Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft
File:                     x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft (raw, json)
Hash identifier:          YBZTMzgUFwz+Uy9Agsc5FL5EN62LMm5BYHh9lidYpfM=
Subject key identifier:   BA:1E:BB:10:4D:65:02:65:59:19:2B:F3:E7:AD:9B:65:88:F0:2A:32
Authority key identifier: C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
Certificate issuer:       /CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Certificate serial:       0196C4CC17B20A940D06FE5CA29D84AEE58E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft
Manifest number:          042E
Signing time:             Mon 12 May 2025 14:00:31 +0000
Manifest this update:     Mon 12 May 2025 14:00:31 +0000
Manifest next update:     Tue 13 May 2025 14:00:31 +0000
Files and hashes:         1: 6-bbeNLNkmIuyu3Lo5b34863iOM.roa (hash: lZJjYseqmXABz+2OUcMEvZWapoY92B+aQI4gDW+iLHY=)
                          2: EDJJIlUMrCN3cPb4YyplYaUa4mY.roa (hash: xSeFXRQr0ff+ENa0I7t8r/hMXg9ue9s9da6FSArG9HI=)
                          3: UY4B6ai0IUqpic2uyFBbXClXwVs.roa (hash: EpiSZtVV+62huL/J924f304WF/rHjhsYoh5R56nHB5w=)
                          4: Yq2uZcc2qRRP7aZ2CUk5bhls2PI.roa (hash: agQEn6bOXbJu8VUCvK5DiwKHmR8d/UEd/+IhzGxQaIo=)
                          5: x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl (hash: U4c+jhOU9PUqCimjdBApTvRS6Slb7MaJCNI6w4PPuMA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c4:cc:17:b2:0a:94:0d:06:fe:5c:a2:9d:84:ae:e5:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
        Validity
            Not Before: May 12 14:00:31 2025 GMT
            Not After : May 13 14:00:31 2025 GMT
        Subject: CN=ba1ebb104d65026559192bf3e7ad9b6588f02a32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6b:cb:9b:db:10:16:40:a1:99:ca:25:22:ba:
                    4b:f4:97:5d:38:08:22:e1:b9:6b:9b:47:57:03:01:
                    98:66:a1:3e:62:82:11:04:13:00:e5:4c:22:62:84:
                    78:79:09:8a:74:d4:03:00:b2:fb:3d:93:4c:f8:6e:
                    9c:05:10:ec:bf:e9:87:3b:bd:c8:33:3b:e5:f9:bf:
                    2a:61:61:66:82:c3:47:10:ba:8b:4f:8b:aa:1a:6f:
                    af:92:85:86:94:b8:bb:57:23:3c:37:86:c8:0f:b0:
                    0c:3e:e6:ae:86:b7:1e:6e:2d:db:e8:fc:7f:e5:8d:
                    8c:f1:cf:e8:cd:2e:f8:f2:ea:b7:b5:6f:9d:6d:b1:
                    75:34:b7:7c:d4:b9:f8:b0:fe:86:dc:93:72:8b:56:
                    5b:0f:0e:0c:bc:49:f5:1a:89:26:15:49:9d:9a:f1:
                    4d:af:d5:a6:f8:4f:5b:c7:7e:99:32:0a:9e:b0:1d:
                    16:c0:3c:d9:31:9a:6f:12:49:9c:52:68:a5:0c:76:
                    57:35:47:59:71:d9:24:97:72:24:35:f1:24:0d:3d:
                    7e:f8:a7:cb:a5:5f:0b:8d:9f:7c:5d:5a:2b:95:54:
                    59:d4:0b:e1:83:2b:fc:aa:28:78:59:fd:98:df:9e:
                    96:d7:07:d2:67:a5:e9:8f:8a:12:9a:73:e4:30:6a:
                    f7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:1E:BB:10:4D:65:02:65:59:19:2B:F3:E7:AD:9B:65:88:F0:2A:32
            X509v3 Authority Key Identifier:
                keyid:C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:78:78:48:4e:7c:41:06:8d:a1:3a:01:bc:33:d2:26:ff:ae:
         e4:25:4f:5b:10:be:44:29:1d:4d:ca:03:6b:cd:54:f8:f5:40:
         5c:ea:49:59:90:b4:fa:28:9b:85:a0:e9:19:42:b5:35:04:84:
         52:0f:e7:9d:7e:bd:3b:8b:a0:fa:1f:8d:94:22:46:80:58:3c:
         bd:15:0c:d9:d2:56:5e:97:8c:7a:af:ac:b6:aa:b4:31:64:b2:
         1b:a9:60:a8:03:59:5b:26:5f:8b:25:11:68:7c:25:9e:3a:e4:
         2d:b1:ef:06:6a:ba:f2:6a:40:88:92:73:e6:2e:02:24:27:15:
         14:30:06:23:db:dc:eb:f1:7f:7f:11:d4:36:bb:66:ce:3f:6e:
         a3:78:21:37:ee:33:98:6c:25:43:69:04:ce:ae:7e:9a:d9:72:
         5f:0e:67:68:bc:bd:61:63:ba:74:4b:be:ed:f9:98:a2:30:63:
         d9:31:cb:cb:90:62:e3:8c:0a:eb:ff:99:a4:7b:98:00:ad:46:
         92:d5:b7:71:13:ca:ec:40:a7:87:d2:37:42:be:48:1e:02:78:
         2f:12:63:b1:cc:13:05:d9:fe:59:9b:bf:18:40:b1:a2:2b:1b:
         bd:1d:44:d0:19:11:a4:81:f9:a5:7f:35:ef:5f:ea:bb:3f:92:
         ed:06:38:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbEzBeyCpQNBv5cop2EruWOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3YjYyM2JiYzU0ZTk4NDY3NDhjZDc3YjJiOGIzNDM4Mjdl
NWFlYWEwHhcNMjUwNTEyMTQwMDMxWhcNMjUwNTEzMTQwMDMxWjAzMTEwLwYDVQQD
EyhiYTFlYmIxMDRkNjUwMjY1NTkxOTJiZjNlN2FkOWI2NTg4ZjAyYTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2vLm9sQFkChmcolIrpL9JddOAgi
4blrm0dXAwGYZqE+YoIRBBMA5UwiYoR4eQmKdNQDALL7PZNM+G6cBRDsv+mHO73I
Mzvl+b8qYWFmgsNHELqLT4uqGm+vkoWGlLi7VyM8N4bID7AMPuauhrcebi3b6Px/
5Y2M8c/ozS748uq3tW+dbbF1NLd81Ln4sP6G3JNyi1ZbDw4MvEn1GokmFUmdmvFN
r9Wm+E9bx36ZMgqesB0WwDzZMZpvEkmcUmilDHZXNUdZcdkkl3IkNfEkDT1++KfL
pV8LjZ98XVorlVRZ1Avhgyv8qih4Wf2Y356W1wfSZ6Xpj4oSmnPkMGr3/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLoeuxBNZQJlWRkr8+etm2WI8CoyMB8GA1UdIwQY
MBaAFMe2I7vFTphGdIzXeyuLNDgn5a6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDdZanU4Vk9tRVowak5kN0s0czBPQ2ZscnFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lZDg3OWItZTNjNC00YjdhLWJkMGMt
MzRlNGUwNjc5MzMzLzEveDdZanU4Vk9tRVowak5kN0s0czBPQ2ZscnFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9lZDg3OWItZTNjNC00YjdhLWJkMGMtMzRlNGUwNjc5MzMz
LzEveDdZanU4Vk9tRVowak5kN0s0czBPQ2ZscnFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALXh4SE58
QQaNoToBvDPSJv+u5CVPWxC+RCkdTcoDa81U+PVAXOpJWZC0+iibhaDpGUK1NQSE
Ug/nnX69O4ug+h+NlCJGgFg8vRUM2dJWXpeMeq+stqq0MWSyG6lgqANZWyZfiyUR
aHwlnjrkLbHvBmq68mpAiJJz5i4CJCcVFDAGI9vc6/F/fxHUNrtmzj9uo3ghN+4z
mGwlQ2kEzq5+mtlyXw5naLy9YWO6dEu+7fmYojBj2THLy5Bi44wK6/+ZpHuYAK1G
ktW3cRPK7ECnh9I3Qr5IHgJ4LxJjscwTBdn+WZu/GECxoisbvR1E0BkRpIH5pX81
71/quz+S7QY4Hw==
-----END CERTIFICATE-----
Generated at Mon May 12 18:28:28 2025 by rpki-client