Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft
File:                     OACZqBs0b5q8ryYFb1t3CU0c8RM.mft (raw, json)
Hash identifier:          K44ATBdEOhZ3sNorq+81DWKk+qA19jHw6nGbqJsLRrg=
Subject key identifier:   B5:CE:FF:12:7F:C1:1E:2E:27:DD:07:66:34:71:28:97:80:A0:1B:7B
Authority key identifier: 38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
Certificate issuer:       /CN=380099a81b346f9abcaf26056f5b77094d1cf113
Certificate serial:       0196C4CC50CDC8BA4A78E9E4684FCE01DA0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft
Manifest number:          153F
Signing time:             Mon 12 May 2025 14:00:46 +0000
Manifest this update:     Mon 12 May 2025 14:00:46 +0000
Manifest next update:     Tue 13 May 2025 14:00:46 +0000
Files and hashes:         1: 8uKSKM8TVx970yK_aHmjajWuHlo.roa (hash: Kv8ysTx9zq+WIfK6VNPlttN4b3mr4mqd5LylYbnznig=)
                          2: 9pCmbwuWDKFww6JalPNjMXiQ2uc.roa (hash: crRW/IaBwcSVgY89PTYbAz61UCGYjtm5jlog0eAP9F0=)
                          3: DfJAzf9Q3L4tEmWPS7qqKDmlgK0.roa (hash: fuVQXP2ZqWav/yCgsPsm3fiqqB9eYt0wXu73N33zIys=)
                          4: F-WM6V0pDS_ngxIgpNgM_SOKzXs.roa (hash: YycRdDyGTbaVD3BQBXWfEPp9cD6S80QfheVTwZQO9zE=)
                          5: OACZqBs0b5q8ryYFb1t3CU0c8RM.crl (hash: wTKpZXvb6605AWY0MIeAWF83Nw27Io+afxs//rdqOlQ=)
                          6: Ox8NDyO7Lu2pVppSpwPpBrklgoc.roa (hash: cdngPKwKptE72CQ/axAKXaUmzgT1mhIjk6pmelzFUgg=)
                          7: drQvOj9TpOHRytlyOo6kxATgZOw.roa (hash: 4wVUz15BtyiS24LCP9jZgWAlCIUKAL3+afNKe8X1w18=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c4:cc:50:cd:c8:ba:4a:78:e9:e4:68:4f:ce:01:da:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=380099a81b346f9abcaf26056f5b77094d1cf113
        Validity
            Not Before: May 12 14:00:46 2025 GMT
            Not After : May 13 14:00:46 2025 GMT
        Subject: CN=b5ceff127fc11e2e27dd07663471289780a01b7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d1:cf:1e:e2:78:94:3c:6a:a8:9b:40:97:8e:
                    9f:aa:13:ce:39:7f:34:40:9f:ac:30:09:be:a6:da:
                    6a:8b:92:63:e7:e9:88:f1:16:4e:ba:bd:e9:e3:95:
                    5e:ab:66:ad:33:56:b9:0c:48:70:9d:77:fe:47:77:
                    09:4d:7b:1d:42:e8:89:57:f0:8b:e4:c8:4f:bc:f7:
                    6f:ea:aa:5d:6e:84:7a:97:76:69:95:a6:69:e1:06:
                    f0:7b:5b:41:85:23:3f:1e:33:22:dc:30:84:e0:22:
                    e8:2a:25:78:e8:52:ad:d3:08:f0:1e:dd:23:f4:ef:
                    29:f8:0b:95:07:a9:2c:32:3e:23:7d:68:de:39:2a:
                    9d:cc:14:0e:8f:6e:97:ff:ed:7f:0a:13:d1:ac:ba:
                    97:54:22:67:ec:db:f0:fc:66:bf:f1:3c:0f:1e:0d:
                    8e:7d:91:1b:dc:f1:d1:07:23:5a:f3:53:27:df:ee:
                    20:ea:08:b5:0d:7a:b5:c9:11:73:88:7b:49:42:b2:
                    db:de:bb:f4:fd:e5:7e:69:f6:4c:7b:30:4c:56:40:
                    03:2b:16:47:47:c0:d2:8c:a2:f8:dc:be:4f:aa:e6:
                    2f:26:f9:a5:4c:76:24:9b:92:9a:75:69:7d:9d:0a:
                    d4:85:e8:df:9f:15:f2:45:e9:f5:13:bf:36:18:fc:
                    5c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:CE:FF:12:7F:C1:1E:2E:27:DD:07:66:34:71:28:97:80:A0:1B:7B
            X509v3 Authority Key Identifier:
                keyid:38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:da:35:36:55:6c:c6:31:22:e7:94:78:b0:79:9d:79:4a:61:
         09:9c:be:d3:3d:77:02:b1:37:19:06:d5:f8:9c:e5:41:57:ff:
         af:b0:8f:b6:66:5d:58:d2:60:14:a1:40:4d:20:78:75:55:33:
         af:5d:76:ce:23:38:8b:b4:d3:4c:1d:d3:ff:37:0a:e4:4a:a0:
         7d:05:b3:4f:37:7e:2e:68:42:90:36:dd:f3:1f:08:f7:cc:fb:
         a5:ab:1b:5a:e5:5d:bd:f5:84:bb:f2:b7:e9:70:bd:d8:9d:dd:
         ad:41:5b:ea:8f:c4:ae:9e:4a:65:30:d1:57:40:0d:ff:0e:9a:
         93:f5:55:96:d3:44:0e:9f:87:54:5d:b3:36:d3:ae:9c:b3:9b:
         e8:c6:f6:b9:53:20:ca:36:07:e9:bd:d9:e7:e9:38:0f:49:da:
         2b:91:c9:2e:58:27:35:bd:fc:f9:43:14:9d:95:a9:72:c0:42:
         6f:be:98:6f:66:fa:ce:90:8c:c8:ba:b7:bd:13:e5:cd:31:63:
         35:76:ff:8d:4e:5a:46:65:b7:2d:da:15:24:3b:be:b5:07:5a:
         b0:49:f8:c8:c7:7f:4b:7b:0f:fe:e9:be:11:ff:39:a3:7e:f7:
         ff:fe:12:72:e6:33:ab:10:a4:f6:94:8f:f9:02:4e:40:b4:b0:
         d8:5b:be:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbEzFDNyLpKeOnkaE/OAdoOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MDA5OWE4MWIzNDZmOWFiY2FmMjYwNTZmNWI3NzA5NGQx
Y2YxMTMwHhcNMjUwNTEyMTQwMDQ2WhcNMjUwNTEzMTQwMDQ2WjAzMTEwLwYDVQQD
EyhiNWNlZmYxMjdmYzExZTJlMjdkZDA3NjYzNDcxMjg5NzgwYTAxYjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NHPHuJ4lDxqqJtAl46fqhPOOX80
QJ+sMAm+ptpqi5Jj5+mI8RZOur3p45Veq2atM1a5DEhwnXf+R3cJTXsdQuiJV/CL
5MhPvPdv6qpdboR6l3ZplaZp4Qbwe1tBhSM/HjMi3DCE4CLoKiV46FKt0wjwHt0j
9O8p+AuVB6ksMj4jfWjeOSqdzBQOj26X/+1/ChPRrLqXVCJn7Nvw/Ga/8TwPHg2O
fZEb3PHRByNa81Mn3+4g6gi1DXq1yRFziHtJQrLb3rv0/eV+afZMezBMVkADKxZH
R8DSjKL43L5PquYvJvmlTHYkm5KadWl9nQrUhejfnxXyRen1E782GPxcJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXO/xJ/wR4uJ90HZjRxKJeAoBt7MB8GA1UdIwQY
MBaAFDgAmagbNG+avK8mBW9bdwlNHPETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0FDWnFCczBiNXE4cnlZRmIxdDNDVTBjOFJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My84ZTUwMWQtYzA4OC00ODk1LWFlZTMt
NDUwZmUzMzU5NWQxLzEvT0FDWnFCczBiNXE4cnlZRmIxdDNDVTBjOFJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My84ZTUwMWQtYzA4OC00ODk1LWFlZTMtNDUwZmUzMzU5NWQx
LzEvT0FDWnFCczBiNXE4cnlZRmIxdDNDVTBjOFJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQdo1NlVs
xjEi55R4sHmdeUphCZy+0z13ArE3GQbV+JzlQVf/r7CPtmZdWNJgFKFATSB4dVUz
r112ziM4i7TTTB3T/zcK5EqgfQWzTzd+LmhCkDbd8x8I98z7pasbWuVdvfWEu/K3
6XC92J3drUFb6o/Erp5KZTDRV0AN/w6ak/VVltNEDp+HVF2zNtOunLOb6Mb2uVMg
yjYH6b3Z5+k4D0naK5HJLlgnNb38+UMUnZWpcsBCb76Yb2b6zpCMyLq3vRPlzTFj
NXb/jU5aRmW3LdoVJDu+tQdasEn4yMd/S3sP/um+Ef85o373//4ScuYzqxCk9pSP
+QJOQLSw2Fu+fw==
-----END CERTIFICATE-----
Generated at Mon May 12 18:27:15 2025 by rpki-client