Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
File:                     EharzETJqVVAzfWx3FQux9Ef4Ho.mft (raw, json)
Hash identifier:          +r67GhtalKP6cuoPGaCYm79AyPP0LYlZtKPBsR7ueJI=
Subject key identifier:   C8:B0:EE:F9:E8:3B:01:44:92:AD:A6:73:83:12:35:85:DB:D6:24:A3
Authority key identifier: 12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
Certificate issuer:       /CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Certificate serial:       0196BBFF93583611548CE15A8D11FC6113CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
Manifest number:          4F
Signing time:             Sat 10 May 2025 21:00:10 +0000
Manifest this update:     Sat 10 May 2025 21:00:10 +0000
Manifest next update:     Sun 11 May 2025 21:00:10 +0000
Files and hashes:         1: 8XAK_n9Ijdz-1TJV-cnMoV4PDJI.roa (hash: hpzRZ9fG9vy0NkMEhpRLlojbHPEYeYp5I8KcchuS0u0=)
                          2: 9PgT8am9GX2lNTUWeiRs0LXntY0.roa (hash: X5SDKNQRKe6G52wQx4wpF/A5KQNfS5fj8rskXwcraIA=)
                          3: B97d26Z8zbvdgAX4-cqimsUhXM0.roa (hash: oZVbNKeP0bEDNNBWhDYVqEMaSVD4P4FH5yL5YJ/tIoc=)
                          4: D8akI8P5Xi8Ifp8LsQyslMH9ydQ.roa (hash: AKGzJiWAK4O0wOeiBq1pBQs9Et3quYVUdawmatMGbA4=)
                          5: EharzETJqVVAzfWx3FQux9Ef4Ho.crl (hash: cbuoWUgj/9EaiYjo2kX9fr6tYUGpVp6lUWujNbzhDJA=)
                          6: MQJ9Tms8NtZHBjFKGd8tRATLgzU.roa (hash: JQ9FShj97dGuiiKP4b3nhes/Pu/ifqQ1fWpnjpSUqN0=)
                          7: Ru8ZRa3us3EXd4Kuc_gCxyMaY_w.roa (hash: 8tvJstphtGeZ6QzHvnWs5W3Xee9kE5jmY/6KMv2k9ic=)
                          8: ScAR3uPyATYgU_nmPSEp-uOF-dw.roa (hash: /Djsq98hUPSTRPRTBh6WF392L0FrLeU6LETIMEXpAeg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:ff:93:58:36:11:54:8c:e1:5a:8d:11:fc:61:13:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
        Validity
            Not Before: May 10 21:00:10 2025 GMT
            Not After : May 11 21:00:10 2025 GMT
        Subject: CN=c8b0eef9e83b014492ada67383123585dbd624a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fc:bf:8f:59:61:f1:8a:4f:84:11:7d:da:96:
                    cb:2e:27:c5:01:5c:5f:8b:d3:c3:e1:fb:28:67:b8:
                    06:b8:94:32:5c:25:dd:93:15:c4:da:55:7c:83:d8:
                    b9:bc:eb:9b:3d:42:71:cb:78:71:9f:01:a6:d4:9d:
                    09:6f:94:61:ee:8d:ac:e0:3d:33:ca:c9:e3:09:31:
                    3f:cd:43:79:80:9f:73:94:fb:e4:ab:58:0b:86:6b:
                    64:72:b5:41:b3:3a:d6:e1:58:02:c1:6b:e9:01:22:
                    c6:31:33:ff:fa:1d:2e:54:f2:c9:c5:17:05:4b:1a:
                    47:c6:b5:8a:6a:b2:d2:0c:88:77:cf:f9:f1:6a:65:
                    9b:ba:25:c4:01:31:75:b3:bb:f1:8d:ff:f1:cd:62:
                    7d:17:e3:fa:ae:40:5d:ab:ed:7e:7e:87:f8:6c:70:
                    c2:12:97:e3:3d:7d:d4:3a:b8:71:03:16:71:57:35:
                    a7:d0:d3:bf:dd:c0:a4:c8:02:fd:47:d8:36:90:bc:
                    5c:d3:d4:e4:48:98:f6:2b:21:cf:63:92:a5:fd:70:
                    6e:de:c8:54:40:e1:77:e6:23:3c:69:42:7e:cc:03:
                    14:77:fc:1f:f6:93:13:9c:6b:63:89:0c:e5:9f:83:
                    3f:e5:1d:90:d5:c5:5d:9f:67:b3:10:2b:96:c4:b0:
                    18:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B0:EE:F9:E8:3B:01:44:92:AD:A6:73:83:12:35:85:DB:D6:24:A3
            X509v3 Authority Key Identifier:
                keyid:12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:3d:57:0e:52:36:03:86:ff:a3:9f:5f:ca:0f:4b:e3:cb:e9:
         ba:9d:a2:e0:44:05:d4:76:fb:fa:20:f7:d7:5c:1c:5d:c9:dc:
         19:2b:b5:9f:d6:d7:5f:6b:9f:53:c9:99:96:be:9d:f9:73:af:
         47:ff:1a:8b:ec:c2:ef:98:0a:6e:52:f8:3b:cd:10:4a:38:b0:
         44:2e:7e:49:b7:37:17:04:2c:e6:89:18:ab:d3:14:4a:8e:5c:
         75:b5:1b:12:64:37:65:b1:05:0d:2a:c1:1f:d0:13:be:6d:f0:
         46:07:be:09:d7:fa:51:28:6d:63:db:5c:2e:1a:d6:dd:8f:66:
         b2:68:e2:35:32:53:b6:03:6e:a6:53:cf:a1:0a:f9:1e:94:55:
         7f:9f:8d:60:36:52:d8:76:73:ec:84:e9:1f:3f:02:e8:27:9f:
         90:d2:e2:6f:49:39:48:a0:f1:17:30:85:fe:91:d0:c2:22:1f:
         6b:6e:9a:8f:22:82:ea:dc:d9:05:80:66:17:96:10:dc:7b:4d:
         c7:c6:9f:47:62:d8:f3:ee:4c:7e:59:4a:f2:51:d9:a8:17:ee:
         cc:d3:7b:7c:42:ae:b4:72:2a:97:18:8e:00:08:d0:0d:76:3b:
         b6:1e:b7:4d:79:ff:dd:f8:4a:46:c2:82:c5:3e:19:84:e8:f6:
         1b:75:d9:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7/5NYNhFUjOFajRH8YRPPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMTZhYmNjNDRjOWE5NTU0MGNkZjViMWRjNTQyZWM3ZDEx
ZmUwN2EwHhcNMjUwNTEwMjEwMDEwWhcNMjUwNTExMjEwMDEwWjAzMTEwLwYDVQQD
EyhjOGIwZWVmOWU4M2IwMTQ0OTJhZGE2NzM4MzEyMzU4NWRiZDYyNGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPy/j1lh8YpPhBF92pbLLifFAVxf
i9PD4fsoZ7gGuJQyXCXdkxXE2lV8g9i5vOubPUJxy3hxnwGm1J0Jb5Rh7o2s4D0z
ysnjCTE/zUN5gJ9zlPvkq1gLhmtkcrVBszrW4VgCwWvpASLGMTP/+h0uVPLJxRcF
SxpHxrWKarLSDIh3z/nxamWbuiXEATF1s7vxjf/xzWJ9F+P6rkBdq+1+fof4bHDC
EpfjPX3UOrhxAxZxVzWn0NO/3cCkyAL9R9g2kLxc09TkSJj2KyHPY5Kl/XBu3shU
QOF35iM8aUJ+zAMUd/wf9pMTnGtjiQzln4M/5R2Q1cVdn2ezECuWxLAYfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMiw7vnoOwFEkq2mc4MSNYXb1iSjMB8GA1UdIwQY
MBaAFBIWq8xEyalVQM31sdxULsfRH+B6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWhhcnpFVEpxVlZBemZXeDNGUXV4OUVmNEhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9hYzljZjYtMWJlYy00MjRiLWFhNTEt
YTA5NjJkOTk4ZTYwLzEvRWhhcnpFVEpxVlZBemZXeDNGUXV4OUVmNEhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9hYzljZjYtMWJlYy00MjRiLWFhNTEtYTA5NjJkOTk4ZTYw
LzEvRWhhcnpFVEpxVlZBemZXeDNGUXV4OUVmNEhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsD1XDlI2
A4b/o59fyg9L48vpup2i4EQF1Hb7+iD311wcXcncGSu1n9bXX2ufU8mZlr6d+XOv
R/8ai+zC75gKblL4O80QSjiwRC5+Sbc3FwQs5okYq9MUSo5cdbUbEmQ3ZbEFDSrB
H9ATvm3wRge+Cdf6UShtY9tcLhrW3Y9msmjiNTJTtgNuplPPoQr5HpRVf5+NYDZS
2HZz7ITpHz8C6CefkNLib0k5SKDxFzCF/pHQwiIfa26ajyKC6tzZBYBmF5YQ3HtN
x8afR2LY8+5MfllK8lHZqBfuzNN7fEKutHIqlxiOAAjQDXY7th63TXn/3fhKRsKC
xT4ZhOj2G3XZWw==
-----END CERTIFICATE-----
Generated at Sun May 11 04:05:02 2025 by rpki-client