Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/184500-3336-4cdd-943b-4f6c85fd50f1/1/fgX1rbuaqxB5slJG4ju71qF-Ptg.mft
File:                     fgX1rbuaqxB5slJG4ju71qF-Ptg.mft (raw, json)
Hash identifier:          /TALhMyd4SiJSLlpcEmvLd8ieHQ9w9LZFPIY04qpNQw=
Subject key identifier:   6E:9A:65:0E:17:F4:03:05:CB:66:7C:DF:8B:6A:39:39:7A:69:CB:B5
Authority key identifier: 7E:05:F5:AD:BB:9A:AB:10:79:B2:52:46:E2:3B:BB:D6:A1:7E:3E:D8
Certificate issuer:       /CN=7e05f5adbb9aab1079b25246e23bbbd6a17e3ed8
Certificate serial:       019679EA0B745D01E17D776CF20AA11FFEAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fgX1rbuaqxB5slJG4ju71qF-Ptg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/184500-3336-4cdd-943b-4f6c85fd50f1/1/fgX1rbuaqxB5slJG4ju71qF-Ptg.mft
Manifest number:          150F
Signing time:             Mon 28 Apr 2025 01:01:43 +0000
Manifest this update:     Mon 28 Apr 2025 01:01:43 +0000
Manifest next update:     Tue 29 Apr 2025 01:01:43 +0000
Files and hashes:         1: HP64WtX1yfILpkNOMbG1q1N4a3k.roa (hash: qIWMDdKxzjP3RhBE+pArO3QBDZn+hnUGI/cwBEig+dA=)
                          2: fgX1rbuaqxB5slJG4ju71qF-Ptg.crl (hash: 3gcRLIvgATeq/s3mYmQ7bBALogFFqQGp3W9oYtHM6VU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/184500-3336-4cdd-943b-4f6c85fd50f1/1/fgX1rbuaqxB5slJG4ju71qF-Ptg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/184500-3336-4cdd-943b-4f6c85fd50f1/1/fgX1rbuaqxB5slJG4ju71qF-Ptg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fgX1rbuaqxB5slJG4ju71qF-Ptg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:79:ea:0b:74:5d:01:e1:7d:77:6c:f2:0a:a1:1f:fe:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e05f5adbb9aab1079b25246e23bbbd6a17e3ed8
        Validity
            Not Before: Apr 28 01:01:43 2025 GMT
            Not After : Apr 29 01:01:43 2025 GMT
        Subject: CN=6e9a650e17f40305cb667cdf8b6a39397a69cbb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:61:57:3c:1c:47:fe:c3:81:31:32:86:c2:99:
                    ed:9e:7a:8c:c8:6c:24:f4:0f:ff:9e:69:31:cb:5c:
                    75:fa:ff:f8:ec:99:2f:3d:cd:96:12:8e:56:04:10:
                    08:d1:9f:a6:1d:fa:c0:36:f5:a4:c6:9c:25:da:3f:
                    77:8b:5b:ee:52:dc:3f:d3:78:97:97:34:3a:4c:4e:
                    54:9a:1b:0f:94:71:00:33:67:41:10:ca:4d:14:fe:
                    2f:17:d8:44:fd:df:de:08:90:12:3b:a5:ed:a9:db:
                    24:6c:a7:dd:25:03:26:6c:e5:e4:b7:09:f1:74:af:
                    f6:a7:58:67:94:4a:64:86:3f:53:86:e2:91:64:2f:
                    2d:c3:8d:fc:4b:08:24:ac:ff:29:90:74:2c:a5:84:
                    c0:73:6e:10:f0:0f:24:5b:bb:9c:9e:50:24:d5:7a:
                    e4:bc:92:00:79:f2:ac:c7:16:d9:02:72:60:6a:81:
                    84:4e:ba:ad:b3:84:2c:33:a9:0e:72:c3:58:94:7b:
                    b7:95:b9:8f:3b:fd:85:ca:60:6e:fc:11:d7:74:76:
                    a7:05:01:b1:71:4b:25:1d:56:f6:53:96:ec:c1:e8:
                    2a:f3:5b:e1:45:fe:1c:1f:12:21:c2:75:b2:28:f0:
                    b1:78:fc:7f:e1:65:62:9a:03:82:ce:19:13:34:7b:
                    15:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9A:65:0E:17:F4:03:05:CB:66:7C:DF:8B:6A:39:39:7A:69:CB:B5
            X509v3 Authority Key Identifier:
                keyid:7E:05:F5:AD:BB:9A:AB:10:79:B2:52:46:E2:3B:BB:D6:A1:7E:3E:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgX1rbuaqxB5slJG4ju71qF-Ptg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/184500-3336-4cdd-943b-4f6c85fd50f1/1/fgX1rbuaqxB5slJG4ju71qF-Ptg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/184500-3336-4cdd-943b-4f6c85fd50f1/1/fgX1rbuaqxB5slJG4ju71qF-Ptg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:f6:4b:61:38:c7:1b:88:d7:37:5e:9b:93:32:2f:bf:7b:38:
         b0:89:cc:7a:71:2d:ae:84:16:15:fd:f5:03:6a:80:1e:a6:50:
         78:b9:19:18:99:e0:37:7f:a0:26:32:74:ef:54:09:12:6b:21:
         0b:2b:99:1f:ed:e5:ee:02:b1:76:0f:6b:58:48:3f:37:e3:88:
         26:17:a7:f6:9b:8d:69:f7:bd:19:40:99:cc:66:b1:25:5b:4d:
         27:bc:35:84:ce:74:0c:8d:54:e2:63:02:6c:75:fb:5a:a2:44:
         26:e3:be:0f:2e:cf:4c:71:46:aa:41:49:b9:5f:af:9e:8e:d6:
         28:d8:37:a5:b4:c5:d8:42:21:d0:fe:7b:82:82:a8:a9:5a:ff:
         16:32:15:dd:6f:82:ab:ed:36:96:de:d2:7e:c2:1a:2a:15:96:
         e1:69:dd:86:a9:49:2a:5d:0b:e6:b7:4e:cf:7e:e3:83:1c:76:
         15:1b:cf:68:ba:f4:72:67:74:66:88:c8:80:0a:e2:66:b2:9d:
         3d:44:94:b1:37:61:d3:dd:d1:98:9e:02:c4:2c:e3:8b:17:16:
         7e:48:6e:86:47:a6:13:88:ad:19:3e:19:e0:1c:2e:35:e7:27:
         bc:93:2c:c0:04:df:78:7a:85:05:72:f7:24:36:77:1c:0e:e2:
         2a:e9:b5:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ56gt0XQHhfXds8gqhH/6vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMDVmNWFkYmI5YWFiMTA3OWIyNTI0NmUyM2JiYmQ2YTE3
ZTNlZDgwHhcNMjUwNDI4MDEwMTQzWhcNMjUwNDI5MDEwMTQzWjAzMTEwLwYDVQQD
Eyg2ZTlhNjUwZTE3ZjQwMzA1Y2I2NjdjZGY4YjZhMzkzOTdhNjljYmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+GFXPBxH/sOBMTKGwpntnnqMyGwk
9A//nmkxy1x1+v/47JkvPc2WEo5WBBAI0Z+mHfrANvWkxpwl2j93i1vuUtw/03iX
lzQ6TE5UmhsPlHEAM2dBEMpNFP4vF9hE/d/eCJASO6XtqdskbKfdJQMmbOXktwnx
dK/2p1hnlEpkhj9ThuKRZC8tw438SwgkrP8pkHQspYTAc24Q8A8kW7ucnlAk1Xrk
vJIAefKsxxbZAnJgaoGETrqts4QsM6kOcsNYlHu3lbmPO/2FymBu/BHXdHanBQGx
cUslHVb2U5bswegq81vhRf4cHxIhwnWyKPCxePx/4WVimgOCzhkTNHsVFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG6aZQ4X9AMFy2Z834tqOTl6acu1MB8GA1UdIwQY
MBaAFH4F9a27mqsQebJSRuI7u9ahfj7YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmdYMXJidWFxeEI1c2xKRzRqdTcxcUYtUHRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8xODQ1MDAtMzMzNi00Y2RkLTk0M2It
NGY2Yzg1ZmQ1MGYxLzEvZmdYMXJidWFxeEI1c2xKRzRqdTcxcUYtUHRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8xODQ1MDAtMzMzNi00Y2RkLTk0M2ItNGY2Yzg1ZmQ1MGYx
LzEvZmdYMXJidWFxeEI1c2xKRzRqdTcxcUYtUHRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtPZLYTjH
G4jXN16bkzIvv3s4sInMenEtroQWFf31A2qAHqZQeLkZGJngN3+gJjJ071QJEmsh
CyuZH+3l7gKxdg9rWEg/N+OIJhen9puNafe9GUCZzGaxJVtNJ7w1hM50DI1U4mMC
bHX7WqJEJuO+Dy7PTHFGqkFJuV+vno7WKNg3pbTF2EIh0P57goKoqVr/FjIV3W+C
q+02lt7SfsIaKhWW4WndhqlJKl0L5rdOz37jgxx2FRvPaLr0cmd0ZojIgAriZrKd
PUSUsTdh093RmJ4CxCzjixcWfkhuhkemE4itGT4Z4BwuNecnvJMswATfeHqFBXL3
JDZ3HA7iKum1OQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 06:08:49 2025 by rpki-client