Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft
File:                     P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft (raw, json)
Hash identifier:          KspONTN25nL/ElgEFod3G/7iKTraK8yOg+pN9Lg3tjY=
Subject key identifier:   E4:05:AD:54:95:30:E2:C3:40:7C:38:73:A7:F5:45:75:77:C3:90:12
Authority key identifier: 3F:CF:F9:8A:AA:5B:48:DC:61:58:D2:FC:65:F2:5C:50:97:B5:E2:6A
Certificate issuer:       /CN=3fcff98aaa5b48dc6158d2fc65f25c5097b5e26a
Certificate serial:       0196D69C069B93DB806BAF6780343F408970
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P8_5iqpbSNxhWNL8ZfJcUJe14mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft
Manifest number:          0259
Signing time:             Fri 16 May 2025 01:01:11 +0000
Manifest this update:     Fri 16 May 2025 01:01:11 +0000
Manifest next update:     Sat 17 May 2025 01:01:11 +0000
Files and hashes:         1: P8_5iqpbSNxhWNL8ZfJcUJe14mo.crl (hash: EiYM+HG4Myt5jBd5juCOhn0pikTKpgUGBhajicWlREQ=)
                          2: PQ28rfbk5yXRYjcz-QOCkZ4ENM0.roa (hash: YSotQz0qiTv7LM37y7e6zhLaYImvG6ufZU+Z40/a72I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P8_5iqpbSNxhWNL8ZfJcUJe14mo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d6:9c:06:9b:93:db:80:6b:af:67:80:34:3f:40:89:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fcff98aaa5b48dc6158d2fc65f25c5097b5e26a
        Validity
            Not Before: May 16 01:01:11 2025 GMT
            Not After : May 17 01:01:11 2025 GMT
        Subject: CN=e405ad549530e2c3407c3873a7f5457577c39012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:39:4d:b0:74:d7:21:32:9f:2c:c4:6a:56:22:
                    30:6f:09:17:7f:07:41:5f:ac:25:b0:e5:d3:21:f5:
                    60:49:9e:72:94:5a:1d:28:cb:7d:70:71:93:45:60:
                    cb:ff:b2:bb:3c:3e:97:8e:58:9a:ed:c9:15:cb:16:
                    b5:b7:9d:a5:52:45:a8:79:d3:b8:4e:17:bc:ba:93:
                    38:9b:af:df:65:d1:95:f6:bb:29:37:46:2c:6e:d2:
                    71:b4:82:24:72:e0:7d:7c:7c:80:d6:fd:ee:a1:6d:
                    57:1c:f3:89:bf:c6:9d:af:e1:a8:06:27:6f:de:18:
                    d6:15:1f:88:37:e1:e6:46:eb:8f:36:2a:13:02:f0:
                    22:53:cb:91:f8:0c:d5:70:2c:0f:7a:0f:6a:d6:12:
                    99:16:65:08:cd:df:0c:4f:c1:9a:dd:a9:98:0c:89:
                    1d:ff:6c:e8:8b:3f:39:6e:53:4b:61:e3:8d:cc:fe:
                    79:06:4b:c1:88:42:fb:2a:1e:3f:9d:2e:37:3f:6a:
                    46:95:65:72:06:6d:26:9e:d8:92:d9:c7:fd:67:f9:
                    8a:35:11:d2:28:e0:1c:c8:d3:17:93:0a:dc:06:23:
                    0c:36:7d:1e:0c:93:37:df:e3:be:51:9a:91:c8:ed:
                    02:9b:48:a4:8a:43:99:73:5d:14:d2:b4:c0:1d:63:
                    f0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:05:AD:54:95:30:E2:C3:40:7C:38:73:A7:F5:45:75:77:C3:90:12
            X509v3 Authority Key Identifier:
                keyid:3F:CF:F9:8A:AA:5B:48:DC:61:58:D2:FC:65:F2:5C:50:97:B5:E2:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P8_5iqpbSNxhWNL8ZfJcUJe14mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:1b:d3:75:70:35:7e:e1:fd:09:a8:1c:b8:c3:fa:c3:83:0b:
         8f:1a:98:4c:2c:65:86:c9:4d:c1:c8:2b:dc:4b:2b:92:cc:b4:
         6b:8d:1f:01:4e:4b:fe:ec:96:73:ac:05:26:ff:89:96:f1:2c:
         3e:37:ad:6b:ef:b8:98:48:82:e6:8b:73:a8:4e:17:27:d0:96:
         d9:f4:6c:ea:eb:c3:ac:ed:b0:99:dc:f1:37:83:5c:f1:61:15:
         8e:e0:ac:96:b2:ac:2d:dc:67:64:d9:76:a9:7e:2c:0a:66:e5:
         26:8e:a8:e5:e9:76:e5:9c:21:97:c6:ee:4a:a3:49:41:9c:40:
         c3:5f:84:ce:ae:c4:2c:ce:19:02:fe:a4:9d:84:61:b7:ce:4f:
         f7:72:34:3f:f2:be:46:e9:28:de:a0:fa:7a:0f:64:9d:a2:4c:
         b6:94:55:d0:f6:52:4b:ac:c5:6b:4b:84:c7:9c:2c:8c:ee:73:
         61:02:2f:0c:23:c9:ea:86:5d:99:05:77:0c:ea:01:99:ec:6a:
         43:0f:5e:49:63:3c:db:5d:e7:15:28:a8:46:e9:ce:a5:22:4d:
         3c:47:a0:a5:3c:a1:20:a5:67:35:33:5d:36:ea:83:04:b1:30:
         e5:79:a4:c7:65:3d:e1:39:4d:5e:c2:65:56:52:f9:aa:61:02:
         bb:fa:f7:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbWnAabk9uAa69ngDQ/QIlwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmY2ZmOThhYWE1YjQ4ZGM2MTU4ZDJmYzY1ZjI1YzUwOTdi
NWUyNmEwHhcNMjUwNTE2MDEwMTExWhcNMjUwNTE3MDEwMTExWjAzMTEwLwYDVQQD
EyhlNDA1YWQ1NDk1MzBlMmMzNDA3YzM4NzNhN2Y1NDU3NTc3YzM5MDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDlNsHTXITKfLMRqViIwbwkXfwdB
X6wlsOXTIfVgSZ5ylFodKMt9cHGTRWDL/7K7PD6Xjlia7ckVyxa1t52lUkWoedO4
The8upM4m6/fZdGV9rspN0YsbtJxtIIkcuB9fHyA1v3uoW1XHPOJv8adr+GoBidv
3hjWFR+IN+HmRuuPNioTAvAiU8uR+AzVcCwPeg9q1hKZFmUIzd8MT8Ga3amYDIkd
/2zoiz85blNLYeONzP55BkvBiEL7Kh4/nS43P2pGlWVyBm0mntiS2cf9Z/mKNRHS
KOAcyNMXkwrcBiMMNn0eDJM33+O+UZqRyO0Cm0ikikOZc10U0rTAHWPwYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQFrVSVMOLDQHw4c6f1RXV3w5ASMB8GA1UdIwQY
MBaAFD/P+YqqW0jcYVjS/GXyXFCXteJqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDhfNWlxcGJTTnhoV05MOFpmSmNVSmUxNG1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zYzUwMjYtNTAxMS00Njg5LTgzNjct
N2I0ZTVlMTg0NzM1LzEvUDhfNWlxcGJTTnhoV05MOFpmSmNVSmUxNG1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8zYzUwMjYtNTAxMS00Njg5LTgzNjctN2I0ZTVlMTg0NzM1
LzEvUDhfNWlxcGJTTnhoV05MOFpmSmNVSmUxNG1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXxvTdXA1
fuH9CagcuMP6w4MLjxqYTCxlhslNwcgr3Esrksy0a40fAU5L/uyWc6wFJv+JlvEs
Pjeta++4mEiC5otzqE4XJ9CW2fRs6uvDrO2wmdzxN4Nc8WEVjuCslrKsLdxnZNl2
qX4sCmblJo6o5el25Zwhl8buSqNJQZxAw1+Ezq7ELM4ZAv6knYRht85P93I0P/K+
Ruko3qD6eg9knaJMtpRV0PZSS6zFa0uEx5wsjO5zYQIvDCPJ6oZdmQV3DOoBmexq
Qw9eSWM8213nFSioRunOpSJNPEegpTyhIKVnNTNdNuqDBLEw5Xmkx2U94TlNXsJl
VlL5qmECu/r3Zg==
-----END CERTIFICATE-----
Generated at Fri May 16 06:28:39 2025 by rpki-client