Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
File:                     5884hLeAB6Jdvi4s7wzHO2mSH4g.mft (raw, json)
Hash identifier:          fshLdz4k4j6TNy4IReBxyKEc38Hc1+A61BFh0VsXnb8=
Subject key identifier:   8C:5F:FB:F2:CE:A5:41:A1:11:27:9C:D5:E5:63:B9:23:E5:5E:68:A8
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Certificate issuer:       /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial:       0196B6A2F5DC0C46765DF90584836CD91EEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
Manifest number:          14E8
Signing time:             Fri 09 May 2025 20:00:55 +0000
Manifest this update:     Fri 09 May 2025 20:00:55 +0000
Manifest next update:     Sat 10 May 2025 20:00:55 +0000
Files and hashes:         1: 0LDsu8q8BNCVXMdgo8IAmxRh6lg.roa (hash: G5jGPy0QrJ03EB2ETPwF643gtEqN7L0Vq2ZY/sUU8MU=)
                          2: 5884hLeAB6Jdvi4s7wzHO2mSH4g.crl (hash: c9o4UgxKyVT1EpK+DEHalEaYWxXtmiFPauW+kntqTqg=)
                          3: 88YBk8uB85zBrul442nfGp-QuoU.roa (hash: 8CHBmw57/ECRTXJRCiSBu+1kizP0rODHSoGmFmfszQs=)
                          4: B6snV1O7L6xN7jjaiNZWbxtP82Q.roa (hash: Z+4+/9OXk8fDzA3Dm2Dl/g02UpTK3tqTpOQvWThJM1E=)
                          5: SNfpSksRdeq_X6alujKtqxhgfmI.roa (hash: Ma1Hn2WiNgfoHoDq7NgShnN2PavA2o6Q6gAsmbAJ6uM=)
                          6: Xxx-aLbVPMFeFACAuRgkyYhKGZ4.roa (hash: Qjsr5YH+eP1GQSztBosIVdbSouCX9Gvl5XQ/f3iIe+4=)
                          7: arM4rSr3_zYWYsvqUqH9LMJxK1c.roa (hash: jH1XC6dsbVtzQ5KTBqEfgNDIc/WzLssGqH+BUquB6w8=)
                          8: bFYSJ_I4YgMVW4I9mBgSvFA_y-8.roa (hash: H2VlaHHW6c4b4Aq4JHISuCEj338oIr6DsQEFdgqSCMc=)
                          9: fUwIM0sp1GFSdwqWjPbX7BRcPzQ.roa (hash: Xh0ESEMvO/UeKqHJNYyYyUnRbpIWXGZSxLiX7rQbHOo=)
                          10: hYaFKrnyaSEueE3Nclhbcrh7WLk.roa (hash: R76xSs8UDOZAunK5fmzFUA+tV4VngZVYGVoMB8QO7xc=)
                          11: z2F52wGzH9BMrpqKt2YykAg8u8Y.roa (hash: bvYJ2BHirZKw/0tfOS28eGnj6Ugji4ZaJ639S6rbz9g=)
                          12: zBe1zgNHDCKtxdrkxgm3eBXCBPU.roa (hash: BXmYyj4eoSdWaSTfE6Ragmw+4eV3ZTlYx1CDpgMgYSs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 17:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b6:a2:f5:dc:0c:46:76:5d:f9:05:84:83:6c:d9:1e:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
        Validity
            Not Before: May  9 20:00:55 2025 GMT
            Not After : May 10 20:00:55 2025 GMT
        Subject: CN=8c5ffbf2cea541a111279cd5e563b923e55e68a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:65:d5:43:cd:9c:f6:a1:a7:56:d4:a6:03:e1:
                    fa:89:98:60:b0:d4:da:95:5e:d1:12:97:ce:72:2c:
                    19:8a:15:54:94:81:64:a9:ee:be:1c:cb:2e:0f:c5:
                    7c:27:1d:13:de:b7:80:0a:c2:7e:96:94:99:f9:94:
                    28:9b:61:90:99:ef:ed:7b:38:82:7f:5f:f5:d5:fd:
                    6d:0a:81:b4:72:d9:36:fd:44:1b:bf:30:33:e2:bf:
                    00:06:d2:81:28:25:1a:23:19:a4:72:83:88:9b:fa:
                    2b:cd:63:d1:e0:70:31:64:a4:25:5d:15:e7:bc:29:
                    ba:f7:b0:47:f5:7d:27:dd:9d:e3:e5:74:a8:d7:c9:
                    0d:68:6c:18:00:eb:ec:11:1b:48:b4:75:0f:bc:34:
                    75:cb:1c:73:d3:3d:0c:87:93:2a:cf:97:9f:cc:e6:
                    5a:70:ee:67:b5:68:8f:17:23:47:8e:84:40:82:38:
                    4f:9d:fe:97:dc:68:36:f6:84:5b:8a:bb:fe:2d:93:
                    ed:4a:4e:9e:5e:c0:86:80:ee:32:59:b4:24:b8:47:
                    53:3e:66:25:9d:9b:ba:34:ed:dd:28:56:40:29:7b:
                    b3:11:25:27:59:d1:20:de:3b:95:5d:57:be:1e:77:
                    47:d8:ff:e8:13:b1:91:ad:66:1c:fc:52:83:68:b9:
                    2e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:5F:FB:F2:CE:A5:41:A1:11:27:9C:D5:E5:63:B9:23:E5:5E:68:A8
            X509v3 Authority Key Identifier:
                keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:19:09:d4:8e:fc:c1:b8:a9:fc:f3:a7:6f:55:20:1e:ad:6b:
         f3:92:ef:f3:4a:f8:fa:10:11:24:2f:be:db:f0:ea:1b:ed:dc:
         40:c9:72:19:98:aa:ef:ca:f6:d3:a0:b4:9f:90:76:5c:b7:cd:
         75:69:b3:36:cf:e0:a1:a1:fc:61:1d:a7:05:ae:74:88:78:5b:
         b4:f5:e9:ed:1f:ae:7c:41:c9:c5:4a:e3:32:6e:d0:7e:8a:c2:
         51:50:54:d0:c5:a9:2b:d5:8f:7b:cd:a3:81:c3:1c:0d:c1:50:
         f2:7c:91:7c:3e:85:8f:a9:04:6a:97:c4:30:ed:14:30:92:2b:
         5c:f3:4b:c9:8f:78:97:8b:6f:ee:85:b5:16:1d:89:8c:37:ca:
         68:ad:ca:fb:47:c3:2c:a5:2d:84:61:1c:db:3f:98:36:57:93:
         d1:7c:3d:89:02:f9:a3:b1:80:e6:13:65:75:48:58:c2:f5:b1:
         47:dd:cd:6e:c4:0e:0c:74:cb:ce:69:9d:70:e4:7a:e6:6d:b8:
         0f:1a:6c:8e:8f:e3:61:69:ca:2c:74:74:d2:03:83:d6:45:f6:
         d6:ec:8a:8b:f1:85:ab:af:0a:90:10:54:d4:e9:06:68:38:5b:
         87:cc:b1:4d:45:26:af:72:62:ce:82:04:e2:2e:76:4e:56:a3:
         99:87:55:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa2ovXcDEZ2XfkFhINs2R7uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5
MjFmODgwHhcNMjUwNTA5MjAwMDU1WhcNMjUwNTEwMjAwMDU1WjAzMTEwLwYDVQQD
Eyg4YzVmZmJmMmNlYTU0MWExMTEyNzljZDVlNTYzYjkyM2U1NWU2OGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGXVQ82c9qGnVtSmA+H6iZhgsNTa
lV7REpfOciwZihVUlIFkqe6+HMsuD8V8Jx0T3reACsJ+lpSZ+ZQom2GQme/teziC
f1/11f1tCoG0ctk2/UQbvzAz4r8ABtKBKCUaIxmkcoOIm/orzWPR4HAxZKQlXRXn
vCm697BH9X0n3Z3j5XSo18kNaGwYAOvsERtItHUPvDR1yxxz0z0Mh5Mqz5efzOZa
cO5ntWiPFyNHjoRAgjhPnf6X3Gg29oRbirv+LZPtSk6eXsCGgO4yWbQkuEdTPmYl
nZu6NO3dKFZAKXuzESUnWdEg3juVXVe+HndH2P/oE7GRrWYc/FKDaLkuZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIxf+/LOpUGhESec1eVjuSPlXmioMB8GA1UdIwQY
MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt
YTE4NGYzNTU2ZTQzLzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz
LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAihkJ1I78
wbip/POnb1UgHq1r85Lv80r4+hARJC++2/DqG+3cQMlyGZiq78r206C0n5B2XLfN
dWmzNs/goaH8YR2nBa50iHhbtPXp7R+ufEHJxUrjMm7QforCUVBU0MWpK9WPe82j
gcMcDcFQ8nyRfD6Fj6kEapfEMO0UMJIrXPNLyY94l4tv7oW1Fh2JjDfKaK3K+0fD
LKUthGEc2z+YNleT0Xw9iQL5o7GA5hNldUhYwvWxR93NbsQODHTLzmmdcOR65m24
Dxpsjo/jYWnKLHR00gOD1kX21uyKi/GFq68KkBBU1OkGaDhbh8yxTUUmr3JizoIE
4i52TlajmYdVZA==
-----END CERTIFICATE-----
Generated at Fri May 9 21:36:04 2025 by rpki-client