Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
File:                     1BGrxMBGirKJHqrK26DcA3eTb9U.mft (raw, json)
Hash identifier:          fQhoUkqe2UUnL7Z2O+ccotvIAYqtIodJwBMAWg2ZqbU=
Subject key identifier:   76:DB:9F:95:7C:70:B0:5E:55:62:80:3F:00:61:FF:9B:44:FC:B0:64
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Certificate issuer:       /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial:       01967341D1BC21EC57D21DE87BA8DC9B5C3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
Manifest number:          151D
Signing time:             Sat 26 Apr 2025 18:00:15 +0000
Manifest this update:     Sat 26 Apr 2025 18:00:15 +0000
Manifest next update:     Sun 27 Apr 2025 18:00:15 +0000
Files and hashes:         1: 1-OU8ynWh7hqVFrdBOkMtgcV_cyM.roa (hash: 2Z6R77gXPR8CMiL2pJA+cy/i8yv0OcauEoqVSugVcdA=)
                          2: 1-kqzU8qAhhNZY7H0Ndru0AUv97E.roa (hash: MOz4DkQjI1MR3SyTcLV8IHQbmNNubdVqTfJ9r1l5kGA=)
                          3: 1BGrxMBGirKJHqrK26DcA3eTb9U.crl (hash: 2RoX4Tm3POk6SvzLH6Vfo8pEhXR9XKJ7V/RIeGq0LxM=)
                          4: 1ec8k_WMs_2LdLKJif0fp_GIvwQ.roa (hash: jxxIlpO+0WHC3wFwCkHj3JuHjD6nZEUilknF8lXMaCM=)
                          5: Ae-QslNU3gy3W0egozYRZj4M0_I.roa (hash: Fot9yL7In+gwq2RwKasepUOmQgQxJF7U8tdZaL0Gl3I=)
                          6: CJVe4Q9dvFn43GMuu9ouncpPy44.roa (hash: fVjdLHUWi0mI5w+c0YY8mq7OHdrDZDIYLR8WdsperC8=)
                          7: DzlQmA_VBIGa0S2Ib3ru0uYU6B8.roa (hash: ELhH2bzUprEO/3eAQ/a8F4+xXbw+c46ynlrkjWiuJwA=)
                          8: G35q9Z2lY9lOlfDoaB-f7dy-t1k.roa (hash: rvuWbhI2XPWBqSashyuxPe1zWTfRREMGtr7cToSjfCg=)
                          9: GyISCTVnPZ05yiIGPaqs_BIQe3A.roa (hash: HXZebLN++PLAND9Fse+1Vz/sTH36ccZhc302O6BcMlM=)
                          10: LF6dF_VT3QtcYPznHVqeLHnLYbY.roa (hash: bxEhbvWwJ1lPZWvcpTDbbFtyf4z4sIVRNx+TGcckJYA=)
                          11: U_jjbw9lzHq0xKAwAxsBzjbGfuo.roa (hash: KknKYtyfRpoZbln9jyULBZjAmlNQNXuziktabTnaV5c=)
                          12: VYoQKf5s-KqqrBacz9y-o4_GDiY.roa (hash: UH0yetw/jt23rWa1xemX8fv6/k46KisKMpR12GlubxQ=)
                          13: Xplom3nYOHGxQQTuZEZCEr66_Rk.roa (hash: NwgZUVMlsLrLr2h+U/8kat3nDsEvXOmfPISS6ilc3LE=)
                          14: _B-JnyUPZQzEiIpewQUHY23Dk8A.roa (hash: NxgiPM6W1BurD6b6luiHd21TWQRNu1avToG9bjOQC9U=)
                          15: c9mjRKIiIhveB8hpl4lJgX61pz0.roa (hash: ePmlGQCFU1GYCtfOlxI9naN4sv+47lFMcBkkM1EOqVc=)
                          16: jRfP4yhxZ6gmXikGgT5hanUmtTI.roa (hash: szuMEcU8of5ZSWw/BlllGKgEXTfJgvQ45tZ2Ke7a4ME=)
                          17: les_6wsnsgt3N6J3jrSt8FGLh2o.roa (hash: w/OoB0CohLCCVJmsCqR/wlJuBKJFnQYzzH1QL/J31rg=)
                          18: nAEeOljdfjmUrTtKHCmdse5HIUQ.roa (hash: 6lNLUdGCLsYYW+Uu2Ct57V4Z84VTvW+oIx8ctf9Jouk=)
                          19: pc4ANj7Qidc5B-S95LpC0Ics6vQ.roa (hash: cjIj4ScC/DHh2+FMzl+VW8zNJX+8oo0yjvETje/w7yg=)
                          20: pcqqevXAthwv3P-WoufnBPWJaRE.roa (hash: 7nvC+/+3VO3mfOuCXbDt2+XqJ32zrEYBfDXqNhmkNMA=)
                          21: rPNof6DogEeZBOoLRZwMk-ApPt4.roa (hash: CTp7V/ExiJcmMtx5knVlKl/ZFReGeFmiKwsyPdlpDgU=)
                          22: vaa9ieh0_g2-KFsweXS2ah7MH-0.roa (hash: WpWtS70OFLoq/cDJkKS6rBsNcjAtsJlmw3l1M8ZvGIs=)
                          23: xkBewuEMiuEaRl6tlZgkZIiJIpo.roa (hash: dz2/11ogK5tMzMH1ftdVfoVFsbvw27yY273l023m5PI=)
                          24: zeHkodOSM4PpNF-T8cKNsYd36jA.roa (hash: rKk25l72K9AU6v1SG1iHJTk7NBGypKCBGqKX+tmg7So=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:41:d1:bc:21:ec:57:d2:1d:e8:7b:a8:dc:9b:5c:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
        Validity
            Not Before: Apr 26 18:00:15 2025 GMT
            Not After : Apr 27 18:00:15 2025 GMT
        Subject: CN=76db9f957c70b05e5562803f0061ff9b44fcb064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1d:47:f3:0a:83:0e:25:bb:fe:72:ee:ce:15:
                    4b:5b:33:be:91:5f:ea:43:1e:0a:5a:48:4e:96:b6:
                    fe:98:d9:95:57:70:63:33:1a:35:93:99:ff:c2:66:
                    ab:32:97:4d:47:44:d4:34:ba:6c:a6:65:09:b8:55:
                    bb:f1:f9:f1:d3:9c:0e:c9:2d:c7:cb:8a:63:c8:da:
                    87:76:82:49:5c:b2:3e:79:aa:df:4f:93:33:cd:76:
                    b7:b5:14:9e:bf:dc:51:3c:b1:f5:e8:0b:02:00:ad:
                    f2:f7:bd:5c:b9:eb:26:92:1c:0b:8b:60:ad:87:5c:
                    26:a8:8f:96:73:de:b9:ad:2a:fb:6d:b9:38:53:0e:
                    c2:4f:dc:3b:34:f3:66:8c:54:70:52:3a:3e:ef:b1:
                    de:ab:ae:a8:2b:d5:11:48:45:8f:dc:34:28:70:d0:
                    d9:fb:1a:a9:b6:ed:87:d2:38:1b:b0:80:4e:80:16:
                    57:4d:7f:4b:4b:6d:2e:72:b2:87:c8:1d:c8:88:9f:
                    b6:66:b8:47:af:6a:78:cc:f1:53:23:79:15:80:f1:
                    5a:fb:ed:66:e3:ce:3a:82:25:b0:32:cc:e8:be:3d:
                    81:db:49:a0:bc:17:ec:e1:dc:45:69:4e:98:dd:03:
                    87:a4:d5:e5:e0:c4:8e:3c:f9:12:2e:70:83:12:8d:
                    c7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:DB:9F:95:7C:70:B0:5E:55:62:80:3F:00:61:FF:9B:44:FC:B0:64
            X509v3 Authority Key Identifier:
                keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:ec:66:eb:f2:31:55:a2:df:3b:59:ca:25:a4:97:ff:7c:48:
         98:ed:87:1e:14:9a:d7:c7:37:40:74:e4:27:80:79:c6:81:73:
         f8:ee:ce:76:4d:81:f6:76:65:7e:8b:db:8b:40:81:2a:cb:93:
         68:df:a6:eb:1b:ee:ed:3a:de:24:d3:e1:a6:aa:cf:b0:d9:b9:
         1d:a6:2a:31:eb:07:96:a8:47:c1:0f:19:30:d3:88:fa:a1:d3:
         96:1b:7a:25:11:b0:f1:b5:12:84:c4:63:e1:32:4b:10:b9:69:
         ba:12:73:38:ec:a9:db:7c:2b:54:ef:8b:54:2c:c4:da:cf:42:
         3d:46:29:98:df:d5:25:de:5e:73:0d:38:e0:f6:58:ff:22:69:
         ac:97:b7:a1:83:f4:4a:d4:8a:c4:a5:9d:20:e5:18:75:b3:a1:
         9f:09:fd:83:d2:3a:fe:08:df:08:88:5c:09:6d:f4:9c:1f:cb:
         ec:d1:3b:60:4e:85:9c:07:1f:84:dd:31:19:04:17:c8:b0:2f:
         e9:65:8e:d6:2c:df:48:83:3a:12:71:03:85:fd:bf:c1:b3:07:
         50:09:09:fd:0e:60:36:77:cd:5b:33:59:4b:e0:c6:e9:9d:86:
         74:f8:0e:60:80:c9:e8:f0:06:84:df:42:c8:32:50:23:a8:78:
         a6:88:96:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:26:22 2025 by rpki-client