Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
File:                     KcFw2YteNdfVFTdnHGBApRUYhLw.mft (raw, json)
Hash identifier:          5U7PrlU/yCRMENF4TQseuiWUrYP2a+h06jrfBkEMulU=
Subject key identifier:   29:7D:2F:59:B9:DF:72:9F:08:96:48:2C:2A:B0:74:59:16:7D:B7:33
Authority key identifier: 29:C1:70:D9:8B:5E:35:D7:D5:15:37:67:1C:60:40:A5:15:18:84:BC
Certificate issuer:       /CN=29c170d98b5e35d7d51537671c6040a5151884bc
Certificate serial:       01967679D776831937D40A357304E0346204
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
Manifest number:          150F
Signing time:             Sun 27 Apr 2025 09:00:18 +0000
Manifest this update:     Sun 27 Apr 2025 09:00:18 +0000
Manifest next update:     Mon 28 Apr 2025 09:00:18 +0000
Files and hashes:         1: 3ZJjipNvCnffHlBZEGLPYL1cd6o.roa (hash: 59Oe/VE87ztmqQyIvIAIji5wjLpRLRfwhyLcTm5yzDc=)
                          2: KcFw2YteNdfVFTdnHGBApRUYhLw.crl (hash: u8aWsBIpG8EasRADaH2ZoECwsLb/M0olAdjYETjE75o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:79:d7:76:83:19:37:d4:0a:35:73:04:e0:34:62:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29c170d98b5e35d7d51537671c6040a5151884bc
        Validity
            Not Before: Apr 27 09:00:18 2025 GMT
            Not After : Apr 28 09:00:18 2025 GMT
        Subject: CN=297d2f59b9df729f0896482c2ab07459167db733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5f:27:29:68:8b:79:ad:7c:ca:37:55:86:0e:
                    2a:0e:ee:a4:c4:56:a7:67:94:69:2e:be:18:5e:f0:
                    79:d1:dd:1c:87:ec:ec:5e:89:a7:02:95:21:6e:23:
                    fc:ba:66:67:94:eb:e8:4c:63:4e:fb:e2:28:91:a7:
                    2e:e4:ae:fd:0b:6a:71:15:40:bc:e8:18:dc:11:33:
                    84:06:79:c7:c2:98:08:41:49:a0:d7:eb:06:79:13:
                    e6:ca:dc:fb:51:9a:29:46:6b:a9:49:36:69:09:5e:
                    9c:80:ce:9a:dd:5c:bb:f3:2c:5f:e3:f0:72:92:db:
                    48:6f:f8:8c:54:5b:e0:4c:ba:24:3b:18:2f:8b:35:
                    c3:7e:58:f4:d9:19:e1:d5:57:46:f9:23:06:ca:eb:
                    2d:56:ff:7f:1a:53:e8:47:2c:a1:b9:b6:93:b3:7f:
                    05:f5:40:1b:06:a9:e1:ef:2e:d0:f0:ef:1f:d1:d0:
                    35:68:02:dc:40:f8:0c:fa:4f:3e:d3:72:b3:3c:ae:
                    b5:d1:65:01:d0:c1:d9:cf:af:36:3c:f9:1c:c4:5b:
                    97:8a:1e:13:51:28:90:c2:ec:c6:55:d8:80:c7:d4:
                    06:80:81:60:2c:dd:e4:27:59:94:c8:57:7d:f2:60:
                    e5:8e:5f:dc:f7:5b:4f:e0:bb:b5:b2:71:20:14:a7:
                    19:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:7D:2F:59:B9:DF:72:9F:08:96:48:2C:2A:B0:74:59:16:7D:B7:33
            X509v3 Authority Key Identifier:
                keyid:29:C1:70:D9:8B:5E:35:D7:D5:15:37:67:1C:60:40:A5:15:18:84:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:ef:10:c1:31:7f:df:04:17:3d:6d:87:aa:c8:56:0a:7d:1b:
         a3:6d:38:7a:58:95:0e:09:47:51:68:82:68:df:62:9f:44:b3:
         71:ab:2f:b8:be:a2:1b:a6:f5:8e:b1:6d:05:6a:b1:ba:42:6d:
         90:9c:9e:32:89:c8:90:96:29:d0:67:99:3d:1b:5a:55:3d:52:
         8b:69:51:64:ca:60:21:ad:49:78:0b:8e:68:f1:9d:bc:44:d6:
         05:b6:ca:c6:39:0a:1f:25:31:e6:0b:dc:8d:53:4e:8a:85:0f:
         9c:49:24:5b:c7:7e:3e:50:72:0d:95:16:b5:7c:36:47:cd:30:
         85:17:15:f1:2a:ac:93:7e:e7:01:86:0c:a4:1f:ab:85:30:ab:
         94:37:2e:ec:1b:13:e3:dd:5f:e3:93:2f:6d:33:26:18:7e:20:
         d3:19:27:9e:7d:23:e6:bc:cb:c8:65:06:5a:71:7b:85:aa:f5:
         f3:14:7a:a1:ee:53:03:ec:aa:2d:ce:db:d4:c8:2a:18:e7:16:
         8a:4a:d6:f7:99:c0:d3:75:3a:52:14:8c:86:48:49:54:af:18:
         72:40:6a:ee:41:42:f1:8c:03:76:85:e5:8c:e1:da:65:62:4c:
         3a:4d:e0:2b:21:2d:a5:2d:77:6e:71:da:cc:38:94:37:af:d3:
         7a:64:5b:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2edd2gxk31Ao1cwTgNGIEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5YzE3MGQ5OGI1ZTM1ZDdkNTE1Mzc2NzFjNjA0MGE1MTUx
ODg0YmMwHhcNMjUwNDI3MDkwMDE4WhcNMjUwNDI4MDkwMDE4WjAzMTEwLwYDVQQD
EygyOTdkMmY1OWI5ZGY3MjlmMDg5NjQ4MmMyYWIwNzQ1OTE2N2RiNzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr18nKWiLea18yjdVhg4qDu6kxFan
Z5RpLr4YXvB50d0ch+zsXomnApUhbiP8umZnlOvoTGNO++Iokacu5K79C2pxFUC8
6BjcETOEBnnHwpgIQUmg1+sGeRPmytz7UZopRmupSTZpCV6cgM6a3Vy78yxf4/By
kttIb/iMVFvgTLokOxgvizXDflj02Rnh1VdG+SMGyustVv9/GlPoRyyhubaTs38F
9UAbBqnh7y7Q8O8f0dA1aALcQPgM+k8+03KzPK610WUB0MHZz682PPkcxFuXih4T
USiQwuzGVdiAx9QGgIFgLN3kJ1mUyFd98mDljl/c91tP4Lu1snEgFKcZPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCl9L1m533KfCJZILCqwdFkWfbczMB8GA1UdIwQY
MBaAFCnBcNmLXjXX1RU3ZxxgQKUVGIS8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2NGdzJZdGVOZGZWRlRkbkhHQkFwUlVZaEx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9lMjVhM2MtZGVmNi00MjI4LWExMGIt
YzQ1ZTk0OWU5Y2Q2LzEvS2NGdzJZdGVOZGZWRlRkbkhHQkFwUlVZaEx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9lMjVhM2MtZGVmNi00MjI4LWExMGItYzQ1ZTk0OWU5Y2Q2
LzEvS2NGdzJZdGVOZGZWRlRkbkhHQkFwUlVZaEx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoO8QwTF/
3wQXPW2HqshWCn0bo204eliVDglHUWiCaN9in0SzcasvuL6iG6b1jrFtBWqxukJt
kJyeMonIkJYp0GeZPRtaVT1Si2lRZMpgIa1JeAuOaPGdvETWBbbKxjkKHyUx5gvc
jVNOioUPnEkkW8d+PlByDZUWtXw2R80whRcV8Sqsk37nAYYMpB+rhTCrlDcu7BsT
491f45MvbTMmGH4g0xknnn0j5rzLyGUGWnF7har18xR6oe5TA+yqLc7b1MgqGOcW
ikrW95nA03U6UhSMhkhJVK8YckBq7kFC8YwDdoXljOHaZWJMOk3gKyEtpS13bnHa
zDiUN6/TemRbUg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:11:46 2025 by rpki-client