Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft
File:                     kTxeovTqvz88Qt88Mx6cuhDJOgk.mft (raw, json)
Hash identifier:          ngjAR3W8URRNu6dXkLgk7LRVDotfCvDg6MTkiaFFzZ0=
Subject key identifier:   FE:85:9B:9E:D5:C9:10:9F:2B:E3:FB:16:E2:B8:5E:49:2C:DC:8E:52
Authority key identifier: 91:3C:5E:A2:F4:EA:BF:3F:3C:42:DF:3C:33:1E:9C:BA:10:C9:3A:09
Certificate issuer:       /CN=913c5ea2f4eabf3f3c42df3c331e9cba10c93a09
Certificate serial:       01967AFBB102BACCE1DA22BFB59CD5562A74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft
Manifest number:          1512
Signing time:             Mon 28 Apr 2025 06:00:37 +0000
Manifest this update:     Mon 28 Apr 2025 06:00:37 +0000
Manifest next update:     Tue 29 Apr 2025 06:00:37 +0000
Files and hashes:         1: kTxeovTqvz88Qt88Mx6cuhDJOgk.crl (hash: 9ppZ7b1TEtLteUJaNveURcMF1KJghINp1EiEF6FlmK4=)
                          2: y0VMz-pFHy2RJvHhIyZB92njV7Y.roa (hash: uVs/qgL9urgJyfwUIJcBcgFvjGj1s6IUF07oWo8sQcg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 06:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7a:fb:b1:02:ba:cc:e1:da:22:bf:b5:9c:d5:56:2a:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913c5ea2f4eabf3f3c42df3c331e9cba10c93a09
        Validity
            Not Before: Apr 28 06:00:37 2025 GMT
            Not After : Apr 29 06:00:37 2025 GMT
        Subject: CN=fe859b9ed5c9109f2be3fb16e2b85e492cdc8e52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:40:07:80:51:26:5a:1c:35:79:6b:dd:78:a6:
                    ec:f9:ab:a1:83:52:87:b4:75:73:14:59:97:2d:76:
                    4b:3c:a3:e3:fa:53:3f:52:0f:2c:7d:7e:30:6e:49:
                    94:a7:b2:37:73:a9:4c:78:19:dd:4f:72:dd:75:46:
                    49:f8:df:34:bb:57:89:31:12:d1:3a:04:da:60:c1:
                    15:83:d9:ea:1d:d3:6f:69:27:1d:84:62:20:9d:bf:
                    2a:f6:aa:8b:ff:eb:27:f7:19:9c:c9:2d:5d:37:8c:
                    13:40:0f:07:63:a8:fd:aa:24:9e:a0:ed:cd:d3:c0:
                    0d:e3:1d:96:5e:fa:37:2f:8c:48:75:52:17:06:7b:
                    3f:60:6d:71:1b:90:5b:19:40:8f:47:cb:e6:28:bd:
                    c4:65:b0:07:be:bc:27:44:bc:6e:5f:14:36:18:2b:
                    2a:e2:2b:a0:db:71:9e:02:9b:6b:11:a9:e3:d6:9a:
                    57:7e:dd:d0:ed:77:21:9a:60:81:92:fe:a8:de:8b:
                    79:05:05:97:aa:1c:5a:c5:d9:2f:1a:8e:96:0a:b3:
                    f6:5d:43:c4:19:1f:ce:55:2c:53:06:d7:07:37:e0:
                    6b:8c:42:8a:f7:21:5b:12:69:1d:5c:dc:ef:69:3f:
                    c3:06:6a:da:69:7d:f7:65:7f:c3:d6:ba:f0:5b:5b:
                    29:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:85:9B:9E:D5:C9:10:9F:2B:E3:FB:16:E2:B8:5E:49:2C:DC:8E:52
            X509v3 Authority Key Identifier:
                keyid:91:3C:5E:A2:F4:EA:BF:3F:3C:42:DF:3C:33:1E:9C:BA:10:C9:3A:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:57:cc:02:6c:12:d6:f6:c2:92:e4:12:cc:86:a6:b8:d5:4a:
         ee:d9:cf:9b:e4:7e:9e:98:a9:6e:a4:1a:07:18:20:30:93:7f:
         7f:67:7a:01:6b:a6:10:3c:87:e3:ed:f1:a3:be:86:d6:d1:18:
         ca:c9:95:d8:94:91:74:38:94:64:a7:c8:38:ab:e4:86:f9:9d:
         a8:87:ef:5b:0c:ad:01:9e:6f:45:38:4a:dc:81:1f:bb:8d:cc:
         e1:86:e3:23:20:72:91:bc:02:44:5d:3c:67:91:91:20:8c:60:
         a2:98:f4:5a:46:a4:79:77:27:f8:79:47:65:76:f9:55:44:b2:
         2c:c0:43:8a:d3:4d:5a:41:24:c3:5c:91:49:06:9b:0b:a3:ad:
         10:23:35:a7:38:7e:28:73:20:66:75:fb:5f:ab:5a:b4:79:46:
         64:18:26:09:ba:3d:19:2b:eb:b2:9d:dd:5a:75:2e:9c:9b:f9:
         ff:ed:16:42:79:a8:f0:6c:10:9d:51:33:90:bf:a9:5d:ab:ce:
         ee:90:d8:93:c7:0d:83:22:12:e9:c2:e7:d0:b2:80:b6:eb:bf:
         8e:d6:d0:00:5e:71:ad:2e:c9:10:01:11:fc:f4:d9:b0:ac:ac:
         f6:69:fa:45:89:b5:35:1b:86:03:ae:2f:89:a3:0b:d2:f4:2b:
         fe:ee:da:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ6+7ECuszh2iK/tZzVVip0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxM2M1ZWEyZjRlYWJmM2YzYzQyZGYzYzMzMWU5Y2JhMTBj
OTNhMDkwHhcNMjUwNDI4MDYwMDM3WhcNMjUwNDI5MDYwMDM3WjAzMTEwLwYDVQQD
EyhmZTg1OWI5ZWQ1YzkxMDlmMmJlM2ZiMTZlMmI4NWU0OTJjZGM4ZTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkAHgFEmWhw1eWvdeKbs+auhg1KH
tHVzFFmXLXZLPKPj+lM/Ug8sfX4wbkmUp7I3c6lMeBndT3LddUZJ+N80u1eJMRLR
OgTaYMEVg9nqHdNvaScdhGIgnb8q9qqL/+sn9xmcyS1dN4wTQA8HY6j9qiSeoO3N
08AN4x2WXvo3L4xIdVIXBns/YG1xG5BbGUCPR8vmKL3EZbAHvrwnRLxuXxQ2GCsq
4iug23GeAptrEanj1ppXft3Q7XchmmCBkv6o3ot5BQWXqhxaxdkvGo6WCrP2XUPE
GR/OVSxTBtcHN+BrjEKK9yFbEmkdXNzvaT/DBmraaX33ZX/D1rrwW1sp3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6Fm57VyRCfK+P7FuK4Xkks3I5SMB8GA1UdIwQY
MBaAFJE8XqL06r8/PELfPDMenLoQyToJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1R4ZW92VHF2ejg4UXQ4OE14NmN1aERKT2drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy80YjQwZDktOTc4ZS00MmEzLTgzMWUt
YjEwOGFkOWUyMmM4LzEva1R4ZW92VHF2ejg4UXQ4OE14NmN1aERKT2drLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy80YjQwZDktOTc4ZS00MmEzLTgzMWUtYjEwOGFkOWUyMmM4
LzEva1R4ZW92VHF2ejg4UXQ4OE14NmN1aERKT2drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAFfMAmwS
1vbCkuQSzIamuNVK7tnPm+R+npipbqQaBxggMJN/f2d6AWumEDyH4+3xo76G1tEY
ysmV2JSRdDiUZKfIOKvkhvmdqIfvWwytAZ5vRThK3IEfu43M4YbjIyBykbwCRF08
Z5GRIIxgopj0WkakeXcn+HlHZXb5VUSyLMBDitNNWkEkw1yRSQabC6OtECM1pzh+
KHMgZnX7X6tatHlGZBgmCbo9GSvrsp3dWnUunJv5/+0WQnmo8GwQnVEzkL+pXavO
7pDYk8cNgyIS6cLn0LKAtuu/jtbQAF5xrS7JEAER/PTZsKys9mn6RYm1NRuGA64v
iaML0vQr/u7a5Q==
-----END CERTIFICATE-----
Generated at Mon Apr 28 12:34:49 2025 by rpki-client