Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
File:                     fWG4N46PNorkmY1Rw6ms5kFI1s0.mft (raw, json)
Hash identifier:          zwmSxwtX/eseJcRUb3fAW7W3u8K+UCYDKvKIUb6QeKw=
Subject key identifier:   04:F5:BC:39:2A:E5:91:6E:88:6C:72:93:33:6E:A8:99:45:1B:41:76
Authority key identifier: 7D:61:B8:37:8E:8F:36:8A:E4:99:8D:51:C3:A9:AC:E6:41:48:D6:CD
Certificate issuer:       /CN=7d61b8378e8f368ae4998d51c3a9ace64148d6cd
Certificate serial:       0196764300880AD18A00DE1ABEF805646655
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
Manifest number:          1522
Signing time:             Sun 27 Apr 2025 08:00:24 +0000
Manifest this update:     Sun 27 Apr 2025 08:00:24 +0000
Manifest next update:     Mon 28 Apr 2025 08:00:24 +0000
Files and hashes:         1: fWG4N46PNorkmY1Rw6ms5kFI1s0.crl (hash: KK7lH8BsPexvANQ03k/YKhgcj3ByvM0B3+TCuhD6ZRU=)
                          2: twpPI3s0M0CHfpsRtqw1y94__1Q.roa (hash: 9YvNSCEe8cpoY/bygIYeVTlYIEufzY0ULaNZDfOCQKg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:43:00:88:0a:d1:8a:00:de:1a:be:f8:05:64:66:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d61b8378e8f368ae4998d51c3a9ace64148d6cd
        Validity
            Not Before: Apr 27 08:00:24 2025 GMT
            Not After : Apr 28 08:00:24 2025 GMT
        Subject: CN=04f5bc392ae5916e886c7293336ea899451b4176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:80:05:cc:bd:ce:ca:81:49:a3:07:1e:a8:7a:
                    da:62:18:01:06:c8:e0:2c:9f:8f:bf:00:47:12:71:
                    91:6e:33:49:77:d2:74:58:05:00:98:75:69:fe:1a:
                    7a:2e:cf:90:26:6d:ac:b5:3f:56:c9:0a:a1:ba:08:
                    f2:69:fc:47:7b:ff:0f:f0:76:86:ff:27:27:a1:2f:
                    7c:72:11:1d:c8:88:1f:7e:ba:75:6c:f7:1c:28:bc:
                    f7:aa:23:48:b0:4a:9b:e5:51:d9:81:5a:f1:0e:27:
                    5c:33:90:b1:41:0f:a5:2d:3e:da:c1:a4:44:ae:2b:
                    03:d8:69:78:0f:76:d1:de:3c:7c:be:d5:31:05:d1:
                    56:2a:51:81:e2:31:f9:0c:50:2d:ea:bf:7d:9a:8e:
                    f5:b1:43:70:37:9e:d5:16:8f:9a:e1:88:6c:17:ab:
                    00:9b:40:3d:0f:d3:c7:9f:04:a8:c3:79:47:7e:d5:
                    6a:e0:b6:da:19:11:77:f7:04:7f:ca:a0:78:db:d8:
                    f1:f2:5f:59:ea:63:7c:14:b0:15:21:d9:9e:3b:5e:
                    f1:27:1b:10:9c:f8:22:b4:54:a7:01:9d:0d:4c:6e:
                    c5:cf:b0:c9:cb:76:8f:e4:5e:d2:8d:8c:61:97:4b:
                    b5:f8:32:6c:f4:8f:3d:36:85:66:a9:bd:16:16:1d:
                    c3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F5:BC:39:2A:E5:91:6E:88:6C:72:93:33:6E:A8:99:45:1B:41:76
            X509v3 Authority Key Identifier:
                keyid:7D:61:B8:37:8E:8F:36:8A:E4:99:8D:51:C3:A9:AC:E6:41:48:D6:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:10:60:93:6d:fb:90:43:01:e6:e1:cd:38:d7:23:de:2e:c4:
         56:cb:43:08:ae:7d:b0:cd:4e:8e:3b:31:25:ae:a5:56:b7:6c:
         46:d7:5d:14:45:08:54:a2:a8:83:5b:24:d6:81:c3:5d:de:4d:
         5a:35:22:da:62:7c:25:ef:f3:75:d7:9d:e3:5a:03:21:7c:8d:
         06:d3:5d:80:fb:8a:14:38:b9:fc:a6:b5:5a:65:55:02:cb:cb:
         fc:a3:d8:e3:14:ab:a9:3a:4f:9f:c9:58:6b:ca:f1:39:84:23:
         12:9c:71:f2:b4:b7:04:54:d1:71:10:a6:4b:b5:a1:a8:c3:45:
         0f:7f:7e:64:aa:77:14:9a:59:79:29:3c:2c:1b:49:fd:1b:9b:
         1e:09:30:69:66:81:b2:95:55:22:80:78:c1:78:23:fc:50:15:
         67:5d:ac:4d:dc:8e:2f:eb:4a:fc:c4:8d:1e:cb:60:14:a2:0d:
         f5:c6:1d:d0:c0:e1:7c:c1:c0:9a:f0:0d:76:39:26:b6:59:48:
         7c:ba:90:14:6c:98:74:25:fb:fa:cf:41:a3:38:e8:40:5c:46:
         9e:4a:7f:5a:3f:40:71:ab:e4:57:b8:68:b1:3e:dd:37:44:40:
         ff:df:d4:b2:54:55:7c:1f:b5:02:f0:88:1f:f3:7d:e4:05:e1:
         2a:04:61:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2QwCICtGKAN4avvgFZGZVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNjFiODM3OGU4ZjM2OGFlNDk5OGQ1MWMzYTlhY2U2NDE0
OGQ2Y2QwHhcNMjUwNDI3MDgwMDI0WhcNMjUwNDI4MDgwMDI0WjAzMTEwLwYDVQQD
EygwNGY1YmMzOTJhZTU5MTZlODg2YzcyOTMzMzZlYTg5OTQ1MWI0MTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oAFzL3OyoFJowceqHraYhgBBsjg
LJ+PvwBHEnGRbjNJd9J0WAUAmHVp/hp6Ls+QJm2stT9WyQqhugjyafxHe/8P8HaG
/ycnoS98chEdyIgffrp1bPccKLz3qiNIsEqb5VHZgVrxDidcM5CxQQ+lLT7awaRE
risD2Gl4D3bR3jx8vtUxBdFWKlGB4jH5DFAt6r99mo71sUNwN57VFo+a4YhsF6sA
m0A9D9PHnwSow3lHftVq4LbaGRF39wR/yqB429jx8l9Z6mN8FLAVIdmeO17xJxsQ
nPgitFSnAZ0NTG7Fz7DJy3aP5F7SjYxhl0u1+DJs9I89NoVmqb0WFh3DawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAT1vDkq5ZFuiGxykzNuqJlFG0F2MB8GA1UdIwQY
MBaAFH1huDeOjzaK5JmNUcOprOZBSNbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZldHNE40NlBOb3JrbVkxUnc2bXM1a0ZJMXMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZDgyMWItMzQ1Mi00MjdhLThlNDQt
ZDE2ZTRhZTYxZjgwLzEvZldHNE40NlBOb3JrbVkxUnc2bXM1a0ZJMXMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZDgyMWItMzQ1Mi00MjdhLThlNDQtZDE2ZTRhZTYxZjgw
LzEvZldHNE40NlBOb3JrbVkxUnc2bXM1a0ZJMXMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGxBgk237
kEMB5uHNONcj3i7EVstDCK59sM1OjjsxJa6lVrdsRtddFEUIVKKog1sk1oHDXd5N
WjUi2mJ8Je/zdded41oDIXyNBtNdgPuKFDi5/Ka1WmVVAsvL/KPY4xSrqTpPn8lY
a8rxOYQjEpxx8rS3BFTRcRCmS7WhqMNFD39+ZKp3FJpZeSk8LBtJ/RubHgkwaWaB
spVVIoB4wXgj/FAVZ12sTdyOL+tK/MSNHstgFKIN9cYd0MDhfMHAmvANdjkmtllI
fLqQFGyYdCX7+s9BozjoQFxGnkp/Wj9AcavkV7hosT7dN0RA/9/UslRVfB+1AvCI
H/N95AXhKgRhVA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:39:20 2025 by rpki-client