Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft
File:                     34-WHG77t_nOdCF7HV27VOmBxvI.mft (raw, json)
Hash identifier:          70lhfSg4HLLocUqyl85UuHkswkYZ4TldczoHVhmby8w=
Subject key identifier:   EC:E7:7B:82:8B:F4:71:DF:CF:9B:29:10:62:82:4D:A0:04:21:B2:74
Authority key identifier: DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2
Certificate issuer:       /CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2
Certificate serial:       019677C35C11F6CBBEEE6DCC8B7C4C6DC89C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft
Manifest number:          1319
Signing time:             Sun 27 Apr 2025 15:00:13 +0000
Manifest this update:     Sun 27 Apr 2025 15:00:13 +0000
Manifest next update:     Mon 28 Apr 2025 15:00:13 +0000
Files and hashes:         1: 1-v8iJMG7kLw-Yc0NKyQwCiTKUnA.roa (hash: 48U7KANlM4mdm3YNX/H5iviEyFzNYK943ewQoT71/5Q=)
                          2: 34-WHG77t_nOdCF7HV27VOmBxvI.crl (hash: fGvCVPtBMFN76147ASN2kW8EhxYREBqf9AvcwwEzMog=)
                          3: GSGxmFMOldMDBn5u7DfvJzXbYCo.roa (hash: un2PEVowSPZIo87TGOOK/KPKdTl+4fijd3wEZf387m4=)
                          4: dbsBfIyjlvnJeHFT9yt_2dWfazQ.roa (hash: bQniy8nZ8a6zJ0Od+7AKUQSXFo7deYGH7yzxQPJEcPg=)
                          5: gMAN3v03uAddPu9H4UyvEE9OaL4.roa (hash: wpVmJrhPOGtID7FbjO+SJT/k3IVxP28J+1YCanP25FQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:c3:5c:11:f6:cb:be:ee:6d:cc:8b:7c:4c:6d:c8:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2
        Validity
            Not Before: Apr 27 15:00:13 2025 GMT
            Not After : Apr 28 15:00:13 2025 GMT
        Subject: CN=ece77b828bf471dfcf9b291062824da00421b274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5f:42:40:f5:ef:6c:fc:62:2e:78:e3:8e:f4:
                    10:e6:04:55:a8:95:66:d6:68:d8:c3:70:7f:2a:66:
                    28:e4:4e:eb:e0:ea:9b:bb:1f:b9:f0:25:af:08:2b:
                    49:6f:95:44:a3:f5:f4:7c:5e:9c:c5:35:af:d2:db:
                    d8:42:b7:eb:3f:58:d1:73:39:ad:86:85:ae:13:cc:
                    92:58:96:f0:36:67:30:8c:c2:c5:14:f6:66:75:a4:
                    71:10:32:ee:eb:9f:82:d8:1b:15:fa:fa:81:1d:8a:
                    85:4f:8b:35:3a:7c:cb:f0:b7:f4:ec:bd:a2:b2:bc:
                    d2:46:4f:b6:da:96:48:16:7a:86:95:5c:41:68:4c:
                    d9:96:d0:0b:84:f2:22:e1:c0:39:90:32:0b:cf:e6:
                    6b:89:88:eb:d2:a0:8e:71:80:93:58:a9:30:bc:f8:
                    dc:d0:23:d4:fd:42:a9:3c:d2:e0:ff:44:6f:f6:06:
                    70:39:e1:6b:93:58:7e:81:bb:26:ef:74:95:e1:0c:
                    e8:59:28:19:ee:a3:ca:3b:1b:60:f3:87:a7:9a:fc:
                    8f:33:f5:3b:21:56:a3:8b:1f:fa:f4:04:4e:2b:06:
                    35:b7:79:a5:0c:f5:7f:ad:fd:92:67:fe:b9:2f:50:
                    92:6b:54:8a:3a:1f:a0:98:05:db:03:6a:43:16:0b:
                    24:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E7:7B:82:8B:F4:71:DF:CF:9B:29:10:62:82:4D:A0:04:21:B2:74
            X509v3 Authority Key Identifier:
                keyid:DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:1e:7e:85:a2:47:16:25:92:e0:56:68:83:1d:8d:65:5e:54:
         a2:8e:9c:15:ce:8f:83:08:37:99:de:b8:a6:1d:12:89:20:e1:
         c8:44:cb:fc:1a:1b:52:ec:69:9d:93:98:b2:b5:78:8b:90:1d:
         2f:45:72:97:df:d1:4c:22:6d:33:fb:64:58:85:45:12:09:48:
         35:e9:a7:36:69:bf:8c:d5:f3:bd:60:a1:b8:fb:4f:8d:cc:71:
         15:b6:1d:61:8f:88:93:93:c7:ad:30:b3:a9:84:0d:bd:d5:51:
         8a:16:27:04:9a:3e:23:46:e9:29:84:ae:e6:bd:88:e2:3a:a0:
         3b:4b:1f:8d:31:c5:1e:a4:a6:84:2c:5a:e3:d6:68:a1:a0:b8:
         2e:b0:c8:fa:92:f7:b9:b2:9d:ea:1e:ce:b2:3d:47:15:13:9f:
         80:04:cf:28:f3:d5:d8:12:6a:7f:63:0d:03:a0:e7:ff:98:f9:
         94:94:3b:54:30:82:27:ad:04:23:58:58:bc:8b:9c:ff:95:68:
         59:45:b1:6b:82:53:d5:0e:4d:c1:20:68:ac:70:cd:bd:60:18:
         74:f4:99:af:0f:64:43:c7:cd:e1:10:3d:ee:ad:26:01:1f:3b:
         0d:ea:4b:4e:1f:ef:6b:92:a5:43:a7:f4:ab:ac:64:8e:a2:30:
         10:69:af:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3w1wR9su+7m3Mi3xMbcicMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmOGY5NjFjNmVmYmI3ZjljZTc0MjE3YjFkNWRiYjU0ZTk4
MWM2ZjIwHhcNMjUwNDI3MTUwMDEzWhcNMjUwNDI4MTUwMDEzWjAzMTEwLwYDVQQD
EyhlY2U3N2I4MjhiZjQ3MWRmY2Y5YjI5MTA2MjgyNGRhMDA0MjFiMjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3F9CQPXvbPxiLnjjjvQQ5gRVqJVm
1mjYw3B/KmYo5E7r4Oqbux+58CWvCCtJb5VEo/X0fF6cxTWv0tvYQrfrP1jRczmt
hoWuE8ySWJbwNmcwjMLFFPZmdaRxEDLu65+C2BsV+vqBHYqFT4s1OnzL8Lf07L2i
srzSRk+22pZIFnqGlVxBaEzZltALhPIi4cA5kDILz+ZriYjr0qCOcYCTWKkwvPjc
0CPU/UKpPNLg/0Rv9gZwOeFrk1h+gbsm73SV4QzoWSgZ7qPKOxtg84enmvyPM/U7
IVajix/69AROKwY1t3mlDPV/rf2SZ/65L1CSa1SKOh+gmAXbA2pDFgsk/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzne4KL9HHfz5spEGKCTaAEIbJ0MB8GA1UdIwQY
MBaAFN+Plhxu+7f5znQhex1du1TpgcbyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzQtV0hHNzd0X25PZENGN0hWMjdWT21CeHZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi85MGU3MGYtODVkYy00NGE5LWJiMjMt
MjdmMmJjMTYyYTA3LzEvMzQtV0hHNzd0X25PZENGN0hWMjdWT21CeHZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi85MGU3MGYtODVkYy00NGE5LWJiMjMtMjdmMmJjMTYyYTA3
LzEvMzQtV0hHNzd0X25PZENGN0hWMjdWT21CeHZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALB5+haJH
FiWS4FZogx2NZV5Uoo6cFc6Pgwg3md64ph0SiSDhyETL/BobUuxpnZOYsrV4i5Ad
L0Vyl9/RTCJtM/tkWIVFEglINemnNmm/jNXzvWChuPtPjcxxFbYdYY+Ik5PHrTCz
qYQNvdVRihYnBJo+I0bpKYSu5r2I4jqgO0sfjTHFHqSmhCxa49ZooaC4LrDI+pL3
ubKd6h7Osj1HFROfgATPKPPV2BJqf2MNA6Dn/5j5lJQ7VDCCJ60EI1hYvIuc/5Vo
WUWxa4JT1Q5NwSBorHDNvWAYdPSZrw9kQ8fN4RA97q0mAR87DepLTh/va5KlQ6f0
q6xkjqIwEGmv7Q==
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:07:34 2025 by rpki-client