw5xk
wVtaUpLsnMoPv7uzp1OKH5xQpmvf7bm9wGuCKc4k11jJ62CHFZVd3Cu7Ed+s92o9
9rvYWKahRft9ccPmggyptFCwbljKke9qyfd2lYOaMT97PVaT9k/t60yDgOHd3RMp
pUwNFDIF6kDuaTPstA736ThDxe5PV74bRuDk43BE7FSHMrxvMxwaCakYjKkimdlO
jaBIr6kUv1I38Q==
-----END CERTIFICATE-----
Generated at Sat May 3 14:07:06 2025 by rpki-client