Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft
File:                     iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft (raw, json)
Hash identifier:          UqbXP49cCfaQubnvxMjFi2K93WFaN5lEDSAgu6ATHIE=
Subject key identifier:   07:03:5C:AF:6E:64:39:1A:39:A8:DC:FF:57:00:2A:93:05:1E:7C:68
Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
Certificate issuer:       /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Certificate serial:       019696E1094B16B50AF7E41C81E064543C05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft
Manifest number:          15CD
Signing time:             Sat 03 May 2025 16:00:52 +0000
Manifest this update:     Sat 03 May 2025 16:00:52 +0000
Manifest next update:     Sun 04 May 2025 16:00:52 +0000
Files and hashes:         1: 5jyvM7zUsDe1Lex0DtFpG8BBbZo.roa (hash: PCMtayIHrF6LrkVGhI1nprpYM2aF/ClvU/EhrY1JrmQ=)
                          2: Dv5aKJ2pDNq6PQejY9KYLcZgexI.roa (hash: LTTZywdBBEaru6D3i2kCVgDeRzQz8voiBDF73OfU/U0=)
                          3: WeiKZlrZMWBmHmFyIba_qVs-J6c.roa (hash: QeA2Crhl6GOiBpaxxnH+m2YNQAEe2rgEWLu15CjW2Bs=)
                          4: iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl (hash: ofZjS1Fa0CKvuphkmsw0ZchGS39SZCTz9WjZ6SWCuJg=)
                          5: twVpvlgGcn2wMFxLET5jabKj7lE.roa (hash: 6O74RoMA1Bml+kLutB1Hui+CE3ATKHf//KCCsZVvIEI=)
                          6: yGtx0WOJHSICwJhdbTk60NjhMK0.roa (hash: vFmVeHUZ5/DLzIgWYqSmmpUMBj7nmSH/NYBLn/8iMRg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 May 2025 16:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:96:e1:09:4b:16:b5:0a:f7:e4:1c:81:e0:64:54:3c:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
        Validity
            Not Before: May  3 16:00:52 2025 GMT
            Not After : May  4 16:00:52 2025 GMT
        Subject: CN=07035caf6e64391a39a8dcff57002a93051e7c68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:31:bf:6f:30:74:18:6e:06:ce:f9:4a:a2:4a:
                    a2:68:57:f2:35:06:c6:5a:94:d9:d3:52:29:47:96:
                    c7:3c:dd:f7:c4:46:cd:47:08:5c:86:06:7d:37:b6:
                    a0:2c:b3:e0:c7:5b:c2:f6:43:4a:1d:fc:4d:6d:55:
                    18:42:04:73:8b:9a:56:88:6d:9d:ce:d9:ca:84:46:
                    7b:ec:5b:a1:a5:c9:77:1f:a3:57:55:00:f8:da:c7:
                    79:e7:4f:a9:48:87:83:b1:3b:b5:a0:c1:cd:e0:d5:
                    83:37:97:c0:57:96:a7:64:62:c1:57:8f:d7:63:34:
                    56:32:18:02:39:a2:70:f0:0a:2f:07:7b:00:57:43:
                    85:dc:13:c5:e8:8a:71:8c:70:be:1b:05:5c:73:0d:
                    e0:35:e3:af:a3:35:04:3a:32:32:89:68:ff:85:65:
                    f3:8e:f8:12:db:b9:1b:8f:e4:94:5e:54:0a:09:be:
                    5a:9c:e2:55:39:e4:75:bf:29:53:47:b3:78:b8:72:
                    43:3b:43:d4:e7:9c:29:15:c6:46:12:42:e9:64:56:
                    ce:2b:72:7d:c3:92:7c:34:b3:4a:7f:cf:ae:4f:6c:
                    74:65:55:2b:35:99:22:3b:a3:bc:93:eb:8b:6d:e9:
                    0a:09:e7:a8:df:eb:3a:70:50:84:08:de:6b:40:fe:
                    37:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:03:5C:AF:6E:64:39:1A:39:A8:DC:FF:57:00:2A:93:05:1E:7C:68
            X509v3 Authority Key Identifier:
                keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:06:cf:a9:55:6c:e3:a9:54:9d:36:91:1c:4e:d6:c8:5b:d3:
         9f:84:a1:32:42:e0:4a:69:45:24:6f:69:84:53:ed:ba:61:20:
         2e:5a:0e:84:5c:97:67:52:31:fe:d4:6e:5a:9e:f4:af:64:54:
         1b:a8:6f:bf:35:3d:1b:bf:ed:ca:02:8e:49:39:43:80:40:6e:
         16:6a:68:77:02:2d:d4:38:0d:35:22:9c:a2:7d:24:6c:e2:04:
         45:0d:31:70:0e:35:84:13:c1:12:e7:7e:62:5a:ca:a5:54:31:
         aa:66:cd:ae:94:20:de:45:45:3e:96:7f:ad:c2:7d:cc:6d:81:
         3b:b7:a7:ce:7b:19:3c:d5:f0:47:5b:a1:1d:b4:d5:da:f9:6f:
         19:1c:19:50:9b:f0:b5:2e:8a:da:2a:a4:f7:85:49:c3:81:fa:
         1f:ba:e9:b2:7b:bd:a3:ba:2d:06:62:ef:71:94:74:bf:90:ba:
         44:76:ba:05:9f:ba:44:d9:47:07:16:59:19:d8:70:eb:69:4e:
         f3:13:f8:3e:3f:af:7f:87:2e:5e:fb:50:9b:ae:a0:33:f8:aa:
         fb:25:d8:2d:99:3c:8d:b5:fd:56:05:6f:29:af:df:36:ae:d5:
         bd:d6:2a:cf:f9:ae:b7:e1:bc:99:bf:46:4c:40:58:41:b7:80:
         5c:cb:32:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaW4QlLFrUK9+QcgeBkVDwFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NDdhYTkxYjA2ZDhjNmI4NzI4NGYzZjQ1YTIxZGMyODFm
N2JhNTUwHhcNMjUwNTAzMTYwMDUyWhcNMjUwNTA0MTYwMDUyWjAzMTEwLwYDVQQD
EygwNzAzNWNhZjZlNjQzOTFhMzlhOGRjZmY1NzAwMmE5MzA1MWU3YzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DG/bzB0GG4GzvlKokqiaFfyNQbG
WpTZ01IpR5bHPN33xEbNRwhchgZ9N7agLLPgx1vC9kNKHfxNbVUYQgRzi5pWiG2d
ztnKhEZ77Fuhpcl3H6NXVQD42sd550+pSIeDsTu1oMHN4NWDN5fAV5anZGLBV4/X
YzRWMhgCOaJw8AovB3sAV0OF3BPF6IpxjHC+GwVccw3gNeOvozUEOjIyiWj/hWXz
jvgS27kbj+SUXlQKCb5anOJVOeR1vylTR7N4uHJDO0PU55wpFcZGEkLpZFbOK3J9
w5J8NLNKf8+uT2x0ZVUrNZkiO6O8k+uLbekKCeeo3+s6cFCECN5rQP437wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAcDXK9uZDkaOajc/1cAKpMFHnxoMB8GA1UdIwQY
MBaAFIhHqpGwbYxrhyhPP0WiHcKB97pVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUVlcWtiQnRqR3VIS0U4X1JhSWR3b0gzdWxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mZGYyOTYtNzVlNS00NjM1LTk1NDYt
Y2VhNzVkMGNkNjcxLzEvaUVlcWtiQnRqR3VIS0U4X1JhSWR3b0gzdWxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9mZGYyOTYtNzVlNS00NjM1LTk1NDYtY2VhNzVkMGNkNjcx
LzEvaUVlcWtiQnRqR3VIS0U4X1JhSWR3b0gzdWxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANQbPqVVs
46lUnTaRHE7WyFvTn4ShMkLgSmlFJG9phFPtumEgLloOhFyXZ1Ix/tRuWp70r2RU
G6hvvzU9G7/tygKOSTlDgEBuFmpodwIt1DgNNSKcon0kbOIERQ0xcA41hBPBEud+
YlrKpVQxqmbNrpQg3kVFPpZ/rcJ9zG2BO7enznsZPNXwR1uhHbTV2vlvGRwZUJvw
tS6K2iqk94VJw4H6H7rpsnu9o7otBmLvcZR0v5C6RHa6BZ+6RNlHBxZZGdhw62lO
8xP4Pj+vf4cuXvtQm66gM/iq+yXYLZk8jbX9VgVvKa/fNq7VvdYqz/mut+G8mb9G
TEBYQbeAXMsyyw==
-----END CERTIFICATE-----
Generated at Sun May 4 01:14:11 2025 by rpki-client