Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
File:                     taJj0Y61xUD3R4glu3LvrG8o-Cs.mft (raw, json)
Hash identifier:          y96z2VW9Z2jFBxJqp+ypS6yByJb5QfNB/V5/l2mot5E=
Subject key identifier:   98:CF:4E:6A:B6:33:31:6B:1E:D9:24:DE:4C:49:E4:D9:6D:1B:0B:93
Authority key identifier: B5:A2:63:D1:8E:B5:C5:40:F7:47:88:25:BB:72:EF:AC:6F:28:F8:2B
Certificate issuer:       /CN=b5a263d18eb5c540f7478825bb72efac6f28f82b
Certificate serial:       019676B10C123D6325D2E68412BC2CEAFE47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
Manifest number:          14A0
Signing time:             Sun 27 Apr 2025 10:00:36 +0000
Manifest this update:     Sun 27 Apr 2025 10:00:36 +0000
Manifest next update:     Mon 28 Apr 2025 10:00:36 +0000
Files and hashes:         1: FxOU5mcs5zu6It7tyYPtggiNpMw.roa (hash: HYzosP3W6gjE2lC2/EeCUTPjqHpatsBGbz79rZD00GQ=)
                          2: taJj0Y61xUD3R4glu3LvrG8o-Cs.crl (hash: nSONLnzoj4C8qfJbgAb1R0ha/ZulH92euLnuJYWz6+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:b1:0c:12:3d:63:25:d2:e6:84:12:bc:2c:ea:fe:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5a263d18eb5c540f7478825bb72efac6f28f82b
        Validity
            Not Before: Apr 27 10:00:36 2025 GMT
            Not After : Apr 28 10:00:36 2025 GMT
        Subject: CN=98cf4e6ab633316b1ed924de4c49e4d96d1b0b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:19:2a:e8:11:10:6c:34:1c:1b:37:22:02:35:
                    0a:5a:02:04:c1:b6:18:2f:bf:c2:50:bf:d3:63:1f:
                    e2:6c:4c:7d:62:f8:47:51:5b:86:2b:2f:4c:ce:c9:
                    8a:06:57:96:00:cd:75:2a:57:76:1f:b9:8e:fa:14:
                    25:ab:29:c3:a6:95:57:81:32:56:a0:b3:22:92:ec:
                    e6:37:dd:f3:47:20:dd:a1:c6:60:ef:b3:9f:6f:78:
                    f9:82:b8:fb:84:bc:39:0c:c7:4f:5f:60:db:59:2a:
                    70:58:f7:6f:73:ba:a9:28:4f:ed:9d:9a:15:79:a4:
                    35:12:da:21:ad:6c:55:90:85:8b:81:f5:c3:58:cb:
                    a1:d8:2c:47:54:c2:8b:e4:f8:b7:b5:f6:94:cf:cb:
                    e8:54:2c:72:3c:c0:12:ab:94:ec:92:b3:df:29:3d:
                    9f:71:94:da:4a:47:57:01:a5:c4:7a:ae:1f:73:81:
                    75:ec:60:96:ea:5d:04:33:7f:bf:c7:bf:95:92:c1:
                    7e:5a:95:49:32:54:da:ba:95:1b:89:c8:fc:37:59:
                    7b:0c:26:2e:1f:a5:95:82:c5:9e:8f:70:ae:6a:6d:
                    12:96:93:b3:16:9e:db:16:a1:b1:41:5b:2d:1e:21:
                    f1:a4:2b:ca:b1:e6:20:31:c2:bd:70:de:24:0b:e4:
                    7a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:CF:4E:6A:B6:33:31:6B:1E:D9:24:DE:4C:49:E4:D9:6D:1B:0B:93
            X509v3 Authority Key Identifier:
                keyid:B5:A2:63:D1:8E:B5:C5:40:F7:47:88:25:BB:72:EF:AC:6F:28:F8:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:e0:56:44:23:df:06:36:26:a0:2d:69:bc:b4:a2:9b:a8:80:
         6a:61:85:c2:88:a7:da:75:17:13:95:bb:4a:72:01:1a:aa:95:
         23:82:56:67:7d:10:00:9f:6b:73:8a:2b:db:41:bf:57:4b:c8:
         4b:e0:03:d5:c1:2d:15:bc:04:7c:a7:cc:11:d8:67:73:83:b6:
         80:32:d2:ae:cb:83:4e:20:4a:0c:53:ee:82:f1:94:3b:84:58:
         3c:e6:74:0f:97:65:18:46:6d:a4:6b:ba:b6:3d:b6:fa:77:af:
         3a:21:7a:3b:44:12:57:9a:d2:f4:26:0b:1f:8d:df:a4:94:28:
         83:78:b5:7c:69:70:d3:74:2b:4a:51:c0:b4:9c:a0:42:da:c2:
         39:09:b4:35:57:ec:5a:99:49:3d:00:9c:04:2a:98:80:aa:bc:
         81:2a:0b:7f:a0:37:e0:04:02:d6:b9:ea:45:ca:18:bd:cc:21:
         6a:6c:41:7d:79:83:c6:ba:3c:cb:52:d1:5a:7f:48:31:60:e0:
         55:25:5e:67:f5:81:ae:28:01:10:3d:59:4c:7c:68:48:99:21:
         81:38:2e:5d:e2:b1:90:29:49:56:3e:48:c5:f2:fa:07:5c:31:
         cf:50:08:ff:f0:db:95:7e:9a:37:91:a0:b6:e2:97:2c:fb:cf:
         90:c0:12:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2sQwSPWMl0uaEErws6v5HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YTI2M2QxOGViNWM1NDBmNzQ3ODgyNWJiNzJlZmFjNmYy
OGY4MmIwHhcNMjUwNDI3MTAwMDM2WhcNMjUwNDI4MTAwMDM2WjAzMTEwLwYDVQQD
Eyg5OGNmNGU2YWI2MzMzMTZiMWVkOTI0ZGU0YzQ5ZTRkOTZkMWIwYjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhkq6BEQbDQcGzciAjUKWgIEwbYY
L7/CUL/TYx/ibEx9YvhHUVuGKy9MzsmKBleWAM11Kld2H7mO+hQlqynDppVXgTJW
oLMikuzmN93zRyDdocZg77Ofb3j5grj7hLw5DMdPX2DbWSpwWPdvc7qpKE/tnZoV
eaQ1EtohrWxVkIWLgfXDWMuh2CxHVMKL5Pi3tfaUz8voVCxyPMASq5TskrPfKT2f
cZTaSkdXAaXEeq4fc4F17GCW6l0EM3+/x7+VksF+WpVJMlTaupUbicj8N1l7DCYu
H6WVgsWej3Cuam0SlpOzFp7bFqGxQVstHiHxpCvKseYgMcK9cN4kC+R6UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJjPTmq2MzFrHtkk3kxJ5NltGwuTMB8GA1UdIwQY
MBaAFLWiY9GOtcVA90eIJbty76xvKPgrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGFKajBZNjF4VUQzUjRnbHUzTHZyRzhvLUNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xZDAxNzEtMzMwNy00NTMxLWE3M2Et
MTQ2YTY5YjZkOGU0LzEvdGFKajBZNjF4VUQzUjRnbHUzTHZyRzhvLUNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8xZDAxNzEtMzMwNy00NTMxLWE3M2EtMTQ2YTY5YjZkOGU0
LzEvdGFKajBZNjF4VUQzUjRnbHUzTHZyRzhvLUNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr+BWRCPf
BjYmoC1pvLSim6iAamGFwoin2nUXE5W7SnIBGqqVI4JWZ30QAJ9rc4or20G/V0vI
S+AD1cEtFbwEfKfMEdhnc4O2gDLSrsuDTiBKDFPugvGUO4RYPOZ0D5dlGEZtpGu6
tj22+nevOiF6O0QSV5rS9CYLH43fpJQog3i1fGlw03QrSlHAtJygQtrCOQm0NVfs
WplJPQCcBCqYgKq8gSoLf6A34AQC1rnqRcoYvcwhamxBfXmDxro8y1LRWn9IMWDg
VSVeZ/WBrigBED1ZTHxoSJkhgTguXeKxkClJVj5IxfL6B1wxz1AI//DblX6aN5Gg
tuKXLPvPkMAS+A==
-----END CERTIFICATE-----
Generated at Sun Apr 27 15:22:15 2025 by rpki-client