Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
File:                     sMmblRxqb2rcyGjYhalArfAFGhk.mft (raw, json)
Hash identifier:          2MUvU/9+JPdC7fEYoZaBRxlJWmhzZrrTncgO5KW/QoU=
Subject key identifier:   E1:73:A8:7B:0C:45:DD:6B:C0:E9:39:A4:31:CA:46:CA:E6:FF:31:33
Authority key identifier: B0:C9:9B:95:1C:6A:6F:6A:DC:C8:68:D8:85:A9:40:AD:F0:05:1A:19
Certificate issuer:       /CN=b0c99b951c6a6f6adcc868d885a940adf0051a19
Certificate serial:       019684A3ABFAAC0576323F8D2B0FE6A4270D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
Manifest number:          0BA8
Signing time:             Wed 30 Apr 2025 03:00:40 +0000
Manifest this update:     Wed 30 Apr 2025 03:00:40 +0000
Manifest next update:     Thu 01 May 2025 03:00:40 +0000
Files and hashes:         1: S5idv9RUVm_2J5GgNAX09HgvY7U.roa (hash: 4OYpTkc09pdm5hRENjZ+uPkWTS9n8ZtkwbMJqCtcIGQ=)
                          2: sMmblRxqb2rcyGjYhalArfAFGhk.crl (hash: /QJMc5C0K7ozjEgUwXiQDUC19wixKuI34NXlOQZMuW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:84:a3:ab:fa:ac:05:76:32:3f:8d:2b:0f:e6:a4:27:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0c99b951c6a6f6adcc868d885a940adf0051a19
        Validity
            Not Before: Apr 30 03:00:40 2025 GMT
            Not After : May  1 03:00:40 2025 GMT
        Subject: CN=e173a87b0c45dd6bc0e939a431ca46cae6ff3133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:af:d3:a0:47:36:63:03:e4:6d:c9:b8:5f:97:
                    ad:25:bc:93:7e:66:76:b7:65:0b:24:ac:66:ae:6e:
                    a2:0d:ff:ef:79:23:f3:10:32:b2:37:a0:64:bb:48:
                    3f:2e:81:5c:9c:42:5d:20:f5:c4:d4:3c:9f:b6:fe:
                    3e:0a:0e:02:aa:2f:0a:37:4a:d7:7c:1a:ef:c0:a9:
                    4b:43:41:9c:9f:a5:b4:46:6c:cc:33:2a:75:b9:0b:
                    68:07:63:f7:ea:00:88:d5:f6:27:e7:a4:fc:51:a8:
                    9d:18:e9:77:52:dd:c2:ff:7d:ca:6c:7f:de:25:46:
                    1d:7d:6c:65:9c:c5:70:40:90:c1:d9:e8:5c:27:e9:
                    92:f6:21:98:a3:1b:e1:bf:dc:56:74:3a:cf:27:4f:
                    2f:63:e1:61:dd:a0:b5:be:3f:4d:ed:15:dd:fb:30:
                    ef:ab:03:cf:fc:c4:6c:d5:09:26:a5:be:b0:46:8c:
                    9a:d6:8e:75:f6:c8:b9:16:e1:35:cd:23:23:2d:70:
                    70:e0:68:d7:4e:61:4e:7e:3b:39:e8:a5:e4:18:43:
                    ba:65:a5:24:14:a0:fa:a9:93:94:10:29:00:be:2e:
                    1f:6c:03:e3:2f:07:77:a5:50:c9:ba:94:74:93:f0:
                    4c:5e:00:85:21:e0:22:75:72:c2:ff:97:63:d4:38:
                    75:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:73:A8:7B:0C:45:DD:6B:C0:E9:39:A4:31:CA:46:CA:E6:FF:31:33
            X509v3 Authority Key Identifier:
                keyid:B0:C9:9B:95:1C:6A:6F:6A:DC:C8:68:D8:85:A9:40:AD:F0:05:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:47:ae:25:2b:2c:84:75:72:72:ba:bd:14:22:3a:a1:1b:95:
         1b:43:b4:cf:5c:4b:30:b4:7a:e0:b9:51:5c:f1:f3:e2:67:cf:
         be:9f:71:ae:68:7b:66:8e:d9:14:7f:45:20:d3:e5:ae:65:7a:
         fb:75:74:a1:08:47:c8:c7:1f:26:16:86:89:98:14:09:24:2d:
         d1:ca:ca:24:3c:c9:e2:a1:a2:92:7b:4a:2b:bf:30:b2:ab:7d:
         1c:35:6b:71:82:ec:b7:59:20:15:b4:69:96:fd:ab:d0:b4:f8:
         aa:78:c2:b4:a1:c8:88:d9:95:2c:47:2a:ce:4b:86:3b:49:2d:
         2a:cd:d2:29:3f:b6:84:d9:13:36:6f:9d:78:4d:a4:72:8c:d1:
         d7:91:a6:96:64:f8:e4:85:09:b2:44:38:61:f8:4f:a0:7a:cc:
         d9:9c:95:76:68:9b:22:8e:57:d0:c7:2a:db:48:7d:9c:b2:0a:
         8f:87:26:67:77:27:5c:0e:68:94:e4:b1:84:cf:a1:58:a7:22:
         9b:af:0d:5e:93:71:14:38:c8:2c:5c:d5:7b:6b:c9:a5:d0:8a:
         ef:3c:7f:74:11:56:5f:65:25:2a:28:22:63:04:97:cb:f2:0b:
         36:c5:e7:e4:5f:75:f3:be:72:08:5c:e1:30:4a:e9:cb:2f:57:
         16:2f:6b:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaEo6v6rAV2Mj+NKw/mpCcNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYzk5Yjk1MWM2YTZmNmFkY2M4NjhkODg1YTk0MGFkZjAw
NTFhMTkwHhcNMjUwNDMwMDMwMDQwWhcNMjUwNTAxMDMwMDQwWjAzMTEwLwYDVQQD
EyhlMTczYTg3YjBjNDVkZDZiYzBlOTM5YTQzMWNhNDZjYWU2ZmYzMTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuq/ToEc2YwPkbcm4X5etJbyTfmZ2
t2ULJKxmrm6iDf/veSPzEDKyN6Bku0g/LoFcnEJdIPXE1Dyftv4+Cg4Cqi8KN0rX
fBrvwKlLQ0Gcn6W0RmzMMyp1uQtoB2P36gCI1fYn56T8UaidGOl3Ut3C/33KbH/e
JUYdfWxlnMVwQJDB2ehcJ+mS9iGYoxvhv9xWdDrPJ08vY+Fh3aC1vj9N7RXd+zDv
qwPP/MRs1Qkmpb6wRoya1o519si5FuE1zSMjLXBw4GjXTmFOfjs56KXkGEO6ZaUk
FKD6qZOUECkAvi4fbAPjLwd3pVDJupR0k/BMXgCFIeAidXLC/5dj1Dh1qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOFzqHsMRd1rwOk5pDHKRsrm/zEzMB8GA1UdIwQY
MBaAFLDJm5Ucam9q3Mho2IWpQK3wBRoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc01tYmxSeHFiMnJjeUdqWWhhbEFyZkFGR2hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8wYTdiYmYtYmYyMC00MTE0LTk3MmMt
M2U2OTU2ZWQyYzZhLzEvc01tYmxSeHFiMnJjeUdqWWhhbEFyZkFGR2hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8wYTdiYmYtYmYyMC00MTE0LTk3MmMtM2U2OTU2ZWQyYzZh
LzEvc01tYmxSeHFiMnJjeUdqWWhhbEFyZkFGR2hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEEeuJSss
hHVycrq9FCI6oRuVG0O0z1xLMLR64LlRXPHz4mfPvp9xrmh7Zo7ZFH9FINPlrmV6
+3V0oQhHyMcfJhaGiZgUCSQt0crKJDzJ4qGikntKK78wsqt9HDVrcYLst1kgFbRp
lv2r0LT4qnjCtKHIiNmVLEcqzkuGO0ktKs3SKT+2hNkTNm+deE2kcozR15GmlmT4
5IUJskQ4YfhPoHrM2ZyVdmibIo5X0Mcq20h9nLIKj4cmZ3cnXA5olOSxhM+hWKci
m68NXpNxFDjILFzVe2vJpdCK7zx/dBFWX2UlKigiYwSXy/ILNsXn5F91875yCFzh
MErpyy9XFi9rXw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 06:21:27 2025 by rpki-client