Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
File:                     l0Zhyxw45jvXi9aysdaGhqVBW_U.mft (raw, json)
Hash identifier:          vdbQCThvq9Gb/CIsZOjqIEtpkF5yjeBXOj+5X652T8A=
Subject key identifier:   76:50:D3:C3:CE:78:3A:BA:A3:A6:A6:CC:44:CB:DA:36:13:63:19:E6
Authority key identifier: 97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5
Certificate issuer:       /CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
Certificate serial:       0196BB5B2E23F8601610CC952A03C20FDD6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
Manifest number:          1537
Signing time:             Sat 10 May 2025 18:00:37 +0000
Manifest this update:     Sat 10 May 2025 18:00:37 +0000
Manifest next update:     Sun 11 May 2025 18:00:37 +0000
Files and hashes:         1: CKD_EzJsFpUNnoX4pjrt6UNhRQI.roa (hash: Er1sMrbr93QbR3Zv9Y+teqxvcF75+o/fSwKjskRLW5Q=)
                          2: FCpUh7uMn_jm2jqwI2G_dP05phQ.roa (hash: FZn5zdTsckuUQUO6IXLrYuHkdb4oQF7csC6+blEeSeA=)
                          3: ObPAzx9vpUSewz6yMRbiwqDj92c.roa (hash: Suax9ATaK3pYDGwH5LS+lZKVuglD1H0ACxKzg26DT6o=)
                          4: l0Zhyxw45jvXi9aysdaGhqVBW_U.crl (hash: 5L2oC9eOBy+iw2BDCAEAVE99c1o3VLUdN3SfYb9Ra5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:5b:2e:23:f8:60:16:10:cc:95:2a:03:c2:0f:dd:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
        Validity
            Not Before: May 10 18:00:37 2025 GMT
            Not After : May 11 18:00:37 2025 GMT
        Subject: CN=7650d3c3ce783abaa3a6a6cc44cbda36136319e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:9b:64:cd:af:05:6d:db:5c:76:6e:51:e0:7e:
                    44:fd:3e:4f:e3:6c:f6:10:6b:4d:5b:06:31:22:c3:
                    af:46:84:21:61:85:a5:43:8e:ae:1e:e0:a3:16:78:
                    a7:93:30:3c:66:51:80:a4:01:86:06:fa:38:b6:06:
                    bb:65:02:d1:d0:ae:bf:76:41:ee:1b:0c:df:28:41:
                    29:b0:12:fc:70:50:77:0f:9e:9f:62:46:d3:6f:01:
                    7c:8f:07:c9:c7:21:07:4c:b6:0a:38:1a:52:75:c1:
                    96:33:e4:bb:eb:c3:dd:d2:ba:4f:92:1d:48:24:43:
                    84:0b:6a:1f:75:9f:cc:ee:b3:4b:35:6c:76:26:23:
                    5c:43:70:a9:a5:76:23:8b:53:f9:cb:47:d9:10:06:
                    cd:81:16:97:08:a0:42:34:53:de:fe:f8:94:82:5e:
                    80:09:ea:da:f1:3d:06:f3:d4:b3:7f:c4:3d:47:d0:
                    3e:48:26:82:d9:3c:27:39:f7:69:b9:47:a2:13:41:
                    b7:0a:a9:94:03:02:b2:1c:ea:48:98:13:6e:9f:23:
                    d1:33:f0:d7:31:4c:3b:ce:35:08:67:fc:96:70:ad:
                    fd:3e:a1:a5:15:d2:82:c6:bb:91:ee:68:44:b7:1b:
                    38:60:4e:6a:e5:71:30:bf:fd:b3:b2:5b:b0:4a:3a:
                    fc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:50:D3:C3:CE:78:3A:BA:A3:A6:A6:CC:44:CB:DA:36:13:63:19:E6
            X509v3 Authority Key Identifier:
                keyid:97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:fe:20:1b:52:94:92:ae:7c:42:71:7c:19:cf:8b:0c:4f:c4:
         84:2a:07:f3:e1:8e:f9:51:71:bc:42:01:3d:88:03:15:e6:31:
         fc:62:a9:af:5b:14:b4:a8:34:e0:3e:dc:d8:ab:9f:77:95:61:
         b0:22:72:9f:18:3f:21:41:05:16:04:6a:53:69:e5:c4:6f:7a:
         68:5d:53:1b:47:0d:28:f7:2a:ae:41:e9:8f:95:67:c0:b3:3e:
         c1:c3:9c:e0:f1:ee:e1:f3:d2:af:6d:ed:50:9f:d4:2e:b4:dc:
         a0:2e:09:5c:5f:1a:c8:f8:c7:64:32:07:a5:6d:ff:7d:4a:23:
         d5:10:89:71:68:4c:93:d2:84:ee:d2:6a:17:09:5e:72:de:57:
         f7:cc:05:2f:90:24:d6:cc:ad:09:49:da:91:0e:1f:97:0f:4d:
         c3:40:e9:1f:43:94:eb:4d:43:2b:fb:77:e2:69:e4:5b:c0:d5:
         92:cd:ec:40:e3:fe:37:45:55:65:36:f7:ef:e2:69:d6:b6:09:
         b4:32:d8:15:ee:84:19:3f:df:d0:c6:84:01:c1:62:d5:64:73:
         53:24:44:e7:9c:c6:c0:a9:a0:db:05:26:7c:30:61:6a:c0:0f:
         57:d3:6b:d4:e4:5a:ae:db:2d:96:b0:42:73:a3:8f:f7:40:d4:
         2f:4d:19:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7Wy4j+GAWEMyVKgPCD91rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NDY2MWNiMWMzOGU2M2JkNzhiZDZiMmIxZDY4Njg2YTU0
MTViZjUwHhcNMjUwNTEwMTgwMDM3WhcNMjUwNTExMTgwMDM3WjAzMTEwLwYDVQQD
Eyg3NjUwZDNjM2NlNzgzYWJhYTNhNmE2Y2M0NGNiZGEzNjEzNjMxOWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Jtkza8Fbdtcdm5R4H5E/T5P42z2
EGtNWwYxIsOvRoQhYYWlQ46uHuCjFninkzA8ZlGApAGGBvo4tga7ZQLR0K6/dkHu
GwzfKEEpsBL8cFB3D56fYkbTbwF8jwfJxyEHTLYKOBpSdcGWM+S768Pd0rpPkh1I
JEOEC2ofdZ/M7rNLNWx2JiNcQ3CppXYji1P5y0fZEAbNgRaXCKBCNFPe/viUgl6A
Cera8T0G89Szf8Q9R9A+SCaC2TwnOfdpuUeiE0G3CqmUAwKyHOpImBNunyPRM/DX
MUw7zjUIZ/yWcK39PqGlFdKCxruR7mhEtxs4YE5q5XEwv/2zsluwSjr8/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZQ08POeDq6o6amzETL2jYTYxnmMB8GA1UdIwQY
MBaAFJdGYcscOOY714vWsrHWhoalQVv1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDBaaHl4dzQ1anZYaTlheXNkYUdocVZCV19VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hMGJmM2UtMzY0NS00ZTE2LWJjYTkt
OGFkYWMxN2U5MGFlLzEvbDBaaHl4dzQ1anZYaTlheXNkYUdocVZCV19VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9hMGJmM2UtMzY0NS00ZTE2LWJjYTktOGFkYWMxN2U5MGFl
LzEvbDBaaHl4dzQ1anZYaTlheXNkYUdocVZCV19VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkf4gG1KU
kq58QnF8Gc+LDE/EhCoH8+GO+VFxvEIBPYgDFeYx/GKpr1sUtKg04D7c2Kufd5Vh
sCJynxg/IUEFFgRqU2nlxG96aF1TG0cNKPcqrkHpj5VnwLM+wcOc4PHu4fPSr23t
UJ/ULrTcoC4JXF8ayPjHZDIHpW3/fUoj1RCJcWhMk9KE7tJqFwlect5X98wFL5Ak
1sytCUnakQ4flw9Nw0DpH0OU601DK/t34mnkW8DVks3sQOP+N0VVZTb37+Jp1rYJ
tDLYFe6EGT/f0MaEAcFi1WRzUyRE55zGwKmg2wUmfDBhasAPV9Nr1ORartstlrBC
c6OP90DUL00ZOA==
-----END CERTIFICATE-----
Generated at Sat May 10 19:42:10 2025 by rpki-client