Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft
File:                     p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft (raw, json)
Hash identifier:          N0z2fagukSjbnIw5RCN3whcthqWD20DlY7zXIxb1JJg=
Subject key identifier:   06:08:42:41:14:E4:82:C5:6D:21:53:1A:D0:1D:B5:67:4E:B9:BF:B3
Authority key identifier: A7:9D:A2:A5:BD:87:78:DB:62:21:D7:BF:66:12:DB:0E:0F:EF:17:64
Certificate issuer:       /CN=a79da2a5bd8778db6221d7bf6612db0e0fef1764
Certificate serial:       019694F2845ED09B0815035EB4C496A6BD2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p52ipb2HeNtiIde_ZhLbDg_vF2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft
Manifest number:          151E
Signing time:             Sat 03 May 2025 07:00:43 +0000
Manifest this update:     Sat 03 May 2025 07:00:43 +0000
Manifest next update:     Sun 04 May 2025 07:00:43 +0000
Files and hashes:         1: 1-iNy3jh1NFZXcxAiKeiVx48NW6M.roa (hash: exM+KStZhJxdlJqEmPR+3n9NcBPaEAtgOuwOgKWeJq0=)
                          2: p52ipb2HeNtiIde_ZhLbDg_vF2Q.crl (hash: 3PDBp8DiaqrlUKzhPO2tI+QUz5DEq25UN5+1jcmC5qI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p52ipb2HeNtiIde_ZhLbDg_vF2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:94:f2:84:5e:d0:9b:08:15:03:5e:b4:c4:96:a6:bd:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a79da2a5bd8778db6221d7bf6612db0e0fef1764
        Validity
            Not Before: May  3 07:00:43 2025 GMT
            Not After : May  4 07:00:43 2025 GMT
        Subject: CN=0608424114e482c56d21531ad01db5674eb9bfb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2e:40:9c:23:41:33:8e:85:dc:27:5d:71:8c:
                    47:52:ca:e2:09:4f:12:7c:41:25:64:06:b3:69:3a:
                    17:8f:3f:42:1d:b5:ea:5a:53:a5:22:0b:a5:64:0b:
                    e7:af:37:07:72:b6:19:d7:c6:28:3f:9f:c8:48:02:
                    3a:dc:0d:e4:cb:d8:ab:3b:7b:68:a1:c4:fc:62:4e:
                    f5:ff:8b:b8:f2:3e:60:0b:30:b9:c5:da:72:b5:90:
                    d5:5e:cf:95:42:ef:70:5c:e7:01:1f:16:58:b6:ba:
                    de:d6:28:ec:72:52:d5:97:8e:d7:a6:04:5b:af:6e:
                    be:20:f8:74:72:71:8c:ff:59:11:26:e0:9a:06:82:
                    5f:79:e9:7b:cb:b0:b1:a3:76:05:8c:cc:f9:90:86:
                    9e:e0:33:3c:fb:ca:26:6f:26:24:9f:a4:4a:7f:64:
                    4f:33:5c:75:fa:56:04:87:df:21:b1:20:75:37:32:
                    e5:52:59:b0:73:0f:64:bd:23:78:f7:80:b9:6b:14:
                    75:5e:a4:05:19:a5:51:cb:e1:d5:a0:e6:f6:77:d2:
                    ba:54:07:86:5c:8d:16:b5:30:5b:26:56:66:93:c0:
                    86:54:cb:22:30:2f:57:52:d0:68:c5:a6:ec:6c:b5:
                    f1:35:19:02:73:25:5c:fe:e4:8c:98:fb:26:e4:f0:
                    0e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:08:42:41:14:E4:82:C5:6D:21:53:1A:D0:1D:B5:67:4E:B9:BF:B3
            X509v3 Authority Key Identifier:
                keyid:A7:9D:A2:A5:BD:87:78:DB:62:21:D7:BF:66:12:DB:0E:0F:EF:17:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p52ipb2HeNtiIde_ZhLbDg_vF2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:61:1a:01:95:8e:d5:d0:95:b0:d7:29:0f:54:21:aa:2a:06:
         92:31:eb:5e:a2:7c:13:bd:02:fd:74:fa:0e:61:02:42:b1:97:
         ad:cb:e5:8b:34:10:d1:63:c4:d2:12:d9:e1:08:27:02:8f:7d:
         16:c4:fe:f0:25:01:9c:15:bd:8c:85:d2:ed:33:f4:5a:0b:27:
         14:4c:e3:b5:fd:16:3c:62:53:f5:59:44:13:4a:4b:21:ae:21:
         c5:d8:2e:8c:c8:85:c1:21:35:55:9e:2c:b5:e7:f7:61:37:e6:
         2e:be:11:56:ee:b1:d5:07:dc:6d:2f:85:06:d3:5d:b7:f4:04:
         6e:12:91:8a:a3:32:91:ca:b2:4e:1f:24:41:cc:7a:94:79:41:
         ab:39:22:2c:37:2d:85:44:81:d0:52:e6:24:21:8b:f6:ad:ff:
         4f:cf:f9:20:f1:2d:7c:6c:4e:88:f7:b9:42:d0:3c:48:cb:7e:
         4c:8a:b4:c8:be:e3:b0:16:1b:53:48:9a:06:f5:8b:a5:3d:18:
         26:ab:fa:58:a9:37:4e:66:cb:fc:a7:64:2c:09:51:a3:de:52:
         82:cf:79:0f:65:f5:ac:97:5e:9e:db:b7:6f:7a:6d:04:1c:39:
         09:f6:56:a4:71:11:9a:8d:25:f1:fe:20:f0:f7:ef:35:b2:68:
         0c:f7:04:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaU8oRe0JsIFQNetMSWpr0sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3OWRhMmE1YmQ4Nzc4ZGI2MjIxZDdiZjY2MTJkYjBlMGZl
ZjE3NjQwHhcNMjUwNTAzMDcwMDQzWhcNMjUwNTA0MDcwMDQzWjAzMTEwLwYDVQQD
EygwNjA4NDI0MTE0ZTQ4MmM1NmQyMTUzMWFkMDFkYjU2NzRlYjliZmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS5AnCNBM46F3CddcYxHUsriCU8S
fEElZAazaToXjz9CHbXqWlOlIgulZAvnrzcHcrYZ18YoP5/ISAI63A3ky9irO3to
ocT8Yk71/4u48j5gCzC5xdpytZDVXs+VQu9wXOcBHxZYtrre1ijsclLVl47XpgRb
r26+IPh0cnGM/1kRJuCaBoJfeel7y7Cxo3YFjMz5kIae4DM8+8ombyYkn6RKf2RP
M1x1+lYEh98hsSB1NzLlUlmwcw9kvSN494C5axR1XqQFGaVRy+HVoOb2d9K6VAeG
XI0WtTBbJlZmk8CGVMsiMC9XUtBoxabsbLXxNRkCcyVc/uSMmPsm5PAOcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAYIQkEU5ILFbSFTGtAdtWdOub+zMB8GA1UdIwQY
MBaAFKedoqW9h3jbYiHXv2YS2w4P7xdkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDUyaXBiMkhlTnRpSWRlX1poTGJEZ192RjJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82Yjg0MTUtYzg3Ni00NmM2LWE5ZjYt
ZTZiYmVmNWQ1ZTNlLzEvcDUyaXBiMkhlTnRpSWRlX1poTGJEZ192RjJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82Yjg0MTUtYzg3Ni00NmM2LWE5ZjYtZTZiYmVmNWQ1ZTNl
LzEvcDUyaXBiMkhlTnRpSWRlX1poTGJEZ192RjJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO2EaAZWO
1dCVsNcpD1QhqioGkjHrXqJ8E70C/XT6DmECQrGXrcvlizQQ0WPE0hLZ4QgnAo99
FsT+8CUBnBW9jIXS7TP0WgsnFEzjtf0WPGJT9VlEE0pLIa4hxdgujMiFwSE1VZ4s
tef3YTfmLr4RVu6x1QfcbS+FBtNdt/QEbhKRiqMykcqyTh8kQcx6lHlBqzkiLDct
hUSB0FLmJCGL9q3/T8/5IPEtfGxOiPe5QtA8SMt+TIq0yL7jsBYbU0iaBvWLpT0Y
Jqv6WKk3TmbL/KdkLAlRo95Sgs95D2X1rJdentu3b3ptBBw5CfZWpHERmo0l8f4g
8PfvNbJoDPcEMQ==
-----END CERTIFICATE-----
Generated at Sat May 3 12:35:32 2025 by rpki-client