Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.mft
File:                     iEZAW_zHgGbFGSyz6-csRDxVcog.mft (raw, json)
Hash identifier:          yNLEqMq3TLEFfj1+QSHH6j6V+wNvIiMPvrCGkDgqMa8=
Subject key identifier:   16:BB:7C:45:93:BF:9D:B0:BE:AB:C1:22:B5:5E:89:D3:AB:B0:AF:71
Authority key identifier: 88:46:40:5B:FC:C7:80:66:C5:19:2C:B3:EB:E7:2C:44:3C:55:72:88
Certificate issuer:       /CN=8846405bfcc78066c5192cb3ebe72c443c557288
Certificate serial:       01969DBE3E7D3ADC53922BDDA4D00A0F7F81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iEZAW_zHgGbFGSyz6-csRDxVcog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.mft
Manifest number:          1523
Signing time:             Mon 05 May 2025 00:00:12 +0000
Manifest this update:     Mon 05 May 2025 00:00:12 +0000
Manifest next update:     Tue 06 May 2025 00:00:12 +0000
Files and hashes:         1: 1wukbEM_Z2cOLmS317mkgQWPtlY.roa (hash: mynvXYceF8nnYoZdEmhOk8iYDpjkXUz62HUCHGcK8Wc=)
                          2: iEZAW_zHgGbFGSyz6-csRDxVcog.crl (hash: EHncjB/nIKRNMIVKeJ+hZEDCcMoyMgvNbLIUb4j1Kj0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iEZAW_zHgGbFGSyz6-csRDxVcog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 00:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:be:3e:7d:3a:dc:53:92:2b:dd:a4:d0:0a:0f:7f:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8846405bfcc78066c5192cb3ebe72c443c557288
        Validity
            Not Before: May  5 00:00:12 2025 GMT
            Not After : May  6 00:00:12 2025 GMT
        Subject: CN=16bb7c4593bf9db0beabc122b55e89d3abb0af71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1d:db:de:51:0a:ce:cf:af:75:83:99:f7:27:
                    9f:ab:97:d5:d3:b7:9e:95:ff:02:ff:f5:0f:25:00:
                    40:b0:7a:4e:fd:ba:cb:7c:7f:22:07:97:62:55:1c:
                    0b:30:cd:37:e4:c4:66:17:88:67:ae:70:9a:63:61:
                    08:9e:92:83:0f:1d:9a:42:c1:30:15:a4:d7:9d:67:
                    ad:4e:69:32:f0:cb:2e:49:0d:c1:d7:62:62:50:c6:
                    96:20:c5:e5:03:c5:e0:93:6e:76:30:1c:ec:04:f6:
                    77:b0:79:51:19:49:cf:77:00:e2:d4:3a:02:7d:c1:
                    9b:d0:a4:e2:d3:ea:6d:d3:7c:39:09:d9:2b:ea:83:
                    97:f0:9f:e4:37:61:38:4c:dd:af:b0:ab:97:47:97:
                    a5:33:73:17:b2:b1:c3:4c:02:44:05:96:04:1f:1e:
                    25:10:2a:2c:b9:78:6c:b5:39:f2:c9:00:78:35:cf:
                    ba:d1:08:7d:24:76:b9:09:97:25:9c:4d:0f:16:28:
                    77:bb:28:6d:36:66:1a:1f:31:e1:09:c3:79:be:ee:
                    40:35:c6:52:2d:3b:66:f0:16:85:b0:f5:a3:75:84:
                    a9:ba:1e:f2:b5:f0:91:2c:fd:cd:95:14:7a:a9:cd:
                    ae:6d:b8:c0:92:5d:9a:43:d8:49:f7:2d:dc:4b:d1:
                    8d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:BB:7C:45:93:BF:9D:B0:BE:AB:C1:22:B5:5E:89:D3:AB:B0:AF:71
            X509v3 Authority Key Identifier:
                keyid:88:46:40:5B:FC:C7:80:66:C5:19:2C:B3:EB:E7:2C:44:3C:55:72:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEZAW_zHgGbFGSyz6-csRDxVcog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:12:f4:35:cd:45:bc:59:da:22:0a:8c:26:49:14:7f:8a:2a:
         41:59:e0:57:a5:60:17:87:1a:ed:b8:f6:44:df:fb:79:42:06:
         4f:84:c2:1d:ee:55:65:fe:d5:9d:d7:06:a2:7e:9e:0a:84:3f:
         44:97:45:0f:f9:ad:e2:e6:6a:64:56:86:f1:db:3a:68:71:8f:
         c2:7f:89:11:41:0f:6f:e2:02:50:20:c5:2d:17:e6:74:f5:66:
         6c:1f:f9:b0:38:0c:85:f7:e1:46:e1:be:34:72:49:fb:63:1c:
         19:30:7b:f7:90:f2:84:3f:2d:53:0a:ac:55:79:e8:b2:15:53:
         50:d3:f0:31:2a:b0:15:d0:f8:03:46:b3:87:9b:ac:27:73:89:
         32:81:7b:eb:c4:ca:76:94:86:d9:df:a6:61:97:ba:f6:48:65:
         ec:92:83:7b:21:3b:f5:56:07:30:7c:89:aa:3b:ac:e7:4c:d8:
         a2:af:2f:29:cb:db:4f:d9:8c:d6:46:0d:8e:f6:7d:cb:53:f4:
         f1:39:68:4c:7f:41:5e:05:eb:0f:73:6a:63:eb:37:c5:3c:c1:
         ba:42:9b:45:61:e0:8b:f9:3d:ae:68:cf:d2:1f:df:d4:de:8c:
         8b:66:2d:c4:bb:8e:28:8e:d1:14:c2:cd:6c:a7:31:62:90:9c:
         ff:8a:c8:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZadvj59OtxTkivdpNAKD3+BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NDY0MDViZmNjNzgwNjZjNTE5MmNiM2ViZTcyYzQ0M2M1
NTcyODgwHhcNMjUwNTA1MDAwMDEyWhcNMjUwNTA2MDAwMDEyWjAzMTEwLwYDVQQD
EygxNmJiN2M0NTkzYmY5ZGIwYmVhYmMxMjJiNTVlODlkM2FiYjBhZjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzx3b3lEKzs+vdYOZ9yefq5fV07ee
lf8C//UPJQBAsHpO/brLfH8iB5diVRwLMM035MRmF4hnrnCaY2EInpKDDx2aQsEw
FaTXnWetTmky8MsuSQ3B12JiUMaWIMXlA8Xgk252MBzsBPZ3sHlRGUnPdwDi1DoC
fcGb0KTi0+pt03w5Cdkr6oOX8J/kN2E4TN2vsKuXR5elM3MXsrHDTAJEBZYEHx4l
ECosuXhstTnyyQB4Nc+60Qh9JHa5CZclnE0PFih3uyhtNmYaHzHhCcN5vu5ANcZS
LTtm8BaFsPWjdYSpuh7ytfCRLP3NlRR6qc2ubbjAkl2aQ9hJ9y3cS9GNJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBa7fEWTv52wvqvBIrVeidOrsK9xMB8GA1UdIwQY
MBaAFIhGQFv8x4BmxRkss+vnLEQ8VXKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUVaQVdfekhnR2JGR1N5ejYtY3NSRHhWY29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy85MDczYmEtODhlMi00YTQ1LTlkYWYt
NWEwYTFkMGFjNThjLzEvaUVaQVdfekhnR2JGR1N5ejYtY3NSRHhWY29nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy85MDczYmEtODhlMi00YTQ1LTlkYWYtNWEwYTFkMGFjNThj
LzEvaUVaQVdfekhnR2JGR1N5ejYtY3NSRHhWY29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdhL0Nc1F
vFnaIgqMJkkUf4oqQVngV6VgF4ca7bj2RN/7eUIGT4TCHe5VZf7VndcGon6eCoQ/
RJdFD/mt4uZqZFaG8ds6aHGPwn+JEUEPb+ICUCDFLRfmdPVmbB/5sDgMhffhRuG+
NHJJ+2McGTB795DyhD8tUwqsVXnoshVTUNPwMSqwFdD4A0azh5usJ3OJMoF768TK
dpSG2d+mYZe69khl7JKDeyE79VYHMHyJqjus50zYoq8vKcvbT9mM1kYNjvZ9y1P0
8TloTH9BXgXrD3NqY+s3xTzBukKbRWHgi/k9rmjP0h/f1N6Mi2YtxLuOKI7RFMLN
bKcxYpCc/4rISw==
-----END CERTIFICATE-----
Generated at Mon May 5 08:46:06 2025 by rpki-client