Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.mft
File:                     80HP7DgTH4OuPfaZj6AoN1hckd0.mft (raw, json)
Hash identifier:          LpXuXltjWyV3LBQ06zf1rZhkg1MoZNIvEvNxF6w5T3I=
Subject key identifier:   23:B0:68:89:2E:4C:6D:8D:0E:A5:65:8F:37:88:CF:C5:01:88:1C:A6
Authority key identifier: F3:41:CF:EC:38:13:1F:83:AE:3D:F6:99:8F:A0:28:37:58:5C:91:DD
Certificate issuer:       /CN=f341cfec38131f83ae3df6998fa02837585c91dd
Certificate serial:       01969DF5A895618F1DC17AD0B6CA3967BE80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/80HP7DgTH4OuPfaZj6AoN1hckd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.mft
Manifest number:          14BA
Signing time:             Mon 05 May 2025 01:00:44 +0000
Manifest this update:     Mon 05 May 2025 01:00:44 +0000
Manifest next update:     Tue 06 May 2025 01:00:44 +0000
Files and hashes:         1: 80HP7DgTH4OuPfaZj6AoN1hckd0.crl (hash: apQLmft3+Cu+gz0dlMn9y0PitJZ3jWm5ksDb/e05frA=)
                          2: 8wprXMKHFgaJbtrRl-7EoukrioE.roa (hash: q8PQ3gfYER2buU7f4CIdxjaKSrkMPorOzRr37JwbNA8=)
                          3: 9xeSR24sxZMuke8WWQxRtYGVLEg.roa (hash: oz0m8zrhKTQoSNw6FTxtRasHRF9fge7GFhftXk33fk0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/80HP7DgTH4OuPfaZj6AoN1hckd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:f5:a8:95:61:8f:1d:c1:7a:d0:b6:ca:39:67:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f341cfec38131f83ae3df6998fa02837585c91dd
        Validity
            Not Before: May  5 01:00:44 2025 GMT
            Not After : May  6 01:00:44 2025 GMT
        Subject: CN=23b068892e4c6d8d0ea5658f3788cfc501881ca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:51:c6:b0:32:08:9e:5e:fb:93:c2:5a:8a:b4:
                    a6:07:f9:a2:7b:f0:b5:b8:e3:7d:34:c8:8b:3c:a0:
                    08:08:81:5a:50:fc:16:d4:ad:4a:9e:ec:7b:c1:78:
                    0f:b2:ff:b9:4f:3a:ce:27:18:0e:01:12:b5:2c:af:
                    bd:59:c9:e3:15:46:46:a2:d1:96:48:e6:c7:66:73:
                    fd:dd:38:aa:52:5d:1e:cc:e5:17:25:3b:d2:bb:d8:
                    f0:3c:4d:0e:12:6a:26:3e:a9:9e:81:c7:37:bb:4a:
                    06:59:14:18:35:19:16:78:1d:19:73:fa:db:66:3d:
                    39:4b:7b:38:f4:5e:6f:46:09:a4:8c:0b:de:d6:4a:
                    a9:97:81:11:9e:ee:96:1f:e1:07:e3:f2:5e:dc:92:
                    ba:91:f0:ab:e2:8b:aa:f5:c3:2c:f7:58:61:ee:aa:
                    d8:d3:4f:6b:79:ed:ee:d0:44:12:e9:88:19:54:a1:
                    71:5d:cb:fe:f5:d0:bd:9a:1b:76:40:a7:6d:f7:2c:
                    2c:b3:21:9e:ec:f4:00:08:d6:98:01:52:25:b3:a3:
                    0d:92:bf:12:76:ee:e3:4b:22:ee:22:2a:ce:f4:08:
                    13:bf:c4:39:6e:53:59:c0:93:5f:46:d5:20:98:6c:
                    03:ec:a1:a1:c5:c4:ad:03:7a:3c:45:c6:5b:cc:40:
                    4a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B0:68:89:2E:4C:6D:8D:0E:A5:65:8F:37:88:CF:C5:01:88:1C:A6
            X509v3 Authority Key Identifier:
                keyid:F3:41:CF:EC:38:13:1F:83:AE:3D:F6:99:8F:A0:28:37:58:5C:91:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80HP7DgTH4OuPfaZj6AoN1hckd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:b5:d9:0c:46:8a:27:f3:a5:82:f7:2a:fd:e7:ee:0b:1b:4c:
         59:26:5a:8c:04:8c:84:49:3e:76:14:23:c5:f4:9b:08:7d:2c:
         85:90:94:82:f5:58:29:a6:e2:bf:bc:4e:c7:be:ee:07:31:76:
         eb:9e:8a:23:61:1f:eb:43:a0:d3:aa:df:00:74:5b:0c:f4:ec:
         ba:e3:c8:6a:2f:3e:45:30:ae:43:7b:d9:59:4d:54:90:26:54:
         c1:76:b0:e8:e2:8e:59:3d:2a:3a:43:e9:82:18:91:9f:a3:2d:
         2e:4d:86:b7:1b:3a:c2:a4:c9:87:6f:25:6c:24:39:1a:c4:b8:
         97:d6:19:d3:d2:0c:12:89:25:00:f0:aa:ae:27:a9:b0:21:23:
         04:c6:96:cb:d7:d2:28:ce:9a:09:40:f8:ad:04:dd:92:36:ba:
         80:6f:79:66:10:b4:af:da:7d:0e:b7:36:f5:8b:42:69:29:85:
         d5:f4:18:24:95:b6:a6:d5:5c:18:bf:2e:cb:f7:a4:1f:ca:ae:
         81:ae:ff:03:a8:49:52:37:d9:09:05:cc:1f:73:6f:e1:33:7d:
         72:9d:2c:b3:d7:e8:e1:71:90:ff:33:ad:a5:1f:9b:24:0e:b0:
         a2:50:04:10:5f:b6:b9:63:8a:b2:9e:63:2c:58:a9:d7:14:f1:
         0d:16:72:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZad9aiVYY8dwXrQtso5Z76AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNDFjZmVjMzgxMzFmODNhZTNkZjY5OThmYTAyODM3NTg1
YzkxZGQwHhcNMjUwNTA1MDEwMDQ0WhcNMjUwNTA2MDEwMDQ0WjAzMTEwLwYDVQQD
EygyM2IwNjg4OTJlNGM2ZDhkMGVhNTY1OGYzNzg4Y2ZjNTAxODgxY2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplHGsDIInl77k8JairSmB/mie/C1
uON9NMiLPKAICIFaUPwW1K1Knux7wXgPsv+5TzrOJxgOARK1LK+9WcnjFUZGotGW
SObHZnP93TiqUl0ezOUXJTvSu9jwPE0OEmomPqmegcc3u0oGWRQYNRkWeB0Zc/rb
Zj05S3s49F5vRgmkjAve1kqpl4ERnu6WH+EH4/Je3JK6kfCr4ouq9cMs91hh7qrY
009ree3u0EQS6YgZVKFxXcv+9dC9mht2QKdt9ywssyGe7PQACNaYAVIls6MNkr8S
du7jSyLuIirO9AgTv8Q5blNZwJNfRtUgmGwD7KGhxcStA3o8RcZbzEBKnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCOwaIkuTG2NDqVljzeIz8UBiBymMB8GA1UdIwQY
MBaAFPNBz+w4Ex+Drj32mY+gKDdYXJHdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODBIUDdEZ1RINE91UGZhWmo2QW9OMWhja2QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yMmY4NTEtNzdlZS00ZDY0LWE5NWUt
MDlhZmI3ZDZmYjE2LzEvODBIUDdEZ1RINE91UGZhWmo2QW9OMWhja2QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8yMmY4NTEtNzdlZS00ZDY0LWE5NWUtMDlhZmI3ZDZmYjE2
LzEvODBIUDdEZ1RINE91UGZhWmo2QW9OMWhja2QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsLXZDEaK
J/Olgvcq/efuCxtMWSZajASMhEk+dhQjxfSbCH0shZCUgvVYKabiv7xOx77uBzF2
656KI2Ef60Og06rfAHRbDPTsuuPIai8+RTCuQ3vZWU1UkCZUwXaw6OKOWT0qOkPp
ghiRn6MtLk2Gtxs6wqTJh28lbCQ5GsS4l9YZ09IMEoklAPCqriepsCEjBMaWy9fS
KM6aCUD4rQTdkja6gG95ZhC0r9p9Drc29YtCaSmF1fQYJJW2ptVcGL8uy/ekH8qu
ga7/A6hJUjfZCQXMH3Nv4TN9cp0ss9fo4XGQ/zOtpR+bJA6wolAEEF+2uWOKsp5j
LFip1xTxDRZypw==
-----END CERTIFICATE-----
Generated at Mon May 5 11:02:27 2025 by rpki-client