Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
File:                     1nPYSbfVBHN21X5veW8AGLcLRQY.mft (raw, json)
Hash identifier:          9SDdKCdVpuCGykJ4w3S8ecDdEOIPElUN9uHjHG8JWAM=
Subject key identifier:   FC:3B:81:36:6A:5E:05:26:5C:CC:FF:4B:32:72:C9:60:AC:6A:F0:4B
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Certificate issuer:       /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial:       01969CAC837375B70902E50622B197FAD1DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
Manifest number:          152C
Signing time:             Sun 04 May 2025 19:01:13 +0000
Manifest this update:     Sun 04 May 2025 19:01:13 +0000
Manifest next update:     Mon 05 May 2025 19:01:13 +0000
Files and hashes:         1: 0MIjC24hYDTW286dNJh5qkIVoQM.roa (hash: MXU+N4PdoB06EZ/HjOQwFUwlQG2n1kwzXC/QtbLmJF0=)
                          2: 1-TrGp-z9XirqNAVi00kZmMtegAQ.roa (hash: cZ4yM8vQzUWF39oRoRKvKg08K8izx43nKLI06xAV69c=)
                          3: 1i8rkHyD_GEpEeT-VSPmrM7G9hg.roa (hash: T9uIPUHDBJqXpx6DpvHR6pRhllvR8xZm3kC3o7hqoD8=)
                          4: 1nPYSbfVBHN21X5veW8AGLcLRQY.crl (hash: mo5be8bmd9PR3O+c5AujBq+v+SKG6oq83CLIU3ZO2dw=)
                          5: ARk7nVFItdFVCXn3sJgvaZ_sS0g.roa (hash: 7EEJNomrXNWfyMmnkFvuBOXpyWJs7s8lvlhWBalFymc=)
                          6: AgHi8XOuA8AW6mQ9081yaHFi7LY.roa (hash: GntMqrIeYlMh8GQHa17dRcWuW6VcPzJOKzx7OubvqC4=)
                          7: B3ZVVduO-XEeJJT5EOMOysoNJrI.roa (hash: hGLOqNOpZ+B1pvsSFo3MX/h7GOvVIRzBnRvB+fSCcjA=)
                          8: FCxYBsvWXDM15GSlGFr8QNu4RYE.roa (hash: 0mvD6N4h6dDsOpud4GT2Wd7vYleLAl39nQHcItAcmYc=)
                          9: IP6dxUf_151oN-w_YJNTEK8gFBY.roa (hash: DuBNN+Dmeyf3QMZYAuCqpfhCledEl++glFpZz6IL1T4=)
                          10: P1PPxJKJvcVWj4wZUdazuOzBw4Q.roa (hash: HnwzMbfg3535mDnah1e/JlAfCR0Kk2ea4N+rWTnPdJY=)
                          11: PXVQtp8fbfqZ5jFNvah34s8vf1o.roa (hash: jLDp0a0yIOcsSTqlqaPMGk/PVKwXxyLWYql8ZP+aAO4=)
                          12: Q6ELIGGMyAWLP2-8AinpN7dCP-I.roa (hash: +d8Mriz+mLl19IhnPZ6nZe1Nzbfe1sFAT1awQgdm62g=)
                          13: cdoljHUC9Q9DPh0xJN6bOQNfYgI.roa (hash: asTmSigp9GpUrfz/TvjdPq/vlaO8kX04TRA2R2OR/KQ=)
                          14: dukzfVMcltyysZZBvIjQGrHZPLo.roa (hash: lgww+jOruUco3lHQUmYd3nD9/JIBuRROS48oFbH8RVc=)
                          15: ex-k0hBYMJp3Xt63sbFH4dmaPp0.roa (hash: S04+oB5rzQSuvoSFbDJ54Q32HsuNGomFta+C8/uA5R4=)
                          16: hansf5f-8ZlprgL3Get4FXhM3qg.roa (hash: tdLlts3wjizciN3JSF4Zj+MG2KHEHQp/kr7Y9fEY9Hk=)
                          17: ktcN_1CUp7LaLxP99XlfX2aR3JY.roa (hash: A4GSKwqS/3qXXX5KzVNih95wvOg7T1xafYwJVI0/Hp0=)
                          18: rw3wmNK1T9KyKFmnPInliFk653U.roa (hash: byyB+zxuPES8tnSL4mP/gAsHzJQoaaZNw85rrGkKtTM=)
                          19: s-kJqLbM0KEIQbJ-31AW4jYwkyY.roa (hash: lel2X5N/TCz7Pdk6leCd67OSoke7W8rTYmRW3JpbyRE=)
                          20: thGwDSmOCB2egMkJayh7HTNBOoA.roa (hash: vrdMbk1dhZJxT4RMXRheIxv51EMC51s58JC+BTY/Vpg=)
                          21: wAAXYuIkUKtvrw39DQ6SG8wkbtE.roa (hash: jytRpaU7guGLhPsBwh2sgZuD9rMlPbNl3UHkvQz/oCo=)
                          22: y51hiFPZW-gkNjlGWGRcL6QruIc.roa (hash: IeyRLiiRko+dn467AL+M0JoJJpnysqiT8H5/V2IcxR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 19:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9c:ac:83:73:75:b7:09:02:e5:06:22:b1:97:fa:d1:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
        Validity
            Not Before: May  4 19:01:13 2025 GMT
            Not After : May  5 19:01:13 2025 GMT
        Subject: CN=fc3b81366a5e05265cccff4b3272c960ac6af04b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1c:a5:37:80:5e:9c:b8:25:5f:ff:a9:14:02:
                    47:67:21:99:96:70:06:a5:14:7a:3b:e1:84:ec:e3:
                    20:51:28:1e:4b:79:b4:cd:66:b2:94:ed:7b:ad:4a:
                    a7:1f:da:4f:2c:f7:32:dc:bd:eb:2d:9f:bd:df:7f:
                    46:e5:74:a0:75:6d:ac:b7:13:30:6b:1b:03:ab:ec:
                    3a:76:61:b3:75:9a:1d:40:1b:4a:29:d4:74:dd:95:
                    56:75:a8:cb:5b:f8:82:c4:56:1a:f8:da:96:9f:f2:
                    3d:27:04:21:c6:e1:9d:b4:57:0b:9c:98:04:52:f6:
                    4d:8e:be:a1:af:c0:56:30:23:ae:fc:3a:05:e7:90:
                    03:33:df:cc:9d:b8:68:6a:c9:9d:13:ab:df:43:39:
                    df:da:94:1c:ef:df:80:93:09:8e:6d:36:22:73:8a:
                    25:dc:c5:57:36:6d:3b:22:2b:2a:85:47:3a:97:9c:
                    36:8d:1f:b0:2c:1b:16:b8:35:ba:56:98:71:e3:c3:
                    ea:78:d8:bf:2c:09:b0:61:f2:5c:8b:c4:8e:8c:b6:
                    af:5f:8e:ed:a2:18:e3:1d:9d:ee:9d:74:24:f7:5d:
                    04:c8:15:59:c9:65:fb:e6:96:74:57:09:ed:59:c8:
                    f6:dd:c4:d1:42:8e:1e:e1:4c:d3:38:14:61:01:42:
                    ba:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:3B:81:36:6A:5E:05:26:5C:CC:FF:4B:32:72:C9:60:AC:6A:F0:4B
            X509v3 Authority Key Identifier:
                keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:1d:0d:36:16:48:0e:62:1b:55:59:01:e1:35:91:72:5e:06:
         2a:74:d5:e7:00:d4:09:ac:09:59:19:fc:6d:04:ef:43:f0:45:
         40:74:7c:d6:32:ee:40:b0:2f:7c:55:51:84:f2:71:a6:2d:00:
         91:b6:43:ed:7e:7b:de:3b:95:3a:62:d8:18:5f:a5:17:69:fa:
         3b:cc:ef:65:7d:76:39:a7:a5:da:c8:42:bf:13:da:3f:22:63:
         ab:f6:f6:9a:76:c7:67:30:3d:b7:3f:1a:b0:64:8e:cc:e5:50:
         14:40:7c:bf:c8:83:83:66:1e:1f:76:a6:69:36:8c:03:5e:71:
         b9:a5:2b:08:2a:ef:a9:22:ba:eb:a1:81:98:b2:3a:bf:9e:99:
         c0:6a:03:fe:7d:3b:e9:0b:c4:78:50:b8:5c:8a:06:ff:63:cc:
         32:62:50:ea:59:6e:a7:ca:5c:99:7b:39:80:a2:5f:ab:46:bc:
         07:dc:c8:17:5e:21:08:0d:59:16:4d:ff:f0:34:20:7a:77:7f:
         fc:0e:3e:5f:20:54:bb:9e:7f:0d:0b:fa:a7:42:67:2b:7c:2b:
         ed:05:aa:2a:64:98:89:ee:bb:17:80:e2:90:55:bc:b5:91:22:
         47:d3:eb:85:be:6e:64:de:6d:14:67:ad:0a:b3:6f:85:6a:77:
         fc:37:fe:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:03:26 2025 by rpki-client