Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
File:                     08YXj7A0kFEwrwzhzSdRVPK1m3g.mft (raw, json)
Hash identifier:          DL9DzGgbNsGIzZrVouEWazj1+m/zWNe4hagJkpFDEhc=
Subject key identifier:   21:E5:25:3B:1B:66:6C:B8:2B:C5:32:86:F2:CA:3F:A4:14:77:DC:A4
Authority key identifier: D3:C6:17:8F:B0:34:90:51:30:AF:0C:E1:CD:27:51:54:F2:B5:9B:78
Certificate issuer:       /CN=d3c6178fb034905130af0ce1cd275154f2b59b78
Certificate serial:       0196DEF9E69730079F4F933A003E75FDB5EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
Manifest number:          1548
Signing time:             Sat 17 May 2025 16:00:41 +0000
Manifest this update:     Sat 17 May 2025 16:00:41 +0000
Manifest next update:     Sun 18 May 2025 16:00:41 +0000
Files and hashes:         1: 08YXj7A0kFEwrwzhzSdRVPK1m3g.crl (hash: 2YGzeIcciv7G4UN671QH2qCjq3V7K79jYssK9orRjtk=)
                          2: Z9dAkp6DWkibOyxuZSYF8JC0FP8.roa (hash: Di2cqBcEpf6hgxQLLA7v+y+JplI7ajbTFP4r/fEMeKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 May 2025 16:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:de:f9:e6:97:30:07:9f:4f:93:3a:00:3e:75:fd:b5:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c6178fb034905130af0ce1cd275154f2b59b78
        Validity
            Not Before: May 17 16:00:41 2025 GMT
            Not After : May 18 16:00:41 2025 GMT
        Subject: CN=21e5253b1b666cb82bc53286f2ca3fa41477dca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9f:a8:be:f8:ac:93:d0:b0:da:10:ab:95:75:
                    cc:8f:95:51:e8:ea:ba:04:6a:b0:71:ed:90:ec:40:
                    26:84:82:e8:4d:b3:f1:fa:98:b7:0d:cc:80:d3:4e:
                    08:30:79:50:c9:67:24:00:62:fc:05:f4:1b:a5:32:
                    fc:66:d1:b7:47:c3:56:8b:c2:3c:52:a1:e6:00:62:
                    6c:35:35:c3:fa:d4:45:1d:d4:cd:98:d1:53:82:2c:
                    6a:79:b6:d0:42:bf:92:0e:4f:5c:54:0f:13:b7:5d:
                    3f:c3:68:99:e3:40:5a:10:5b:e3:bb:7f:45:ca:e1:
                    5d:29:59:2d:85:bd:b2:d6:a8:65:06:00:fd:dc:75:
                    e8:43:13:ec:11:5c:3c:61:e9:b9:c4:bf:00:ee:5d:
                    6c:c5:b7:6d:68:99:89:15:bd:1b:9f:80:cf:1e:e2:
                    cf:8f:b6:62:ac:c9:bc:3b:af:26:e1:40:b7:b3:f6:
                    26:6a:d8:a2:e9:12:87:2b:38:b8:b7:56:1e:fe:4e:
                    ae:2d:12:66:ed:3c:12:e9:92:13:5c:b1:d0:51:64:
                    a9:1e:35:94:b2:c9:23:c7:86:a2:6a:ed:aa:4e:2f:
                    0c:8b:bf:9f:62:34:b7:db:2e:11:a4:70:8b:27:d3:
                    72:8c:b4:81:97:7e:2a:a3:60:96:08:82:87:0c:45:
                    3a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E5:25:3B:1B:66:6C:B8:2B:C5:32:86:F2:CA:3F:A4:14:77:DC:A4
            X509v3 Authority Key Identifier:
                keyid:D3:C6:17:8F:B0:34:90:51:30:AF:0C:E1:CD:27:51:54:F2:B5:9B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:5d:f3:05:e7:66:ee:af:9e:dc:9b:17:e7:89:13:bb:94:38:
         be:e7:fa:6d:a4:c0:e6:a3:96:da:5f:3d:d9:df:7f:89:23:5f:
         6e:a1:9c:45:56:7e:59:5c:c0:c1:6c:d1:26:73:be:af:6a:c9:
         30:fd:a3:a6:5c:f0:78:52:61:39:44:31:20:a3:95:ce:ed:80:
         63:6d:2f:60:d6:0c:9a:1c:78:2c:94:29:ce:1c:64:62:72:0c:
         d4:86:3f:f0:e3:73:9c:31:a6:d8:36:64:eb:ca:f0:8d:6f:6a:
         44:9e:b5:58:37:6c:aa:32:7c:3a:1a:74:09:8d:59:a3:5f:c6:
         f2:1d:7d:65:2f:5f:c5:e7:f2:c5:bc:4c:d8:24:52:c5:26:91:
         7a:94:f1:24:5d:a0:4c:cc:a6:dd:ef:5b:cf:8f:6f:e1:df:82:
         e2:66:1e:77:13:c2:37:4c:cf:cd:0b:cc:c4:09:8b:6f:b0:f8:
         d9:ac:64:8d:25:38:63:88:bb:ba:9b:04:e5:fc:11:5c:ae:d9:
         e7:d8:4e:3e:d3:be:cc:fd:f0:43:5e:cf:3d:c9:03:0a:29:9d:
         4a:2b:73:29:08:b7:69:5e:cd:96:fc:3f:e0:29:cd:0d:fe:bf:
         e4:8e:b5:0e:ea:33:cf:7d:55:da:57:85:11:da:eb:c0:9e:ad:
         3b:42:c4:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbe+eaXMAefT5M6AD51/bXuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYzYxNzhmYjAzNDkwNTEzMGFmMGNlMWNkMjc1MTU0ZjJi
NTliNzgwHhcNMjUwNTE3MTYwMDQxWhcNMjUwNTE4MTYwMDQxWjAzMTEwLwYDVQQD
EygyMWU1MjUzYjFiNjY2Y2I4MmJjNTMyODZmMmNhM2ZhNDE0NzdkY2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5+ovvisk9Cw2hCrlXXMj5VR6Oq6
BGqwce2Q7EAmhILoTbPx+pi3DcyA004IMHlQyWckAGL8BfQbpTL8ZtG3R8NWi8I8
UqHmAGJsNTXD+tRFHdTNmNFTgixqebbQQr+SDk9cVA8Tt10/w2iZ40BaEFvju39F
yuFdKVkthb2y1qhlBgD93HXoQxPsEVw8Yem5xL8A7l1sxbdtaJmJFb0bn4DPHuLP
j7ZirMm8O68m4UC3s/Ymatii6RKHKzi4t1Ye/k6uLRJm7TwS6ZITXLHQUWSpHjWU
sskjx4aiau2qTi8Mi7+fYjS32y4RpHCLJ9NyjLSBl34qo2CWCIKHDEU6hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHlJTsbZmy4K8UyhvLKP6QUd9ykMB8GA1UdIwQY
MBaAFNPGF4+wNJBRMK8M4c0nUVTytZt4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDhZWGo3QTBrRkV3cnd6aHpTZFJWUEsxbTNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83OGZkZTktNmRmMC00YWUyLTliMzct
YTdjNGIyZjZlMjc2LzEvMDhZWGo3QTBrRkV3cnd6aHpTZFJWUEsxbTNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83OGZkZTktNmRmMC00YWUyLTliMzctYTdjNGIyZjZlMjc2
LzEvMDhZWGo3QTBrRkV3cnd6aHpTZFJWUEsxbTNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMV3zBedm
7q+e3JsX54kTu5Q4vuf6baTA5qOW2l892d9/iSNfbqGcRVZ+WVzAwWzRJnO+r2rJ
MP2jplzweFJhOUQxIKOVzu2AY20vYNYMmhx4LJQpzhxkYnIM1IY/8ONznDGm2DZk
68rwjW9qRJ61WDdsqjJ8Ohp0CY1Zo1/G8h19ZS9fxefyxbxM2CRSxSaRepTxJF2g
TMym3e9bz49v4d+C4mYedxPCN0zPzQvMxAmLb7D42axkjSU4Y4i7upsE5fwRXK7Z
59hOPtO+zP3wQ17PPckDCimdSitzKQi3aV7Nlvw/4CnNDf6/5I61Duozz31V2leF
EdrrwJ6tO0LEzQ==
-----END CERTIFICATE-----
Generated at Sat May 17 22:32:51 2025 by rpki-client