Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
File:                     SeUWlMTUa0_MAvrnHl25QqcQjkc.mft (raw, json)
Hash identifier:          k5ZWfmywPaBq2sGYIXdTTC9hBswDOHfBz2d/N824Rd0=
Subject key identifier:   EE:79:18:10:98:6D:82:37:42:2D:BD:D2:BD:42:4B:8F:FA:40:38:76
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Certificate issuer:       /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial:       0196BE93005040745B356BEE3568176F44AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
Manifest number:          0BAA
Signing time:             Sun 11 May 2025 09:00:26 +0000
Manifest this update:     Sun 11 May 2025 09:00:26 +0000
Manifest next update:     Mon 12 May 2025 09:00:26 +0000
Files and hashes:         1: 3HEQhcEOqnMp9TI9xIKL4PSt8W0.roa (hash: iiGEol1UAzOhPwjCBYaXalraGFMujqIBu0vrH6mF0zc=)
                          2: 3swNa_xzTgP8AkYyLBBIrCVQ52s.roa (hash: VNJUFw+Fdi5x2QiAhG7d0Y2q6bY9iIUHwJCHJkGc3H0=)
                          3: 6rzi3V37-DL7HxiJUsYmIjeCcH0.roa (hash: s1AKKCDSpLgupEU0vvWeRrqW+A6pSMh35V3PFHDriBg=)
                          4: CBCjLUswRko0Cnzo-CX-QWC1Fp4.roa (hash: f53uE7Cw7Q6eToEXvkRDQBQ+A2NwoovXPtUufkDoIoE=)
                          5: Ej3UGJeH-MXATc3afmzTS2n5tzY.roa (hash: /6NBuHzgOHteYZwPQoQQZqqS65Z8J8nkNzKfl3svtZk=)
                          6: HMWIckkJ0EFmlufS7jeHUcRkiZ8.roa (hash: wrTE46v7Pu8f0rMBrwmsZCyhCkVzBcDkMy40eUdiqdk=)
                          7: KpADruS1t-FrRBApnlZPFJY044I.roa (hash: FblHHhnY1K4Tn2oDFypjs57NiKHIKxo90JdaB5VDVf0=)
                          8: OsTSkCOxPbkeHMOmTXfsLMS7woc.roa (hash: h+L9av8bXXKsaSR0XEI7iXB1ecuqXKwYJToOJUYyey4=)
                          9: SctNzyhU169wmkK7Xtfs0sGNJP8.roa (hash: NPxKypUk8s0b35zYRbm3Bc9hG9SBK1WYqLKdNIlF9qU=)
                          10: SeUWlMTUa0_MAvrnHl25QqcQjkc.crl (hash: wQAJGYZHangW8lPkKc+eaImkVOOomwD5GFEsROnOM6k=)
                          11: UtsKYaswyHuE02j4W0pIwBksKks.roa (hash: lnWCCnMCWE2GH801EFlDSMJ7rs6Gz0jAkG4Ic8Ylwvk=)
                          12: W00xBD91CIN8dXZ5AMvwMZKAj7E.roa (hash: W71k5Ty54QTQy1zzm6WiQ5UlzJ7wtv9wzwbgHIVk10c=)
                          13: W13QjiXrftJDe5I4GISO_dSUsyA.roa (hash: OmpFewYVSiOwmDy2faHYiIokbRxXwpcWFXeLkG/LARo=)
                          14: XyN4iMC-QeUDeVxX2Yc8L54EQTk.roa (hash: 7CbPtnYACv3UoLBOw/vChU95YYclWi/Wqni8MfNNdIU=)
                          15: _AnCIflcegi1TG_Bv_AnfepaFiw.roa (hash: PoWkT5w8reeyRG+Mi9so0rpgs+gcKWwDhCVDFV2nfrQ=)
                          16: _oksDFSuMnMqsIgD2xIpQMBMthw.roa (hash: ea23MjnNhyR9HJDD5DM69trVWqfIriV9YcmUWE06hcg=)
                          17: b1fIABSYNIk_wfTaWhK1GpZPKt8.roa (hash: U82kIgLxTvdUQdNHSx7mK2pMDucJCtaoNPC8koSclMk=)
                          18: bw4Iwz9bOYyFD-xqammwmJHMMa4.roa (hash: pwcE+xi66kROG+p5xDnCwV+2UvenePGTLhmbXAVGhCQ=)
                          19: dqdCGJIarF_fA_bp2OJUuyDhlUg.roa (hash: Fif7RHAQgWJkfwYtkxdDWVHz+hTK4+EvnpSylmo25qI=)
                          20: en8k-90PXTgGYH8oSoBljn8zBlI.roa (hash: WKoDTE31M9JGFXyywLbU8kBebgj7WFFGX+iopkVFe0g=)
                          21: jKLif-TMdnx4gdmFScothAJ_J_U.roa (hash: z4kaspEVbDiBr+9rZCZXxVGjU31c7C+HRYCRX/q4eCY=)
                          22: jLDEnrnVXx_a1P4WIX-rO9Pvx3w.roa (hash: CIN0Yhj4MQrkUgKXcPNi03Gv1QWAOMr6+p6QpjP/y4A=)
                          23: m-g_tm-dDlPdk0elvgbebHGNY8I.roa (hash: 34AI0Bk8uDAgPTJzmwveFc3JyDgenHOyuvbkfx2CWHI=)
                          24: mGfyRjDRuTgx9y2ssaKRC9CnTI4.roa (hash: 2UqU980bJXZLE+Qc5pA1Y2aKIB/zyZpSy3xDygargsU=)
                          25: ncQqnXp43lHM-_e5L0Z57d-n3bU.roa (hash: JoIVnG9vKxPwRGcagpI9miw46X0QNprln802SO4MLf4=)
                          26: qBejieYPHiXf3qwcnFRqP1oJWow.roa (hash: BS8LSEZMHgFYhUk+EPbw5h9cw1iidedC/da9stciOYs=)
                          27: vu3gXxNtqWeVKe4P2LSMHjwmk90.roa (hash: yPp4Qt4ICx9Z3QKMiO76AjMJPiTd6H2m5YPVIHkBo1g=)
                          28: xK4UStYZpxl5WaBqzM4Z1Ma_r4g.roa (hash: AtvX/iaf8g7CiAoITeIvKvEKZQTERVLHMHXffA7KZCw=)
                          29: yCnHPt_QlorljwCIE4B10MsyWqI.roa (hash: TENhnHcII4d8rZezueGXqw73iSfWx/RlwAbf4BOb0vU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:be:93:00:50:40:74:5b:35:6b:ee:35:68:17:6f:44:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
        Validity
            Not Before: May 11 09:00:26 2025 GMT
            Not After : May 12 09:00:26 2025 GMT
        Subject: CN=ee791810986d8237422dbdd2bd424b8ffa403876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2d:0b:82:e8:92:e8:d4:9e:83:3d:a4:06:75:
                    a6:74:8a:63:60:f1:bd:90:b4:68:09:9a:45:4c:ba:
                    a2:cf:28:cd:b7:c1:c8:be:6d:78:a0:2d:7b:47:22:
                    c1:63:e1:63:7a:83:2f:3c:9c:5a:6d:20:66:ce:70:
                    b1:90:9b:4f:73:47:40:b9:1b:f8:22:f7:0e:8c:c4:
                    7c:b8:61:60:c9:bf:16:48:13:15:28:d9:4b:e9:d9:
                    02:7e:d6:d1:b2:ab:51:4f:98:b3:13:92:d4:fe:48:
                    fc:dc:66:a6:5e:40:0a:08:24:e6:cb:4c:cb:86:02:
                    7b:a8:2f:70:3e:32:49:73:72:7d:79:70:70:5b:fe:
                    b0:50:09:97:ee:1e:68:c3:81:d8:a2:6a:11:22:11:
                    6d:69:15:50:15:f3:32:3f:ea:42:c8:5a:b7:8d:4d:
                    74:96:f7:f9:99:62:e4:29:09:6d:e2:bf:35:a4:34:
                    c7:3f:7d:89:ac:cb:69:06:a0:79:b9:31:6a:fe:c5:
                    03:26:2b:bd:33:02:d9:e7:1c:2c:95:90:cb:97:20:
                    1a:a4:c7:cf:67:36:07:26:fe:19:35:91:47:8c:b8:
                    09:6b:7b:87:b9:8a:0b:79:89:1c:7c:3c:56:7d:5b:
                    89:33:a4:62:47:f2:86:0a:b6:0f:14:b1:21:6b:86:
                    04:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:79:18:10:98:6D:82:37:42:2D:BD:D2:BD:42:4B:8F:FA:40:38:76
            X509v3 Authority Key Identifier:
                keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:f0:b7:d9:a4:17:30:7b:b9:b7:63:b7:a0:6f:22:96:27:2f:
         9f:8e:43:95:f7:99:8f:ae:41:82:4c:01:b2:cc:c2:92:29:45:
         4e:34:18:47:a4:fb:48:72:b8:d4:ce:e4:54:43:ca:00:e6:4d:
         b0:e3:a5:ce:82:9a:5b:3e:98:17:2d:71:55:b2:01:54:8b:bc:
         0e:a8:40:4d:38:76:35:2f:1e:ed:bb:a8:0e:61:f6:f5:da:82:
         31:df:c8:e7:17:72:73:37:43:d9:cd:74:5b:04:82:c2:3d:57:
         94:5c:a5:9d:89:c5:51:dd:5f:2c:1f:f5:87:11:71:d7:d2:4e:
         e8:5a:1f:8e:d9:ce:b4:be:69:85:be:c2:42:ec:78:c2:a3:23:
         81:79:62:ed:2a:b5:99:dd:1d:f3:96:e6:b4:25:a1:60:f9:65:
         b9:fd:b2:f3:45:c9:a7:9c:ee:a5:30:4f:26:cd:d7:3e:c6:eb:
         00:e1:59:2e:e9:62:93:f1:0f:57:32:11:bb:a6:fa:07:28:b1:
         ac:d7:77:9c:5f:df:da:7c:f6:f7:0f:6f:8a:1a:3d:a5:1c:ac:
         f3:75:41:9d:9f:7a:cc:95:d1:2e:7e:c2:5d:63:68:0a:d7:de:
         fd:a2:4c:01:d7:16:b8:62:b4:d2:3d:7e:40:20:91:64:a3:de:
         ab:ef:fb:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:53:20 2025 by rpki-client