Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
File:                     II3jrRjdCuFDYtDoTewEPTecwkI.mft (raw, json)
Hash identifier:          YyQk5XXKFn9n0y2OiO4x3eSijMqcOi/YSb8aHz1iVNQ=
Subject key identifier:   A1:E1:A4:5F:7E:F0:17:B9:8C:E9:0F:2F:4F:42:3A:FC:F4:54:81:81
Authority key identifier: 20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42
Certificate issuer:       /CN=208de3ad18dd0ae14362d0e84dec043d379cc242
Certificate serial:       0196BE255CA333159640CE505CBB8610DB45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
Manifest number:          1536
Signing time:             Sun 11 May 2025 07:00:41 +0000
Manifest this update:     Sun 11 May 2025 07:00:41 +0000
Manifest next update:     Mon 12 May 2025 07:00:41 +0000
Files and hashes:         1: II3jrRjdCuFDYtDoTewEPTecwkI.crl (hash: lKYA6/9Raux0T+Ck+mSI0n8/Inv7fvn3EV6iIFtgIAc=)
                          2: Sv8c63xNahZnEUX6sxkZS1Ry2Mw.roa (hash: jrXo/rmKfJlmke1E58p0Fv3ALUTTjd9LLG6tbA+jiaw=)
                          3: V04OCx0o1Bg0TgD8MO6kNsFMhog.roa (hash: 3a02UAIxWYHpz8tUKE7mHvONTRM/Wnqwu/RQszMGhpw=)
                          4: js9oNFtAP6uoXkguET2ifOtGxFk.roa (hash: xlI8bBSGf/iOY2KLlBGfTCvLGclFsfTElrxGe6FfxvM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:be:25:5c:a3:33:15:96:40:ce:50:5c:bb:86:10:db:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208de3ad18dd0ae14362d0e84dec043d379cc242
        Validity
            Not Before: May 11 07:00:41 2025 GMT
            Not After : May 12 07:00:41 2025 GMT
        Subject: CN=a1e1a45f7ef017b98ce90f2f4f423afcf4548181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e3:4a:36:fb:ca:4b:d2:60:6f:bf:89:df:55:
                    f4:1a:b6:71:13:d9:8b:91:80:60:54:71:ec:8c:d5:
                    2e:0b:2a:cd:3a:94:0a:42:ed:f8:bb:1a:9f:d7:87:
                    e2:67:a9:30:35:ed:52:70:a3:8b:17:4f:b0:0f:60:
                    4e:a4:6b:cf:43:07:97:5d:1d:b8:79:34:5f:77:8d:
                    62:aa:77:46:9b:ec:88:82:67:9d:9e:f1:4d:05:c7:
                    dc:2c:e6:52:a4:92:60:a8:09:7f:89:26:ae:cb:82:
                    6d:2f:9d:59:d7:32:c0:af:13:c9:b0:29:e9:4e:56:
                    12:d0:ea:50:c0:62:37:6d:7e:57:5c:da:53:4e:88:
                    c6:42:cd:ed:8c:4a:d9:bf:e4:2a:ee:1c:c6:e4:45:
                    ff:6c:e9:05:12:e3:1f:a5:05:60:12:ab:48:4a:0f:
                    7d:c6:a1:6c:1e:ca:68:8e:40:10:e9:cf:7b:ce:7b:
                    c3:25:78:78:d1:6e:fd:03:76:43:b2:99:7d:26:8a:
                    d4:36:c8:1c:80:f0:e5:df:b2:bd:3f:77:c7:93:49:
                    14:9b:e1:fd:8b:57:49:b9:fe:0b:99:ec:4c:c6:f8:
                    df:08:45:f7:45:a9:e8:8a:4f:f5:54:19:9c:cc:ed:
                    82:8c:fd:ec:1b:f3:8b:90:06:2e:af:2f:1e:06:9a:
                    93:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E1:A4:5F:7E:F0:17:B9:8C:E9:0F:2F:4F:42:3A:FC:F4:54:81:81
            X509v3 Authority Key Identifier:
                keyid:20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:66:36:c3:b7:3c:bb:83:32:d8:b7:4b:9e:fe:a7:7e:0a:7f:
         ea:c2:26:22:50:7e:2e:fe:d3:e6:45:a4:f9:79:ac:bb:e6:ef:
         66:4a:a8:56:10:4e:eb:2f:74:5e:61:4a:b0:14:c3:d3:a0:14:
         d0:8d:30:90:a4:a4:d0:bb:dc:af:39:6c:b1:27:6a:23:1b:ad:
         c8:c1:cd:fc:8d:bb:64:35:ad:9b:6c:e9:f8:95:7f:0c:f6:08:
         fa:ee:b5:7a:70:2f:ca:54:98:d9:86:2d:23:c0:2f:fd:a0:b1:
         de:10:23:a4:48:da:79:7a:c0:7e:fe:f3:1a:9b:ef:a0:1e:57:
         8b:6e:41:47:b6:a2:c2:b0:30:d4:be:d3:71:ac:f2:39:e7:68:
         e0:3e:d7:4f:1a:3c:61:f0:e6:7f:be:75:3b:3d:c3:18:e3:d8:
         5a:4c:e3:20:59:85:52:43:47:5d:a3:81:91:c9:c6:0a:83:02:
         21:2a:02:2a:38:1a:e5:92:99:75:31:27:14:fa:cd:be:68:fa:
         e3:12:bc:4a:de:1f:c5:a3:c5:5e:d7:fe:fd:ee:e2:11:96:ee:
         67:42:05:5d:b8:2b:46:64:7d:13:a1:d8:f2:0b:4d:30:d6:98:
         1b:4c:ed:50:f1:f1:a7:99:dc:51:46:1f:83:2f:5c:5c:9a:07:
         4d:ff:dc:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+JVyjMxWWQM5QXLuGENtFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwOGRlM2FkMThkZDBhZTE0MzYyZDBlODRkZWMwNDNkMzc5
Y2MyNDIwHhcNMjUwNTExMDcwMDQxWhcNMjUwNTEyMDcwMDQxWjAzMTEwLwYDVQQD
EyhhMWUxYTQ1ZjdlZjAxN2I5OGNlOTBmMmY0ZjQyM2FmY2Y0NTQ4MTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+NKNvvKS9Jgb7+J31X0GrZxE9mL
kYBgVHHsjNUuCyrNOpQKQu34uxqf14fiZ6kwNe1ScKOLF0+wD2BOpGvPQweXXR24
eTRfd41iqndGm+yIgmednvFNBcfcLOZSpJJgqAl/iSauy4JtL51Z1zLArxPJsCnp
TlYS0OpQwGI3bX5XXNpTTojGQs3tjErZv+Qq7hzG5EX/bOkFEuMfpQVgEqtISg99
xqFsHspojkAQ6c97znvDJXh40W79A3ZDspl9JorUNsgcgPDl37K9P3fHk0kUm+H9
i1dJuf4LmexMxvjfCEX3Ranoik/1VBmczO2CjP3sG/OLkAYury8eBpqT1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHhpF9+8Be5jOkPL09COvz0VIGBMB8GA1UdIwQY
MBaAFCCN460Y3QrhQ2LQ6E3sBD03nMJCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUkzanJSamRDdUZEWXREb1Rld0VQVGVjd2tJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82MTA5NGEtOTQ2OS00Mjk5LTg5ZjIt
YmRmNmU0Mjk0YzJlLzEvSUkzanJSamRDdUZEWXREb1Rld0VQVGVjd2tJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS82MTA5NGEtOTQ2OS00Mjk5LTg5ZjItYmRmNmU0Mjk0YzJl
LzEvSUkzanJSamRDdUZEWXREb1Rld0VQVGVjd2tJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALmY2w7c8
u4My2LdLnv6nfgp/6sImIlB+Lv7T5kWk+Xmsu+bvZkqoVhBO6y90XmFKsBTD06AU
0I0wkKSk0LvcrzlssSdqIxutyMHN/I27ZDWtm2zp+JV/DPYI+u61enAvylSY2YYt
I8Av/aCx3hAjpEjaeXrAfv7zGpvvoB5Xi25BR7aiwrAw1L7TcazyOedo4D7XTxo8
YfDmf751Oz3DGOPYWkzjIFmFUkNHXaOBkcnGCoMCISoCKjga5ZKZdTEnFPrNvmj6
4xK8St4fxaPFXtf+/e7iEZbuZ0IFXbgrRmR9E6HY8gtNMNaYG0ztUPHxp5ncUUYf
gy9cXJoHTf/cIg==
-----END CERTIFICATE-----
Generated at Sun May 11 15:21:22 2025 by rpki-client