Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/wR0IGGQzkDBptda7ZS-YQo9TyAg.mft
File:                     wR0IGGQzkDBptda7ZS-YQo9TyAg.mft (raw, json)
Hash identifier:          ZYOF6/oeOFlJYVgaXdk/4fU4lLeXEa2I1rt/PvD1+GE=
Subject key identifier:   DB:75:58:60:01:A6:45:9E:EF:A3:86:DD:7C:CB:DC:10:A8:31:22:06
Authority key identifier: C1:1D:08:18:64:33:90:30:69:B5:D6:BB:65:2F:98:42:8F:53:C8:08
Certificate issuer:       /CN=c11d08186433903069b5d6bb652f98428f53c808
Certificate serial:       0196B28EFF15AE422173BFB52648272D2972
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wR0IGGQzkDBptda7ZS-YQo9TyAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/wR0IGGQzkDBptda7ZS-YQo9TyAg.mft
Manifest number:          010F
Signing time:             Fri 09 May 2025 01:00:37 +0000
Manifest this update:     Fri 09 May 2025 01:00:37 +0000
Manifest next update:     Sat 10 May 2025 01:00:37 +0000
Files and hashes:         1: GlQUBzcNJmw0558H72JeNJOtGUQ.roa (hash: OAZrKZei1mukwSf7KdhyGGJ75nXzfwov+lRUskVC4AA=)
                          2: GzLNeemJ5NyzmlXIMSE-P5qpPK0.roa (hash: gMekrQRvaaYdzpl1VdoBplLf+AZyuoskovW0AOifAys=)
                          3: wR0IGGQzkDBptda7ZS-YQo9TyAg.crl (hash: lRU/RePxbjMxOtbFDFFn+9Y0t33zC6WCMkYXmE8UBmc=)
                          4: xok2gimWwzURof_w9dO-DRDDn3Y.roa (hash: onwOc+d+Y67hjnLHKYPr/lttMavIYzZkOgnV1cJxF50=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/wR0IGGQzkDBptda7ZS-YQo9TyAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/wR0IGGQzkDBptda7ZS-YQo9TyAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wR0IGGQzkDBptda7ZS-YQo9TyAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b2:8e:ff:15:ae:42:21:73:bf:b5:26:48:27:2d:29:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c11d08186433903069b5d6bb652f98428f53c808
        Validity
            Not Before: May  9 01:00:37 2025 GMT
            Not After : May 10 01:00:37 2025 GMT
        Subject: CN=db75586001a6459eefa386dd7ccbdc10a8312206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:63:cf:c2:3c:d2:6b:56:d1:3d:30:7e:68:53:
                    9b:ed:2f:ee:f3:57:eb:22:3c:7b:aa:8a:7f:b1:13:
                    f3:c2:ba:f9:d9:5c:06:9f:d8:aa:b0:55:9e:d3:72:
                    3b:ea:b9:4c:db:c9:7e:30:6a:68:c9:dd:4e:c8:14:
                    4f:6f:47:35:b3:e6:51:30:37:10:b9:54:d0:b4:ae:
                    2e:fd:4d:20:68:f6:a9:68:a3:57:29:88:78:f8:b3:
                    30:68:4b:de:30:89:62:90:ad:c5:ff:6f:d6:aa:0b:
                    cf:d9:22:54:43:10:4e:1a:a4:26:d2:c6:71:c2:98:
                    a1:0a:11:d9:d2:cc:65:27:04:a8:35:24:f3:c1:40:
                    15:1d:0f:0d:7a:9b:e1:eb:93:cc:66:f9:1e:5b:64:
                    aa:58:4e:13:72:88:89:f3:66:08:c1:3f:59:99:8d:
                    5a:3b:70:3c:d1:3c:ed:20:42:31:64:1d:9d:83:67:
                    f0:b1:02:a6:b9:c4:b8:41:d3:1c:f5:d9:35:47:f5:
                    e9:4e:af:52:26:fc:47:45:a5:f5:0d:67:ed:30:df:
                    07:b9:b9:76:45:ee:9a:17:26:3a:b7:5d:cd:09:93:
                    06:da:95:e3:0b:fb:43:90:4e:10:5d:98:1a:e8:72:
                    29:e5:dc:4f:6b:aa:e7:74:be:17:82:10:75:29:f6:
                    85:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:75:58:60:01:A6:45:9E:EF:A3:86:DD:7C:CB:DC:10:A8:31:22:06
            X509v3 Authority Key Identifier:
                keyid:C1:1D:08:18:64:33:90:30:69:B5:D6:BB:65:2F:98:42:8F:53:C8:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wR0IGGQzkDBptda7ZS-YQo9TyAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/wR0IGGQzkDBptda7ZS-YQo9TyAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/wR0IGGQzkDBptda7ZS-YQo9TyAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:55:b5:b8:66:72:ec:1d:4e:bb:cc:31:26:c3:c2:22:3d:29:
         f3:5b:7d:90:84:f1:10:91:93:ee:90:17:1f:52:6a:23:f4:7a:
         24:ca:2b:69:a7:b1:f1:41:6e:46:06:f8:97:9c:2b:58:b4:9d:
         8a:bd:f5:90:5b:f7:03:cd:1f:aa:9a:6c:26:79:1c:1e:74:68:
         36:4f:cf:01:0f:5f:a4:f3:a9:6e:fb:72:18:17:f3:c2:bb:33:
         6e:2a:c4:91:db:6c:c9:20:45:5e:cd:82:a4:e0:3a:94:af:11:
         ae:c7:4a:42:c6:dc:1d:05:10:54:61:7e:9c:3c:e7:37:ac:93:
         8c:9b:5c:14:d9:53:4d:9b:5b:09:c4:a9:45:41:87:65:d4:21:
         ef:e0:c7:8f:8c:52:13:b1:6c:08:09:10:dd:ab:b4:1b:06:85:
         1f:28:88:ef:36:00:cd:86:1f:2f:42:99:98:8e:21:9c:67:ca:
         6e:8a:87:a8:b1:5c:84:d1:0f:68:bb:86:ba:65:96:28:57:e8:
         45:42:16:1a:d1:cc:c4:45:89:fc:e6:35:2b:a4:e9:21:c0:d3:
         84:5f:58:f3:44:4b:20:7c:32:b8:6d:38:9a:75:b8:d1:5f:7f:
         46:fd:91:55:75:6c:fc:9e:54:49:10:c5:3d:6d:63:11:94:2b:
         cd:e5:de:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZayjv8VrkIhc7+1JkgnLSlyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMWQwODE4NjQzMzkwMzA2OWI1ZDZiYjY1MmY5ODQyOGY1
M2M4MDgwHhcNMjUwNTA5MDEwMDM3WhcNMjUwNTEwMDEwMDM3WjAzMTEwLwYDVQQD
EyhkYjc1NTg2MDAxYTY0NTllZWZhMzg2ZGQ3Y2NiZGMxMGE4MzEyMjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mPPwjzSa1bRPTB+aFOb7S/u81fr
Ijx7qop/sRPzwrr52VwGn9iqsFWe03I76rlM28l+MGpoyd1OyBRPb0c1s+ZRMDcQ
uVTQtK4u/U0gaPapaKNXKYh4+LMwaEveMIlikK3F/2/WqgvP2SJUQxBOGqQm0sZx
wpihChHZ0sxlJwSoNSTzwUAVHQ8Nepvh65PMZvkeW2SqWE4TcoiJ82YIwT9ZmY1a
O3A80TztIEIxZB2dg2fwsQKmucS4QdMc9dk1R/XpTq9SJvxHRaX1DWftMN8Hubl2
Re6aFyY6t13NCZMG2pXjC/tDkE4QXZga6HIp5dxPa6rndL4XghB1KfaF5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNt1WGABpkWe76OG3XzL3BCoMSIGMB8GA1UdIwQY
MBaAFMEdCBhkM5AwabXWu2UvmEKPU8gIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1IwSUdHUXprREJwdGRhN1pTLVlRbzlUeUFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8yNjMzNTItODA4OC00ZjViLWE2MjAt
YWViNWNkOGRlMTVkLzEvd1IwSUdHUXprREJwdGRhN1pTLVlRbzlUeUFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS8yNjMzNTItODA4OC00ZjViLWE2MjAtYWViNWNkOGRlMTVk
LzEvd1IwSUdHUXprREJwdGRhN1pTLVlRbzlUeUFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiFW1uGZy
7B1Ou8wxJsPCIj0p81t9kITxEJGT7pAXH1JqI/R6JMoraaex8UFuRgb4l5wrWLSd
ir31kFv3A80fqppsJnkcHnRoNk/PAQ9fpPOpbvtyGBfzwrszbirEkdtsySBFXs2C
pOA6lK8RrsdKQsbcHQUQVGF+nDznN6yTjJtcFNlTTZtbCcSpRUGHZdQh7+DHj4xS
E7FsCAkQ3au0GwaFHyiI7zYAzYYfL0KZmI4hnGfKboqHqLFchNEPaLuGumWWKFfo
RUIWGtHMxEWJ/OY1K6TpIcDThF9Y80RLIHwyuG04mnW40V9/Rv2RVXVs/J5USRDF
PW1jEZQrzeXeIg==
-----END CERTIFICATE-----
Generated at Fri May 9 08:07:01 2025 by rpki-client