Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/da5e3b-ca0b-4fce-b1e2-5dd336f38060/1/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.mft
File:                     0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.mft (raw, json)
Hash identifier:          ZK3vdYpqBUK25YFgZbvkriGu8uBDi7CyckdCausfTyQ=
Subject key identifier:   E3:56:15:8B:F6:B6:77:A3:AF:7C:A6:C1:55:9C:E3:23:D6:01:73:62
Authority key identifier: D0:C3:D3:58:81:2E:60:B6:80:E4:E1:16:32:F1:39:56:0B:F5:25:FB
Certificate issuer:       /CN=d0c3d358812e60b680e4e11632f139560bf525fb
Certificate serial:       019678D63441843836085688CE4F66DC3F28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/da5e3b-ca0b-4fce-b1e2-5dd336f38060/1/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.mft
Manifest number:          0C97
Signing time:             Sun 27 Apr 2025 20:00:26 +0000
Manifest this update:     Sun 27 Apr 2025 20:00:26 +0000
Manifest next update:     Mon 28 Apr 2025 20:00:26 +0000
Files and hashes:         1: 0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.crl (hash: 9yUpkC/saCra0fWxVXSbTUn31QmZwQZIfSiWb4k8X3g=)
                          2: HME8zGcc-HAVtbr4sZdbeNLJU5A.roa (hash: TPPi4et5FVDHl+8Hye2r4DlU6tqPyGa2KXSYWnxyrpk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/da5e3b-ca0b-4fce-b1e2-5dd336f38060/1/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/da5e3b-ca0b-4fce-b1e2-5dd336f38060/1/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:78:d6:34:41:84:38:36:08:56:88:ce:4f:66:dc:3f:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0c3d358812e60b680e4e11632f139560bf525fb
        Validity
            Not Before: Apr 27 20:00:26 2025 GMT
            Not After : Apr 28 20:00:26 2025 GMT
        Subject: CN=e356158bf6b677a3af7ca6c1559ce323d6017362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ac:31:22:4b:19:8c:79:a5:17:90:91:3f:89:
                    f7:72:9d:ad:bb:cf:28:66:58:22:de:19:d6:f3:bb:
                    71:38:24:7c:38:3c:46:75:96:d6:1b:c2:a0:f6:6b:
                    08:c2:f8:c2:03:57:4d:60:c9:9d:0e:f9:41:8a:95:
                    6a:ee:72:59:01:b4:ce:d5:05:3b:6d:d6:80:07:76:
                    2c:09:ae:c8:8f:2b:e3:cb:c6:f1:5f:c5:3a:35:ce:
                    33:46:25:f0:20:62:7e:b1:f0:09:16:b7:fe:a1:86:
                    09:55:6e:e0:4e:73:37:dc:52:a5:ae:a5:60:07:58:
                    82:f5:97:61:33:00:09:64:2c:25:84:46:68:fd:34:
                    8e:ba:ef:84:54:59:dd:05:58:c5:3d:96:6d:b4:87:
                    09:9b:57:62:03:02:ee:05:9e:85:a4:71:0d:e7:2d:
                    d8:66:4b:cd:0d:e2:ed:b9:34:e4:7a:af:67:25:23:
                    59:8c:21:47:36:83:92:df:7f:36:b8:9f:76:3f:fd:
                    03:90:9e:f2:a6:a7:a7:18:bb:cb:8d:71:0a:5c:4f:
                    35:fc:8d:b8:c1:a5:cc:ca:80:6a:32:94:b0:d4:0b:
                    09:9e:7c:0b:c9:d3:62:b8:c1:64:83:eb:5f:cf:b3:
                    70:3c:0b:38:10:34:76:93:52:8a:18:aa:9b:88:e7:
                    63:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:56:15:8B:F6:B6:77:A3:AF:7C:A6:C1:55:9C:E3:23:D6:01:73:62
            X509v3 Authority Key Identifier:
                keyid:D0:C3:D3:58:81:2E:60:B6:80:E4:E1:16:32:F1:39:56:0B:F5:25:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/da5e3b-ca0b-4fce-b1e2-5dd336f38060/1/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/da5e3b-ca0b-4fce-b1e2-5dd336f38060/1/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:52:56:22:a2:90:7c:2b:bf:3e:21:95:cc:c7:98:7b:cd:86:
         d6:cb:ae:d3:6e:36:57:2a:f0:a3:37:2b:81:a7:0f:c7:f2:08:
         bb:ae:66:8a:21:6a:0c:b4:ed:65:77:b5:9d:0d:61:a2:b0:36:
         8d:66:34:3e:02:90:94:2b:cd:99:85:39:8c:2d:43:25:63:1a:
         60:70:c1:68:44:fa:75:7e:c4:65:32:56:7a:0b:89:ff:29:d8:
         f8:57:86:41:41:51:87:ea:42:fc:a5:f2:ef:a2:10:ab:c5:58:
         4c:9a:9f:d6:cf:92:00:fd:52:3b:88:23:2c:2d:b7:2b:52:50:
         40:70:41:3c:78:84:cf:76:7b:50:77:b1:81:6e:93:59:22:31:
         3e:84:43:d1:ac:5f:94:fd:20:41:8e:ce:a6:d3:11:2f:84:8d:
         77:d6:54:56:17:8d:bd:c0:02:b8:71:89:4d:27:15:1e:24:d4:
         bc:ed:fd:1e:70:72:03:27:44:e9:5c:47:5a:9c:fd:45:e9:2b:
         71:da:6d:89:29:6b:9b:27:c3:aa:e4:ab:98:6c:fb:71:63:29:
         93:9b:8c:19:f1:44:b9:89:7f:fa:25:68:2f:93:d1:74:04:d2:
         9e:20:69:8f:22:2a:e8:01:1f:cc:cb:2c:e6:9e:1b:df:0a:ba:
         1f:d7:86:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ41jRBhDg2CFaIzk9m3D8oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYzNkMzU4ODEyZTYwYjY4MGU0ZTExNjMyZjEzOTU2MGJm
NTI1ZmIwHhcNMjUwNDI3MjAwMDI2WhcNMjUwNDI4MjAwMDI2WjAzMTEwLwYDVQQD
EyhlMzU2MTU4YmY2YjY3N2EzYWY3Y2E2YzE1NTljZTMyM2Q2MDE3MzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6wxIksZjHmlF5CRP4n3cp2tu88o
Zlgi3hnW87txOCR8ODxGdZbWG8Kg9msIwvjCA1dNYMmdDvlBipVq7nJZAbTO1QU7
bdaAB3YsCa7Ijyvjy8bxX8U6Nc4zRiXwIGJ+sfAJFrf+oYYJVW7gTnM33FKlrqVg
B1iC9ZdhMwAJZCwlhEZo/TSOuu+EVFndBVjFPZZttIcJm1diAwLuBZ6FpHEN5y3Y
ZkvNDeLtuTTkeq9nJSNZjCFHNoOS3382uJ92P/0DkJ7ypqenGLvLjXEKXE81/I24
waXMyoBqMpSw1AsJnnwLydNiuMFkg+tfz7NwPAs4EDR2k1KKGKqbiOdj5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONWFYv2tnejr3ymwVWc4yPWAXNiMB8GA1UdIwQY
MBaAFNDD01iBLmC2gOThFjLxOVYL9SX7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME1QVFdJRXVZTGFBNU9FV012RTVWZ3YxSmZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9kYTVlM2ItY2EwYi00ZmNlLWIxZTIt
NWRkMzM2ZjM4MDYwLzEvME1QVFdJRXVZTGFBNU9FV012RTVWZ3YxSmZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9kYTVlM2ItY2EwYi00ZmNlLWIxZTItNWRkMzM2ZjM4MDYw
LzEvME1QVFdJRXVZTGFBNU9FV012RTVWZ3YxSmZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgVJWIqKQ
fCu/PiGVzMeYe82G1suu0242VyrwozcrgacPx/IIu65miiFqDLTtZXe1nQ1horA2
jWY0PgKQlCvNmYU5jC1DJWMaYHDBaET6dX7EZTJWeguJ/ynY+FeGQUFRh+pC/KXy
76IQq8VYTJqf1s+SAP1SO4gjLC23K1JQQHBBPHiEz3Z7UHexgW6TWSIxPoRD0axf
lP0gQY7OptMRL4SNd9ZUVheNvcACuHGJTScVHiTUvO39HnByAydE6VxHWpz9Rekr
cdptiSlrmyfDquSrmGz7cWMpk5uMGfFEuYl/+iVoL5PRdATSniBpjyIq6AEfzMss
5p4b3wq6H9eGaQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:02:06 2025 by rpki-client