Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
File:                     ilZohaHW1VRFRs0oXYbE7_6qPCw.mft (raw, json)
Hash identifier:          81wDtTI1C0XsMyqNw6XvBPb4PyDppj/NyR60L56feZQ=
Subject key identifier:   43:06:F0:82:89:C9:D8:12:8D:2A:E9:FD:92:07:CB:0F:98:76:83:EC
Authority key identifier: 8A:56:68:85:A1:D6:D5:54:45:46:CD:28:5D:86:C4:EF:FE:AA:3C:2C
Certificate issuer:       /CN=8a566885a1d6d5544546cd285d86c4effeaa3c2c
Certificate serial:       0196AB42EFC2E7C1C32E7C9B5BDB28B16503
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
Manifest number:          152C
Signing time:             Wed 07 May 2025 15:00:12 +0000
Manifest this update:     Wed 07 May 2025 15:00:12 +0000
Manifest next update:     Thu 08 May 2025 15:00:12 +0000
Files and hashes:         1: Lb8vbukOa5hlTRoTkAdj0qnnj8o.roa (hash: gDIkSUwNSGV5eKv6/1wqJs7MzcoYqV9u1fGfL9hM0j0=)
                          2: ilZohaHW1VRFRs0oXYbE7_6qPCw.crl (hash: Ce4mHJUgHfjD+vIgzcq4l6fE3eQ3hSdXjTU75bRe7bM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 13:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ab:42:ef:c2:e7:c1:c3:2e:7c:9b:5b:db:28:b1:65:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a566885a1d6d5544546cd285d86c4effeaa3c2c
        Validity
            Not Before: May  7 15:00:12 2025 GMT
            Not After : May  8 15:00:12 2025 GMT
        Subject: CN=4306f08289c9d8128d2ae9fd9207cb0f987683ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:af:f5:71:bc:18:35:0c:68:70:93:5c:9e:46:
                    f1:0c:00:52:7b:76:d8:59:79:1b:6a:9a:be:a0:99:
                    c2:97:67:8a:6a:3b:f1:a3:7f:c4:b7:b3:86:1e:ef:
                    47:d6:9e:8f:dd:7c:1b:fe:68:4f:0d:d4:ec:46:8d:
                    de:68:1d:1d:41:29:fb:32:2a:e8:fc:bf:f6:f5:d5:
                    36:d8:66:e6:03:53:93:11:33:9e:7b:c3:bd:62:c1:
                    ce:a1:9f:16:9a:59:93:f4:f3:d8:a9:3b:ee:bb:0b:
                    9f:2b:49:88:8a:61:96:48:b6:01:b5:25:54:39:70:
                    ec:eb:92:15:1b:d7:28:d4:29:ca:9c:60:fd:d1:29:
                    46:c7:b7:59:7f:35:3b:f8:e9:0a:af:ce:ce:ab:15:
                    2f:ef:92:d2:94:b1:48:c3:0d:d5:36:03:65:33:e6:
                    4f:69:94:23:97:c6:20:6d:e0:aa:56:48:8c:1c:cf:
                    7f:b2:d7:53:5f:ee:bf:e6:e2:76:a2:aa:4e:e7:1a:
                    52:34:62:0a:7e:8f:74:08:8e:ec:48:9e:5a:55:c2:
                    ab:be:e0:9d:53:f6:52:19:c8:67:0b:8c:2c:d7:99:
                    f0:3b:f0:11:fb:52:31:1b:e2:d8:f6:d3:4b:65:75:
                    db:f2:58:aa:1f:69:6f:5e:d7:4b:0e:3c:aa:bb:af:
                    00:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:06:F0:82:89:C9:D8:12:8D:2A:E9:FD:92:07:CB:0F:98:76:83:EC
            X509v3 Authority Key Identifier:
                keyid:8A:56:68:85:A1:D6:D5:54:45:46:CD:28:5D:86:C4:EF:FE:AA:3C:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:57:a3:6d:5c:52:e8:fc:df:ac:f7:6a:92:28:85:93:9b:cc:
         4d:64:02:42:15:a6:56:25:33:d4:42:5f:45:8f:dd:b6:c8:25:
         0a:87:a8:37:9e:c6:5b:f7:08:a1:6a:16:ed:5f:cd:09:25:90:
         6e:a3:46:7c:d4:7d:d6:a2:fa:e1:5e:0a:af:10:0f:71:39:7a:
         19:b5:64:4c:dc:c1:da:0e:4e:84:59:4d:13:d0:8e:f2:f0:00:
         12:21:ba:d8:91:5a:d0:2a:e6:13:14:03:45:0f:ad:18:e8:ec:
         32:60:ca:9b:99:13:60:b6:8c:03:ff:40:79:7d:0e:f5:bd:63:
         81:60:e7:08:82:f2:a5:88:f5:ae:57:7d:7e:69:f9:83:8f:d8:
         3f:a7:25:64:22:fa:8f:e1:46:c0:7d:02:70:d6:0d:3c:1a:19:
         93:59:fd:bd:62:ca:e4:24:31:5c:09:6e:e1:39:19:43:9c:76:
         71:e6:e0:43:d0:54:24:de:8d:92:ac:de:aa:1f:49:69:dd:b8:
         59:c3:3a:80:8a:ff:9e:ef:10:03:73:18:ea:5d:0d:13:2a:52:
         fa:46:97:ef:c2:6b:60:e8:bc:1a:a0:74:78:b0:9e:fb:93:86:
         1f:55:60:2f:cc:c0:37:78:16:f0:12:e5:b7:e8:08:ec:ae:93:
         12:38:e8:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZarQu/C58HDLnybW9sosWUDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNTY2ODg1YTFkNmQ1NTQ0NTQ2Y2QyODVkODZjNGVmZmVh
YTNjMmMwHhcNMjUwNTA3MTUwMDEyWhcNMjUwNTA4MTUwMDEyWjAzMTEwLwYDVQQD
Eyg0MzA2ZjA4Mjg5YzlkODEyOGQyYWU5ZmQ5MjA3Y2IwZjk4NzY4M2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyq/1cbwYNQxocJNcnkbxDABSe3bY
WXkbapq+oJnCl2eKajvxo3/Et7OGHu9H1p6P3Xwb/mhPDdTsRo3eaB0dQSn7Miro
/L/29dU22GbmA1OTETOee8O9YsHOoZ8WmlmT9PPYqTvuuwufK0mIimGWSLYBtSVU
OXDs65IVG9co1CnKnGD90SlGx7dZfzU7+OkKr87OqxUv75LSlLFIww3VNgNlM+ZP
aZQjl8YgbeCqVkiMHM9/stdTX+6/5uJ2oqpO5xpSNGIKfo90CI7sSJ5aVcKrvuCd
U/ZSGchnC4ws15nwO/AR+1IxG+LY9tNLZXXb8liqH2lvXtdLDjyqu68AtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMG8IKJydgSjSrp/ZIHyw+YdoPsMB8GA1UdIwQY
MBaAFIpWaIWh1tVURUbNKF2GxO/+qjwsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWxab2hhSFcxVlJGUnMwb1hZYkU3XzZxUEN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9kY2ZiYzctNjRiOC00YzkxLTg5YTAt
MWFmMDVhMjIzN2MzLzEvaWxab2hhSFcxVlJGUnMwb1hZYkU3XzZxUEN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9kY2ZiYzctNjRiOC00YzkxLTg5YTAtMWFmMDVhMjIzN2Mz
LzEvaWxab2hhSFcxVlJGUnMwb1hZYkU3XzZxUEN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGVejbVxS
6PzfrPdqkiiFk5vMTWQCQhWmViUz1EJfRY/dtsglCoeoN57GW/cIoWoW7V/NCSWQ
bqNGfNR91qL64V4KrxAPcTl6GbVkTNzB2g5OhFlNE9CO8vAAEiG62JFa0CrmExQD
RQ+tGOjsMmDKm5kTYLaMA/9AeX0O9b1jgWDnCILypYj1rld9fmn5g4/YP6clZCL6
j+FGwH0CcNYNPBoZk1n9vWLK5CQxXAlu4TkZQ5x2cebgQ9BUJN6Nkqzeqh9Jad24
WcM6gIr/nu8QA3MY6l0NEypS+kaX78JrYOi8GqB0eLCe+5OGH1VgL8zAN3gW8BLl
t+gI7K6TEjjoHg==
-----END CERTIFICATE-----
Generated at Wed May 7 18:36:57 2025 by rpki-client