Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/0f082c-b18f-41c5-9fd4-3011068eeb69/1/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.mft
File:                     EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.mft (raw, json)
Hash identifier:          HTehs5kTbFHmpR4JGd3SQXKf4SpTPOP3THUKsQ+u8Rw=
Subject key identifier:   42:7D:2F:E7:9A:3E:5D:AA:C9:5A:F6:15:B2:6E:09:08:89:A3:CA:41
Authority key identifier: 11:4C:56:D5:95:DE:33:CB:87:51:73:9D:BD:D9:B4:5E:DB:2E:FF:0C
Certificate issuer:       /CN=114c56d595de33cb8751739dbdd9b45edb2eff0c
Certificate serial:       0196C0B87BE4F2B46A48CE816E4CC15E932B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/0f082c-b18f-41c5-9fd4-3011068eeb69/1/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.mft
Manifest number:          0C68
Signing time:             Sun 11 May 2025 19:00:37 +0000
Manifest this update:     Sun 11 May 2025 19:00:37 +0000
Manifest next update:     Mon 12 May 2025 19:00:37 +0000
Files and hashes:         1: CuC7YwLfcFdkBUn2FoNsTNOXfjk.roa (hash: I4hol0YsV7mnOp0GHtrq4UwhSCksN1Q1IbqUqZuz7o8=)
                          2: EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.crl (hash: m7QqHgY5sSQrOMnxUIhFZXZ6oBKepVLBcYxIBzk0SjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/0f082c-b18f-41c5-9fd4-3011068eeb69/1/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/0f082c-b18f-41c5-9fd4-3011068eeb69/1/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:b8:7b:e4:f2:b4:6a:48:ce:81:6e:4c:c1:5e:93:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=114c56d595de33cb8751739dbdd9b45edb2eff0c
        Validity
            Not Before: May 11 19:00:37 2025 GMT
            Not After : May 12 19:00:37 2025 GMT
        Subject: CN=427d2fe79a3e5daac95af615b26e090889a3ca41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:db:a5:3e:5d:8d:ac:d7:e3:d4:8e:30:54:5c:
                    bc:40:9e:d8:37:9a:34:f6:60:79:60:95:aa:ba:86:
                    66:0c:92:0d:fa:33:1b:1d:4f:5b:44:41:7f:e7:0b:
                    25:59:f5:e8:b2:0a:64:43:d5:88:5f:55:23:74:c0:
                    2b:97:c4:0d:9d:e7:a6:f9:b2:1f:1d:10:dc:38:f2:
                    34:c6:50:8e:e0:15:6c:62:34:13:9c:1a:a9:5c:c0:
                    b7:72:3a:d9:20:07:c7:ba:11:e5:08:c0:4f:6c:24:
                    9e:e6:80:9a:e2:e4:53:d4:a0:bd:48:17:eb:62:81:
                    30:2f:a8:28:5a:9e:d9:a2:c2:b4:58:24:4a:a2:b3:
                    a9:a8:ad:3b:4c:54:1a:3a:90:94:48:c6:14:32:5f:
                    fe:23:3b:16:6b:08:c6:9b:27:0c:4c:e5:e5:05:45:
                    aa:5b:86:c9:2d:a9:21:c5:34:29:9c:ab:49:56:94:
                    bc:91:35:e6:7c:79:5a:c1:9d:f6:c5:f2:87:d9:97:
                    7f:f5:4e:50:64:bf:be:41:a9:58:9c:6e:8d:39:2b:
                    29:ed:84:8f:eb:ac:15:fc:0b:bd:d6:49:96:36:94:
                    56:2b:16:a4:14:5b:3d:a5:ba:bc:0a:78:79:68:33:
                    8a:5a:96:d2:fc:b6:10:cc:e1:ed:6e:71:25:bb:c4:
                    e5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:7D:2F:E7:9A:3E:5D:AA:C9:5A:F6:15:B2:6E:09:08:89:A3:CA:41
            X509v3 Authority Key Identifier:
                keyid:11:4C:56:D5:95:DE:33:CB:87:51:73:9D:BD:D9:B4:5E:DB:2E:FF:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0f082c-b18f-41c5-9fd4-3011068eeb69/1/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0f082c-b18f-41c5-9fd4-3011068eeb69/1/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:96:89:c1:8b:e6:29:c7:28:da:0b:48:a5:e5:86:5b:ce:72:
         6c:47:2b:2b:f2:71:9c:41:24:75:1c:0e:86:db:00:6c:de:c1:
         48:16:fb:0f:ca:64:d6:83:99:b7:32:fa:ef:ca:0d:8c:b8:f2:
         d4:62:be:16:22:23:9b:b2:82:a0:9e:16:d4:9c:eb:d9:0c:02:
         79:f2:60:82:4a:df:a1:16:63:77:fc:84:bd:14:70:ee:fc:8b:
         02:6c:1e:c4:8b:4e:10:17:d8:04:20:65:49:dd:b3:9d:88:81:
         0a:21:55:97:28:95:2b:59:af:e4:90:74:2d:da:21:3e:99:a1:
         39:f2:3c:dc:a9:35:20:d5:99:ef:4f:3d:ce:cd:dc:d4:65:1a:
         f4:b9:4e:91:99:07:d7:67:9a:41:f5:04:6a:34:89:53:72:29:
         f5:1d:3d:32:8c:a4:ce:71:0e:76:e1:3a:3c:64:c6:ec:ce:e3:
         c4:ff:6e:c8:81:36:d0:60:d5:02:d3:5d:11:26:f1:41:eb:6e:
         40:9e:78:f9:5a:0a:0b:d7:ec:60:b9:f6:47:e1:3c:b2:f6:ae:
         15:c7:6f:1c:2e:22:d3:c0:a7:2e:34:32:b1:a8:6e:78:d8:1c:
         c8:4a:7b:12:4a:47:a7:70:3f:6a:9f:d2:89:02:75:d1:2c:05:
         a0:55:f1:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbAuHvk8rRqSM6BbkzBXpMrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExNGM1NmQ1OTVkZTMzY2I4NzUxNzM5ZGJkZDliNDVlZGIy
ZWZmMGMwHhcNMjUwNTExMTkwMDM3WhcNMjUwNTEyMTkwMDM3WjAzMTEwLwYDVQQD
Eyg0MjdkMmZlNzlhM2U1ZGFhYzk1YWY2MTViMjZlMDkwODg5YTNjYTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9ulPl2NrNfj1I4wVFy8QJ7YN5o0
9mB5YJWquoZmDJIN+jMbHU9bREF/5wslWfXosgpkQ9WIX1UjdMArl8QNneem+bIf
HRDcOPI0xlCO4BVsYjQTnBqpXMC3cjrZIAfHuhHlCMBPbCSe5oCa4uRT1KC9SBfr
YoEwL6goWp7ZosK0WCRKorOpqK07TFQaOpCUSMYUMl/+IzsWawjGmycMTOXlBUWq
W4bJLakhxTQpnKtJVpS8kTXmfHlawZ32xfKH2Zd/9U5QZL++QalYnG6NOSsp7YSP
66wV/Au91kmWNpRWKxakFFs9pbq8Cnh5aDOKWpbS/LYQzOHtbnElu8TlDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJ9L+eaPl2qyVr2FbJuCQiJo8pBMB8GA1UdIwQY
MBaAFBFMVtWV3jPLh1Fznb3ZtF7bLv8MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVV4VzFaWGVNOHVIVVhPZHZkbTBYdHN1X3d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8wZjA4MmMtYjE4Zi00MWM1LTlmZDQt
MzAxMTA2OGVlYjY5LzEvRVV4VzFaWGVNOHVIVVhPZHZkbTBYdHN1X3d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8wZjA4MmMtYjE4Zi00MWM1LTlmZDQtMzAxMTA2OGVlYjY5
LzEvRVV4VzFaWGVNOHVIVVhPZHZkbTBYdHN1X3d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG5aJwYvm
Kcco2gtIpeWGW85ybEcrK/JxnEEkdRwOhtsAbN7BSBb7D8pk1oOZtzL678oNjLjy
1GK+FiIjm7KCoJ4W1Jzr2QwCefJggkrfoRZjd/yEvRRw7vyLAmwexItOEBfYBCBl
Sd2znYiBCiFVlyiVK1mv5JB0LdohPpmhOfI83Kk1INWZ7089zs3c1GUa9LlOkZkH
12eaQfUEajSJU3Ip9R09MoykznEOduE6PGTG7M7jxP9uyIE20GDVAtNdESbxQetu
QJ54+VoKC9fsYLn2R+E8svauFcdvHC4i08CnLjQysahueNgcyEp7EkpHp3A/ap/S
iQJ10SwFoFXx0Q==
-----END CERTIFICATE-----
Generated at Sun May 11 22:15:55 2025 by rpki-client