Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
File:                     1-yNrIT1WST87B35rQfQuTz34zc4.mft (raw, json)
Hash identifier:          W/JEXt5aHRPf/zKOE74Tb0lu9FtUnN7Dmn8MoaygN0g=
Subject key identifier:   6C:E0:72:EE:D5:F8:E0:60:99:A9:A8:04:EC:82:4A:D2:4F:99:67:7A
Authority key identifier: FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE
Certificate issuer:       /CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
Certificate serial:       0196729D5004D6CE70200BB5453262C874E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
Manifest number:          0F9D
Signing time:             Sat 26 Apr 2025 15:00:34 +0000
Manifest this update:     Sat 26 Apr 2025 15:00:34 +0000
Manifest next update:     Sun 27 Apr 2025 15:00:34 +0000
Files and hashes:         1: 1-yNrIT1WST87B35rQfQuTz34zc4.crl (hash: OF3k+FcaJ8RiKz96fEuxIbzDdaWEDihngU0lbIDN3sU=)
                          2: 3wVT7ByFOgSRbNZYozrG_4k5Lf4.roa (hash: nWjMCvThnl/TirQoWGzb1aGz9gls9gsUGL9UH7UK99U=)
                          3: b4xGcgRXbZTm92PK-63-hJMR7i4.roa (hash: NbuD2qXzwa42L7iqCKP9Yf7x1Mko0nN5lZkpDNpT+YA=)
                          4: eBGWGs2DIykcACC-Vm8Am4_ZkLo.roa (hash: M61tw2NaptcB9SBNpEgNYdj/+3K2KnHR73k/O/VkAl4=)
                          5: qX47TfZ7U-VCDd8K_2PnZDbaW7U.roa (hash: AWzPY4ofax8Hh97c3nb596ilyxymid/EIQcHBQfpPr4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:9d:50:04:d6:ce:70:20:0b:b5:45:32:62:c8:74:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
        Validity
            Not Before: Apr 26 15:00:34 2025 GMT
            Not After : Apr 27 15:00:34 2025 GMT
        Subject: CN=6ce072eed5f8e06099a9a804ec824ad24f99677a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e9:22:80:d1:a6:bd:70:3c:08:f3:cf:b5:9f:
                    49:e2:0d:33:32:ee:a3:60:3c:72:c4:fa:fe:73:40:
                    64:ab:2d:8a:ae:e4:84:65:9c:fa:c6:92:48:30:8a:
                    26:49:7f:10:78:dd:4b:a8:3f:f7:f4:f8:0b:c2:5e:
                    fc:fd:c7:ef:f2:f8:d6:f3:74:22:69:7a:44:a9:69:
                    4c:88:e6:16:11:6a:08:49:4d:d1:d1:e9:9a:c5:e2:
                    90:0b:fa:92:9c:d2:87:0c:3e:ee:d5:bc:99:40:3c:
                    3e:b1:d1:df:ff:90:69:6d:b8:1e:1a:41:b8:61:84:
                    a9:9f:6a:a7:79:94:53:19:e5:72:08:59:b2:36:3a:
                    de:c3:b7:71:3e:e0:a8:e7:bf:ac:2b:ef:16:ad:47:
                    3a:4c:8e:86:b2:cc:de:c4:c3:71:34:e1:d3:95:06:
                    4d:2d:1c:2f:48:c1:ff:5a:14:ae:84:83:46:fc:10:
                    c6:3d:67:5a:ba:3b:bf:f3:16:4a:b2:ac:6f:c2:0f:
                    e3:4f:d5:32:b9:c2:93:50:36:f9:53:55:73:29:f1:
                    8e:2c:38:e9:32:fb:4f:0d:44:7d:56:bc:04:b0:cb:
                    77:9e:67:d9:08:7f:e5:aa:12:9d:f3:5c:f9:fe:61:
                    1d:f0:ef:5f:f0:b0:87:da:95:fe:8a:eb:1a:ec:9c:
                    76:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E0:72:EE:D5:F8:E0:60:99:A9:A8:04:EC:82:4A:D2:4F:99:67:7A
            X509v3 Authority Key Identifier:
                keyid:FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:a8:e8:8d:48:ac:a8:5d:03:25:3b:88:48:c5:fe:02:d7:63:
         a0:df:ac:65:4a:53:c3:da:24:67:53:52:26:ee:cd:62:b2:f7:
         db:4e:64:7b:53:f1:a9:93:a0:58:67:44:13:12:76:a2:e2:e6:
         0b:19:34:bf:30:9d:74:50:a8:d8:e8:6e:db:70:05:05:40:2f:
         04:d1:73:10:ad:c5:1e:e7:46:c8:f2:ce:96:36:05:c0:b3:c2:
         4c:9c:9c:21:c3:43:b1:ea:17:bc:70:07:45:a3:3a:7a:83:0a:
         16:e9:1e:af:11:0a:94:67:ea:4b:e8:af:93:78:12:85:ff:d5:
         ff:be:89:8c:36:99:db:10:18:b4:49:ca:4d:0e:e1:08:7a:eb:
         5a:70:e1:c0:6d:65:3c:9a:15:44:c7:bb:2d:bf:f4:b6:b2:92:
         3e:11:d7:7e:5f:52:03:7d:8f:55:df:89:0e:1b:36:f8:17:17:
         6b:69:a8:fa:9d:ff:cd:5c:36:b8:c4:73:15:96:1d:bb:3a:49:
         3c:7e:d6:26:40:24:50:c0:a3:bd:ec:6e:33:a8:40:c7:34:e6:
         fd:35:51:20:32:ca:eb:b6:7e:07:fc:c1:60:70:94:69:6d:1a:
         42:d1:17:a7:50:0c:4d:ff:69:4b:93:32:9c:55:d5:f4:6d:f2:
         3f:96:ab:66
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZZynVAE1s5wIAu1RTJiyHTnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMjM2YjIxM2Q1NjQ5M2YzYjA3N2U2YjQxZjQyZTRmM2Rm
OGNkY2UwHhcNMjUwNDI2MTUwMDM0WhcNMjUwNDI3MTUwMDM0WjAzMTEwLwYDVQQD
Eyg2Y2UwNzJlZWQ1ZjhlMDYwOTlhOWE4MDRlYzgyNGFkMjRmOTk2NzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+kigNGmvXA8CPPPtZ9J4g0zMu6j
YDxyxPr+c0Bkqy2KruSEZZz6xpJIMIomSX8QeN1LqD/39PgLwl78/cfv8vjW83Qi
aXpEqWlMiOYWEWoISU3R0emaxeKQC/qSnNKHDD7u1byZQDw+sdHf/5BpbbgeGkG4
YYSpn2qneZRTGeVyCFmyNjrew7dxPuCo57+sK+8WrUc6TI6GsszexMNxNOHTlQZN
LRwvSMH/WhSuhING/BDGPWdauju/8xZKsqxvwg/jT9UyucKTUDb5U1VzKfGOLDjp
MvtPDUR9VrwEsMt3nmfZCH/lqhKd81z5/mEd8O9f8LCH2pX+iusa7Jx2vwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFGzgcu7V+OBgmamoBOyCStJPmWd6MB8GA1UdIwQY
MBaAFPsjayE9Vkk/Owd+a0H0Lk89+M3OMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS15TnJJVDFXU1Q4N0IzNXJRZlF1VHozNHpjNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUvMjBmNGFjLTgwZDktNDBlMi1hOWU2
LTFjODhlZWJlYjI5My8xLzEteU5ySVQxV1NUODdCMzVyUWZRdVR6MzR6YzQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzg1LzIwZjRhYy04MGQ5LTQwZTItYTllNi0xYzg4ZWViZWIy
OTMvMS8xLXlOcklUMVdTVDg3QjM1clFmUXVUejM0emM0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqqjo
jUisqF0DJTuISMX+AtdjoN+sZUpTw9okZ1NSJu7NYrL3205ke1PxqZOgWGdEExJ2
ouLmCxk0vzCddFCo2Ohu23AFBUAvBNFzEK3FHudGyPLOljYFwLPCTJycIcNDseoX
vHAHRaM6eoMKFukerxEKlGfqS+ivk3gShf/V/76JjDaZ2xAYtEnKTQ7hCHrrWnDh
wG1lPJoVRMe7Lb/0trKSPhHXfl9SA32PVd+JDhs2+BcXa2mo+p3/zVw2uMRzFZYd
uzpJPH7WJkAkUMCjvexuM6hAxzTm/TVRIDLK67Z+B/zBYHCUaW0aQtEXp1AMTf9p
S5MynFXV9G3yP5arZg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:08:22 2025 by rpki-client