Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.mft
File:                     fiwMzx_7_NuLYdc4IBMBuHkRhOg.mft (raw, json)
Hash identifier:          THHili7yCMi7mNjD+XbMmz2KugZVxOrgEmtpICKwOzI=
Subject key identifier:   3E:3B:42:E1:EF:FB:B6:6C:34:B4:0E:CB:36:DF:BA:CF:E3:42:08:A0
Authority key identifier: 7E:2C:0C:CF:1F:FB:FC:DB:8B:61:D7:38:20:13:01:B8:79:11:84:E8
Certificate issuer:       /CN=7e2c0ccf1ffbfcdb8b61d738201301b8791184e8
Certificate serial:       01969DBE641EBA4A81CBBD6923E740E1DCE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiwMzx_7_NuLYdc4IBMBuHkRhOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.mft
Manifest number:          1529
Signing time:             Mon 05 May 2025 00:00:22 +0000
Manifest this update:     Mon 05 May 2025 00:00:22 +0000
Manifest next update:     Tue 06 May 2025 00:00:22 +0000
Files and hashes:         1: _YypdYwNnlrSxn7Xk5pVVLuYXRI.roa (hash: UMpoA6QJ7yrchwDrkwz1jDoIaBrnsc3wqSmOPTPFUrQ=)
                          2: fiwMzx_7_NuLYdc4IBMBuHkRhOg.crl (hash: QbUVCxP9wO2MciK+R1h4uyVSqt1Q2oUN74ul38nt7aI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fiwMzx_7_NuLYdc4IBMBuHkRhOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:be:64:1e:ba:4a:81:cb:bd:69:23:e7:40:e1:dc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2c0ccf1ffbfcdb8b61d738201301b8791184e8
        Validity
            Not Before: May  5 00:00:22 2025 GMT
            Not After : May  6 00:00:22 2025 GMT
        Subject: CN=3e3b42e1effbb66c34b40ecb36dfbacfe34208a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:92:29:ce:5f:24:d0:c9:04:f4:4b:92:88:51:
                    4b:af:d7:52:82:37:86:c4:9a:3b:3f:1a:8d:b1:1b:
                    7e:92:63:6f:3e:ae:73:bd:76:56:27:ea:4b:e2:35:
                    61:96:bf:fc:21:8e:03:04:b6:85:d0:eb:6a:79:ee:
                    e9:84:45:1a:1b:65:a1:90:4a:c4:a6:b5:21:7f:f9:
                    6b:a8:f6:05:d2:96:e1:02:54:45:0f:fc:40:e7:d9:
                    fb:a3:1f:bf:0c:bc:46:9d:d8:16:55:bb:20:27:d5:
                    f2:57:ae:bb:f9:13:31:83:4f:a7:9c:2d:ec:e2:45:
                    d4:1a:cf:75:8f:60:76:65:16:a0:ab:1b:5f:b0:34:
                    00:22:4e:63:bb:70:b2:e0:27:86:7a:66:2e:53:8f:
                    76:84:b0:e6:65:08:a2:23:d6:57:b9:35:c2:74:a8:
                    9d:f5:5c:ca:81:4b:a5:8a:ed:b8:de:2c:e2:e5:22:
                    db:cd:b1:b2:20:bf:bb:4f:58:e9:b4:05:08:2c:4b:
                    73:16:eb:b8:56:16:df:63:80:67:d1:f9:23:84:83:
                    4b:46:ea:ff:e2:4a:05:06:61:f4:a3:ec:6b:5b:d3:
                    ab:55:30:c3:cd:49:3a:e3:27:ab:41:19:d3:92:c9:
                    4f:b8:d0:18:06:e9:77:7d:39:af:5d:ef:07:5a:1e:
                    3d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:3B:42:E1:EF:FB:B6:6C:34:B4:0E:CB:36:DF:BA:CF:E3:42:08:A0
            X509v3 Authority Key Identifier:
                keyid:7E:2C:0C:CF:1F:FB:FC:DB:8B:61:D7:38:20:13:01:B8:79:11:84:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiwMzx_7_NuLYdc4IBMBuHkRhOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:eb:56:75:8f:0f:0d:76:94:6c:eb:a9:b4:78:7f:44:bd:b1:
         60:10:ea:6a:ad:3c:e9:02:70:5b:e1:a9:50:bc:6e:ec:e7:15:
         6c:e9:dc:e0:72:a1:ee:32:6e:13:0d:0c:13:67:63:a5:40:2c:
         01:9f:a1:5f:c1:ec:77:d6:4e:05:43:78:b6:46:db:de:7e:2a:
         9b:06:5c:60:e2:42:75:f1:69:c7:89:48:d9:d4:62:b0:23:c1:
         17:7a:5c:a3:ca:e4:89:a1:83:8d:b5:a9:2a:3b:ab:02:c4:d0:
         7a:33:a6:3a:46:35:0f:0c:cb:a2:f2:1a:86:bd:16:dc:4c:ac:
         74:b3:cc:6d:f8:3f:d0:da:73:f4:a3:ea:46:98:29:fc:ec:a6:
         5a:f3:75:62:70:98:24:b9:91:24:6c:66:32:a3:41:94:d6:b0:
         22:61:1b:da:35:f9:83:0b:ff:14:07:e4:3b:de:08:8c:8a:66:
         68:c1:2f:9e:83:7c:88:39:98:89:95:00:6d:9b:20:fc:9b:7f:
         c2:f2:7a:5f:c8:f0:81:c5:2f:c5:69:83:58:de:f2:1f:62:68:
         cc:63:c8:40:24:8c:10:47:4d:50:f2:98:ca:65:6b:85:fd:7f:
         bb:c3:7e:fd:f2:07:de:ff:f4:35:bf:ec:1b:b4:06:fc:20:6c:
         a6:71:be:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZadvmQeukqBy71pI+dA4dzgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMmMwY2NmMWZmYmZjZGI4YjYxZDczODIwMTMwMWI4Nzkx
MTg0ZTgwHhcNMjUwNTA1MDAwMDIyWhcNMjUwNTA2MDAwMDIyWjAzMTEwLwYDVQQD
EygzZTNiNDJlMWVmZmJiNjZjMzRiNDBlY2IzNmRmYmFjZmUzNDIwOGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JIpzl8k0MkE9EuSiFFLr9dSgjeG
xJo7PxqNsRt+kmNvPq5zvXZWJ+pL4jVhlr/8IY4DBLaF0Otqee7phEUaG2WhkErE
prUhf/lrqPYF0pbhAlRFD/xA59n7ox+/DLxGndgWVbsgJ9XyV667+RMxg0+nnC3s
4kXUGs91j2B2ZRagqxtfsDQAIk5ju3Cy4CeGemYuU492hLDmZQiiI9ZXuTXCdKid
9VzKgUuliu243izi5SLbzbGyIL+7T1jptAUILEtzFuu4VhbfY4Bn0fkjhINLRur/
4koFBmH0o+xrW9OrVTDDzUk64yerQRnTkslPuNAYBul3fTmvXe8HWh49zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD47QuHv+7ZsNLQOyzbfus/jQgigMB8GA1UdIwQY
MBaAFH4sDM8f+/zbi2HXOCATAbh5EYToMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZml3TXp4XzdfTnVMWWRjNElCTUJ1SGtSaE9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9jZGYyZDctYjExZS00N2IyLTlmYzkt
NzkwOTFjNzhhYjQ4LzEvZml3TXp4XzdfTnVMWWRjNElCTUJ1SGtSaE9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9jZGYyZDctYjExZS00N2IyLTlmYzktNzkwOTFjNzhhYjQ4
LzEvZml3TXp4XzdfTnVMWWRjNElCTUJ1SGtSaE9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt+tWdY8P
DXaUbOuptHh/RL2xYBDqaq086QJwW+GpULxu7OcVbOnc4HKh7jJuEw0ME2djpUAs
AZ+hX8Hsd9ZOBUN4tkbb3n4qmwZcYOJCdfFpx4lI2dRisCPBF3pco8rkiaGDjbWp
KjurAsTQejOmOkY1DwzLovIahr0W3EysdLPMbfg/0Npz9KPqRpgp/OymWvN1YnCY
JLmRJGxmMqNBlNawImEb2jX5gwv/FAfkO94IjIpmaMEvnoN8iDmYiZUAbZsg/Jt/
wvJ6X8jwgcUvxWmDWN7yH2JozGPIQCSMEEdNUPKYymVrhf1/u8N+/fIH3v/0Nb/s
G7QG/CBspnG+Sw==
-----END CERTIFICATE-----
Generated at Mon May 5 08:17:31 2025 by rpki-client