Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.mft
File:                     7gq7pVL0a5Tt8iOU_uwdBFnyAUA.mft (raw, json)
Hash identifier:          gEto6rQNmPFOhCfWRrHex+b3bU8TstJ6vczMWiqOkOw=
Subject key identifier:   57:48:BB:0F:8B:F4:B7:FA:23:8B:5E:C2:9B:25:04:A1:CA:06:AF:7B
Authority key identifier: EE:0A:BB:A5:52:F4:6B:94:ED:F2:23:94:FE:EC:1D:04:59:F2:01:40
Certificate issuer:       /CN=ee0abba552f46b94edf22394feec1d0459f20140
Certificate serial:       0196D4E3DB0D6C7E854F35B7151827000F95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.mft
Manifest number:          0416
Signing time:             Thu 15 May 2025 17:00:24 +0000
Manifest this update:     Thu 15 May 2025 17:00:24 +0000
Manifest next update:     Fri 16 May 2025 17:00:24 +0000
Files and hashes:         1: 7gq7pVL0a5Tt8iOU_uwdBFnyAUA.crl (hash: Odd6rlIDxcbRIrBy6oopd/joiKQs9VeaHn0UPsez5i8=)
                          2: ZSfnZXfCOs8x_SKnrQS-DfOeOBs.roa (hash: k4WlesxZPYjMy2rKnlrfZMvi67C/I6Pliai9HgbVxyE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 May 2025 17:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d4:e3:db:0d:6c:7e:85:4f:35:b7:15:18:27:00:0f:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee0abba552f46b94edf22394feec1d0459f20140
        Validity
            Not Before: May 15 17:00:24 2025 GMT
            Not After : May 16 17:00:24 2025 GMT
        Subject: CN=5748bb0f8bf4b7fa238b5ec29b2504a1ca06af7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:44:d5:21:ee:db:d1:f8:bf:63:2f:54:2d:61:
                    e1:0a:e2:e9:fd:a9:60:cb:74:91:8b:c1:da:0d:20:
                    27:ab:4a:41:1b:9e:9f:cf:be:c8:a8:1d:fa:67:e4:
                    8a:b3:67:d1:70:3e:90:59:31:7c:bd:d1:bb:8d:01:
                    4e:de:36:b5:8d:0d:d8:2c:1b:03:1f:e1:4c:c5:eb:
                    ca:57:ef:0f:5c:89:96:d9:de:3b:19:d6:5d:2f:06:
                    54:f5:cc:6e:f9:85:2a:52:5f:54:2d:ef:87:84:48:
                    04:db:60:82:1c:9a:25:40:dc:26:ff:8b:11:62:11:
                    a4:f4:83:84:9a:d7:db:f2:71:ea:28:13:a4:3f:0c:
                    36:83:04:45:6a:69:ae:11:c7:f6:a0:9e:24:24:86:
                    af:08:43:48:76:d4:cc:98:fe:81:75:de:97:9b:50:
                    59:5f:fd:ec:36:25:26:76:10:9f:9b:c3:5d:de:b2:
                    02:c4:33:6b:62:38:56:61:f0:a9:51:43:0a:10:0a:
                    34:d2:84:6e:82:90:94:9f:cf:f0:06:09:21:c5:81:
                    5a:f3:ba:d7:d2:7a:98:2d:f0:2e:a0:8c:09:49:54:
                    60:49:dc:eb:b4:1f:a2:76:35:d6:fc:6e:77:4b:f4:
                    13:97:85:f1:83:96:a1:94:67:4c:be:cd:d0:90:5f:
                    5c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:48:BB:0F:8B:F4:B7:FA:23:8B:5E:C2:9B:25:04:A1:CA:06:AF:7B
            X509v3 Authority Key Identifier:
                keyid:EE:0A:BB:A5:52:F4:6B:94:ED:F2:23:94:FE:EC:1D:04:59:F2:01:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:83:01:1c:de:3b:9c:f9:ff:23:33:b1:30:ac:aa:6a:8c:5e:
         70:97:f3:51:e4:f8:20:18:5c:25:d3:66:32:bf:64:ab:72:f6:
         8c:01:57:90:5a:24:8d:5f:34:a4:ea:bb:6c:fb:ef:3d:ab:93:
         0f:fa:1f:82:d2:52:02:16:1d:d8:be:16:9b:cd:25:82:48:ed:
         5c:af:bd:8d:26:2b:1c:e6:27:aa:db:c7:72:4a:1d:a0:74:1f:
         d6:b0:2b:5e:88:af:21:58:01:f1:21:5f:a4:00:0d:78:5e:ee:
         d3:ea:15:52:90:6e:26:60:0f:02:89:70:6b:9f:c5:b3:b4:98:
         7e:61:a0:e2:25:15:6e:12:93:07:7d:b2:0d:42:61:5e:30:0e:
         3b:c4:09:e4:4e:46:25:04:93:5f:6f:eb:8d:f7:c8:32:dc:8e:
         59:90:6a:20:f3:2b:44:ef:91:9d:6a:f5:47:c1:6d:b5:6c:9f:
         da:85:b4:f4:8a:5d:1a:40:bb:e8:49:e4:4a:ef:d8:57:62:b2:
         c1:f3:e6:42:e8:77:4e:18:8c:e5:3e:1b:f9:bf:a5:b5:2e:28:
         88:0b:fc:33:d5:f9:90:85:0c:09:6f:7e:34:6e:72:06:96:7f:
         5d:09:65:e9:ca:9b:d9:60:3e:3a:9a:ae:89:e4:39:d5:2c:6f:
         dd:28:fa:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbU49sNbH6FTzW3FRgnAA+VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMGFiYmE1NTJmNDZiOTRlZGYyMjM5NGZlZWMxZDA0NTlm
MjAxNDAwHhcNMjUwNTE1MTcwMDI0WhcNMjUwNTE2MTcwMDI0WjAzMTEwLwYDVQQD
Eyg1NzQ4YmIwZjhiZjRiN2ZhMjM4YjVlYzI5YjI1MDRhMWNhMDZhZjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqETVIe7b0fi/Yy9ULWHhCuLp/alg
y3SRi8HaDSAnq0pBG56fz77IqB36Z+SKs2fRcD6QWTF8vdG7jQFO3ja1jQ3YLBsD
H+FMxevKV+8PXImW2d47GdZdLwZU9cxu+YUqUl9ULe+HhEgE22CCHJolQNwm/4sR
YhGk9IOEmtfb8nHqKBOkPww2gwRFammuEcf2oJ4kJIavCENIdtTMmP6Bdd6Xm1BZ
X/3sNiUmdhCfm8Nd3rICxDNrYjhWYfCpUUMKEAo00oRugpCUn8/wBgkhxYFa87rX
0nqYLfAuoIwJSVRgSdzrtB+idjXW/G53S/QTl4Xxg5ahlGdMvs3QkF9cvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdIuw+L9Lf6I4tewpslBKHKBq97MB8GA1UdIwQY
MBaAFO4Ku6VS9GuU7fIjlP7sHQRZ8gFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2dxN3BWTDBhNVR0OGlPVV91d2RCRm55QVVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9lYTVkODQtMjBiNy00MTA4LTliNjIt
M2I3NzNlNWVlNjYzLzEvN2dxN3BWTDBhNVR0OGlPVV91d2RCRm55QVVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9lYTVkODQtMjBiNy00MTA4LTliNjItM2I3NzNlNWVlNjYz
LzEvN2dxN3BWTDBhNVR0OGlPVV91d2RCRm55QVVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnIMBHN47
nPn/IzOxMKyqaoxecJfzUeT4IBhcJdNmMr9kq3L2jAFXkFokjV80pOq7bPvvPauT
D/ofgtJSAhYd2L4Wm80lgkjtXK+9jSYrHOYnqtvHckodoHQf1rArXoivIVgB8SFf
pAANeF7u0+oVUpBuJmAPAolwa5/Fs7SYfmGg4iUVbhKTB32yDUJhXjAOO8QJ5E5G
JQSTX2/rjffIMtyOWZBqIPMrRO+RnWr1R8FttWyf2oW09IpdGkC76EnkSu/YV2Ky
wfPmQuh3ThiM5T4b+b+ltS4oiAv8M9X5kIUMCW9+NG5yBpZ/XQll6cqb2WA+Opqu
ieQ51Sxv3Sj6hw==
-----END CERTIFICATE-----
Generated at Fri May 16 02:23:56 2025 by rpki-client