Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
File:                     t55dT4NeqI12tgJW4AN1R82Wgnk.mft (raw, json)
Hash identifier:          BK1dWGP+XiEEtnGDE1wKcJREwcGsQm4EA5AO2fA46rY=
Subject key identifier:   2F:1E:14:52:51:0F:21:27:23:31:5C:86:80:4C:6F:10:D5:3E:42:56
Authority key identifier: B7:9E:5D:4F:83:5E:A8:8D:76:B6:02:56:E0:03:75:47:CD:96:82:79
Certificate issuer:       /CN=b79e5d4f835ea88d76b60256e0037547cd968279
Certificate serial:       0196B74768E74CD5913D7EE70B109AB7C809
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
Manifest number:          047B
Signing time:             Fri 09 May 2025 23:00:32 +0000
Manifest this update:     Fri 09 May 2025 23:00:32 +0000
Manifest next update:     Sat 10 May 2025 23:00:32 +0000
Files and hashes:         1: jruZxZ6v3fQQDOP1XhyiLrCoyWo.roa (hash: JwmXnt+QW5OLkAvlfiLvs8bXFlLMvqHA2E9khKbsWec=)
                          2: t55dT4NeqI12tgJW4AN1R82Wgnk.crl (hash: HKi4V8TfAjlhwnFc8+uGBiYiv3RckWSCQ0HyKlnouzk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 23:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:47:68:e7:4c:d5:91:3d:7e:e7:0b:10:9a:b7:c8:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b79e5d4f835ea88d76b60256e0037547cd968279
        Validity
            Not Before: May  9 23:00:32 2025 GMT
            Not After : May 10 23:00:32 2025 GMT
        Subject: CN=2f1e1452510f212723315c86804c6f10d53e4256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:34:bb:e2:ad:0b:c8:1a:4a:47:d9:4f:40:3a:
                    eb:f4:78:22:c1:b6:04:3b:72:f4:8b:2c:d2:61:e2:
                    e3:16:f9:7d:f4:cf:86:75:dc:cf:b4:15:01:a1:cd:
                    a5:34:1c:34:cc:a8:00:a8:33:4b:8d:d9:84:45:82:
                    99:5f:21:e3:39:a8:38:6e:14:9f:a3:37:01:c2:fa:
                    96:f9:1f:ad:d1:d0:52:cb:0e:bb:a4:2c:91:49:8b:
                    2b:1d:bc:b8:d0:b0:2e:a0:c9:91:53:3a:b0:8b:35:
                    9e:59:c4:10:d2:69:19:04:e2:16:7f:15:6a:40:c8:
                    9d:94:ac:2b:67:44:39:80:ff:0e:81:dc:ce:4a:66:
                    70:70:1b:98:52:79:ec:08:6f:56:d3:e6:6f:b8:99:
                    2c:19:05:31:e2:cd:e1:8d:1b:b5:11:24:f4:6b:92:
                    9d:d6:9f:e0:b6:b4:99:fb:7d:a1:36:fa:50:15:14:
                    7c:88:3c:b2:51:51:21:be:21:25:c3:66:d7:5b:d7:
                    55:fd:c4:ff:ff:2f:3a:93:89:a9:b3:9d:90:35:4f:
                    22:f4:4f:4b:2f:73:0e:6c:70:f2:46:df:07:2c:95:
                    4a:a7:d8:77:74:3b:32:8a:2b:43:bd:d7:6d:2a:48:
                    12:8e:08:82:21:36:d5:2a:e7:81:76:27:4e:11:6a:
                    a2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:1E:14:52:51:0F:21:27:23:31:5C:86:80:4C:6F:10:D5:3E:42:56
            X509v3 Authority Key Identifier:
                keyid:B7:9E:5D:4F:83:5E:A8:8D:76:B6:02:56:E0:03:75:47:CD:96:82:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:f2:03:b5:95:71:ec:b7:80:6c:67:f0:19:49:0c:e8:f2:81:
         4c:48:d0:81:1e:5c:f8:21:82:ed:bb:9f:0c:70:0b:81:dc:43:
         e3:c8:6e:9b:a4:45:a2:36:9c:f7:af:1b:a6:2a:00:d0:83:5c:
         a3:93:09:aa:e9:af:42:94:25:12:92:10:fa:af:ca:09:a8:b8:
         46:66:bd:79:87:6a:0a:0d:3c:5f:85:27:0c:cf:d8:4f:20:81:
         e6:36:54:77:e0:75:e0:33:90:d5:e5:21:df:b2:af:8f:5f:ab:
         df:ad:5d:cd:a7:66:c0:ec:55:1c:ec:45:9c:43:49:a1:be:f1:
         2f:39:38:e5:a6:a9:53:e4:65:b7:fe:3d:4c:6c:4c:d9:9b:13:
         55:1c:d0:6e:b6:2d:ca:cc:53:56:e8:b7:9d:4c:31:56:63:53:
         d4:c4:fa:16:c1:42:1c:cd:83:e7:a1:dd:d5:86:59:03:66:d9:
         db:c2:73:f5:8a:07:17:ae:4e:00:19:e6:ae:dd:16:b3:17:18:
         e0:01:87:f3:6a:9d:76:07:d8:38:1f:ff:bb:e3:89:4b:0a:b8:
         c3:ea:69:82:3d:8f:ff:21:38:f5:32:2c:98:8c:1f:12:9a:48:
         61:a3:22:a1:41:a5:14:fd:33:4a:99:7d:2f:66:e1:95:39:03:
         15:82:b0:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa3R2jnTNWRPX7nCxCat8gJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3OWU1ZDRmODM1ZWE4OGQ3NmI2MDI1NmUwMDM3NTQ3Y2Q5
NjgyNzkwHhcNMjUwNTA5MjMwMDMyWhcNMjUwNTEwMjMwMDMyWjAzMTEwLwYDVQQD
EygyZjFlMTQ1MjUxMGYyMTI3MjMzMTVjODY4MDRjNmYxMGQ1M2U0MjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzS74q0LyBpKR9lPQDrr9HgiwbYE
O3L0iyzSYeLjFvl99M+GddzPtBUBoc2lNBw0zKgAqDNLjdmERYKZXyHjOag4bhSf
ozcBwvqW+R+t0dBSyw67pCyRSYsrHby40LAuoMmRUzqwizWeWcQQ0mkZBOIWfxVq
QMidlKwrZ0Q5gP8OgdzOSmZwcBuYUnnsCG9W0+ZvuJksGQUx4s3hjRu1EST0a5Kd
1p/gtrSZ+32hNvpQFRR8iDyyUVEhviElw2bXW9dV/cT//y86k4mps52QNU8i9E9L
L3MObHDyRt8HLJVKp9h3dDsyiitDvddtKkgSjgiCITbVKueBdidOEWqi/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8eFFJRDyEnIzFchoBMbxDVPkJWMB8GA1UdIwQY
MBaAFLeeXU+DXqiNdrYCVuADdUfNloJ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDU1ZFQ0TmVxSTEydGdKVzRBTjFSODJXZ25rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9lMzY5NGItNzdmOS00MmIwLWI1YTMt
OWI3ZDQ5YWRlZGIzLzEvdDU1ZFQ0TmVxSTEydGdKVzRBTjFSODJXZ25rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9lMzY5NGItNzdmOS00MmIwLWI1YTMtOWI3ZDQ5YWRlZGIz
LzEvdDU1ZFQ0TmVxSTEydGdKVzRBTjFSODJXZ25rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAffIDtZVx
7LeAbGfwGUkM6PKBTEjQgR5c+CGC7bufDHALgdxD48hum6RFojac968bpioA0INc
o5MJqumvQpQlEpIQ+q/KCai4Rma9eYdqCg08X4UnDM/YTyCB5jZUd+B14DOQ1eUh
37Kvj1+r361dzadmwOxVHOxFnENJob7xLzk45aapU+Rlt/49TGxM2ZsTVRzQbrYt
ysxTVui3nUwxVmNT1MT6FsFCHM2D56Hd1YZZA2bZ28Jz9YoHF65OABnmrt0WsxcY
4AGH82qddgfYOB//u+OJSwq4w+ppgj2P/yE49TIsmIwfEppIYaMioUGlFP0zSpl9
L2bhlTkDFYKwZA==
-----END CERTIFICATE-----
Generated at Sat May 10 07:31:53 2025 by rpki-client