Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
File:                     5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft (raw, json)
Hash identifier:          PQt+RKPCiRfn9lMsiq3N7t57xGqJY9ECU3VkhLGy1Z8=
Subject key identifier:   1F:46:F1:FC:C1:65:C3:DE:3B:89:1C:4C:A6:5E:48:26:16:30:85:DD
Authority key identifier: E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
Certificate issuer:       /CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Certificate serial:       0196AAD516E1BAB6B20908D2120E540559AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
Manifest number:          1535
Signing time:             Wed 07 May 2025 13:00:13 +0000
Manifest this update:     Wed 07 May 2025 13:00:13 +0000
Manifest next update:     Thu 08 May 2025 13:00:13 +0000
Files and hashes:         1: 5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl (hash: vxDwqGw/msBti/Zf6CM+C9VL9QyQXVnMAjZjzlKP7DM=)
                          2: Q5lprEAu1AjZg8eC8e9vCRTQc5c.roa (hash: 1TVaYcq6pwwmReP0rlqvmkebRDkja4y3qu5GJXEAYFk=)
                          3: ScDiG1bEMg_iYAnwZ5RqZ9iuBfE.roa (hash: M8oZJ8Uj/JF9chZaxOYRuKYLCgT5+KWo335qmSJiUXs=)
                          4: _jwv_lcEjeP6obJDvR7tAaQUU-k.roa (hash: 5K6HFH8TXSLWVxpMWf5RIreFCOahhdZCzVwIY3yAflg=)
                          5: a3iaEBF86wbe5VjQTp-OMfHJc1E.roa (hash: nuf4ev5fGHCC4PXZAB5L19yGP986oYjP7JfQB1/fdXU=)
                          6: a9_bN0F2h_Kug5sgN-Kpf5AuF0Y.roa (hash: f6TkQWvmEWMglWzfpXp6gmToVC7S2f1cCbDqMTnyBzg=)
                          7: lihzuQoSb7FSiRKzRwb1us4H1SM.roa (hash: KHb+Gcf8LKwRqmsQV3Dwa1dFj1b8D+2+U6h0xyQG13I=)
                          8: qi8JXs2yo200PkF0ybkWzT5gLbA.roa (hash: rDwlWPK/DQ56zjNjEs53TpTRvG/Y0OQ9Sl2iycPDuH4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 13:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:aa:d5:16:e1:ba:b6:b2:09:08:d2:12:0e:54:05:59:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
        Validity
            Not Before: May  7 13:00:13 2025 GMT
            Not After : May  8 13:00:13 2025 GMT
        Subject: CN=1f46f1fcc165c3de3b891c4ca65e4826163085dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:00:a8:7c:ee:01:c1:21:af:bb:c1:07:f6:ec:
                    00:4c:86:32:7e:c9:8c:37:7b:bb:6d:92:b1:4a:b3:
                    0a:d9:8a:2a:64:d8:bc:ce:19:3e:0c:4d:3e:6a:35:
                    91:7f:da:96:6c:e9:65:27:51:54:5a:0f:04:07:31:
                    78:ca:b7:85:54:14:db:9a:4c:74:37:fd:ca:d2:e5:
                    f2:67:5d:15:31:5e:99:df:dc:6c:31:38:7b:9f:56:
                    a2:4e:56:14:bc:2a:3e:7b:b2:eb:4d:41:1e:4e:fe:
                    35:ed:36:84:93:b3:4f:7e:f7:99:f7:d8:c9:d0:34:
                    7e:97:ab:c9:f6:90:e2:7e:ab:04:c1:17:e2:60:62:
                    b4:b2:3a:de:fe:81:65:5e:cd:0a:32:2a:d2:72:9f:
                    48:79:1b:31:22:1d:82:2d:a9:01:48:f5:8e:7b:32:
                    8c:7c:42:16:ce:b0:45:b6:10:db:be:5a:d9:03:be:
                    ce:a1:e0:ff:dc:81:ee:83:33:e6:45:42:13:fa:bd:
                    b4:36:2d:0d:2a:15:df:f5:75:8f:f8:40:8f:56:5c:
                    33:d5:8f:c0:b8:3e:1c:60:96:5c:4e:df:13:a0:a6:
                    7b:fa:9b:e0:85:5a:7f:bd:44:b2:d4:eb:f5:f1:0a:
                    8d:c0:78:88:44:2d:d9:62:10:85:15:17:e1:41:ee:
                    1f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:46:F1:FC:C1:65:C3:DE:3B:89:1C:4C:A6:5E:48:26:16:30:85:DD
            X509v3 Authority Key Identifier:
                keyid:E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:63:c8:4a:30:6e:5e:7e:c2:67:6d:31:91:2f:20:e9:71:93:
         dd:70:af:db:b9:68:5d:e7:c6:3e:6c:46:cf:6e:5e:b3:fe:1b:
         a7:88:57:ee:95:20:52:9e:f9:28:47:31:4f:45:3a:d1:90:c5:
         d2:91:08:df:07:77:70:e0:f2:ff:4d:13:ff:e6:38:43:b5:29:
         d9:51:c4:f0:0d:0f:dc:f6:ba:8f:79:ef:2c:7f:bc:a7:ab:5f:
         3c:f6:0b:2c:9c:aa:75:be:71:a7:45:65:10:0f:cb:86:ab:c8:
         f6:f1:f7:86:b1:f0:55:30:66:2f:cc:d2:11:44:ab:68:70:bb:
         a4:0e:4b:3a:fa:82:fb:8c:fd:36:d1:71:59:20:87:5b:96:d0:
         c2:e1:4b:46:9a:b4:7d:1a:69:45:59:65:2e:71:89:ba:87:92:
         47:06:51:98:f1:09:91:b1:61:4c:ce:c1:ef:21:7c:f9:a5:15:
         48:c6:34:d9:6d:5f:3f:77:73:5c:0a:5b:d8:fb:3c:79:b1:57:
         1f:c8:83:20:bc:bd:1a:01:9b:7e:19:0e:4b:4e:47:8e:6b:26:
         a5:7f:64:2f:f7:51:7e:62:b6:40:7f:38:94:87:d3:e1:58:30:
         68:a2:d5:40:01:1d:0f:e1:d7:d6:42:73:03:d1:3f:69:1f:4d:
         a6:31:99:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaq1RbhurayCQjSEg5UBVmuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YTFiMzY1NTJmOWRhY2NiOTJhYzVjM2I0NGI0MjZkNjQz
NzQ5ZTIwHhcNMjUwNTA3MTMwMDEzWhcNMjUwNTA4MTMwMDEzWjAzMTEwLwYDVQQD
EygxZjQ2ZjFmY2MxNjVjM2RlM2I4OTFjNGNhNjVlNDgyNjE2MzA4NWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQCofO4BwSGvu8EH9uwATIYyfsmM
N3u7bZKxSrMK2YoqZNi8zhk+DE0+ajWRf9qWbOllJ1FUWg8EBzF4yreFVBTbmkx0
N/3K0uXyZ10VMV6Z39xsMTh7n1aiTlYUvCo+e7LrTUEeTv417TaEk7NPfveZ99jJ
0DR+l6vJ9pDifqsEwRfiYGK0sjre/oFlXs0KMirScp9IeRsxIh2CLakBSPWOezKM
fEIWzrBFthDbvlrZA77OoeD/3IHugzPmRUIT+r20Ni0NKhXf9XWP+ECPVlwz1Y/A
uD4cYJZcTt8ToKZ7+pvghVp/vUSy1Ov18QqNwHiIRC3ZYhCFFRfhQe4fwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9G8fzBZcPeO4kcTKZeSCYWMIXdMB8GA1UdIwQY
MBaAFOWhs2VS+drMuSrFw7RLQm1kN0niMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWFHelpWTDUyc3k1S3NYRHRFdENiV1EzU2VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iOGVhNWItM2RkNC00Mzc0LWE3OTMt
YzVlNmQyM2Y4YjA5LzEvNWFHelpWTDUyc3k1S3NYRHRFdENiV1EzU2VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iOGVhNWItM2RkNC00Mzc0LWE3OTMtYzVlNmQyM2Y4YjA5
LzEvNWFHelpWTDUyc3k1S3NYRHRFdENiV1EzU2VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASmPISjBu
Xn7CZ20xkS8g6XGT3XCv27loXefGPmxGz25es/4bp4hX7pUgUp75KEcxT0U60ZDF
0pEI3wd3cODy/00T/+Y4Q7Up2VHE8A0P3Pa6j3nvLH+8p6tfPPYLLJyqdb5xp0Vl
EA/LhqvI9vH3hrHwVTBmL8zSEUSraHC7pA5LOvqC+4z9NtFxWSCHW5bQwuFLRpq0
fRppRVllLnGJuoeSRwZRmPEJkbFhTM7B7yF8+aUVSMY02W1fP3dzXApb2Ps8ebFX
H8iDILy9GgGbfhkOS05HjmsmpX9kL/dRfmK2QH84lIfT4VgwaKLVQAEdD+HX1kJz
A9E/aR9NpjGZMg==
-----END CERTIFICATE-----
Generated at Wed May 7 15:35:08 2025 by rpki-client