Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
File:                     sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft (raw, json)
Hash identifier:          Ev5ZOK+bUZsE2AnK3asAkArDSQknjWO2rJkBqReE2kQ=
Subject key identifier:   F2:73:F2:3C:DB:07:E2:EF:05:12:75:2E:0E:A7:26:A0:AD:82:58:47
Authority key identifier: B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47
Certificate issuer:       /CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947
Certificate serial:       0196AB42F081124D056FD0E5B649661DC301
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
Manifest number:          084A
Signing time:             Wed 07 May 2025 15:00:12 +0000
Manifest this update:     Wed 07 May 2025 15:00:12 +0000
Manifest next update:     Thu 08 May 2025 15:00:12 +0000
Files and hashes:         1: sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl (hash: knM3miz7goa580nDqgf1/dlqxhgueHBOhoaWcO0ZOhY=)
                          2: zGycLxq7YqbVlBvuNEd47CRzT-U.roa (hash: o72/nsIKF1YG4XUjUYVm0HFMSGLne+bRa8vjHOf30pI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 13:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ab:42:f0:81:12:4d:05:6f:d0:e5:b6:49:66:1d:c3:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947
        Validity
            Not Before: May  7 15:00:12 2025 GMT
            Not After : May  8 15:00:12 2025 GMT
        Subject: CN=f273f23cdb07e2ef0512752e0ea726a0ad825847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:31:4b:04:ce:b3:0e:c2:22:f4:f9:2c:48:84:
                    ad:44:c5:84:14:39:df:5c:f7:77:d8:1a:87:ae:84:
                    d2:da:fd:54:d6:9f:2a:ca:d0:41:06:92:95:cf:8e:
                    d2:e7:e8:ee:24:95:76:bc:e6:a3:d2:8f:6a:b2:e0:
                    3c:67:80:3c:85:83:ff:7a:75:36:af:47:dc:46:fc:
                    eb:ac:b4:97:64:5f:98:37:fa:df:3a:6b:9e:50:e9:
                    3f:3c:07:e3:47:b3:f3:42:af:dc:61:03:b2:fa:7f:
                    95:4f:b7:82:b7:63:19:55:a0:cc:31:28:0d:7b:ce:
                    50:54:2c:5f:1e:d6:e2:20:b6:a5:03:ea:bf:97:0c:
                    92:5e:42:6d:84:0a:db:31:3a:6b:e6:f0:5d:42:2f:
                    24:0c:5d:2c:7c:61:82:a4:09:99:a3:3d:7f:73:49:
                    c5:91:8f:3e:a2:44:57:dc:58:d4:cf:92:4a:04:65:
                    5b:43:fa:01:ac:3e:70:dd:6e:57:3b:8f:8d:ad:84:
                    49:4b:11:34:4c:45:f5:19:ae:8e:c8:98:29:84:cd:
                    4f:e2:ec:11:6d:ee:64:4e:01:10:91:55:a8:59:6f:
                    4c:66:4b:49:d5:f7:43:4c:f9:56:8e:17:9b:ed:5d:
                    45:d5:ba:09:a0:f0:82:9a:1b:28:ec:df:16:fc:f2:
                    4a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:73:F2:3C:DB:07:E2:EF:05:12:75:2E:0E:A7:26:A0:AD:82:58:47
            X509v3 Authority Key Identifier:
                keyid:B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:e6:2f:87:e4:71:bf:76:eb:22:f5:f7:06:90:88:c2:c1:de:
         18:ab:eb:33:b2:81:09:ec:fc:3a:a5:df:63:90:51:53:81:c1:
         80:a2:61:00:c8:ed:de:dd:46:d6:d2:e3:7c:45:56:d8:ba:9a:
         7f:bb:15:0d:62:9e:07:5c:b3:9c:75:43:a6:26:85:8a:3e:a7:
         4c:cb:55:45:93:d6:89:c3:a3:80:08:c0:4b:7f:df:9e:54:92:
         fb:0f:12:7b:82:8d:c5:25:1d:43:f9:ec:02:4a:3f:b5:df:a1:
         fc:32:2d:de:c7:55:ba:f9:1b:e1:b7:a4:0c:3c:be:15:48:70:
         40:17:3c:58:b7:2f:22:ab:4e:59:83:30:f5:64:fc:07:e6:66:
         0d:20:33:b4:0e:96:b4:75:04:1a:39:f1:1d:42:5f:97:e2:9d:
         4c:11:cf:a8:13:00:c8:0c:da:35:96:34:c8:6d:7f:2f:8b:7b:
         84:29:f0:a8:e8:f6:ff:46:91:f2:49:66:56:fc:cd:a3:52:f4:
         f3:be:65:43:d2:88:e8:87:e3:0b:1a:46:99:1e:b6:f4:fb:f2:
         9d:e2:8a:f1:04:61:80:9e:85:a4:16:9b:64:13:62:c8:0b:c4:
         e3:48:48:ad:09:c2:59:60:fa:77:5b:52:63:92:0e:8b:c6:15:
         53:48:56:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZarQvCBEk0Fb9DltklmHcMBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxODU5ZjNkMmNkMjgzZTdkYjkwZjAyZmUxYjBkNGY2MTU2
MDU5NDcwHhcNMjUwNTA3MTUwMDEyWhcNMjUwNTA4MTUwMDEyWjAzMTEwLwYDVQQD
EyhmMjczZjIzY2RiMDdlMmVmMDUxMjc1MmUwZWE3MjZhMGFkODI1ODQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDFLBM6zDsIi9PksSIStRMWEFDnf
XPd32BqHroTS2v1U1p8qytBBBpKVz47S5+juJJV2vOaj0o9qsuA8Z4A8hYP/enU2
r0fcRvzrrLSXZF+YN/rfOmueUOk/PAfjR7PzQq/cYQOy+n+VT7eCt2MZVaDMMSgN
e85QVCxfHtbiILalA+q/lwySXkJthArbMTpr5vBdQi8kDF0sfGGCpAmZoz1/c0nF
kY8+okRX3FjUz5JKBGVbQ/oBrD5w3W5XO4+NrYRJSxE0TEX1Ga6OyJgphM1P4uwR
be5kTgEQkVWoWW9MZktJ1fdDTPlWjheb7V1F1boJoPCCmhso7N8W/PJK2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPJz8jzbB+LvBRJ1Lg6nJqCtglhHMB8GA1UdIwQY
MBaAFLGFnz0s0oPn25DwL+Gw1PYVYFlHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1lXZlBTelNnLWZia1BBdjRiRFU5aFZnV1VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9mN2E1NjAtODg3My00MGVlLWE3YzUt
MmFhZGM1YzNjNTdkLzEvc1lXZlBTelNnLWZia1BBdjRiRFU5aFZnV1VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9mN2E1NjAtODg3My00MGVlLWE3YzUtMmFhZGM1YzNjNTdk
LzEvc1lXZlBTelNnLWZia1BBdjRiRFU5aFZnV1VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFuYvh+Rx
v3brIvX3BpCIwsHeGKvrM7KBCez8OqXfY5BRU4HBgKJhAMjt3t1G1tLjfEVW2Lqa
f7sVDWKeB1yznHVDpiaFij6nTMtVRZPWicOjgAjAS3/fnlSS+w8Se4KNxSUdQ/ns
Ako/td+h/DIt3sdVuvkb4bekDDy+FUhwQBc8WLcvIqtOWYMw9WT8B+ZmDSAztA6W
tHUEGjnxHUJfl+KdTBHPqBMAyAzaNZY0yG1/L4t7hCnwqOj2/0aR8klmVvzNo1L0
875lQ9KI6IfjCxpGmR629PvyneKK8QRhgJ6FpBabZBNiyAvE40hIrQnCWWD6d1tS
Y5IOi8YVU0hW2Q==
-----END CERTIFICATE-----
Generated at Wed May 7 23:23:39 2025 by rpki-client