Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
File:                     I399sDMxTEc82hlODfefHDddo_Q.mft (raw, json)
Hash identifier:          r+hqfD3HpKjaAyh8SaGiLf/eJAd8ve2Ar+TkmqF48ns=
Subject key identifier:   FD:A5:B1:18:79:EC:DB:BC:68:F1:DB:65:8F:07:A3:90:DA:D4:EA:A5
Authority key identifier: 23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
Certificate issuer:       /CN=237f7db033314c473cda194e0df79f1c375da3f4
Certificate serial:       01967454AFC67AD973AE09280CB9AE722860
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
Manifest number:          1533
Signing time:             Sat 26 Apr 2025 23:00:29 +0000
Manifest this update:     Sat 26 Apr 2025 23:00:29 +0000
Manifest next update:     Sun 27 Apr 2025 23:00:29 +0000
Files and hashes:         1: 1-Bi08UyF5kDlTfAFEBLTv3vJUyE.roa (hash: sX+xxidCxJKw0arEwxAVgO2x+NsuL6KJIlJ1Hn044sM=)
                          2: I399sDMxTEc82hlODfefHDddo_Q.crl (hash: e95wo3LNCzgIyltFDinfbGInQgW2qHEOACAUUXWQAF8=)
                          3: VgCSXxbwzehn2ctSfBXyaKDQ0Qk.roa (hash: 6Cl3czJ3E1ejtDJ1h93PG7gjPFWMjRN0AsAbI/7uYt4=)
                          4: arYUP1gbgyJFh2KnJse2NHTC8nY.roa (hash: gMvEEEnqx+cQ6kaNmIe6f/glsXRGqS/Z0CsHnGPR7YI=)
                          5: eVw30aYw8PRhfFZw4dMd0Whk59A.roa (hash: JkDjfjPCyMxcq4MYYOfAPVOc6bE+PI6e43zkk8H6tQ0=)
                          6: shquK-USeN_EkxoNGdS2ZgkNKE0.roa (hash: BzVyA8GUWdfG25Lls/AIfXgaXvL4LtidvyHSI6ihPwo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:54:af:c6:7a:d9:73:ae:09:28:0c:b9:ae:72:28:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237f7db033314c473cda194e0df79f1c375da3f4
        Validity
            Not Before: Apr 26 23:00:29 2025 GMT
            Not After : Apr 27 23:00:29 2025 GMT
        Subject: CN=fda5b11879ecdbbc68f1db658f07a390dad4eaa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6f:d8:ba:73:bf:08:ae:ca:f6:d3:fb:71:c9:
                    08:7e:4e:20:76:09:10:4e:0e:df:33:a6:e5:44:25:
                    8a:22:0f:68:29:05:a9:fb:6b:c0:47:89:44:e6:c5:
                    34:2b:fc:cc:25:9a:94:a3:e6:ea:5a:37:d6:fe:c8:
                    a5:8a:6a:82:ca:ef:1e:ee:87:82:6b:a4:83:85:74:
                    52:67:22:01:fc:63:7a:b8:a8:1f:8d:90:18:ce:9e:
                    5e:63:d5:34:c2:fd:b2:2b:3e:da:a4:98:ec:9d:99:
                    7d:d9:66:2c:e0:c0:9c:36:11:fb:c1:bf:e2:a2:40:
                    2b:65:c3:fc:99:cc:8d:64:92:a4:d3:32:97:f3:e6:
                    08:24:f0:06:ba:7c:c6:e6:cb:e0:38:9a:4b:46:9e:
                    09:51:c4:a6:b5:e9:8c:e4:6a:cd:de:84:58:26:9e:
                    76:e1:c0:92:38:12:40:54:c0:ca:db:ac:ed:d7:3a:
                    30:d9:4e:e7:2d:be:b4:71:97:9f:a9:e9:65:d9:25:
                    05:6e:06:da:ea:65:19:ba:51:bf:b0:b3:6c:27:db:
                    0a:77:0c:33:42:ad:5e:a2:e9:48:9e:c3:29:f0:d3:
                    46:ca:f8:20:15:07:8f:4c:2a:45:10:f3:fe:b2:47:
                    13:1c:86:a1:e1:bc:02:91:b8:a4:e6:24:e5:9e:12:
                    f5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A5:B1:18:79:EC:DB:BC:68:F1:DB:65:8F:07:A3:90:DA:D4:EA:A5
            X509v3 Authority Key Identifier:
                keyid:23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:e9:2a:6e:7e:05:b8:a9:91:98:35:60:a2:ce:66:99:f5:2e:
         83:43:27:d8:e9:7e:d6:4b:17:11:28:76:68:cf:fe:cc:ec:2c:
         ff:76:72:c6:01:8b:85:0b:4c:2f:6e:8f:35:fd:c0:59:26:fc:
         63:26:f5:37:4a:6b:80:3d:18:10:3f:e8:1e:16:7c:b4:88:c2:
         a3:5f:de:bc:ec:2d:77:0d:d6:80:ef:2e:26:ec:27:18:6e:88:
         ef:1e:df:8d:01:b9:07:cc:f5:64:33:d8:88:87:1e:bc:c9:f9:
         d8:4a:1e:52:f9:ad:4a:cf:7a:f5:a3:16:c5:9d:fd:04:50:72:
         38:0f:72:16:92:25:23:04:8f:e3:1d:9c:36:a7:b5:a1:83:17:
         cb:47:84:8c:39:7a:e1:19:7f:9e:65:d5:fe:d7:28:b2:d1:f6:
         f6:83:60:f5:16:a4:c4:23:2a:42:3b:c7:09:2c:a3:59:67:62:
         4a:94:87:3e:0b:f5:70:af:45:02:0b:df:75:5a:35:55:a0:67:
         5d:5d:36:a2:65:69:34:ad:da:c2:45:cf:8a:22:e4:5b:49:42:
         d6:44:a6:f2:65:af:a2:f6:d9:59:a8:5e:e3:30:48:67:95:35:
         6b:b3:ee:d5:1e:a9:35:1b:a3:3c:d0:9e:28:74:64:9d:45:f2:
         52:28:5b:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0VK/GetlzrgkoDLmucihgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzN2Y3ZGIwMzMzMTRjNDczY2RhMTk0ZTBkZjc5ZjFjMzc1
ZGEzZjQwHhcNMjUwNDI2MjMwMDI5WhcNMjUwNDI3MjMwMDI5WjAzMTEwLwYDVQQD
EyhmZGE1YjExODc5ZWNkYmJjNjhmMWRiNjU4ZjA3YTM5MGRhZDRlYWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvm/YunO/CK7K9tP7cckIfk4gdgkQ
Tg7fM6blRCWKIg9oKQWp+2vAR4lE5sU0K/zMJZqUo+bqWjfW/silimqCyu8e7oeC
a6SDhXRSZyIB/GN6uKgfjZAYzp5eY9U0wv2yKz7apJjsnZl92WYs4MCcNhH7wb/i
okArZcP8mcyNZJKk0zKX8+YIJPAGunzG5svgOJpLRp4JUcSmtemM5GrN3oRYJp52
4cCSOBJAVMDK26zt1zow2U7nLb60cZefqell2SUFbgba6mUZulG/sLNsJ9sKdwwz
Qq1eoulInsMp8NNGyvggFQePTCpFEPP+skcTHIah4bwCkbik5iTlnhL11wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP2lsRh57Nu8aPHbZY8Ho5Da1OqlMB8GA1UdIwQY
MBaAFCN/fbAzMUxHPNoZTg33nxw3XaP0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTM5OXNETXhURWM4MmhsT0RmZWZIRGRkb19RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9lZWY1NTctMGUxMC00MGNlLWE0OGYt
ZWUwNjAzOTQ5ZjkzLzEvSTM5OXNETXhURWM4MmhsT0RmZWZIRGRkb19RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9lZWY1NTctMGUxMC00MGNlLWE0OGYtZWUwNjAzOTQ5Zjkz
LzEvSTM5OXNETXhURWM4MmhsT0RmZWZIRGRkb19RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn+kqbn4F
uKmRmDVgos5mmfUug0Mn2Ol+1ksXESh2aM/+zOws/3ZyxgGLhQtML26PNf3AWSb8
Yyb1N0prgD0YED/oHhZ8tIjCo1/evOwtdw3WgO8uJuwnGG6I7x7fjQG5B8z1ZDPY
iIcevMn52EoeUvmtSs969aMWxZ39BFByOA9yFpIlIwSP4x2cNqe1oYMXy0eEjDl6
4Rl/nmXV/tcostH29oNg9RakxCMqQjvHCSyjWWdiSpSHPgv1cK9FAgvfdVo1VaBn
XV02omVpNK3awkXPiiLkW0lC1kSm8mWvovbZWahe4zBIZ5U1a7Pu1R6pNRujPNCe
KHRknUXyUihb0w==
-----END CERTIFICATE-----
Generated at Sun Apr 27 03:21:29 2025 by rpki-client