Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.mft
File:                     7zfEgGNj6qbTQ68i4Di-rS4YtPQ.mft (raw, json)
Hash identifier:          PYy1IOOqlKrw8dQHgCQ7LmG5iKXfrYLaiNVvy6N0wr8=
Subject key identifier:   86:B1:38:3E:05:43:18:5F:B6:3B:5D:16:29:51:BF:78:78:22:2C:3A
Authority key identifier: EF:37:C4:80:63:63:EA:A6:D3:43:AF:22:E0:38:BE:AD:2E:18:B4:F4
Certificate issuer:       /CN=ef37c4806363eaa6d343af22e038bead2e18b4f4
Certificate serial:       0196C94D7B3BD27E14A99B9FEF076BB26691
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.mft
Manifest number:          10BB
Signing time:             Tue 13 May 2025 11:00:20 +0000
Manifest this update:     Tue 13 May 2025 11:00:20 +0000
Manifest next update:     Wed 14 May 2025 11:00:20 +0000
Files and hashes:         1: 7zfEgGNj6qbTQ68i4Di-rS4YtPQ.crl (hash: yKx5ty8Sv76GowV02f4P4db90ypF+VcUAfskP5kzvaU=)
                          2: Kg5-kVb-CT-Szk4qOylrOgMLHdQ.roa (hash: 7y1Phnt9QqKkLbO9DEolnM5Y/dYlEmphmiuZ26bJCXU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c9:4d:7b:3b:d2:7e:14:a9:9b:9f:ef:07:6b:b2:66:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef37c4806363eaa6d343af22e038bead2e18b4f4
        Validity
            Not Before: May 13 11:00:20 2025 GMT
            Not After : May 14 11:00:20 2025 GMT
        Subject: CN=86b1383e0543185fb63b5d162951bf7878222c3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:43:db:dc:77:52:42:88:90:a6:9f:56:e7:2f:
                    37:81:f9:28:e9:9e:60:97:c8:6c:35:a3:27:b8:d0:
                    88:68:60:5f:a2:77:09:5e:e9:9c:9f:67:40:46:52:
                    60:3a:f1:46:ec:7c:26:c7:ac:d0:6d:5f:1f:c8:a2:
                    a4:f1:ac:d9:cc:64:99:b8:f2:94:3b:42:91:49:cf:
                    19:4f:d9:76:4d:0f:49:5a:3e:5f:b1:2f:a8:ab:c0:
                    3d:16:43:c9:00:7e:48:79:6d:c2:38:d5:77:86:24:
                    d9:d4:06:0d:56:0a:ef:05:92:23:c4:62:bf:09:fa:
                    3f:15:7a:94:ac:f8:4a:c4:0c:eb:7c:cd:fa:5e:c6:
                    8d:a8:e8:aa:51:7a:90:e1:e8:d6:84:07:f4:bd:00:
                    01:19:96:6e:73:0e:d0:d8:e2:64:c3:5a:f8:40:da:
                    46:b5:f1:b0:9a:05:46:72:cf:5d:10:0c:22:9f:3d:
                    b0:71:af:54:c3:04:bb:d1:be:51:98:1b:0d:5e:cb:
                    8f:91:34:5b:bc:f1:0f:d1:a4:83:a9:a1:86:ea:8d:
                    34:e3:85:bc:24:64:7f:31:5e:89:e4:9f:fb:0e:a0:
                    48:85:09:87:24:08:53:94:8b:b4:86:4e:6a:f5:b2:
                    5c:69:aa:98:aa:7e:77:59:53:77:b3:fb:68:8b:de:
                    a3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:B1:38:3E:05:43:18:5F:B6:3B:5D:16:29:51:BF:78:78:22:2C:3A
            X509v3 Authority Key Identifier:
                keyid:EF:37:C4:80:63:63:EA:A6:D3:43:AF:22:E0:38:BE:AD:2E:18:B4:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:60:ab:2f:86:2d:69:c3:8c:96:5d:65:53:fb:38:39:af:f2:
         53:9e:8b:87:e5:fe:14:88:6a:ba:93:d3:68:56:26:03:7f:ae:
         2b:d0:87:8c:df:87:ef:3f:b0:77:27:c1:df:0e:fa:85:a0:d9:
         02:33:bf:e7:f4:71:cf:51:a8:ea:db:a3:34:fb:1e:e1:9f:e7:
         1c:51:d1:a4:71:2d:75:bd:ac:6b:c3:70:bb:19:ce:6d:f1:07:
         c3:72:4b:8c:eb:c4:46:8d:e3:d5:2c:dc:74:53:49:cd:1d:ff:
         93:97:eb:e4:4d:eb:f6:6a:6b:cd:68:a3:9e:fb:35:be:39:79:
         1b:ab:a9:00:33:62:04:2c:6c:77:1f:74:d2:30:80:7a:c0:8e:
         eb:69:0e:af:58:51:5b:eb:2f:d4:2d:65:43:35:c6:f2:49:02:
         ab:f3:17:22:23:6e:64:f1:7f:f7:1d:3b:dd:37:92:f1:ef:ed:
         e6:da:de:80:c2:49:f7:94:9d:de:da:60:48:15:8c:e9:60:d4:
         a9:2a:58:08:d6:c7:26:00:6b:1f:cc:a4:46:28:7f:f9:1d:48:
         4c:2c:70:70:6b:97:c1:84:68:33:20:5f:b4:67:86:7a:41:d5:
         0e:c2:fd:ad:a4:b3:cb:53:52:7d:dc:cb:85:6d:a3:7d:95:a4:
         2a:08:01:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbJTXs70n4UqZuf7wdrsmaRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMzdjNDgwNjM2M2VhYTZkMzQzYWYyMmUwMzhiZWFkMmUx
OGI0ZjQwHhcNMjUwNTEzMTEwMDIwWhcNMjUwNTE0MTEwMDIwWjAzMTEwLwYDVQQD
Eyg4NmIxMzgzZTA1NDMxODVmYjYzYjVkMTYyOTUxYmY3ODc4MjIyYzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUPb3HdSQoiQpp9W5y83gfko6Z5g
l8hsNaMnuNCIaGBfoncJXumcn2dARlJgOvFG7Hwmx6zQbV8fyKKk8azZzGSZuPKU
O0KRSc8ZT9l2TQ9JWj5fsS+oq8A9FkPJAH5IeW3CONV3hiTZ1AYNVgrvBZIjxGK/
Cfo/FXqUrPhKxAzrfM36XsaNqOiqUXqQ4ejWhAf0vQABGZZucw7Q2OJkw1r4QNpG
tfGwmgVGcs9dEAwinz2wca9UwwS70b5RmBsNXsuPkTRbvPEP0aSDqaGG6o0044W8
JGR/MV6J5J/7DqBIhQmHJAhTlIu0hk5q9bJcaaqYqn53WVN3s/toi96jgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIaxOD4FQxhftjtdFilRv3h4Iiw6MB8GA1UdIwQY
MBaAFO83xIBjY+qm00OvIuA4vq0uGLT0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3pmRWdHTmo2cWJUUTY4aTREaS1yUzRZdFBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9jNjBhOTItOGMwYi00MDdhLWIyMDMt
YWNiY2M2Y2ZkN2UzLzEvN3pmRWdHTmo2cWJUUTY4aTREaS1yUzRZdFBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9jNjBhOTItOGMwYi00MDdhLWIyMDMtYWNiY2M2Y2ZkN2Uz
LzEvN3pmRWdHTmo2cWJUUTY4aTREaS1yUzRZdFBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhmCrL4Yt
acOMll1lU/s4Oa/yU56Lh+X+FIhqupPTaFYmA3+uK9CHjN+H7z+wdyfB3w76haDZ
AjO/5/Rxz1Go6tujNPse4Z/nHFHRpHEtdb2sa8NwuxnObfEHw3JLjOvERo3j1Szc
dFNJzR3/k5fr5E3r9mprzWijnvs1vjl5G6upADNiBCxsdx900jCAesCO62kOr1hR
W+sv1C1lQzXG8kkCq/MXIiNuZPF/9x073TeS8e/t5tregMJJ95Sd3tpgSBWM6WDU
qSpYCNbHJgBrH8ykRih/+R1ITCxwcGuXwYRoMyBftGeGekHVDsL9raSzy1NSfdzL
hW2jfZWkKggB2Q==
-----END CERTIFICATE-----
Generated at Tue May 13 13:26:51 2025 by rpki-client