Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
File:                     yda1mpPjJAg_vKQjfkfp9evzcas.mft (raw, json)
Hash identifier:          Z0tZuz2nPfqE2lklR7xFBDPmT1NgiJAJcEps2knBd7k=
Subject key identifier:   FA:31:42:1A:2D:46:00:F2:0A:1E:8A:E5:C0:2A:90:80:F2:48:2A:10
Authority key identifier: C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
Certificate issuer:       /CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Certificate serial:       0196718A6D98C62AE65C2B41281B5F6102CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
Manifest number:          1533
Signing time:             Sat 26 Apr 2025 10:00:19 +0000
Manifest this update:     Sat 26 Apr 2025 10:00:19 +0000
Manifest next update:     Sun 27 Apr 2025 10:00:19 +0000
Files and hashes:         1: N1MG3ptUi6lRkgCQgC4sjQwbS5E.roa (hash: JXk8TsLqv4eNpEsTxzdAoUG6ec7BUvgM4Lyhjc+WI9U=)
                          2: pMIZZEHYcO0IlQ8lJ-JaDY1xnJs.roa (hash: KI7tUZnJYI1JaBjFs0d5L727l5SVVoE+xByQFUZQZZI=)
                          3: uiLIHzK4-mf16_OjnZc2yUpW0us.roa (hash: RlQY7OlYxlif+RwnDDphDKPVhonzC8U4YVG2wYszXJM=)
                          4: wmxHtvcKqJtTUqnf5sR3cyCPMeg.roa (hash: /EPsVJFiMZ3O3IoH+IOAZdQSfyIhjr2V/FlxWvt6e5c=)
                          5: xF5VKoGOYu4SuTkWFtzR0bzZqmI.roa (hash: rdwu1BaRed5RxmIo/GH4jXiyNp3cFaIjeNX4kVrFm70=)
                          6: yda1mpPjJAg_vKQjfkfp9evzcas.crl (hash: +Vgvvq4ga6l7vzw7/fw+bG/xo2nhRHZTIii7N5U+5P8=)
                          7: zPFc5xzrxxMWf2K11uBlgIiWqTo.roa (hash: 3x/T35aDdfP5Wrtlu3UJYc2NEgecLDM5KH+dyoNyYx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 10:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:71:8a:6d:98:c6:2a:e6:5c:2b:41:28:1b:5f:61:02:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
        Validity
            Not Before: Apr 26 10:00:19 2025 GMT
            Not After : Apr 27 10:00:19 2025 GMT
        Subject: CN=fa31421a2d4600f20a1e8ae5c02a9080f2482a10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a6:09:81:65:6d:50:92:22:6e:3f:83:63:d1:
                    bc:87:60:65:2c:f3:05:10:f7:7c:ac:5e:f4:5a:a2:
                    4c:61:69:e9:0e:38:67:bf:8a:d4:3a:f5:86:72:97:
                    ce:30:86:82:27:33:9c:1b:3e:5b:3e:22:19:ab:24:
                    f6:f9:10:68:66:b1:ec:ef:3e:69:7c:cb:c5:8b:7c:
                    23:d7:35:ff:cc:62:74:6e:01:03:b6:e8:05:cd:b3:
                    41:99:1b:86:98:f8:ba:28:4c:06:84:1f:30:e9:22:
                    74:83:a1:d9:83:07:85:f0:f3:8e:51:0a:e3:39:c2:
                    22:57:a5:78:cc:1e:3a:af:7f:17:f3:7d:58:85:62:
                    77:2d:0b:51:c4:e7:14:ea:ff:ac:ff:08:2a:3c:8c:
                    95:42:05:72:d1:5b:f0:c7:a5:dc:fd:10:3e:ec:94:
                    60:45:3b:16:b2:7d:32:21:06:e9:90:33:0e:89:17:
                    c4:01:e8:bd:1f:d9:86:a9:fd:0a:76:ba:28:86:f4:
                    20:cf:5b:ec:d6:16:bf:72:3c:40:15:0d:ff:66:e5:
                    f3:6b:c1:bf:ec:76:91:53:6a:b5:1f:8a:1f:97:63:
                    f1:7c:6b:67:a1:55:c6:c8:10:8f:de:7d:84:22:a1:
                    01:2d:fb:85:f0:5c:1b:9c:46:24:bc:34:9b:1b:c0:
                    00:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:31:42:1A:2D:46:00:F2:0A:1E:8A:E5:C0:2A:90:80:F2:48:2A:10
            X509v3 Authority Key Identifier:
                keyid:C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:18:ef:e8:e7:f2:34:9c:84:7d:92:e5:8c:54:39:8c:11:2f:
         dc:6d:e2:e3:75:4d:8e:36:42:86:41:76:f3:36:a5:d9:09:62:
         1d:87:9f:0b:fd:ad:96:a4:d6:06:5d:5e:fd:fe:aa:9f:3f:3f:
         97:0c:73:7a:25:ab:75:01:63:63:5b:65:75:01:3e:2f:fd:d5:
         5f:5e:7e:1a:cc:55:93:33:60:bd:43:77:dd:84:3e:ca:f3:b6:
         91:05:25:ca:fa:d1:fb:ea:b5:27:54:10:0f:d9:85:cf:f3:e8:
         a0:37:8b:99:a6:33:d5:6f:6e:83:ba:6d:3d:5d:6f:0a:41:58:
         57:98:95:da:7d:7d:93:bf:dd:2c:a1:90:e3:ac:f6:8a:b9:09:
         0c:8f:c9:e3:ba:64:dd:48:aa:68:06:7d:be:53:1c:8b:ab:3d:
         19:22:7c:e1:90:c5:2a:0a:a3:b6:a5:d3:55:9e:19:8d:e5:b5:
         7a:ca:15:f0:8c:32:a5:b9:d3:da:49:23:0b:9f:a4:37:5a:ec:
         a0:29:22:c1:39:21:e6:1a:63:69:eb:76:be:1d:90:e9:b2:3f:
         2c:81:3b:1a:21:49:60:5e:7f:4f:77:30:db:41:f8:82:d7:5e:
         6f:47:71:36:fb:25:81:21:c9:4b:ac:29:52:05:71:02:e2:a0:
         65:48:8d:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZxim2YxirmXCtBKBtfYQLOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDZiNTlhOTNlMzI0MDgzZmJjYTQyMzdlNDdlOWY1ZWJm
MzcxYWIwHhcNMjUwNDI2MTAwMDE5WhcNMjUwNDI3MTAwMDE5WjAzMTEwLwYDVQQD
EyhmYTMxNDIxYTJkNDYwMGYyMGExZThhZTVjMDJhOTA4MGYyNDgyYTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqYJgWVtUJIibj+DY9G8h2BlLPMF
EPd8rF70WqJMYWnpDjhnv4rUOvWGcpfOMIaCJzOcGz5bPiIZqyT2+RBoZrHs7z5p
fMvFi3wj1zX/zGJ0bgEDtugFzbNBmRuGmPi6KEwGhB8w6SJ0g6HZgweF8POOUQrj
OcIiV6V4zB46r38X831YhWJ3LQtRxOcU6v+s/wgqPIyVQgVy0Vvwx6Xc/RA+7JRg
RTsWsn0yIQbpkDMOiRfEAei9H9mGqf0KdroohvQgz1vs1ha/cjxAFQ3/ZuXza8G/
7HaRU2q1H4ofl2PxfGtnoVXGyBCP3n2EIqEBLfuF8FwbnEYkvDSbG8AA2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPoxQhotRgDyCh6K5cAqkIDySCoQMB8GA1UdIwQY
MBaAFMnWtZqT4yQIP7ykI35H6fXr83GrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRhMW1wUGpKQWdfdktRamZrZnA5ZXZ6Y2FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny82ODJiMDctNzczZi00NmZkLTgyZTIt
YjkyMTFlMWZjMWFjLzEveWRhMW1wUGpKQWdfdktRamZrZnA5ZXZ6Y2FzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny82ODJiMDctNzczZi00NmZkLTgyZTItYjkyMTFlMWZjMWFj
LzEveWRhMW1wUGpKQWdfdktRamZrZnA5ZXZ6Y2FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMRjv6Ofy
NJyEfZLljFQ5jBEv3G3i43VNjjZChkF28zal2QliHYefC/2tlqTWBl1e/f6qnz8/
lwxzeiWrdQFjY1tldQE+L/3VX15+GsxVkzNgvUN33YQ+yvO2kQUlyvrR++q1J1QQ
D9mFz/PooDeLmaYz1W9ug7ptPV1vCkFYV5iV2n19k7/dLKGQ46z2irkJDI/J47pk
3UiqaAZ9vlMci6s9GSJ84ZDFKgqjtqXTVZ4ZjeW1esoV8IwypbnT2kkjC5+kN1rs
oCkiwTkh5hpjaet2vh2Q6bI/LIE7GiFJYF5/T3cw20H4gtdeb0dxNvslgSHJS6wp
UgVxAuKgZUiNMQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:11:27 2025 by rpki-client