Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.mft
File:                     Mqd0J8A3CbM5qVsK2aSsnSySyQM.mft (raw, json)
Hash identifier:          oebdXljivXF57w8QcZeMqHR3/Xcw7CQ9PSgRkdAFlo4=
Subject key identifier:   52:58:25:08:AD:F8:4C:07:38:BE:64:98:48:E0:C1:78:8D:6E:FF:B4
Authority key identifier: 32:A7:74:27:C0:37:09:B3:39:A9:5B:0A:D9:A4:AC:9D:2C:92:C9:03
Certificate issuer:       /CN=32a77427c03709b339a95b0ad9a4ac9d2c92c903
Certificate serial:       01967A56B9BC3150D3249B6AC40DD79B6159
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mqd0J8A3CbM5qVsK2aSsnSySyQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.mft
Manifest number:          1519
Signing time:             Mon 28 Apr 2025 03:00:25 +0000
Manifest this update:     Mon 28 Apr 2025 03:00:25 +0000
Manifest next update:     Tue 29 Apr 2025 03:00:25 +0000
Files and hashes:         1: HmHeQxMY02gAsBxkDWSIqXAFPWk.roa (hash: yFvd3OyXwMNthaAHqIWMziti5jwnDTnfs9Aruq9ufQU=)
                          2: Mqd0J8A3CbM5qVsK2aSsnSySyQM.crl (hash: VtcFEBIdZshnIox61JXtHWhqzRjbbpeNMSMFD6DRfkM=)
                          3: Uy1V9b0wFpdMlzDRipTY6OI6NV0.roa (hash: mWAWf/tUyMqSuERI1NnQLYVJLUvPjig1mh8WLVGNkto=)
                          4: eLZAK6GtA5fTxDAgO34pkWDxDSg.roa (hash: JJF45T8sSlny8vS8g2xIJpL+wlb6VnXLMeh3W/wsIG0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mqd0J8A3CbM5qVsK2aSsnSySyQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7a:56:b9:bc:31:50:d3:24:9b:6a:c4:0d:d7:9b:61:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32a77427c03709b339a95b0ad9a4ac9d2c92c903
        Validity
            Not Before: Apr 28 03:00:25 2025 GMT
            Not After : Apr 29 03:00:25 2025 GMT
        Subject: CN=52582508adf84c0738be649848e0c1788d6effb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d9:2a:27:ac:7e:14:5c:2c:c6:51:f4:9c:55:
                    5f:e1:0b:6e:f4:e5:2d:a4:5a:bc:59:59:fb:a7:63:
                    bd:2b:e1:37:27:75:64:fe:69:16:09:51:24:8e:02:
                    9f:f0:34:b8:09:1a:c8:5e:b8:e8:46:94:38:b4:49:
                    5c:7f:8e:68:b3:7f:6a:92:0d:f0:5b:cb:51:8f:3f:
                    f9:ec:da:91:b2:50:bf:d8:5e:81:3d:bc:fc:f3:d3:
                    78:aa:0d:ed:d4:cd:5d:e6:1f:ae:8c:ee:43:3d:2c:
                    7f:e2:10:39:84:59:b0:18:63:db:68:26:d6:c7:30:
                    e0:80:e4:3a:3d:00:ca:5b:a3:39:da:7e:49:63:2d:
                    28:d4:50:82:0d:99:5f:45:65:95:81:f0:42:6f:1f:
                    72:21:85:a4:4e:e3:09:2b:ed:2a:10:b4:f1:29:aa:
                    82:4e:15:18:e0:29:66:91:39:1d:06:a1:3e:52:e0:
                    82:f4:3e:4f:7d:6a:f5:46:90:a0:b2:74:33:d4:9e:
                    77:ff:36:ca:41:37:9b:de:77:c1:62:f8:12:3e:cd:
                    b7:7a:66:a4:84:31:12:de:ef:7c:0f:c5:b3:e9:70:
                    ec:38:db:e4:e5:73:26:c8:bf:45:6d:6f:65:88:f0:
                    b1:16:37:30:cc:5c:74:87:b2:e9:0e:d2:69:26:12:
                    aa:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:58:25:08:AD:F8:4C:07:38:BE:64:98:48:E0:C1:78:8D:6E:FF:B4
            X509v3 Authority Key Identifier:
                keyid:32:A7:74:27:C0:37:09:B3:39:A9:5B:0A:D9:A4:AC:9D:2C:92:C9:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mqd0J8A3CbM5qVsK2aSsnSySyQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:b9:2d:c9:73:9f:57:83:0f:96:4a:82:b3:23:41:3c:43:aa:
         c1:fd:7e:6d:c2:84:69:d1:f8:1e:0f:5f:90:65:9d:ec:c5:bd:
         14:e8:03:59:3d:e3:d0:7b:81:93:3a:ef:92:d7:e4:c2:a2:39:
         b7:fa:c4:be:89:67:ab:72:3d:ab:11:ea:86:87:45:0f:51:c3:
         99:0e:de:c4:07:2d:2e:a1:59:c1:4e:60:2e:7e:c5:4d:1d:8f:
         6c:47:15:1d:3d:95:79:bf:75:d9:f2:7d:f7:54:63:53:4e:6e:
         a8:33:ca:61:87:a6:dd:52:af:f1:89:d6:e5:0a:da:d7:c9:80:
         5c:05:8a:ca:78:c7:45:9b:b0:bf:57:0f:75:0d:aa:54:e7:13:
         22:76:76:3f:a1:28:20:51:07:7c:23:7e:0e:98:0a:e9:07:39:
         e4:66:b4:b5:11:1d:8e:0d:a5:1c:b0:91:c7:0c:30:a1:ab:8c:
         34:af:45:d9:5f:7c:27:9f:33:11:41:7e:23:9c:09:54:50:b6:
         0f:f5:c7:22:a1:a7:02:0a:8e:8f:c3:4b:b2:33:ac:37:47:31:
         8e:16:06:99:40:5b:dc:a8:f3:d4:8e:dd:70:8c:1e:f5:89:f4:
         57:10:fe:4a:42:cf:40:d3:53:01:97:b5:1c:92:bf:7f:7d:1d:
         d0:8e:fa:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ6Vrm8MVDTJJtqxA3Xm2FZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyYTc3NDI3YzAzNzA5YjMzOWE5NWIwYWQ5YTRhYzlkMmM5
MmM5MDMwHhcNMjUwNDI4MDMwMDI1WhcNMjUwNDI5MDMwMDI1WjAzMTEwLwYDVQQD
Eyg1MjU4MjUwOGFkZjg0YzA3MzhiZTY0OTg0OGUwYzE3ODhkNmVmZmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9kqJ6x+FFwsxlH0nFVf4Qtu9OUt
pFq8WVn7p2O9K+E3J3Vk/mkWCVEkjgKf8DS4CRrIXrjoRpQ4tElcf45os39qkg3w
W8tRjz/57NqRslC/2F6BPbz889N4qg3t1M1d5h+ujO5DPSx/4hA5hFmwGGPbaCbW
xzDggOQ6PQDKW6M52n5JYy0o1FCCDZlfRWWVgfBCbx9yIYWkTuMJK+0qELTxKaqC
ThUY4ClmkTkdBqE+UuCC9D5PfWr1RpCgsnQz1J53/zbKQTeb3nfBYvgSPs23emak
hDES3u98D8Wz6XDsONvk5XMmyL9FbW9liPCxFjcwzFx0h7LpDtJpJhKqCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJYJQit+EwHOL5kmEjgwXiNbv+0MB8GA1UdIwQY
MBaAFDKndCfANwmzOalbCtmkrJ0skskDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXFkMEo4QTNDYk01cVZzSzJhU3NuU3lTeVFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9mMjUxZWQtNTk2Ny00ZGRkLTkzMmIt
N2Q0MGI3YzhmYjAxLzEvTXFkMEo4QTNDYk01cVZzSzJhU3NuU3lTeVFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9mMjUxZWQtNTk2Ny00ZGRkLTkzMmItN2Q0MGI3YzhmYjAx
LzEvTXFkMEo4QTNDYk01cVZzSzJhU3NuU3lTeVFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD7ktyXOf
V4MPlkqCsyNBPEOqwf1+bcKEadH4Hg9fkGWd7MW9FOgDWT3j0HuBkzrvktfkwqI5
t/rEvolnq3I9qxHqhodFD1HDmQ7exActLqFZwU5gLn7FTR2PbEcVHT2Veb912fJ9
91RjU05uqDPKYYem3VKv8YnW5Qra18mAXAWKynjHRZuwv1cPdQ2qVOcTInZ2P6Eo
IFEHfCN+DpgK6Qc55Ga0tREdjg2lHLCRxwwwoauMNK9F2V98J58zEUF+I5wJVFC2
D/XHIqGnAgqOj8NLsjOsN0cxjhYGmUBb3Kjz1I7dcIwe9Yn0VxD+SkLPQNNTAZe1
HJK/f30d0I767w==
-----END CERTIFICATE-----
Generated at Mon Apr 28 06:07:14 2025 by rpki-client