Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/w9yyPepY-X-tWnl7RXdB1b_msbA.mft
File:                     w9yyPepY-X-tWnl7RXdB1b_msbA.mft (raw, json)
Hash identifier:          chVuDq5o4U4VVidbu672t56p0l4dS9H04nsG86yGT7A=
Subject key identifier:   47:4C:A1:8C:82:2E:A5:7F:A6:FE:D6:47:E7:BD:A5:C4:8B:87:52:73
Authority key identifier: C3:DC:B2:3D:EA:58:F9:7F:AD:5A:79:7B:45:77:41:D5:BF:E6:B1:B0
Certificate issuer:       /CN=c3dcb23dea58f97fad5a797b457741d5bfe6b1b0
Certificate serial:       019682EC03308299A6E763EAAF872F054441
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w9yyPepY-X-tWnl7RXdB1b_msbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/w9yyPepY-X-tWnl7RXdB1b_msbA.mft
Manifest number:          1516
Signing time:             Tue 29 Apr 2025 19:00:27 +0000
Manifest this update:     Tue 29 Apr 2025 19:00:27 +0000
Manifest next update:     Wed 30 Apr 2025 19:00:27 +0000
Files and hashes:         1: KvTnsIcL8m_pQPoNHudO5mxyd6I.roa (hash: LQX5cYypJwp0YO63rbhroJGzv3tgP3X96RXpqlbq7V0=)
                          2: w9yyPepY-X-tWnl7RXdB1b_msbA.crl (hash: mPwNSXuZSdWPPV/SG/i/kVf8QYqPork/oe04W0kEenc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/w9yyPepY-X-tWnl7RXdB1b_msbA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/w9yyPepY-X-tWnl7RXdB1b_msbA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w9yyPepY-X-tWnl7RXdB1b_msbA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 15:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:82:ec:03:30:82:99:a6:e7:63:ea:af:87:2f:05:44:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3dcb23dea58f97fad5a797b457741d5bfe6b1b0
        Validity
            Not Before: Apr 29 19:00:27 2025 GMT
            Not After : Apr 30 19:00:27 2025 GMT
        Subject: CN=474ca18c822ea57fa6fed647e7bda5c48b875273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ab:c0:e0:1d:21:19:80:ed:88:45:a5:f7:57:
                    b9:91:8a:47:88:77:ce:51:29:c8:82:7b:d4:c3:30:
                    6e:74:b6:75:a5:fe:0e:1e:11:8b:58:c4:f0:be:75:
                    91:bc:90:5b:81:67:f4:be:d2:a2:a8:4e:ee:a1:61:
                    ab:85:d5:47:d8:d1:90:d2:13:8c:8b:1b:c0:8c:6f:
                    4c:1a:74:ba:06:68:ef:6a:d5:4c:8b:66:1e:47:3f:
                    b0:4f:b7:06:71:5f:7d:8b:e2:54:da:b5:6e:83:0c:
                    f4:a9:10:c2:3d:e4:bd:60:3e:c7:dc:7c:24:87:85:
                    31:e1:ae:7c:13:3a:6c:21:fe:89:14:65:0b:17:e6:
                    d3:be:52:13:78:0d:32:fa:a8:c8:6b:fe:47:57:bc:
                    7f:dc:67:ba:eb:77:21:db:07:10:ba:05:74:c1:38:
                    73:e0:e8:91:43:13:6c:6e:c8:5f:e8:2a:fb:2e:a8:
                    f3:a2:ab:62:d3:9b:dc:b6:7f:d1:c4:c1:9a:c2:6c:
                    66:6d:72:a6:8c:02:d1:7c:bf:5e:a2:e4:76:8b:79:
                    c9:98:ce:d6:3b:db:71:5a:df:98:db:9a:31:2e:48:
                    43:be:fe:08:b5:84:de:7e:49:cc:62:d4:7a:67:d8:
                    fe:81:fa:18:c5:a7:8a:07:6b:47:73:99:16:22:35:
                    f9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:4C:A1:8C:82:2E:A5:7F:A6:FE:D6:47:E7:BD:A5:C4:8B:87:52:73
            X509v3 Authority Key Identifier:
                keyid:C3:DC:B2:3D:EA:58:F9:7F:AD:5A:79:7B:45:77:41:D5:BF:E6:B1:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w9yyPepY-X-tWnl7RXdB1b_msbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/w9yyPepY-X-tWnl7RXdB1b_msbA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/w9yyPepY-X-tWnl7RXdB1b_msbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:5a:59:07:16:bb:88:ab:8e:19:41:29:c9:90:a4:24:50:56:
         8c:68:81:16:f3:04:22:b7:8e:46:db:71:e7:df:76:e3:22:c2:
         2e:39:d1:bc:5c:db:ef:cd:3a:1d:66:76:af:b0:d2:88:98:ff:
         19:ce:27:c2:dc:83:7a:47:a8:d3:97:c4:46:13:e6:44:f4:54:
         c5:0d:3b:5a:e6:70:4c:47:7d:c5:b0:86:6a:36:5c:f5:43:e9:
         1c:1e:54:07:52:ac:ef:6d:86:79:5a:c5:bf:ff:52:24:09:46:
         77:30:0e:5c:1c:11:da:6e:38:c9:14:d6:e4:c2:08:93:82:7e:
         98:79:4a:89:f4:c1:91:e2:60:13:1b:ce:d3:44:74:28:31:29:
         ee:2b:7c:80:7a:b7:c0:91:4a:0f:44:f7:29:54:f7:cb:8d:24:
         ad:cd:9b:92:b7:b8:68:42:b9:17:8e:d5:2d:8c:50:41:cd:a0:
         08:c4:e5:82:b8:c3:e6:44:f5:b8:0e:17:15:c4:b3:15:85:ce:
         93:3c:94:e1:fe:33:25:31:55:5b:c9:b3:d3:6d:7c:3e:1e:4c:
         20:53:54:44:42:52:27:c3:47:0f:63:7c:1d:44:b2:f5:67:ed:
         2d:7c:74:8c:cc:a7:3a:4b:6a:17:05:0f:cd:3e:f7:6d:28:42:
         4a:3b:e0:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaC7AMwgpmm52Pqr4cvBURBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzZGNiMjNkZWE1OGY5N2ZhZDVhNzk3YjQ1Nzc0MWQ1YmZl
NmIxYjAwHhcNMjUwNDI5MTkwMDI3WhcNMjUwNDMwMTkwMDI3WjAzMTEwLwYDVQQD
Eyg0NzRjYTE4YzgyMmVhNTdmYTZmZWQ2NDdlN2JkYTVjNDhiODc1MjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoavA4B0hGYDtiEWl91e5kYpHiHfO
USnIgnvUwzBudLZ1pf4OHhGLWMTwvnWRvJBbgWf0vtKiqE7uoWGrhdVH2NGQ0hOM
ixvAjG9MGnS6BmjvatVMi2YeRz+wT7cGcV99i+JU2rVugwz0qRDCPeS9YD7H3Hwk
h4Ux4a58EzpsIf6JFGULF+bTvlITeA0y+qjIa/5HV7x/3Ge663ch2wcQugV0wThz
4OiRQxNsbshf6Cr7Lqjzoqti05vctn/RxMGawmxmbXKmjALRfL9eouR2i3nJmM7W
O9txWt+Y25oxLkhDvv4ItYTefknMYtR6Z9j+gfoYxaeKB2tHc5kWIjX5EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEdMoYyCLqV/pv7WR+e9pcSLh1JzMB8GA1UdIwQY
MBaAFMPcsj3qWPl/rVp5e0V3QdW/5rGwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzl5eVBlcFktWC10V25sN1JYZEIxYl9tc2JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ZWM2NmQtZDZiNi00MzBmLThmY2It
ZTcwYTkxMWExYzdiLzEvdzl5eVBlcFktWC10V25sN1JYZEIxYl9tc2JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy82ZWM2NmQtZDZiNi00MzBmLThmY2ItZTcwYTkxMWExYzdi
LzEvdzl5eVBlcFktWC10V25sN1JYZEIxYl9tc2JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoFpZBxa7
iKuOGUEpyZCkJFBWjGiBFvMEIreORttx59924yLCLjnRvFzb7806HWZ2r7DSiJj/
Gc4nwtyDekeo05fERhPmRPRUxQ07WuZwTEd9xbCGajZc9UPpHB5UB1Ks722GeVrF
v/9SJAlGdzAOXBwR2m44yRTW5MIIk4J+mHlKifTBkeJgExvO00R0KDEp7it8gHq3
wJFKD0T3KVT3y40krc2bkre4aEK5F47VLYxQQc2gCMTlgrjD5kT1uA4XFcSzFYXO
kzyU4f4zJTFVW8mz0218Ph5MIFNUREJSJ8NHD2N8HUSy9WftLXx0jMynOktqFwUP
zT73bShCSjvgYw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 00:05:08 2025 by rpki-client