Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
File:                     4auG-AxLsqxW5B7HokauKWnY01g.mft (raw, json)
Hash identifier:          KK5LndMM+9J6MaYLzSdWsN6454s38vdMMJ5n7LHZMsE=
Subject key identifier:   5F:5A:28:B1:EF:73:6B:39:12:BA:39:09:CB:72:CF:C6:15:74:98:45
Authority key identifier: E1:AB:86:F8:0C:4B:B2:AC:56:E4:1E:C7:A2:46:AE:29:69:D8:D3:58
Certificate issuer:       /CN=e1ab86f80c4bb2ac56e41ec7a246ae2969d8d358
Certificate serial:       0196CC4EC9BD14693718811E6F9965435FC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
Manifest number:          0505
Signing time:             Wed 14 May 2025 01:00:37 +0000
Manifest this update:     Wed 14 May 2025 01:00:37 +0000
Manifest next update:     Thu 15 May 2025 01:00:37 +0000
Files and hashes:         1: 4auG-AxLsqxW5B7HokauKWnY01g.crl (hash: fzHx2rSlkMGs3P3jck+5aXkyoVUocaZD2MzjTo4a0tA=)
                          2: IrEzCg-L6ChV6NO0z_pSKTvObkE.roa (hash: BAxTmTfKNgnausi613sLgqp7n2C4MuqhHvDS7/1g8aY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 22:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cc:4e:c9:bd:14:69:37:18:81:1e:6f:99:65:43:5f:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ab86f80c4bb2ac56e41ec7a246ae2969d8d358
        Validity
            Not Before: May 14 01:00:37 2025 GMT
            Not After : May 15 01:00:37 2025 GMT
        Subject: CN=5f5a28b1ef736b3912ba3909cb72cfc615749845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:af:85:b4:6f:14:c5:92:c9:51:1b:9b:fd:c0:
                    a7:c4:cd:4e:1c:58:b5:51:93:98:33:f3:13:35:c5:
                    48:22:37:ba:60:1f:c9:81:df:a2:5f:0a:dd:01:fb:
                    44:47:99:d6:99:4a:2d:44:95:61:78:1c:9b:3f:c7:
                    b6:f8:6c:82:c3:cf:cd:2c:91:c4:31:45:0c:a1:be:
                    46:8e:2e:d3:37:2f:aa:f2:80:d4:35:de:5f:e4:72:
                    ca:07:45:c1:a8:9c:37:56:c0:5d:10:b8:52:55:b2:
                    eb:50:54:ea:0d:f7:95:bb:9c:7b:5a:4d:6b:c8:09:
                    2e:5d:2f:30:cb:74:e6:f2:23:19:85:dd:b1:4b:62:
                    b1:64:b5:57:d9:67:4a:2f:b1:69:f8:c4:5d:76:57:
                    46:30:b2:39:9f:aa:21:ad:e5:ab:6b:af:e5:18:aa:
                    22:5e:ca:7d:2c:d9:1c:db:4f:af:ae:1a:c5:3a:14:
                    96:61:da:a5:cb:64:a6:35:15:5c:12:a9:8a:15:5c:
                    58:25:20:f3:0c:90:43:cf:4a:16:40:87:69:c0:f7:
                    af:c5:43:00:c2:f4:0f:03:0f:eb:8e:5b:14:00:09:
                    c9:fe:ee:43:35:2a:67:09:70:5e:60:76:07:32:d0:
                    c6:25:b8:84:24:6e:08:f8:bb:cc:c1:97:86:ed:e6:
                    a4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:5A:28:B1:EF:73:6B:39:12:BA:39:09:CB:72:CF:C6:15:74:98:45
            X509v3 Authority Key Identifier:
                keyid:E1:AB:86:F8:0C:4B:B2:AC:56:E4:1E:C7:A2:46:AE:29:69:D8:D3:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:58:e9:f6:22:2d:21:81:23:45:b5:3b:e2:da:e1:12:7a:05:
         f5:ab:4a:92:a7:73:3b:00:4f:0f:cf:55:c5:ef:42:26:89:50:
         e5:61:29:56:80:93:32:56:0c:d3:33:5d:09:ca:24:8c:6e:bc:
         c3:ec:7d:97:9c:ba:c2:ab:c3:03:29:9a:c2:46:82:18:2f:40:
         01:30:73:e5:5c:7f:1d:d8:8b:90:dd:f5:ca:ab:74:2e:a0:04:
         24:32:97:00:a3:cb:af:ff:ee:3e:9d:5b:95:f5:60:d5:da:3d:
         20:29:8f:2d:50:07:cf:c9:93:cd:2d:89:3d:a7:ae:9b:11:97:
         09:ed:12:23:21:a3:45:ee:68:d4:31:87:1b:cd:ea:b3:4d:71:
         53:25:bb:46:45:1f:fc:c0:4e:92:18:2d:7f:67:00:e4:a0:d9:
         84:88:f8:83:a3:c1:8a:92:77:c5:95:f8:7a:22:06:ee:db:73:
         df:a5:e9:39:d3:d3:d6:fa:d8:e2:a6:4d:7d:c1:33:ea:63:a2:
         a6:f9:4a:3e:f0:95:9e:93:e6:a9:87:c4:dc:59:c4:00:e8:31:
         9b:44:c4:98:c8:9a:14:47:fb:ea:c6:b6:bf:9d:9a:3a:cf:fe:
         b7:9c:14:a2:72:18:13:f3:93:ee:e0:8b:0e:0b:e0:da:61:65:
         b3:08:f0:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbMTsm9FGk3GIEeb5llQ1/GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYWI4NmY4MGM0YmIyYWM1NmU0MWVjN2EyNDZhZTI5Njlk
OGQzNTgwHhcNMjUwNTE0MDEwMDM3WhcNMjUwNTE1MDEwMDM3WjAzMTEwLwYDVQQD
Eyg1ZjVhMjhiMWVmNzM2YjM5MTJiYTM5MDljYjcyY2ZjNjE1NzQ5ODQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5a+FtG8UxZLJURub/cCnxM1OHFi1
UZOYM/MTNcVIIje6YB/Jgd+iXwrdAftER5nWmUotRJVheBybP8e2+GyCw8/NLJHE
MUUMob5Gji7TNy+q8oDUNd5f5HLKB0XBqJw3VsBdELhSVbLrUFTqDfeVu5x7Wk1r
yAkuXS8wy3Tm8iMZhd2xS2KxZLVX2WdKL7Fp+MRddldGMLI5n6ohreWra6/lGKoi
Xsp9LNkc20+vrhrFOhSWYdqly2SmNRVcEqmKFVxYJSDzDJBDz0oWQIdpwPevxUMA
wvQPAw/rjlsUAAnJ/u5DNSpnCXBeYHYHMtDGJbiEJG4I+LvMwZeG7eakGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF9aKLHvc2s5Ero5Cctyz8YVdJhFMB8GA1UdIwQY
MBaAFOGrhvgMS7KsVuQex6JGrilp2NNYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGF1Ry1BeExzcXhXNUI3SG9rYXVLV25ZMDFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8xMjQwZWItYmFiNC00NWFkLTkzODct
NTE2ZjExYWNiM2FlLzEvNGF1Ry1BeExzcXhXNUI3SG9rYXVLV25ZMDFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8xMjQwZWItYmFiNC00NWFkLTkzODctNTE2ZjExYWNiM2Fl
LzEvNGF1Ry1BeExzcXhXNUI3SG9rYXVLV25ZMDFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWVjp9iIt
IYEjRbU74trhEnoF9atKkqdzOwBPD89Vxe9CJolQ5WEpVoCTMlYM0zNdCcokjG68
w+x9l5y6wqvDAymawkaCGC9AATBz5Vx/HdiLkN31yqt0LqAEJDKXAKPLr//uPp1b
lfVg1do9ICmPLVAHz8mTzS2JPaeumxGXCe0SIyGjRe5o1DGHG83qs01xUyW7RkUf
/MBOkhgtf2cA5KDZhIj4g6PBipJ3xZX4eiIG7ttz36XpOdPT1vrY4qZNfcEz6mOi
pvlKPvCVnpPmqYfE3FnEAOgxm0TEmMiaFEf76sa2v52aOs/+t5wUonIYE/OT7uCL
Dgvg2mFlswjwOQ==
-----END CERTIFICATE-----
Generated at Wed May 14 03:26:45 2025 by rpki-client