Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
File:                     1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft (raw, json)
Hash identifier:          2bWynpv3gv6kjhGq2ssyK/NnQ5qELufEFmWKRoEDW+Y=
Subject key identifier:   6E:0B:A3:75:01:9E:68:85:ED:C5:9F:6D:8C:DF:0E:27:92:42:68:75
Authority key identifier: FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94
Certificate issuer:       /CN=fa129ccbb8c241a9c9b1ff20730a264956b50294
Certificate serial:       01967755AB3D719C8082704B7A1BBF604BDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
Manifest number:          150F
Signing time:             Sun 27 Apr 2025 13:00:25 +0000
Manifest this update:     Sun 27 Apr 2025 13:00:25 +0000
Manifest next update:     Mon 28 Apr 2025 13:00:25 +0000
Files and hashes:         1: 1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl (hash: R/4jy1UMb5ixifXXI60wxGGkGeLicY6zX256xsH8STw=)
                          2: LiDek8ukAeDalnCmjHOSOx8ybkY.roa (hash: XaMtoZ+RB8cq+ljNgiN30o7Aneys4CKgmujbsMdFNUA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:55:ab:3d:71:9c:80:82:70:4b:7a:1b:bf:60:4b:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa129ccbb8c241a9c9b1ff20730a264956b50294
        Validity
            Not Before: Apr 27 13:00:25 2025 GMT
            Not After : Apr 28 13:00:25 2025 GMT
        Subject: CN=6e0ba375019e6885edc59f6d8cdf0e2792426875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d6:08:4c:49:fc:8a:a4:c4:83:05:d3:1d:03:
                    eb:7d:61:2b:cf:62:ee:8b:23:19:ab:08:02:6e:c5:
                    05:f5:28:07:0a:c9:85:a5:18:be:56:e5:3b:bf:93:
                    ee:4c:54:7b:d2:7c:40:1d:41:c8:9a:95:37:1e:5e:
                    de:17:60:51:06:77:9c:cd:c8:91:6a:3f:e8:73:eb:
                    c5:e5:50:db:0a:26:bf:26:67:91:70:8d:c7:08:28:
                    36:16:49:5f:86:98:d1:da:a7:ff:c5:4d:51:f1:1d:
                    2a:51:a7:06:eb:fd:bb:6e:3d:eb:91:11:92:a7:42:
                    d1:73:c2:89:e6:68:00:35:51:9f:95:eb:93:86:52:
                    5b:e9:38:e5:9b:7c:12:98:4f:f3:54:68:57:87:8f:
                    06:f2:a3:1e:75:d2:98:46:fd:ca:e4:4a:79:5c:38:
                    8c:a8:b5:50:83:17:e2:e8:d9:f5:5b:ea:0c:db:54:
                    34:b7:14:7b:fa:1d:22:c6:3a:83:41:74:e6:08:dd:
                    eb:b3:f8:7f:68:58:35:3b:6e:e6:5f:f7:b0:77:00:
                    5d:cf:9f:59:9c:ef:d5:4f:8a:d8:bc:1c:da:a2:c7:
                    1b:09:91:da:f1:9a:3a:a5:4b:9c:8d:04:12:33:c3:
                    56:ee:2a:73:48:3b:0f:7b:02:10:69:bf:60:44:42:
                    f3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0B:A3:75:01:9E:68:85:ED:C5:9F:6D:8C:DF:0E:27:92:42:68:75
            X509v3 Authority Key Identifier:
                keyid:FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:08:f0:14:f8:f1:7d:c0:90:fe:0a:bf:45:7e:25:f8:df:c6:
         16:81:f7:36:54:de:8c:09:a7:be:fc:61:a4:27:d0:a3:6e:66:
         98:37:c2:c6:98:82:f0:ea:6b:36:f0:1b:69:ca:6a:95:a8:cf:
         b6:ec:bf:b8:84:c1:e0:14:5b:5e:09:e8:42:7b:dd:c4:3b:24:
         d7:22:c4:21:b5:c0:79:67:ca:a7:1f:6d:e1:85:35:d1:4e:f7:
         1e:66:d3:d4:9f:23:3c:60:fb:9a:52:40:47:71:30:77:dd:c8:
         be:89:25:5b:df:58:b8:7e:7b:20:ca:47:2c:66:1f:bf:9f:58:
         0c:86:18:60:43:9c:0b:a8:42:25:d3:05:61:ad:82:ae:e8:9d:
         f3:05:7f:ed:ea:26:32:0d:1f:63:59:03:92:a4:c2:a9:71:ae:
         5f:59:80:e9:b5:1f:08:b7:8a:3c:96:53:a1:ae:f1:e3:0b:af:
         86:a9:37:ae:fd:f2:63:f2:e8:94:6c:9a:3b:d0:1c:46:50:63:
         17:81:9e:8f:f6:6d:c6:cb:a1:7a:f8:ba:dc:e4:58:de:11:19:
         eb:4f:c5:fc:7b:64:f1:7d:9e:07:ea:a7:e8:9c:09:52:fe:fe:
         04:87:2c:6a:a5:8c:71:d3:19:eb:6c:9d:6a:09:e0:07:91:75:
         f6:d2:36:a2
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZZ3Vas9cZyAgnBLehu/YEvaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMTI5Y2NiYjhjMjQxYTljOWIxZmYyMDczMGEyNjQ5NTZi
NTAyOTQwHhcNMjUwNDI3MTMwMDI1WhcNMjUwNDI4MTMwMDI1WjAzMTEwLwYDVQQD
Eyg2ZTBiYTM3NTAxOWU2ODg1ZWRjNTlmNmQ4Y2RmMGUyNzkyNDI2ODc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9YITEn8iqTEgwXTHQPrfWErz2Lu
iyMZqwgCbsUF9SgHCsmFpRi+VuU7v5PuTFR70nxAHUHImpU3Hl7eF2BRBneczciR
aj/oc+vF5VDbCia/JmeRcI3HCCg2FklfhpjR2qf/xU1R8R0qUacG6/27bj3rkRGS
p0LRc8KJ5mgANVGfleuThlJb6Tjlm3wSmE/zVGhXh48G8qMeddKYRv3K5Ep5XDiM
qLVQgxfi6Nn1W+oM21Q0txR7+h0ixjqDQXTmCN3rs/h/aFg1O27mX/ewdwBdz59Z
nO/VT4rYvBzaoscbCZHa8Zo6pUucjQQSM8NW7ipzSDsPewIQab9gRELzjwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFG4Lo3UBnmiF7cWfbYzfDieSQmh1MB8GA1UdIwQY
MBaAFPoSnMu4wkGpybH/IHMKJklWtQKUMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1oS2N5N2pDUWFuSnNmOGdjd29tU1ZhMUFwUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvMzAwODM5LTE5MmUtNGVhOS05OWYy
LTE4ZmQ4NTZhNThiNy8xLzEtaEtjeTdqQ1FhbkpzZjhnY3dvbVNWYTFBcFEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzhjLzMwMDgzOS0xOTJlLTRlYTktOTlmMi0xOGZkODU2YTU4
YjcvMS8xLWhLY3k3akNRYW5Kc2Y4Z2N3b21TVmExQXBRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAowjw
FPjxfcCQ/gq/RX4l+N/GFoH3NlTejAmnvvxhpCfQo25mmDfCxpiC8OprNvAbacpq
lajPtuy/uITB4BRbXgnoQnvdxDsk1yLEIbXAeWfKpx9t4YU10U73HmbT1J8jPGD7
mlJAR3Ewd93IvoklW99YuH57IMpHLGYfv59YDIYYYEOcC6hCJdMFYa2Cruid8wV/
7eomMg0fY1kDkqTCqXGuX1mA6bUfCLeKPJZToa7x4wuvhqk3rv3yY/LolGyaO9Ac
RlBjF4Gej/Ztxsuhevi63ORY3hEZ60/F/Htk8X2eB+qn6JwJUv7+BIcsaqWMcdMZ
62ydagngB5F19tI2og==
-----END CERTIFICATE-----
Generated at Sun Apr 27 20:18:25 2025 by rpki-client