Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.mft
File:                     3ywVz3L824WWt8ZImxWmtyDBTrU.mft (raw, json)
Hash identifier:          jrs2KifZ+9G+4RMzMVpxkNvJwtuW/0xvVkdqL0oQ/PU=
Subject key identifier:   D2:17:07:02:3F:E1:D4:F6:58:A8:65:D4:F4:88:90:84:56:3B:29:3A
Authority key identifier: DF:2C:15:CF:72:FC:DB:85:96:B7:C6:48:9B:15:A6:B7:20:C1:4E:B5
Certificate issuer:       /CN=df2c15cf72fcdb8596b7c6489b15a6b720c14eb5
Certificate serial:       019683C77EA3ABA1B00C758912B1F30FE22E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ywVz3L824WWt8ZImxWmtyDBTrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.mft
Manifest number:          03C7
Signing time:             Tue 29 Apr 2025 23:00:11 +0000
Manifest this update:     Tue 29 Apr 2025 23:00:11 +0000
Manifest next update:     Wed 30 Apr 2025 23:00:11 +0000
Files and hashes:         1: 1-6aebUsjGigWCkXwDxAfu7JbH3A.roa (hash: Hduo/JWxIEmIyeyIi7MQm4M+Xp8ECRaddxhqWZRPV6c=)
                          2: 3ywVz3L824WWt8ZImxWmtyDBTrU.crl (hash: sA+Mwn5ORIRwSbBIekEJKw9mcOjrBFNpvyh7OctXDXI=)
                          3: LW11wESbT2hocwdKYSbs6P71AKA.roa (hash: GuYU5G46KcnUJ43J5q6WCf+WZxw+qQFx0MBht9uI9W0=)
                          4: wGmLy9fCHGSdb1IR1hi3jtBm_nU.roa (hash: EtrSnLCCgz0LzD/1buNZsptNBEqMbZQGIw+M8iextIM=)
                          5: zuXVABH3iQHva6C3x_7o7gzuXEY.roa (hash: oBzqdMlIWS4N+t9dxQHDBXhwNKLOQHnlyrSOj0n4CXA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ywVz3L824WWt8ZImxWmtyDBTrU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 23:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:83:c7:7e:a3:ab:a1:b0:0c:75:89:12:b1:f3:0f:e2:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df2c15cf72fcdb8596b7c6489b15a6b720c14eb5
        Validity
            Not Before: Apr 29 23:00:11 2025 GMT
            Not After : Apr 30 23:00:11 2025 GMT
        Subject: CN=d21707023fe1d4f658a865d4f4889084563b293a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f9:43:88:c6:6a:53:0a:87:b2:23:77:34:36:
                    f7:1d:76:7f:37:23:65:31:55:6c:80:7d:1c:0b:4f:
                    db:52:9d:d1:18:a0:43:bc:95:6d:a8:43:51:68:ca:
                    bb:60:77:b1:30:7e:31:99:0b:5e:11:86:a3:ec:22:
                    5c:ba:09:45:53:28:51:e4:1f:b0:ad:b6:bd:de:28:
                    7b:1c:a6:67:60:be:9a:ae:ed:11:3d:55:c4:cd:39:
                    7f:52:3e:97:8b:4d:6e:93:99:f9:2e:99:8a:01:4c:
                    a8:2e:eb:0a:35:bf:90:ab:67:3d:85:b5:bc:0f:d5:
                    5e:c8:af:0a:c7:11:0b:51:16:c4:18:aa:11:f3:19:
                    58:d7:21:d7:30:1f:06:71:67:35:1a:8d:66:57:fc:
                    dd:de:2a:40:4e:9e:57:22:94:4a:19:8a:4b:f4:68:
                    ea:2f:a5:4d:43:b9:23:56:be:56:0e:f8:56:0d:1e:
                    d8:aa:3d:56:74:8a:b9:69:c3:37:5c:41:d0:df:4f:
                    46:91:ab:c5:ee:36:c2:73:9b:d6:12:c5:30:e1:0d:
                    98:2e:13:f3:5e:5f:2a:55:25:03:0a:09:7f:11:e2:
                    fd:28:06:6f:c9:60:eb:79:79:e7:ca:80:60:d6:31:
                    89:9d:77:43:cf:0b:94:06:ea:96:09:a6:05:47:2b:
                    32:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:17:07:02:3F:E1:D4:F6:58:A8:65:D4:F4:88:90:84:56:3B:29:3A
            X509v3 Authority Key Identifier:
                keyid:DF:2C:15:CF:72:FC:DB:85:96:B7:C6:48:9B:15:A6:B7:20:C1:4E:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ywVz3L824WWt8ZImxWmtyDBTrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:0b:30:7e:b1:ee:98:ef:d0:b8:0d:89:c7:99:8a:79:cc:63:
         d1:65:ec:90:82:8c:fa:45:f4:7a:43:71:7f:0d:76:1e:df:a3:
         29:b4:68:c1:57:e4:c6:9c:32:91:1b:bd:cf:dc:9b:77:b7:47:
         c3:a9:c4:e9:45:28:86:e6:1a:31:16:12:cd:5b:17:fe:4c:09:
         c8:cc:e8:f8:23:5f:67:de:e5:45:04:76:65:f7:5c:7a:b1:3d:
         56:08:ab:1a:6c:36:9f:8d:cb:1c:26:79:f5:c5:04:6a:85:45:
         70:11:f2:1c:39:44:f8:fd:30:c6:8c:2e:f2:8b:12:42:87:0c:
         a4:0a:bf:fb:4c:25:e7:89:ba:c3:3c:72:24:e6:d2:56:58:24:
         2d:5c:59:8b:1c:8f:37:c5:b3:e4:bf:35:82:9c:06:f8:19:36:
         46:fc:af:d4:05:05:b6:6e:d5:71:03:32:0b:42:89:44:16:1e:
         78:98:9a:54:88:f4:4d:28:03:06:c2:18:13:c9:e1:d8:4c:08:
         fc:9b:2f:bc:a9:49:15:08:e0:c8:39:12:a5:8f:c8:dd:61:4d:
         8c:38:86:9b:7f:3f:11:ec:ac:f2:9e:27:44:40:7a:c7:1b:89:
         15:4e:27:08:40:3b:39:7a:22:8a:89:a6:ea:4d:46:72:e3:45:
         cf:01:cf:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDx36jq6GwDHWJErHzD+IuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMmMxNWNmNzJmY2RiODU5NmI3YzY0ODliMTVhNmI3MjBj
MTRlYjUwHhcNMjUwNDI5MjMwMDExWhcNMjUwNDMwMjMwMDExWjAzMTEwLwYDVQQD
EyhkMjE3MDcwMjNmZTFkNGY2NThhODY1ZDRmNDg4OTA4NDU2M2IyOTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/lDiMZqUwqHsiN3NDb3HXZ/NyNl
MVVsgH0cC0/bUp3RGKBDvJVtqENRaMq7YHexMH4xmQteEYaj7CJcuglFUyhR5B+w
rba93ih7HKZnYL6aru0RPVXEzTl/Uj6Xi01uk5n5LpmKAUyoLusKNb+Qq2c9hbW8
D9VeyK8KxxELURbEGKoR8xlY1yHXMB8GcWc1Go1mV/zd3ipATp5XIpRKGYpL9Gjq
L6VNQ7kjVr5WDvhWDR7Yqj1WdIq5acM3XEHQ309GkavF7jbCc5vWEsUw4Q2YLhPz
Xl8qVSUDCgl/EeL9KAZvyWDreXnnyoBg1jGJnXdDzwuUBuqWCaYFRysyrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNIXBwI/4dT2WKhl1PSIkIRWOyk6MB8GA1UdIwQY
MBaAFN8sFc9y/NuFlrfGSJsVprcgwU61MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3l3VnozTDgyNFdXdDhaSW14V210eURCVHJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS85Y2ZlYTEtZDgyYS00NzU1LTgxMGUt
ZjE4NTNkMTBlNjEwLzEvM3l3VnozTDgyNFdXdDhaSW14V210eURCVHJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS85Y2ZlYTEtZDgyYS00NzU1LTgxMGUtZjE4NTNkMTBlNjEw
LzEvM3l3VnozTDgyNFdXdDhaSW14V210eURCVHJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQAswfrHu
mO/QuA2Jx5mKecxj0WXskIKM+kX0ekNxfw12Ht+jKbRowVfkxpwykRu9z9ybd7dH
w6nE6UUohuYaMRYSzVsX/kwJyMzo+CNfZ97lRQR2ZfdcerE9VgirGmw2n43LHCZ5
9cUEaoVFcBHyHDlE+P0wxowu8osSQocMpAq/+0wl54m6wzxyJObSVlgkLVxZixyP
N8Wz5L81gpwG+Bk2Rvyv1AUFtm7VcQMyC0KJRBYeeJiaVIj0TSgDBsIYE8nh2EwI
/JsvvKlJFQjgyDkSpY/I3WFNjDiGm38/Eeys8p4nREB6xxuJFU4nCEA7OXoiiomm
6k1GcuNFzwHPkA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 02:43:59 2025 by rpki-client