Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft
File:                     yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft (raw, json)
Hash identifier:          QtUhDMMKx9oiKNn/iYxGf6DGmsSQWS4j1hbw3iWDBmY=
Subject key identifier:   EC:01:BF:87:36:97:9D:D5:02:64:FB:F1:60:A0:D5:A9:81:1A:72:AF
Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
Certificate issuer:       /CN=c8d5e37178d8524c72660a1d796165999e586622
Certificate serial:       01967454C24B6984DFFBFC9F45334217799C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft
Manifest number:          125B
Signing time:             Sat 26 Apr 2025 23:00:33 +0000
Manifest this update:     Sat 26 Apr 2025 23:00:33 +0000
Manifest next update:     Sun 27 Apr 2025 23:00:33 +0000
Files and hashes:         1: 0EaNrCUku3zmYAlQDUDzn6v2BII.roa (hash: ftzSd+m3WbKh9woBexxQyHXNGGLbencgrX80eFZ32Eg=)
                          2: 1-0Y1K8-7iyhXdhoTYDD_MThh3vE.roa (hash: UqK1yASRyJvFv5c4mwnLEN1kbb6bTTjQR+7JRYc/30A=)
                          3: MjdKbFiEyBYefwEqDa5k32efH84.roa (hash: yMrvEUe4dfvDGnvXjb6T/gK+z8B3+E50n+nxlmXb8j8=)
                          4: bAetBQfQtIL8HDlRLQtzqRXsmJw.roa (hash: KlLcSQqNQG0Ri5k3fpJMz79RuQ+R0fvjpj0v09+VZkU=)
                          5: wUKEEBhcd6Wo2EvvgdKvd83E2yk.roa (hash: d7ZYvsLRn0MHrjuGbJZLvgzBXdEm7D3EnDGgZUWMXjk=)
                          6: yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl (hash: 55Jz5juGDIbBMCN063i2YOaXJq6ExU4V1bY6kar/oYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:54:c2:4b:69:84:df:fb:fc:9f:45:33:42:17:79:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622
        Validity
            Not Before: Apr 26 23:00:33 2025 GMT
            Not After : Apr 27 23:00:33 2025 GMT
        Subject: CN=ec01bf8736979dd50264fbf160a0d5a9811a72af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3d:cc:01:7f:ec:5f:6a:48:c7:93:ef:5d:57:
                    1b:c4:39:eb:38:72:93:be:c8:69:e8:e5:5e:47:a9:
                    c6:85:88:c6:56:48:09:35:a4:77:e3:c1:5b:b3:ad:
                    27:d0:f1:0b:d8:8b:de:f9:c5:2a:c8:3e:20:57:79:
                    0a:3e:4e:ab:5d:a8:58:5c:44:1b:3b:38:56:6a:0a:
                    53:2c:4e:99:86:7e:5e:3a:21:0c:e5:a3:3d:09:73:
                    a3:81:6f:46:cb:72:88:42:7b:53:12:3f:30:52:8d:
                    d9:70:cb:85:3b:6c:39:1f:06:1c:18:b9:52:4a:d9:
                    fe:ec:43:90:a4:c6:8f:8e:bc:d9:21:d2:4e:f3:01:
                    b9:51:99:78:28:81:69:a0:c2:9b:29:57:52:06:b0:
                    4e:37:70:df:19:b9:9c:b7:15:e8:5d:11:44:52:92:
                    f6:7c:e0:9e:05:de:43:e8:09:8b:e5:01:48:20:fe:
                    a5:b7:6e:21:69:5a:39:57:8b:2c:f9:4e:00:f3:eb:
                    99:38:07:ee:b9:21:3b:32:49:f9:a2:71:64:77:65:
                    a5:38:f1:b3:49:7c:c5:73:ed:27:a5:20:35:8c:fb:
                    94:03:b8:39:e9:61:ae:50:77:5b:3f:e0:6f:d8:97:
                    c0:21:a2:19:1b:13:ca:89:1a:9e:7b:6d:be:08:5b:
                    f8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:01:BF:87:36:97:9D:D5:02:64:FB:F1:60:A0:D5:A9:81:1A:72:AF
            X509v3 Authority Key Identifier:
                keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:c0:b5:ab:f0:b0:eb:6a:c0:a0:1e:63:33:00:9f:54:0e:26:
         1c:fa:b1:1b:b5:d2:b8:35:3f:62:fc:97:e1:54:9e:22:78:a2:
         3e:7c:2c:35:ce:4d:03:9f:9a:78:a6:1c:26:4c:5a:71:3e:8c:
         c4:59:68:8e:f8:cb:dd:d8:36:a1:34:bb:64:23:aa:22:b7:88:
         c8:b0:ff:7a:65:bd:e5:ad:1d:ad:4d:80:13:c8:59:8d:f9:91:
         3b:ab:5e:ca:c0:80:45:85:41:f8:ea:24:ff:bb:ac:e2:4d:e0:
         8a:5f:34:a3:0b:43:da:c6:9b:86:d9:4b:0e:75:b5:9a:92:9e:
         8f:e9:0a:11:ad:e1:96:9f:19:cf:13:63:17:0c:13:2a:31:c9:
         b3:52:01:5e:e7:48:60:c8:d9:c1:03:69:b0:67:f1:9f:15:9b:
         a6:44:f0:2b:d0:91:05:47:e3:39:c3:dc:aa:ab:ef:81:83:e1:
         8e:92:ee:d8:18:4c:81:c1:89:9e:a5:7d:2a:06:ee:ed:1d:23:
         4a:40:97:7a:17:fd:7f:f8:54:77:1f:35:e4:96:8a:eb:d5:50:
         0b:dc:ac:f1:d9:6b:b8:34:25:07:74:dc:24:f5:92:41:fd:6b:
         11:d2:10:08:73:10:e6:8b:bb:26:7c:9b:ad:d9:79:b1:71:8f:
         89:72:81:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0VMJLaYTf+/yfRTNCF3mcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZDVlMzcxNzhkODUyNGM3MjY2MGExZDc5NjE2NTk5OWU1
ODY2MjIwHhcNMjUwNDI2MjMwMDMzWhcNMjUwNDI3MjMwMDMzWjAzMTEwLwYDVQQD
EyhlYzAxYmY4NzM2OTc5ZGQ1MDI2NGZiZjE2MGEwZDVhOTgxMWE3MmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsD3MAX/sX2pIx5PvXVcbxDnrOHKT
vshp6OVeR6nGhYjGVkgJNaR348Fbs60n0PEL2Ive+cUqyD4gV3kKPk6rXahYXEQb
OzhWagpTLE6Zhn5eOiEM5aM9CXOjgW9Gy3KIQntTEj8wUo3ZcMuFO2w5HwYcGLlS
Stn+7EOQpMaPjrzZIdJO8wG5UZl4KIFpoMKbKVdSBrBON3DfGbmctxXoXRFEUpL2
fOCeBd5D6AmL5QFIIP6lt24haVo5V4ss+U4A8+uZOAfuuSE7Mkn5onFkd2WlOPGz
SXzFc+0npSA1jPuUA7g56WGuUHdbP+Bv2JfAIaIZGxPKiRqee22+CFv4AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwBv4c2l53VAmT78WCg1amBGnKvMB8GA1UdIwQY
MBaAFMjV43F42FJMcmYKHXlhZZmeWGYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU5YamNYallVa3h5WmdvZGVXRmxtWjVZWmlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9iNTRjYTMtNzNkNS00OTg0LTg3ODIt
OWUwYWVkMmZiOGVjLzEveU5YamNYallVa3h5WmdvZGVXRmxtWjVZWmlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9iNTRjYTMtNzNkNS00OTg0LTg3ODItOWUwYWVkMmZiOGVj
LzEveU5YamNYallVa3h5WmdvZGVXRmxtWjVZWmlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL8C1q/Cw
62rAoB5jMwCfVA4mHPqxG7XSuDU/YvyX4VSeIniiPnwsNc5NA5+aeKYcJkxacT6M
xFlojvjL3dg2oTS7ZCOqIreIyLD/emW95a0drU2AE8hZjfmRO6teysCARYVB+Ook
/7us4k3gil80owtD2sabhtlLDnW1mpKej+kKEa3hlp8ZzxNjFwwTKjHJs1IBXudI
YMjZwQNpsGfxnxWbpkTwK9CRBUfjOcPcqqvvgYPhjpLu2BhMgcGJnqV9Kgbu7R0j
SkCXehf9f/hUdx815JaK69VQC9ys8dlruDQlB3TcJPWSQf1rEdIQCHMQ5ou7Jnyb
rdl5sXGPiXKBUw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:02:01 2025 by rpki-client