Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft
File:                     Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft (raw, json)
Hash identifier:          MZ2S4CF6UriyBRFar6hpkZhyQ07vNpEKMirKSYDl/Ak=
Subject key identifier:   56:28:0E:C5:9E:E3:7C:99:24:2B:B3:C9:9C:60:9B:18:20:98:03:9A
Authority key identifier: 52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75
Certificate issuer:       /CN=52bf21eeb36414b3280e6c33b0b57296b8f6b675
Certificate serial:       0196BE93351A138519BCB732CE645B659241
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft
Manifest number:          1536
Signing time:             Sun 11 May 2025 09:00:40 +0000
Manifest this update:     Sun 11 May 2025 09:00:40 +0000
Manifest next update:     Mon 12 May 2025 09:00:40 +0000
Files and hashes:         1: 23ykqlSoxhCVfaY9IS92DsNyWBE.roa (hash: EcOQRm/PU+EVIJkGyqpMDHmRcGo4Swnj7UgNzWEeajc=)
                          2: Ukpz258Pu7bNWf8NOO8xTSDm6ac.roa (hash: N3tcSeOhnfUpzG6xjoUCZ9+KDhbzHATSPGgHhTJK3Ng=)
                          3: Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl (hash: laB2HAmnFTXoV3Ezxuvmpt0l/a6v8BBv1oUtL0F0vcQ=)
                          4: eWric6r-5T_Rp4hV5FAy7I4IoJY.roa (hash: NkPTqBN+TTAOu9SJvsMG3iRYoMiT60DbDNclBXlGKDo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:be:93:35:1a:13:85:19:bc:b7:32:ce:64:5b:65:92:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52bf21eeb36414b3280e6c33b0b57296b8f6b675
        Validity
            Not Before: May 11 09:00:40 2025 GMT
            Not After : May 12 09:00:40 2025 GMT
        Subject: CN=56280ec59ee37c99242bb3c99c609b182098039a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2e:2e:aa:78:01:8b:98:f7:3b:f0:7d:24:1d:
                    1e:58:ff:36:a7:32:cc:7c:16:b5:19:d9:c0:7d:05:
                    d4:b4:33:63:b7:01:c7:63:5d:8b:8d:03:c9:04:0f:
                    5a:37:f2:7b:a6:46:b6:a1:b0:24:06:a7:a6:f0:ca:
                    c4:c5:59:51:3c:a7:d7:8e:fc:c6:4b:33:c0:fc:c2:
                    39:f4:f7:9a:f9:b0:12:d6:52:6a:25:85:28:d7:44:
                    04:c6:1b:76:f2:93:0e:bb:92:8c:42:41:29:85:32:
                    1c:18:f0:cd:80:2f:de:70:49:63:b3:f7:7e:cf:cf:
                    25:eb:9d:50:7a:d0:e2:4e:be:60:f2:e2:64:14:2f:
                    cf:1f:3f:02:58:58:62:19:d9:ed:5f:f3:13:8f:5c:
                    e3:00:db:24:78:a9:17:65:1e:83:77:37:8b:71:07:
                    11:65:bb:15:81:52:68:82:bc:b3:9a:5a:2e:de:dc:
                    48:45:de:4d:23:46:ed:29:7f:4e:67:71:31:64:e7:
                    ed:7a:1d:22:bd:bc:a2:3a:c2:a0:d0:df:fd:bc:e1:
                    c5:f0:e0:9b:46:54:cf:38:dd:3c:24:8b:9a:01:46:
                    67:6b:b7:d3:f3:0a:69:f5:2e:b9:18:b1:35:cc:ff:
                    9f:75:6f:2d:22:37:ef:7c:83:22:87:59:ca:1f:fe:
                    1a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:28:0E:C5:9E:E3:7C:99:24:2B:B3:C9:9C:60:9B:18:20:98:03:9A
            X509v3 Authority Key Identifier:
                keyid:52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:62:6e:38:b8:1d:f9:06:50:a4:44:d5:90:06:8f:7c:33:ad:
         d7:63:a7:72:c3:8a:0b:ee:06:55:f6:ef:58:26:b9:ca:12:e8:
         eb:7e:7c:f4:fb:ce:c5:5c:bb:38:82:1f:0a:e8:78:cc:12:e6:
         c1:4d:95:a0:d1:a6:06:9f:0b:64:eb:6c:62:91:57:04:36:11:
         21:b1:77:cf:05:94:1d:6c:a1:cd:08:da:22:86:29:af:36:a7:
         63:eb:b6:c3:56:b4:b0:02:f6:5a:f7:b6:1d:dc:a4:66:bb:c3:
         71:17:d2:d4:8c:c3:66:3c:05:3c:7e:e4:e5:4a:89:fe:fc:81:
         2e:05:5a:e2:e5:fd:59:c1:a3:33:70:20:5e:17:ed:da:a3:53:
         41:11:b8:79:5c:c3:f9:a4:94:dc:c4:f8:b8:da:a9:1e:3d:08:
         15:4a:3e:25:46:64:ed:58:72:f5:93:b2:5c:5a:7a:6c:a1:e7:
         ba:ce:f5:60:0d:3b:4f:3b:3a:eb:67:c7:1a:12:f0:f0:92:17:
         17:0d:52:12:9a:2c:7d:4b:f4:c0:59:6b:ba:69:7f:7f:3f:89:
         51:37:4e:5a:9d:cb:f8:95:eb:54:0b:0e:04:69:60:0d:c1:5e:
         87:6a:60:d7:aa:92:1c:f8:f0:e6:96:81:fd:d6:53:75:d6:2a:
         8c:d5:a0:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+kzUaE4UZvLcyzmRbZZJBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYmYyMWVlYjM2NDE0YjMyODBlNmMzM2IwYjU3Mjk2Yjhm
NmI2NzUwHhcNMjUwNTExMDkwMDQwWhcNMjUwNTEyMDkwMDQwWjAzMTEwLwYDVQQD
Eyg1NjI4MGVjNTllZTM3Yzk5MjQyYmIzYzk5YzYwOWIxODIwOTgwMzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqS4uqngBi5j3O/B9JB0eWP82pzLM
fBa1GdnAfQXUtDNjtwHHY12LjQPJBA9aN/J7pka2obAkBqem8MrExVlRPKfXjvzG
SzPA/MI59Pea+bAS1lJqJYUo10QExht28pMOu5KMQkEphTIcGPDNgC/ecEljs/d+
z88l651QetDiTr5g8uJkFC/PHz8CWFhiGdntX/MTj1zjANskeKkXZR6DdzeLcQcR
ZbsVgVJogryzmlou3txIRd5NI0btKX9OZ3ExZOfteh0ivbyiOsKg0N/9vOHF8OCb
RlTPON08JIuaAUZna7fT8wpp9S65GLE1zP+fdW8tIjfvfIMih1nKH/4alQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYoDsWe43yZJCuzyZxgmxggmAOaMB8GA1UdIwQY
MBaAFFK/Ie6zZBSzKA5sM7C1cpa49rZ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXI4aDdyTmtGTE1vRG13enNMVnlscmoydG5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wNTk1NDMtNjllNC00OGY2LWExNzUt
YWM5NmY2YWFiNDk0LzEvVXI4aDdyTmtGTE1vRG13enNMVnlscmoydG5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8wNTk1NDMtNjllNC00OGY2LWExNzUtYWM5NmY2YWFiNDk0
LzEvVXI4aDdyTmtGTE1vRG13enNMVnlscmoydG5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL2JuOLgd
+QZQpETVkAaPfDOt12OncsOKC+4GVfbvWCa5yhLo63589PvOxVy7OIIfCuh4zBLm
wU2VoNGmBp8LZOtsYpFXBDYRIbF3zwWUHWyhzQjaIoYprzanY+u2w1a0sAL2Wve2
HdykZrvDcRfS1IzDZjwFPH7k5UqJ/vyBLgVa4uX9WcGjM3AgXhft2qNTQRG4eVzD
+aSU3MT4uNqpHj0IFUo+JUZk7Vhy9ZOyXFp6bKHnus71YA07Tzs662fHGhLw8JIX
Fw1SEposfUv0wFlruml/fz+JUTdOWp3L+JXrVAsOBGlgDcFeh2pg16qSHPjw5paB
/dZTddYqjNWg9A==
-----END CERTIFICATE-----
Generated at Sun May 11 11:49:31 2025 by rpki-client