Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
File:                     oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft (raw, json)
Hash identifier:          adB7jsfgf//nN6ClT821EptzuXAYDHGUbB/yGIE48ss=
Subject key identifier:   73:06:E7:24:AF:20:B6:B5:33:B6:08:28:52:0F:4E:68:39:02:C9:6B
Authority key identifier: A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38
Certificate issuer:       /CN=a088b0547f09fe9224050d70a523da5bedbe0738
Certificate serial:       019689CA6498FE41ACA1E03E1DFA474C8412
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
Manifest number:          08F3
Signing time:             Thu 01 May 2025 03:01:04 +0000
Manifest this update:     Thu 01 May 2025 03:01:04 +0000
Manifest next update:     Fri 02 May 2025 03:01:04 +0000
Files and hashes:         1: H27SmDR8baZpuMXqTM3iDpRfuZQ.roa (hash: HRHfMmSbiheBl5EWJYTnfvHlbbvdFtOGz3m90LhYcYY=)
                          2: PttuSfjxa79MH7rLTOnjgReDQvw.roa (hash: AT0RYNQBGnwCZ5SCURqKkKKbeaLJOuOT7slKjRXHVFY=)
                          3: deFB5N1xgl-rTeswXd5-CqBWKVA.roa (hash: SlwmTaXJntPAIRyPGkCdiuNn6DwU7ntHQcI8wpRB4ws=)
                          4: oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl (hash: baCLl1Hn1G0+yPl/sXJgPKLj2qhLAa1xiz5UmZznI/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 03:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:89:ca:64:98:fe:41:ac:a1:e0:3e:1d:fa:47:4c:84:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a088b0547f09fe9224050d70a523da5bedbe0738
        Validity
            Not Before: May  1 03:01:04 2025 GMT
            Not After : May  2 03:01:04 2025 GMT
        Subject: CN=7306e724af20b6b533b60828520f4e683902c96b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b1:06:0e:d4:79:65:83:b6:fe:d5:be:d0:af:
                    b4:5b:47:d6:89:c8:25:a7:75:a2:12:58:72:f9:83:
                    70:15:75:07:61:96:b3:15:00:00:78:40:d2:4d:37:
                    0e:56:d8:31:50:19:a3:2e:a5:a4:52:4c:46:e1:bc:
                    c4:e2:3f:0b:03:f3:2d:68:88:1e:de:c1:2f:00:97:
                    76:09:ea:25:da:df:da:6e:84:42:1c:b2:26:aa:3f:
                    57:47:53:e1:f9:87:41:3a:61:c3:f7:e3:7f:f5:64:
                    60:91:4c:05:bb:b9:44:ef:a3:76:65:04:a3:cf:5b:
                    a1:56:be:a4:66:5e:51:e6:9b:19:31:80:16:50:87:
                    4d:13:35:7b:9d:40:04:6a:0a:a4:da:b0:32:cb:88:
                    9a:39:7c:e3:b2:d7:5b:3a:90:de:69:b5:0e:ec:24:
                    bd:42:4c:35:1d:62:ad:68:61:32:9f:cc:f2:b9:22:
                    e4:5f:b7:e0:7b:3b:12:cf:94:9a:10:d2:ae:d0:b7:
                    41:4f:95:e2:dd:cb:7d:ac:8a:e5:e4:42:98:7e:0a:
                    db:9a:39:75:da:4d:5d:e8:c8:42:0f:36:d1:c3:23:
                    e2:8a:56:d5:a8:37:b7:a7:65:ba:54:f4:58:bb:b8:
                    38:c8:2a:39:0c:43:90:19:67:16:19:58:f4:c7:96:
                    5c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:06:E7:24:AF:20:B6:B5:33:B6:08:28:52:0F:4E:68:39:02:C9:6B
            X509v3 Authority Key Identifier:
                keyid:A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:3e:58:65:4c:5e:d7:46:b9:4e:16:86:a8:74:47:d5:93:f9:
         05:91:6b:fb:a8:3f:95:ce:2c:e5:1b:98:99:da:90:5f:19:a8:
         0d:f2:a8:5d:6e:a7:c8:81:23:d7:8d:d5:fd:12:06:61:9b:09:
         2a:5c:dd:23:69:a7:e5:e4:4b:23:35:4b:df:38:e6:19:0e:1f:
         f9:eb:80:15:f9:fa:5b:29:e4:34:7d:cc:d7:eb:18:9a:21:1a:
         00:ce:82:b7:35:53:e8:88:02:2e:7c:60:70:98:d1:43:0d:44:
         23:21:69:96:19:91:3c:f5:47:e1:fd:50:3c:ef:7e:6e:0f:d7:
         56:42:2a:53:41:1f:bf:de:8d:4d:e1:ed:2e:c0:81:93:c2:db:
         e2:ce:9d:33:b0:fa:21:d5:99:52:3a:be:46:0a:02:df:aa:b7:
         b0:29:38:c2:64:98:12:ef:bb:75:65:48:21:b2:54:a6:5c:e4:
         58:07:98:48:43:87:db:d7:3c:ba:00:65:25:54:cf:b3:05:ef:
         85:d3:65:7b:cf:95:61:8f:76:fa:5b:8a:bd:e6:2a:87:51:7e:
         c6:d6:8b:b5:77:6e:95:cb:50:e1:e6:a6:bd:eb:eb:56:e1:60:
         aa:6c:fd:35:b3:d3:c8:78:75:ce:4c:81:97:5b:dc:bc:9f:1f:
         78:bd:b4:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaJymSY/kGsoeA+HfpHTIQSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwODhiMDU0N2YwOWZlOTIyNDA1MGQ3MGE1MjNkYTViZWRi
ZTA3MzgwHhcNMjUwNTAxMDMwMTA0WhcNMjUwNTAyMDMwMTA0WjAzMTEwLwYDVQQD
Eyg3MzA2ZTcyNGFmMjBiNmI1MzNiNjA4Mjg1MjBmNGU2ODM5MDJjOTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7EGDtR5ZYO2/tW+0K+0W0fWicgl
p3WiElhy+YNwFXUHYZazFQAAeEDSTTcOVtgxUBmjLqWkUkxG4bzE4j8LA/MtaIge
3sEvAJd2Ceol2t/aboRCHLImqj9XR1Ph+YdBOmHD9+N/9WRgkUwFu7lE76N2ZQSj
z1uhVr6kZl5R5psZMYAWUIdNEzV7nUAEagqk2rAyy4iaOXzjstdbOpDeabUO7CS9
Qkw1HWKtaGEyn8zyuSLkX7fgezsSz5SaENKu0LdBT5Xi3ct9rIrl5EKYfgrbmjl1
2k1d6MhCDzbRwyPiilbVqDe3p2W6VPRYu7g4yCo5DEOQGWcWGVj0x5Zc9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHMG5ySvILa1M7YIKFIPTmg5AslrMB8GA1UdIwQY
MBaAFKCIsFR/Cf6SJAUNcKUj2lvtvgc4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0lpd1ZIOEpfcElrQlExd3BTUGFXLTItQnpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9kOTA2MzUtYjI4Mi00ZTg2LTllNTMt
ZGY4MmZhODk3MzI2LzEvb0lpd1ZIOEpfcElrQlExd3BTUGFXLTItQnpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9kOTA2MzUtYjI4Mi00ZTg2LTllNTMtZGY4MmZhODk3MzI2
LzEvb0lpd1ZIOEpfcElrQlExd3BTUGFXLTItQnpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJj5YZUxe
10a5ThaGqHRH1ZP5BZFr+6g/lc4s5RuYmdqQXxmoDfKoXW6nyIEj143V/RIGYZsJ
KlzdI2mn5eRLIzVL3zjmGQ4f+euAFfn6WynkNH3M1+sYmiEaAM6CtzVT6IgCLnxg
cJjRQw1EIyFplhmRPPVH4f1QPO9+bg/XVkIqU0Efv96NTeHtLsCBk8Lb4s6dM7D6
IdWZUjq+RgoC36q3sCk4wmSYEu+7dWVIIbJUplzkWAeYSEOH29c8ugBlJVTPswXv
hdNle8+VYY92+luKveYqh1F+xtaLtXdulctQ4eamvevrVuFgqmz9NbPTyHh1zkyB
l1vcvJ8feL20hA==
-----END CERTIFICATE-----
Generated at Thu May 1 10:08:03 2025 by rpki-client