Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
File:                     y4muY2SP0cie1Wo2G9jB4RlWv7o.mft (raw, json)
Hash identifier:          EhTbo1BmfIeKamEKBJxarIJrTsFH36QXpmsufKtM+Ek=
Subject key identifier:   FB:2F:03:BD:AD:05:0A:10:F2:E2:41:6C:C1:2E:31:1D:30:E5:A1:22
Authority key identifier: CB:89:AE:63:64:8F:D1:C8:9E:D5:6A:36:1B:D8:C1:E1:19:56:BF:BA
Certificate issuer:       /CN=cb89ae63648fd1c89ed56a361bd8c1e11956bfba
Certificate serial:       0196A9F952CF5A4697FDD841E89B4311844A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
Manifest number:          122B
Signing time:             Wed 07 May 2025 09:00:11 +0000
Manifest this update:     Wed 07 May 2025 09:00:11 +0000
Manifest next update:     Thu 08 May 2025 09:00:11 +0000
Files and hashes:         1: AC5Czqpvjh0N2Ua52Rhnwc0cRrg.roa (hash: BaLqMkqAO8y3wqAkiCrx9+8UXW+y+iTwdOtnoANbo+k=)
                          2: y4muY2SP0cie1Wo2G9jB4RlWv7o.crl (hash: +6EYepKV239NgwLuFWZEl/lBCHZuXu6LKasUWaEFZW8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 09:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a9:f9:52:cf:5a:46:97:fd:d8:41:e8:9b:43:11:84:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb89ae63648fd1c89ed56a361bd8c1e11956bfba
        Validity
            Not Before: May  7 09:00:11 2025 GMT
            Not After : May  8 09:00:11 2025 GMT
        Subject: CN=fb2f03bdad050a10f2e2416cc12e311d30e5a122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0d:59:07:8e:67:c1:34:27:44:6b:da:49:2b:
                    ba:60:fc:e8:1f:73:2f:72:c2:3c:cc:11:f3:e3:fa:
                    fc:58:ff:f9:de:d7:ac:9e:01:b0:ff:3a:44:18:63:
                    df:98:19:a2:f2:da:30:64:2c:0d:66:de:94:d8:f1:
                    d1:b3:fd:b8:93:4c:41:df:10:c6:19:9c:7b:d4:21:
                    8d:84:e5:f9:a7:e6:5f:fe:40:52:52:ea:72:fa:60:
                    f5:5e:aa:91:ce:27:14:a1:21:03:86:fc:13:04:5f:
                    a7:74:91:21:66:61:d1:4e:a0:be:82:ff:08:e9:b5:
                    47:d3:6c:d5:cf:53:60:8a:2d:b7:5d:62:d0:c9:c3:
                    4b:d3:b2:fc:51:fd:75:08:17:8c:92:35:28:dc:dc:
                    02:1b:8b:0d:90:31:ec:fd:2a:21:0f:a8:c1:2c:d9:
                    75:ff:d8:14:f9:47:18:92:e0:a9:27:03:32:8b:48:
                    95:98:ab:4a:f6:d8:4c:9a:b5:8b:c6:5c:a7:f6:6c:
                    07:d6:3f:ac:78:ed:f5:47:b8:ca:14:be:1e:f9:11:
                    12:82:be:e4:20:8c:ed:65:c1:e6:de:a3:44:35:ae:
                    b8:e8:1e:9d:f7:e5:3c:92:cc:66:79:c4:d0:f4:77:
                    e5:50:c4:02:6f:73:6d:c9:62:f3:f3:5b:2b:2e:92:
                    60:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:2F:03:BD:AD:05:0A:10:F2:E2:41:6C:C1:2E:31:1D:30:E5:A1:22
            X509v3 Authority Key Identifier:
                keyid:CB:89:AE:63:64:8F:D1:C8:9E:D5:6A:36:1B:D8:C1:E1:19:56:BF:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:39:f2:62:bd:77:b1:7d:15:d3:a0:3a:67:a5:9f:69:4b:84:
         91:95:2f:79:9b:1a:76:2f:d4:7b:36:00:77:62:32:11:4b:10:
         82:60:40:1f:40:f0:f2:d9:d2:62:a7:2d:d6:e8:5f:77:c0:84:
         e2:a6:65:37:42:09:3b:40:f2:6a:45:75:e4:f0:4a:4b:ad:f5:
         d2:32:65:7e:82:fe:00:65:a7:c9:9a:11:87:8e:99:09:07:a9:
         35:0a:c9:36:19:de:c7:5a:66:bb:35:bc:94:b1:76:87:51:7f:
         b7:97:c4:0c:14:cb:15:c3:c4:e9:b9:8b:7a:a6:51:4e:48:97:
         19:01:47:0c:f8:c7:5b:71:40:a7:89:bf:69:3f:72:ab:79:c0:
         38:72:a5:01:4c:6f:15:76:c2:a0:47:a3:bd:af:7c:98:3f:4a:
         af:77:72:89:3c:7f:c4:2d:db:ee:13:b8:db:24:fc:c6:12:54:
         6a:35:f5:c5:fc:5d:9d:af:40:a3:eb:5a:7d:a7:f7:89:82:33:
         20:2f:6f:aa:fe:59:68:6d:61:2d:65:99:fb:e1:4f:ab:20:7f:
         0b:fc:00:e8:f1:0a:58:5a:2d:04:2e:e2:f0:0b:8a:74:76:89:
         23:83:6d:53:a3:2f:c2:4c:37:18:61:cc:da:8b:b7:3f:fb:8b:
         8d:46:6b:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZap+VLPWkaX/dhB6JtDEYRKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiODlhZTYzNjQ4ZmQxYzg5ZWQ1NmEzNjFiZDhjMWUxMTk1
NmJmYmEwHhcNMjUwNTA3MDkwMDExWhcNMjUwNTA4MDkwMDExWjAzMTEwLwYDVQQD
EyhmYjJmMDNiZGFkMDUwYTEwZjJlMjQxNmNjMTJlMzExZDMwZTVhMTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Q1ZB45nwTQnRGvaSSu6YPzoH3Mv
csI8zBHz4/r8WP/53tesngGw/zpEGGPfmBmi8towZCwNZt6U2PHRs/24k0xB3xDG
GZx71CGNhOX5p+Zf/kBSUupy+mD1XqqRzicUoSEDhvwTBF+ndJEhZmHRTqC+gv8I
6bVH02zVz1Ngii23XWLQycNL07L8Uf11CBeMkjUo3NwCG4sNkDHs/SohD6jBLNl1
/9gU+UcYkuCpJwMyi0iVmKtK9thMmrWLxlyn9mwH1j+seO31R7jKFL4e+RESgr7k
IIztZcHm3qNENa646B6d9+U8ksxmecTQ9HflUMQCb3NtyWLz81srLpJgmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPsvA72tBQoQ8uJBbMEuMR0w5aEiMB8GA1UdIwQY
MBaAFMuJrmNkj9HIntVqNhvYweEZVr+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTRtdVkyU1AwY2llMVdvMkc5akI0UmxXdjdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xYmE2ZGYtNTQ4Yy00NGVhLWIxZDUt
ZjRlYjBmZjViYjczLzEveTRtdVkyU1AwY2llMVdvMkc5akI0UmxXdjdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8xYmE2ZGYtNTQ4Yy00NGVhLWIxZDUtZjRlYjBmZjViYjcz
LzEveTRtdVkyU1AwY2llMVdvMkc5akI0UmxXdjdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhznyYr13
sX0V06A6Z6WfaUuEkZUveZsadi/UezYAd2IyEUsQgmBAH0Dw8tnSYqct1uhfd8CE
4qZlN0IJO0DyakV15PBKS6310jJlfoL+AGWnyZoRh46ZCQepNQrJNhnex1pmuzW8
lLF2h1F/t5fEDBTLFcPE6bmLeqZRTkiXGQFHDPjHW3FAp4m/aT9yq3nAOHKlAUxv
FXbCoEejva98mD9Kr3dyiTx/xC3b7hO42yT8xhJUajX1xfxdna9Ao+tafaf3iYIz
IC9vqv5ZaG1hLWWZ++FPqyB/C/wA6PEKWFotBC7i8AuKdHaJI4NtU6Mvwkw3GGHM
2ou3P/uLjUZrhQ==
-----END CERTIFICATE-----
Generated at Wed May 7 17:57:40 2025 by rpki-client