Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft
File:                     94WLkaZifyNY6q3NJrpcLFxG6gM.mft (raw, json)
Hash identifier:          SrMTejtSqORTJdERLkGtdBmawyPXxX3YyhK8QfmjE6Q=
Subject key identifier:   83:4E:FE:29:E1:B5:4A:56:6E:76:45:45:5B:66:04:24:D8:C0:9A:08
Authority key identifier: F7:85:8B:91:A6:62:7F:23:58:EA:AD:CD:26:BA:5C:2C:5C:46:EA:03
Certificate issuer:       /CN=f7858b91a6627f2358eaadcd26ba5c2c5c46ea03
Certificate serial:       01969DBE3CD88385A11537B31FED607AC293
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft
Manifest number:          0E09
Signing time:             Mon 05 May 2025 00:00:12 +0000
Manifest this update:     Mon 05 May 2025 00:00:12 +0000
Manifest next update:     Tue 06 May 2025 00:00:12 +0000
Files and hashes:         1: 94WLkaZifyNY6q3NJrpcLFxG6gM.crl (hash: oE4aIMCXOeajRYG/d45sP2EN7bSshKF3LjJ6JUWf5Zo=)
                          2: t9eG9LA6EWmdW1u_qvOWiwX_nHk.roa (hash: /vgplaRmHDxSp3VJb5NRArFdYkLIBE7CLS2J04R2rkc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 00:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:be:3c:d8:83:85:a1:15:37:b3:1f:ed:60:7a:c2:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7858b91a6627f2358eaadcd26ba5c2c5c46ea03
        Validity
            Not Before: May  5 00:00:12 2025 GMT
            Not After : May  6 00:00:12 2025 GMT
        Subject: CN=834efe29e1b54a566e7645455b660424d8c09a08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:13:82:bc:00:6d:ce:af:ad:5a:0a:8f:3c:72:
                    62:59:9f:6e:ef:75:30:a0:b3:98:6a:90:81:9d:bd:
                    a3:43:93:f3:62:ec:0e:30:fc:e1:ba:06:aa:c8:80:
                    7f:38:48:c4:b0:35:ad:98:b1:56:7c:ab:40:f1:1e:
                    72:82:71:b5:19:e7:f9:ed:a1:7a:37:ae:29:39:d3:
                    27:17:b1:b7:d1:6b:6d:e4:b7:32:ef:ab:40:bc:55:
                    cb:c6:e7:cd:03:89:2f:36:f6:6e:48:ea:21:6a:8d:
                    9a:65:ce:33:e5:1b:ec:24:38:5c:89:89:3a:34:55:
                    4f:73:9f:47:8e:79:8a:67:69:c0:f3:52:43:15:6b:
                    2d:a4:c0:4e:09:0a:de:4e:be:2e:71:ae:f7:09:e6:
                    35:e0:a0:b8:ea:ea:67:fc:d8:64:91:f1:bd:b9:24:
                    d0:b7:db:fa:9c:60:91:ca:9c:1e:c6:0f:f4:bb:9a:
                    34:db:c9:c3:0c:4d:f3:18:84:34:e0:0a:b8:92:26:
                    91:da:38:79:b0:3f:95:4d:59:3f:80:47:07:03:25:
                    79:86:28:58:3d:8c:c1:d2:55:50:fb:41:ff:ba:e8:
                    c1:5f:45:db:e8:af:13:f9:bb:61:b3:a8:7c:da:93:
                    3a:18:e4:11:2e:2a:ec:46:b1:df:87:56:be:97:6b:
                    e1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:4E:FE:29:E1:B5:4A:56:6E:76:45:45:5B:66:04:24:D8:C0:9A:08
            X509v3 Authority Key Identifier:
                keyid:F7:85:8B:91:A6:62:7F:23:58:EA:AD:CD:26:BA:5C:2C:5C:46:EA:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:a4:04:47:05:e0:33:6f:6e:f5:bf:fd:f9:da:47:50:b3:b2:
         82:15:67:53:c6:14:7a:99:00:06:6b:ce:ed:96:6a:bf:a3:27:
         ce:b1:aa:44:6b:bb:88:d0:cb:af:c3:40:77:ca:7a:8b:e4:33:
         6f:ca:ff:0f:29:95:16:b1:fe:79:63:5b:cf:27:bd:50:d2:e6:
         db:48:82:b0:4e:da:aa:31:12:ca:08:cd:b1:c5:e3:cf:77:8a:
         d8:00:fd:d8:5d:83:cc:a8:44:2a:ba:e6:1c:84:d1:67:f5:f3:
         f2:61:7c:57:46:8d:b8:35:e2:ac:3b:03:42:f1:3a:4f:67:59:
         63:f3:7d:bf:63:62:bc:ad:eb:e7:3d:63:ca:3b:78:de:9d:a1:
         f0:43:2a:7a:c1:28:c7:6b:5f:66:b0:ae:72:a2:ce:0d:d2:d8:
         8b:cd:f2:b3:91:5f:74:88:7a:ce:44:2d:47:3e:b5:e5:61:c9:
         1f:41:a8:d5:c0:7a:74:ab:3a:f7:7d:7e:63:3b:51:04:10:c7:
         0e:ed:72:09:aa:5c:e5:28:f0:e6:41:fb:88:74:5b:c8:f7:3c:
         b9:c8:9e:e0:c8:d1:46:3a:aa:e8:fd:aa:38:8a:e2:1a:a4:00:
         73:99:a5:c1:9a:eb:a5:28:ca:aa:c4:10:3c:0d:13:75:a7:21:
         bf:52:51:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZadvjzYg4WhFTezH+1gesKTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ODU4YjkxYTY2MjdmMjM1OGVhYWRjZDI2YmE1YzJjNWM0
NmVhMDMwHhcNMjUwNTA1MDAwMDEyWhcNMjUwNTA2MDAwMDEyWjAzMTEwLwYDVQQD
Eyg4MzRlZmUyOWUxYjU0YTU2NmU3NjQ1NDU1YjY2MDQyNGQ4YzA5YTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoROCvABtzq+tWgqPPHJiWZ9u73Uw
oLOYapCBnb2jQ5PzYuwOMPzhugaqyIB/OEjEsDWtmLFWfKtA8R5ygnG1Gef57aF6
N64pOdMnF7G30Wtt5Lcy76tAvFXLxufNA4kvNvZuSOohao2aZc4z5RvsJDhciYk6
NFVPc59HjnmKZ2nA81JDFWstpMBOCQreTr4uca73CeY14KC46upn/NhkkfG9uSTQ
t9v6nGCRypwexg/0u5o028nDDE3zGIQ04Aq4kiaR2jh5sD+VTVk/gEcHAyV5hihY
PYzB0lVQ+0H/uujBX0Xb6K8T+bths6h82pM6GOQRLirsRrHfh1a+l2vhPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINO/inhtUpWbnZFRVtmBCTYwJoIMB8GA1UdIwQY
MBaAFPeFi5GmYn8jWOqtzSa6XCxcRuoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTRXTGthWmlmeU5ZNnEzTkpycGNMRnhHNmdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9mMDI4ZTgtZjA0MS00ODgwLThhOWQt
ZjI3YWE5YzZlYjZiLzEvOTRXTGthWmlmeU5ZNnEzTkpycGNMRnhHNmdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9mMDI4ZTgtZjA0MS00ODgwLThhOWQtZjI3YWE5YzZlYjZi
LzEvOTRXTGthWmlmeU5ZNnEzTkpycGNMRnhHNmdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUKQERwXg
M29u9b/9+dpHULOyghVnU8YUepkABmvO7ZZqv6MnzrGqRGu7iNDLr8NAd8p6i+Qz
b8r/DymVFrH+eWNbzye9UNLm20iCsE7aqjESygjNscXjz3eK2AD92F2DzKhEKrrm
HITRZ/Xz8mF8V0aNuDXirDsDQvE6T2dZY/N9v2NivK3r5z1jyjt43p2h8EMqesEo
x2tfZrCucqLODdLYi83ys5FfdIh6zkQtRz615WHJH0Go1cB6dKs6931+YztRBBDH
Du1yCapc5Sjw5kH7iHRbyPc8ucie4MjRRjqq6P2qOIriGqQAc5mlwZrrpSjKqsQQ
PA0Tdachv1JR/g==
-----END CERTIFICATE-----
Generated at Mon May 5 10:23:26 2025 by rpki-client