Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.mft
File:                     AUa0KfjElhH8_qHvoaUbnA7dtuc.mft (raw, json)
Hash identifier:          79FJQiFdEPAKJ3dn9N/bAEE0e0kMH7QNJwLXyPSTfK0=
Subject key identifier:   7B:17:34:43:E2:5F:B1:2A:AA:84:AD:F1:4D:41:6C:11:FD:06:38:04
Authority key identifier: 01:46:B4:29:F8:C4:96:11:FC:FE:A1:EF:A1:A5:1B:9C:0E:DD:B6:E7
Certificate issuer:       /CN=0146b429f8c49611fcfea1efa1a51b9c0eddb6e7
Certificate serial:       0196C7CD7AC4BB1D58DDA3502E78435D64EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.mft
Manifest number:          13CC
Signing time:             Tue 13 May 2025 04:00:54 +0000
Manifest this update:     Tue 13 May 2025 04:00:54 +0000
Manifest next update:     Wed 14 May 2025 04:00:54 +0000
Files and hashes:         1: 4lSW2DqUUyfLAwCJxmdcakNOOAc.roa (hash: 0bkR+y4/sbmt2mM+LAt7tzsFlo9ay8a2libMzm6BQSQ=)
                          2: A1UUEmWN8hJvE_QDz6Phuppzgos.roa (hash: 71wzKo8KkCCIqHry8cTGiYr86Ds73uxSzDKBszKZYsI=)
                          3: AUa0KfjElhH8_qHvoaUbnA7dtuc.crl (hash: EYrNniTmN4iSdvbftQQSHek/5hBgXc7SJpWu6MAgrDc=)
                          4: PUvtKljRLvuOqowlndxBwGQKDl4.roa (hash: U5kHad25poEIvcwR4qtcel7KCFYyUvjuPf1N4FDV5NU=)
                          5: g4grZmuORaKS7qXdfY2Tw1BKwR8.roa (hash: J3nP1OMrsWuilznvZEcg4t0c4Ea3mup5IdWbWJUSouo=)
                          6: iciSv140fL3PtQnQ9u8uKNyjZD0.roa (hash: 3xoVorNvU/VeFcuXASi64FFVnBKDDjZqYnmoKneCFZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c7:cd:7a:c4:bb:1d:58:dd:a3:50:2e:78:43:5d:64:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0146b429f8c49611fcfea1efa1a51b9c0eddb6e7
        Validity
            Not Before: May 13 04:00:54 2025 GMT
            Not After : May 14 04:00:54 2025 GMT
        Subject: CN=7b173443e25fb12aaa84adf14d416c11fd063804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:51:92:5d:66:39:8e:05:26:c3:4f:00:ef:f9:
                    b1:3d:2c:42:9b:ea:9d:85:d2:ff:40:21:3f:b5:b4:
                    8b:7e:cc:b0:c2:fc:32:cb:b8:35:20:0d:e2:12:4b:
                    2f:90:97:9e:73:78:3a:40:5e:8b:8b:63:ed:7b:10:
                    9f:47:ee:78:f3:ff:bd:8c:26:d1:f3:3f:02:7a:62:
                    93:28:4f:bf:a5:bb:80:75:9e:5f:2a:79:01:bd:26:
                    89:bd:43:8f:2e:90:eb:ee:f4:52:b9:99:a5:c4:22:
                    05:22:1e:7c:56:b7:2b:f2:3d:34:ef:55:00:2e:85:
                    1a:e1:a4:2a:0d:c4:30:77:96:18:40:6b:10:09:28:
                    a7:01:53:90:2f:d3:5e:6c:7e:d6:1c:c4:42:a1:e1:
                    92:fd:c3:02:a8:64:03:ca:5d:62:b7:2d:c8:58:2b:
                    0a:30:59:91:b2:51:72:35:15:5a:9f:9a:a3:f5:7e:
                    b9:bc:d7:25:dc:e9:c4:17:0a:39:a1:9f:d7:ac:97:
                    a5:36:51:a1:5c:f0:7b:10:a7:aa:c9:b1:e2:8b:8d:
                    e6:ec:bf:d2:9d:84:fb:b7:e5:6c:59:b0:20:d2:12:
                    c1:fc:db:0c:b8:dd:eb:94:89:ea:82:76:8d:f1:66:
                    84:7b:69:18:1a:dc:99:22:ff:09:7a:5e:85:73:9f:
                    21:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:17:34:43:E2:5F:B1:2A:AA:84:AD:F1:4D:41:6C:11:FD:06:38:04
            X509v3 Authority Key Identifier:
                keyid:01:46:B4:29:F8:C4:96:11:FC:FE:A1:EF:A1:A5:1B:9C:0E:DD:B6:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:f7:b0:aa:87:7c:b7:ca:d5:cf:34:ee:c9:ff:dc:77:f7:5a:
         cb:af:59:59:46:a4:00:ea:20:8a:d1:5f:f9:93:46:86:e0:f6:
         e0:e6:5c:42:19:5f:77:43:25:d8:3b:b4:3a:3e:d7:ec:f5:ba:
         d3:0d:be:76:59:50:f3:d8:8e:dd:50:f1:ae:20:bd:06:7e:fc:
         df:4a:e3:4f:20:8c:e0:42:ac:4f:42:25:81:9f:73:41:9b:81:
         3f:96:f3:8e:e6:a0:08:31:33:e3:d1:fe:1f:37:c5:f7:32:eb:
         65:c9:0b:c5:87:ee:d6:82:39:ae:f1:3c:00:c9:77:1d:2c:1c:
         ab:78:e1:15:58:0e:bc:e8:7c:e3:29:82:ca:0c:7f:ff:19:55:
         c2:2e:c4:47:e4:e2:8e:2f:a6:75:44:3d:f9:e6:25:1d:34:7b:
         14:dc:88:1d:a8:4d:3f:b1:36:73:69:22:6c:21:e1:1d:b6:ae:
         98:25:25:27:27:b1:b3:57:a7:75:e0:5b:71:66:a8:5f:5d:99:
         ed:00:eb:07:ac:32:75:4a:41:5d:6d:e5:d0:20:5f:3c:08:22:
         b1:fc:8a:1d:34:51:6f:1c:28:ee:da:0a:b9:ea:21:3d:6a:cf:
         85:97:c4:ce:8e:ab:9d:83:2d:02:6a:dd:55:50:6a:db:60:6e:
         d4:2a:92:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbHzXrEux1Y3aNQLnhDXWTrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNDZiNDI5ZjhjNDk2MTFmY2ZlYTFlZmExYTUxYjljMGVk
ZGI2ZTcwHhcNMjUwNTEzMDQwMDU0WhcNMjUwNTE0MDQwMDU0WjAzMTEwLwYDVQQD
Eyg3YjE3MzQ0M2UyNWZiMTJhYWE4NGFkZjE0ZDQxNmMxMWZkMDYzODA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVGSXWY5jgUmw08A7/mxPSxCm+qd
hdL/QCE/tbSLfsywwvwyy7g1IA3iEksvkJeec3g6QF6Li2PtexCfR+548/+9jCbR
8z8CemKTKE+/pbuAdZ5fKnkBvSaJvUOPLpDr7vRSuZmlxCIFIh58Vrcr8j0071UA
LoUa4aQqDcQwd5YYQGsQCSinAVOQL9NebH7WHMRCoeGS/cMCqGQDyl1ity3IWCsK
MFmRslFyNRVan5qj9X65vNcl3OnEFwo5oZ/XrJelNlGhXPB7EKeqybHii43m7L/S
nYT7t+VsWbAg0hLB/NsMuN3rlInqgnaN8WaEe2kYGtyZIv8Jel6Fc58hdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHsXNEPiX7EqqoSt8U1BbBH9BjgEMB8GA1UdIwQY
MBaAFAFGtCn4xJYR/P6h76GlG5wO3bbnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVVhMEtmakVsaEg4X3FIdm9hVWJuQTdkdHVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9lNWUzNzktNjU2ZC00NjIyLWE3YmMt
ZWEyNmU3NDZhMGFkLzEvQVVhMEtmakVsaEg4X3FIdm9hVWJuQTdkdHVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9lNWUzNzktNjU2ZC00NjIyLWE3YmMtZWEyNmU3NDZhMGFk
LzEvQVVhMEtmakVsaEg4X3FIdm9hVWJuQTdkdHVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACfewqod8
t8rVzzTuyf/cd/day69ZWUakAOogitFf+ZNGhuD24OZcQhlfd0Ml2Du0Oj7X7PW6
0w2+dllQ89iO3VDxriC9Bn7830rjTyCM4EKsT0IlgZ9zQZuBP5bzjuagCDEz49H+
HzfF9zLrZckLxYfu1oI5rvE8AMl3HSwcq3jhFVgOvOh84ymCygx//xlVwi7ER+Ti
ji+mdUQ9+eYlHTR7FNyIHahNP7E2c2kibCHhHbaumCUlJyexs1endeBbcWaoX12Z
7QDrB6wydUpBXW3l0CBfPAgisfyKHTRRbxwo7toKueohPWrPhZfEzo6rnYMtAmrd
VVBq22Bu1CqS0w==
-----END CERTIFICATE-----
Generated at Tue May 13 14:17:34 2025 by rpki-client