Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft
File:                     7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft (raw, json)
Hash identifier:          0+uvFXuVsxCi3r5DX/dz+FiDHUT38ZR6j7SIIUPkBbA=
Subject key identifier:   FB:09:E0:11:86:27:13:3B:58:9D:8F:8C:C4:49:CD:E8:88:2F:5E:55
Authority key identifier: EC:91:7C:0A:FD:A4:49:EC:C0:42:9C:04:6D:F5:0F:BC:95:9B:4E:EA
Certificate issuer:       /CN=ec917c0afda449ecc0429c046df50fbc959b4eea
Certificate serial:       0196A389AB4848AF4C831D29498351D0F974
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7JF8Cv2kSezAQpwEbfUPvJWbTuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft
Manifest number:          14A1
Signing time:             Tue 06 May 2025 03:00:30 +0000
Manifest this update:     Tue 06 May 2025 03:00:30 +0000
Manifest next update:     Wed 07 May 2025 03:00:30 +0000
Files and hashes:         1: 7JF8Cv2kSezAQpwEbfUPvJWbTuo.crl (hash: W7yc0bM6haGnrLiSR2ZLBQQWACzb+xrkhnHMt5fxJx8=)
                          2: YeFUZsaHfHTPpiu7f2dFmo68C7E.roa (hash: VFJqwzLzDH7CjnLQbhz/bJw/ANPrHjYMaDgoQuDyxDw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7JF8Cv2kSezAQpwEbfUPvJWbTuo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a3:89:ab:48:48:af:4c:83:1d:29:49:83:51:d0:f9:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec917c0afda449ecc0429c046df50fbc959b4eea
        Validity
            Not Before: May  6 03:00:30 2025 GMT
            Not After : May  7 03:00:30 2025 GMT
        Subject: CN=fb09e0118627133b589d8f8cc449cde8882f5e55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:21:24:31:a1:d8:cf:a8:be:b6:6f:69:97:0f:
                    c0:a0:0f:f7:f3:99:df:9b:00:f6:6b:6d:2e:b6:25:
                    bd:e1:48:90:ff:99:84:27:0c:fe:b9:eb:b6:ae:57:
                    48:bd:e6:6b:3a:cd:6d:75:50:c5:f2:27:47:7f:bb:
                    87:d8:f0:a6:d7:1d:4f:95:ee:78:0d:86:d8:c5:97:
                    db:55:17:81:58:1d:c0:71:2c:e8:11:4a:3e:69:9c:
                    5e:0b:d8:f8:d5:5a:51:c7:40:34:c6:62:17:d4:4e:
                    b9:8d:13:b5:23:9f:c3:8e:c7:b9:cc:4a:34:ae:2c:
                    83:ad:ab:b2:30:7b:d6:e6:b7:60:2b:42:d8:f5:f5:
                    82:35:d6:c7:35:4e:7d:25:d7:68:55:8e:df:98:fd:
                    18:17:0c:e3:97:42:bc:0f:69:40:23:27:e9:e0:9b:
                    70:d5:86:75:35:3a:1f:11:81:2a:8f:ca:96:ee:a9:
                    51:35:ee:78:59:36:74:fd:e3:a6:36:5f:b0:f5:32:
                    31:4f:ea:a3:dc:b3:40:a9:5d:90:94:32:36:da:01:
                    d4:8a:ed:18:53:89:61:4d:19:69:3c:c5:77:94:fb:
                    e2:a2:d1:6e:19:5f:3c:cf:4f:12:da:74:bc:f8:ed:
                    2d:8f:6c:fe:bd:82:d1:7b:92:32:45:1a:ed:25:14:
                    c3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:09:E0:11:86:27:13:3B:58:9D:8F:8C:C4:49:CD:E8:88:2F:5E:55
            X509v3 Authority Key Identifier:
                keyid:EC:91:7C:0A:FD:A4:49:EC:C0:42:9C:04:6D:F5:0F:BC:95:9B:4E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JF8Cv2kSezAQpwEbfUPvJWbTuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:32:4f:5f:09:fb:87:26:ea:72:87:46:5c:93:a6:65:1f:c2:
         64:59:4b:d8:3a:c8:e2:99:6e:2a:ff:d3:43:b3:3b:2b:51:be:
         e5:c2:c6:9c:38:60:dd:15:2e:56:81:e9:a4:51:fb:3d:b6:74:
         98:ab:4d:2d:fd:e7:d5:62:e1:81:21:be:3c:a5:a5:dc:1d:05:
         26:c9:0b:ba:a7:71:fe:a6:e8:63:1d:21:9c:6c:16:49:05:89:
         f7:a5:85:8a:70:b7:e2:b1:70:12:db:e7:42:fe:14:f5:8a:84:
         cf:78:bd:f2:fe:46:5c:d4:aa:c4:9a:65:2a:52:fc:ec:8f:b0:
         33:d5:e5:24:54:5c:ff:d9:27:ed:b4:f1:9f:ea:6f:41:d6:5e:
         5d:77:0f:53:57:9a:ac:03:81:60:02:60:61:53:72:f1:c0:9a:
         ab:23:94:43:0e:2e:18:62:44:f4:8a:f0:8e:e2:65:97:16:06:
         81:c7:36:da:ec:4b:c7:13:23:67:c5:01:eb:f4:1e:0d:7f:af:
         6d:11:70:65:59:3c:81:a0:13:08:f9:94:5e:3d:fa:c5:c8:29:
         54:8a:0c:ff:20:ed:ea:02:ac:d8:11:8d:bb:a6:c3:55:47:25:
         4e:65:29:96:06:58:e1:96:b3:e0:dd:5d:01:6e:14:97:ed:da:
         44:25:24:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZajiatISK9Mgx0pSYNR0Pl0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjOTE3YzBhZmRhNDQ5ZWNjMDQyOWMwNDZkZjUwZmJjOTU5
YjRlZWEwHhcNMjUwNTA2MDMwMDMwWhcNMjUwNTA3MDMwMDMwWjAzMTEwLwYDVQQD
EyhmYjA5ZTAxMTg2MjcxMzNiNTg5ZDhmOGNjNDQ5Y2RlODg4MmY1ZTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7CEkMaHYz6i+tm9plw/AoA/385nf
mwD2a20utiW94UiQ/5mEJwz+ueu2rldIveZrOs1tdVDF8idHf7uH2PCm1x1Ple54
DYbYxZfbVReBWB3AcSzoEUo+aZxeC9j41VpRx0A0xmIX1E65jRO1I5/Djse5zEo0
riyDrauyMHvW5rdgK0LY9fWCNdbHNU59JddoVY7fmP0YFwzjl0K8D2lAIyfp4Jtw
1YZ1NTofEYEqj8qW7qlRNe54WTZ0/eOmNl+w9TIxT+qj3LNAqV2QlDI22gHUiu0Y
U4lhTRlpPMV3lPviotFuGV88z08S2nS8+O0tj2z+vYLRe5IyRRrtJRTDZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPsJ4BGGJxM7WJ2PjMRJzeiIL15VMB8GA1UdIwQY
MBaAFOyRfAr9pEnswEKcBG31D7yVm07qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0pGOEN2MmtTZXpBUXB3RWJmVVB2SldiVHVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9jODhhOGYtN2JlMC00ZTQwLTljZTYt
ZDI1MmE1NzRhZThkLzEvN0pGOEN2MmtTZXpBUXB3RWJmVVB2SldiVHVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9jODhhOGYtN2JlMC00ZTQwLTljZTYtZDI1MmE1NzRhZThk
LzEvN0pGOEN2MmtTZXpBUXB3RWJmVVB2SldiVHVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAADJPXwn7
hybqcodGXJOmZR/CZFlL2DrI4pluKv/TQ7M7K1G+5cLGnDhg3RUuVoHppFH7PbZ0
mKtNLf3n1WLhgSG+PKWl3B0FJskLuqdx/qboYx0hnGwWSQWJ96WFinC34rFwEtvn
Qv4U9YqEz3i98v5GXNSqxJplKlL87I+wM9XlJFRc/9kn7bTxn+pvQdZeXXcPU1ea
rAOBYAJgYVNy8cCaqyOUQw4uGGJE9IrwjuJllxYGgcc22uxLxxMjZ8UB6/QeDX+v
bRFwZVk8gaATCPmUXj36xcgpVIoM/yDt6gKs2BGNu6bDVUclTmUplgZY4Zaz4N1d
AW4Ul+3aRCUkPg==
-----END CERTIFICATE-----
Generated at Tue May 6 04:28:28 2025 by rpki-client