Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
File:                     c-FXspGMrcqKWp-8Zul3YIpt9eE.mft (raw, json)
Hash identifier:          vhIfVa0YXRw3YOLkSYe7oZpF7XqTA/vVjfRRQfgwGZc=
Subject key identifier:   00:07:DF:84:0D:D6:6D:CD:EC:56:21:6F:20:64:9F:F5:A2:AF:9B:9B
Authority key identifier: 73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1
Certificate issuer:       /CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
Certificate serial:       019676B0FDDF739D9A29370B3E5FAC9E5ABB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
Manifest number:          1518
Signing time:             Sun 27 Apr 2025 10:00:32 +0000
Manifest this update:     Sun 27 Apr 2025 10:00:32 +0000
Manifest next update:     Mon 28 Apr 2025 10:00:32 +0000
Files and hashes:         1: 9Vc3AbW6vlZ_1l6ygzFXdiG_9DU.roa (hash: XyjyaFRHv8L+Xv8vUnenIR3U/Eb6y+TGYMaeT4tV8mY=)
                          2: F8Nk--QAXVfgvDbLL_6xQcd6OeY.roa (hash: B5PNCVqEZ3htMuoUo9SXwMTUf5kV2N6tfRSmohV4ztI=)
                          3: c-FXspGMrcqKWp-8Zul3YIpt9eE.crl (hash: lI8y9HSwEBzH8r5q8BZnwK8rrXe+zEny2PrH8wH/LZ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:b0:fd:df:73:9d:9a:29:37:0b:3e:5f:ac:9e:5a:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
        Validity
            Not Before: Apr 27 10:00:32 2025 GMT
            Not After : Apr 28 10:00:32 2025 GMT
        Subject: CN=0007df840dd66dcdec56216f20649ff5a2af9b9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:06:4a:f6:77:cb:37:f4:19:5a:fd:4c:a1:58:
                    53:ee:67:21:e5:ed:d2:1d:c1:93:57:46:d2:8e:50:
                    4c:86:35:e8:ae:8c:df:35:98:0e:a3:92:ae:c3:50:
                    b1:9b:ff:82:76:13:08:90:6b:52:24:44:61:f6:67:
                    bf:1f:c1:ed:12:cd:ee:f5:78:57:31:58:9d:e1:4d:
                    3c:a6:9b:e3:32:8f:df:49:34:ca:eb:7b:95:95:e5:
                    8b:4d:38:80:0b:92:df:64:2f:44:0e:c8:ed:ea:d1:
                    ac:ed:ef:f2:eb:8d:d5:44:93:83:e2:65:d4:4d:59:
                    80:6b:21:ca:24:c1:f8:71:18:d5:75:e2:b1:6a:1e:
                    54:02:07:08:eb:69:03:e1:5b:4f:05:8d:0a:8a:1e:
                    56:a6:26:42:b1:6f:17:ee:02:21:0c:56:80:e7:69:
                    f2:e7:f3:e4:c7:a3:a6:4c:61:5f:40:2e:b1:cb:19:
                    1c:d2:97:1e:86:b9:84:0b:70:7c:be:2b:7c:fd:8f:
                    d8:a2:c0:d6:22:6e:19:b2:17:d2:9e:f1:91:5c:e8:
                    29:11:71:f7:21:e4:90:ba:69:18:71:08:25:8c:64:
                    84:d2:1f:9d:54:b6:30:e0:ed:ae:63:d5:c9:5b:43:
                    6d:82:4d:04:c3:29:c2:41:e6:9d:c4:71:4d:60:10:
                    3f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:07:DF:84:0D:D6:6D:CD:EC:56:21:6F:20:64:9F:F5:A2:AF:9B:9B
            X509v3 Authority Key Identifier:
                keyid:73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:e3:90:82:70:49:c1:1f:4f:bb:d2:ad:32:2c:3e:00:5d:90:
         10:39:89:60:af:f3:a3:ee:63:57:4f:1e:44:62:3a:3e:cc:62:
         9c:18:ea:01:f2:1b:be:1d:34:86:74:bd:9f:00:dd:e2:e6:b9:
         f5:ad:8c:d5:e8:cb:38:73:a4:dc:ce:04:ea:af:18:52:94:bb:
         81:36:34:22:24:06:34:cc:71:5a:fb:61:14:4d:49:29:1e:9b:
         ec:af:89:e7:a0:95:7f:42:a4:94:b9:62:58:97:cf:0f:b3:56:
         98:28:7a:21:3d:01:26:c0:15:12:96:f2:06:70:ef:94:b1:ba:
         bf:2c:cc:f5:8e:60:33:4b:ba:96:f5:9b:ed:62:fa:af:f5:ec:
         39:8f:68:5f:cc:00:bb:2a:1a:a0:2a:d8:2b:4f:48:86:6d:64:
         97:70:cb:2d:e5:6f:2f:de:b2:bb:a4:c4:36:1c:1c:2c:2d:e7:
         c0:1a:47:2e:04:99:a4:f9:42:69:70:7a:c8:5b:f1:97:1e:8d:
         79:38:73:5b:5d:9a:83:48:f8:8a:27:60:b7:87:6a:ab:5c:e3:
         d2:82:5a:fb:fd:ae:23:39:b2:8e:e3:b4:5b:ef:6c:4b:90:8c:
         98:6a:91:99:52:82:76:96:b3:6b:71:f4:2e:16:ab:05:c3:aa:
         f0:fa:ad:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2sP3fc52aKTcLPl+snlq7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZTE1N2IyOTE4Y2FkY2E4YTVhOWZiYzY2ZTk3NzYwOGE2
ZGY1ZTEwHhcNMjUwNDI3MTAwMDMyWhcNMjUwNDI4MTAwMDMyWjAzMTEwLwYDVQQD
EygwMDA3ZGY4NDBkZDY2ZGNkZWM1NjIxNmYyMDY0OWZmNWEyYWY5YjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwZK9nfLN/QZWv1MoVhT7mch5e3S
HcGTV0bSjlBMhjXorozfNZgOo5Kuw1Cxm/+CdhMIkGtSJERh9me/H8HtEs3u9XhX
MVid4U08ppvjMo/fSTTK63uVleWLTTiAC5LfZC9EDsjt6tGs7e/y643VRJOD4mXU
TVmAayHKJMH4cRjVdeKxah5UAgcI62kD4VtPBY0Kih5WpiZCsW8X7gIhDFaA52ny
5/Pkx6OmTGFfQC6xyxkc0pcehrmEC3B8vit8/Y/YosDWIm4ZshfSnvGRXOgpEXH3
IeSQumkYcQgljGSE0h+dVLYw4O2uY9XJW0Ntgk0EwynCQeadxHFNYBA/2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAAH34QN1m3N7FYhbyBkn/Wir5ubMB8GA1UdIwQY
MBaAFHPhV7KRjK3KilqfvGbpd2CKbfXhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYy1GWHNwR01yY3FLV3AtOFp1bDNZSXB0OWVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9iYmNkNTMtYzRmOC00MjQ1LWJiOTAt
MDBhMTU0YjhlY2IxLzEvYy1GWHNwR01yY3FLV3AtOFp1bDNZSXB0OWVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9iYmNkNTMtYzRmOC00MjQ1LWJiOTAtMDBhMTU0YjhlY2Ix
LzEvYy1GWHNwR01yY3FLV3AtOFp1bDNZSXB0OWVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfOOQgnBJ
wR9Pu9KtMiw+AF2QEDmJYK/zo+5jV08eRGI6PsxinBjqAfIbvh00hnS9nwDd4ua5
9a2M1ejLOHOk3M4E6q8YUpS7gTY0IiQGNMxxWvthFE1JKR6b7K+J56CVf0KklLli
WJfPD7NWmCh6IT0BJsAVEpbyBnDvlLG6vyzM9Y5gM0u6lvWb7WL6r/XsOY9oX8wA
uyoaoCrYK09Ihm1kl3DLLeVvL96yu6TENhwcLC3nwBpHLgSZpPlCaXB6yFvxlx6N
eThzW12ag0j4iidgt4dqq1zj0oJa+/2uIzmyjuO0W+9sS5CMmGqRmVKCdpaza3H0
LharBcOq8PqtsA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 20:17:35 2025 by rpki-client