Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
File:                     ITUYZbdn3XucIjFL_IBVvVfbAGU.mft (raw, json)
Hash identifier:          bgGgo+0y5qagk332Ur0NyFmCfEwJmfOTRMOfVZkPCKw=
Subject key identifier:   08:B3:04:5D:28:5F:9C:0B:4B:3B:43:BD:CB:6C:71:8F:9F:AB:25:C9
Authority key identifier: 21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
Certificate issuer:       /CN=21351865b767dd7b9c22314bfc8055bd57db0065
Certificate serial:       0196B6A27334A1B79A4E4DE7EB040A4C0E51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
Manifest number:          1539
Signing time:             Fri 09 May 2025 20:00:21 +0000
Manifest this update:     Fri 09 May 2025 20:00:21 +0000
Manifest next update:     Sat 10 May 2025 20:00:21 +0000
Files and hashes:         1: 2xSdynJrR2lrRXow3DheycMEzkg.roa (hash: nooA7vWCWimGNoVynR8X8CPFNFkK8X4dvNkM9491OGY=)
                          2: 4ivYTJwHbxlEFGw6yHQUPiIrnLk.roa (hash: c/5BSogehebsaJujE8GYhFFEuezzSIs2u3N/ALM/jkY=)
                          3: ITUYZbdn3XucIjFL_IBVvVfbAGU.crl (hash: JY8vE1S11dwL7pgnxk13q7ORLEJeRRL9QTMAL+wxK4k=)
                          4: JFVsgFbYrjh5C77tg48FZqxd4J4.roa (hash: ff5cSciKjRToO8iXbplHVL2WQA8ta+cT3q72ycgeqdw=)
                          5: cFyLz0464YCDv1_wlpt751wWjv0.roa (hash: 6oL3kHvs8+fXiSDYlf2hI6gNwQZ8WHh03nzI53rd4Nw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b6:a2:73:34:a1:b7:9a:4e:4d:e7:eb:04:0a:4c:0e:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21351865b767dd7b9c22314bfc8055bd57db0065
        Validity
            Not Before: May  9 20:00:21 2025 GMT
            Not After : May 10 20:00:21 2025 GMT
        Subject: CN=08b3045d285f9c0b4b3b43bdcb6c718f9fab25c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9c:72:47:64:ed:b9:f2:35:59:91:88:d5:cf:
                    de:bf:12:9f:9c:7e:e5:3d:12:52:4a:ac:16:a7:52:
                    0c:51:58:40:98:3c:d6:92:85:1b:f1:a9:b1:31:13:
                    f0:b0:18:e2:8c:98:06:1b:0b:05:2b:b3:b6:07:34:
                    c9:c9:5d:d0:b6:5e:98:cb:aa:86:d2:51:81:6e:ca:
                    ae:00:0d:dc:4f:db:77:e0:d7:ff:d7:41:9c:14:d5:
                    41:81:06:8c:0b:f1:6a:cb:6b:27:89:5d:76:3b:1b:
                    cb:80:16:fe:19:dc:30:c2:78:79:82:53:e5:ea:a0:
                    48:1d:fe:0e:92:f9:83:8a:de:d0:94:09:fd:7c:b3:
                    12:3f:4c:c9:17:32:5f:9a:0e:73:7f:e2:fd:84:70:
                    ea:46:e9:51:f6:3f:e4:8d:0c:4b:47:f8:fc:e4:9b:
                    67:00:0c:27:3e:9f:6d:8b:ab:a3:50:49:8c:8b:88:
                    c5:b6:6a:64:47:26:22:97:a2:f6:ce:aa:fc:30:47:
                    a9:bf:c6:b5:6a:9b:c4:6a:ea:29:e8:84:db:7d:b5:
                    a2:14:5c:26:c1:f4:11:1f:83:44:c5:25:f1:8f:9f:
                    2f:4e:cf:e6:74:80:c6:91:58:31:e6:fd:ea:87:58:
                    1a:22:cd:d0:71:91:ea:61:da:94:53:d2:57:c0:92:
                    6c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B3:04:5D:28:5F:9C:0B:4B:3B:43:BD:CB:6C:71:8F:9F:AB:25:C9
            X509v3 Authority Key Identifier:
                keyid:21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:04:6c:a9:c4:f8:98:b0:21:30:ea:7d:90:ad:b5:8b:7b:fc:
         d4:d3:e1:1b:c9:d3:a9:e4:dc:92:ce:09:b7:26:af:1c:bd:fc:
         63:e5:9f:c5:f4:0e:ca:45:de:59:ca:9e:44:7b:07:db:3a:8f:
         5c:7d:77:4d:59:6c:16:ed:50:31:ff:69:87:00:15:43:6a:39:
         2d:7b:84:3a:73:41:00:1b:07:78:0e:f3:5e:4a:b0:44:3b:28:
         77:99:00:b0:74:bd:fd:6c:be:5b:a8:8c:c5:e7:ea:19:f0:f6:
         20:eb:63:6f:3a:81:a0:84:2a:31:02:8f:de:b6:78:f4:53:fc:
         b8:75:ef:b3:7d:3c:8f:9b:6c:2e:c1:67:30:5b:6b:a8:f9:03:
         c9:b0:04:78:94:9d:b5:50:95:5c:08:56:e3:9c:01:66:81:51:
         21:d3:9b:bf:53:62:ae:b8:7f:dd:a3:71:d2:a0:98:18:32:b4:
         b2:d7:3a:08:02:6f:7f:d6:f7:6d:93:f7:c1:ce:5a:80:d5:71:
         c2:2e:19:aa:90:f7:b6:df:83:21:72:d7:52:5a:e3:ce:6a:44:
         03:4c:b5:ad:bc:f9:c2:2e:4c:eb:a5:7a:af:bf:7c:d9:31:49:
         2e:f6:cc:d6:85:26:95:58:d7:86:1c:e5:73:b5:1a:17:db:0d:
         f9:2a:c8:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa2onM0obeaTk3n6wQKTA5RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzUxODY1Yjc2N2RkN2I5YzIyMzE0YmZjODA1NWJkNTdk
YjAwNjUwHhcNMjUwNTA5MjAwMDIxWhcNMjUwNTEwMjAwMDIxWjAzMTEwLwYDVQQD
EygwOGIzMDQ1ZDI4NWY5YzBiNGIzYjQzYmRjYjZjNzE4ZjlmYWIyNWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppxyR2TtufI1WZGI1c/evxKfnH7l
PRJSSqwWp1IMUVhAmDzWkoUb8amxMRPwsBjijJgGGwsFK7O2BzTJyV3Qtl6Yy6qG
0lGBbsquAA3cT9t34Nf/10GcFNVBgQaMC/Fqy2sniV12OxvLgBb+Gdwwwnh5glPl
6qBIHf4OkvmDit7QlAn9fLMSP0zJFzJfmg5zf+L9hHDqRulR9j/kjQxLR/j85Jtn
AAwnPp9ti6ujUEmMi4jFtmpkRyYil6L2zqr8MEepv8a1apvEauop6ITbfbWiFFwm
wfQRH4NExSXxj58vTs/mdIDGkVgx5v3qh1gaIs3QcZHqYdqUU9JXwJJsTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAizBF0oX5wLSztDvctscY+fqyXJMB8GA1UdIwQY
MBaAFCE1GGW3Z917nCIxS/yAVb1X2wBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRVWVpiZG4zWHVjSWpGTF9JQlZ2VmZiQUdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lNTJiMDctZjJhNC00N2MxLTk0NjAt
MWU0ZTA0MDA4NDRiLzEvSVRVWVpiZG4zWHVjSWpGTF9JQlZ2VmZiQUdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9lNTJiMDctZjJhNC00N2MxLTk0NjAtMWU0ZTA0MDA4NDRi
LzEvSVRVWVpiZG4zWHVjSWpGTF9JQlZ2VmZiQUdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeQRsqcT4
mLAhMOp9kK21i3v81NPhG8nTqeTcks4JtyavHL38Y+WfxfQOykXeWcqeRHsH2zqP
XH13TVlsFu1QMf9phwAVQ2o5LXuEOnNBABsHeA7zXkqwRDsod5kAsHS9/Wy+W6iM
xefqGfD2IOtjbzqBoIQqMQKP3rZ49FP8uHXvs308j5tsLsFnMFtrqPkDybAEeJSd
tVCVXAhW45wBZoFRIdObv1Nirrh/3aNx0qCYGDK0stc6CAJvf9b3bZP3wc5agNVx
wi4ZqpD3tt+DIXLXUlrjzmpEA0y1rbz5wi5M66V6r7982TFJLvbM1oUmlVjXhhzl
c7UaF9sN+SrIew==
-----END CERTIFICATE-----
Generated at Sat May 10 05:11:19 2025 by rpki-client