Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
File:                     pj3LkKFHQqUr5coJy-2N_BzT0e8.mft (raw, json)
Hash identifier:          pv8R9LFugiR0zYQM57kSPmkQH7zp2ZSzz9ZQ8SOTk6Q=
Subject key identifier:   BA:BE:89:FF:5B:CD:DC:AD:44:60:1D:69:03:AB:C8:34:94:5C:AD:C9
Authority key identifier: A6:3D:CB:90:A1:47:42:A5:2B:E5:CA:09:CB:ED:8D:FC:1C:D3:D1:EF
Certificate issuer:       /CN=a63dcb90a14742a52be5ca09cbed8dfc1cd3d1ef
Certificate serial:       019682B50C7E61F0021DC524C5421C904AAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pj3LkKFHQqUr5coJy-2N_BzT0e8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
Manifest number:          1518
Signing time:             Tue 29 Apr 2025 18:00:25 +0000
Manifest this update:     Tue 29 Apr 2025 18:00:25 +0000
Manifest next update:     Wed 30 Apr 2025 18:00:25 +0000
Files and hashes:         1: _fFHOJoXpOrY_um7x7QB-vvO3bk.roa (hash: p/LewBD8vsUMOUJR34qULDasx72iNLAz4cIqUSFI+5E=)
                          2: pj3LkKFHQqUr5coJy-2N_BzT0e8.crl (hash: +c22gGHKQfdBfmmPeVpViL+lcrZ+AmhDX7YO4VGglRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pj3LkKFHQqUr5coJy-2N_BzT0e8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 18:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:82:b5:0c:7e:61:f0:02:1d:c5:24:c5:42:1c:90:4a:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a63dcb90a14742a52be5ca09cbed8dfc1cd3d1ef
        Validity
            Not Before: Apr 29 18:00:25 2025 GMT
            Not After : Apr 30 18:00:25 2025 GMT
        Subject: CN=babe89ff5bcddcad44601d6903abc834945cadc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f8:e3:7c:23:ff:5b:38:a0:d5:a8:41:88:2e:
                    12:47:49:94:1a:29:8c:05:14:cf:63:60:66:e5:39:
                    66:76:6c:44:d3:07:5a:50:31:56:98:af:3c:33:97:
                    84:5c:8e:50:ca:e6:5b:13:9c:e7:3d:95:da:94:26:
                    a0:e6:0c:9d:af:86:ab:0f:4a:48:01:25:52:e3:3a:
                    8c:86:42:13:98:31:55:a3:51:af:5a:de:1f:32:02:
                    35:ad:9d:b1:7a:c5:ec:a7:5f:ac:35:07:78:c1:63:
                    db:99:93:31:70:7f:9d:bb:e1:76:1b:ae:b6:70:7e:
                    1f:f3:1f:51:ce:7d:e2:7a:c1:15:9e:70:a2:8d:a7:
                    b3:31:f2:3f:c9:3b:54:f8:2c:0f:b6:d2:4a:c3:86:
                    3a:d5:c8:10:b9:c3:2a:bb:31:aa:7c:07:b9:bb:ef:
                    f2:8c:9f:51:ba:73:fd:47:58:be:8d:a3:f3:e4:9b:
                    f4:ca:98:e7:a6:63:73:fa:3b:67:b2:d1:67:fe:11:
                    4d:a0:d4:1c:e8:8e:55:8d:b4:68:dc:66:45:64:64:
                    af:f3:7d:02:d1:fe:02:40:49:1b:b5:50:e5:3b:70:
                    ad:3b:0f:66:b6:ef:ed:0e:1f:74:7c:f5:eb:37:29:
                    8c:39:52:1c:9a:9c:f0:89:ec:8a:89:d9:bd:d3:d4:
                    9d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:BE:89:FF:5B:CD:DC:AD:44:60:1D:69:03:AB:C8:34:94:5C:AD:C9
            X509v3 Authority Key Identifier:
                keyid:A6:3D:CB:90:A1:47:42:A5:2B:E5:CA:09:CB:ED:8D:FC:1C:D3:D1:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pj3LkKFHQqUr5coJy-2N_BzT0e8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:88:39:9e:ba:47:c5:63:a5:3d:02:6a:39:89:3b:ed:ef:f0:
         7d:64:07:88:03:59:c9:0c:5b:39:af:7f:ef:06:8b:58:f1:c2:
         b5:d4:cb:9a:62:20:c9:93:f7:42:e2:e4:c4:a4:97:fb:72:93:
         69:f7:83:87:3d:17:e6:3e:09:fb:8f:aa:7a:5d:fc:a4:d8:ca:
         7e:50:93:49:21:65:0a:f5:a2:01:6f:cf:39:0e:15:dc:99:93:
         7e:73:d4:e9:33:b7:2a:c1:d8:55:ab:f2:34:fb:64:d3:13:4b:
         c2:2b:96:40:1e:60:ae:c9:43:dc:5c:f6:1d:0e:3e:c6:4c:62:
         b1:f9:e8:56:b9:99:71:5c:e8:e9:7b:63:06:69:f8:26:48:67:
         a5:1b:54:68:fc:a9:34:d1:b4:97:20:f9:ea:77:3e:4b:bb:44:
         8b:38:8a:75:34:dd:06:21:6d:41:e6:c5:0b:3d:6b:85:a4:30:
         ff:af:8b:ab:8a:28:f1:f3:b0:99:84:df:27:5e:5f:5e:e7:53:
         b5:3b:66:4a:74:0d:92:fb:95:b0:22:63:42:9d:30:9f:f7:ca:
         e4:c6:bf:3d:07:dd:cc:53:b2:7e:af:e2:0e:b0:48:12:e7:1b:
         86:43:72:a7:63:75:b3:f4:d1:df:cf:99:cb:e3:59:51:37:e7:
         09:92:63:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaCtQx+YfACHcUkxUIckEqtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2M2RjYjkwYTE0NzQyYTUyYmU1Y2EwOWNiZWQ4ZGZjMWNk
M2QxZWYwHhcNMjUwNDI5MTgwMDI1WhcNMjUwNDMwMTgwMDI1WjAzMTEwLwYDVQQD
EyhiYWJlODlmZjViY2RkY2FkNDQ2MDFkNjkwM2FiYzgzNDk0NWNhZGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/jjfCP/Wzig1ahBiC4SR0mUGimM
BRTPY2Bm5TlmdmxE0wdaUDFWmK88M5eEXI5QyuZbE5znPZXalCag5gydr4arD0pI
ASVS4zqMhkITmDFVo1GvWt4fMgI1rZ2xesXsp1+sNQd4wWPbmZMxcH+du+F2G662
cH4f8x9Rzn3iesEVnnCijaezMfI/yTtU+CwPttJKw4Y61cgQucMquzGqfAe5u+/y
jJ9RunP9R1i+jaPz5Jv0ypjnpmNz+jtnstFn/hFNoNQc6I5VjbRo3GZFZGSv830C
0f4CQEkbtVDlO3CtOw9mtu/tDh90fPXrNymMOVIcmpzwieyKidm909SdsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLq+if9bzdytRGAdaQOryDSUXK3JMB8GA1UdIwQY
MBaAFKY9y5ChR0KlK+XKCcvtjfwc09HvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGozTGtLRkhRcVVyNWNvSnktMk5fQnpUMGU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8yYzhiNzAtNjZiYy00MTYzLThmODAt
MjBmN2Q0NGVkMTI2LzEvcGozTGtLRkhRcVVyNWNvSnktMk5fQnpUMGU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy8yYzhiNzAtNjZiYy00MTYzLThmODAtMjBmN2Q0NGVkMTI2
LzEvcGozTGtLRkhRcVVyNWNvSnktMk5fQnpUMGU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeIg5nrpH
xWOlPQJqOYk77e/wfWQHiANZyQxbOa9/7waLWPHCtdTLmmIgyZP3QuLkxKSX+3KT
afeDhz0X5j4J+4+qel38pNjKflCTSSFlCvWiAW/POQ4V3JmTfnPU6TO3KsHYVavy
NPtk0xNLwiuWQB5grslD3Fz2HQ4+xkxisfnoVrmZcVzo6XtjBmn4JkhnpRtUaPyp
NNG0lyD56nc+S7tEiziKdTTdBiFtQebFCz1rhaQw/6+Lq4oo8fOwmYTfJ15fXudT
tTtmSnQNkvuVsCJjQp0wn/fK5Ma/PQfdzFOyfq/iDrBIEucbhkNyp2N1s/TR38+Z
y+NZUTfnCZJjrg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 04:53:23 2025 by rpki-client