Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
File:                     S91CzNE9f4p8PtpbVQLY1ty7vhE.mft (raw, json)
Hash identifier:          JhqUQl0+wzcaBwQyd6GD4uxzT30YeTLibJ7EWxA9Wak=
Subject key identifier:   05:6E:6E:31:5C:35:6B:D1:4F:53:CC:C6:AC:2D:1A:E0:1F:92:CF:79
Authority key identifier: 4B:DD:42:CC:D1:3D:7F:8A:7C:3E:DA:5B:55:02:D8:D6:DC:BB:BE:11
Certificate issuer:       /CN=4bdd42ccd13d7f8a7c3eda5b5502d8d6dcbbbe11
Certificate serial:       0196C8E00927E76D61F98793AF73E1FA0175
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
Manifest number:          0AE7
Signing time:             Tue 13 May 2025 09:00:47 +0000
Manifest this update:     Tue 13 May 2025 09:00:47 +0000
Manifest next update:     Wed 14 May 2025 09:00:47 +0000
Files and hashes:         1: S91CzNE9f4p8PtpbVQLY1ty7vhE.crl (hash: VyEHUImbGb3GDnOw/D4b6F68rZkLiMv+BfgaldwQtv0=)
                          2: oa49XCli4BnhzjMFZt__xzBFHcY.roa (hash: tJwIQtT+Kk475hshkks2qpfV9lu0TNlB3mE3lLaKnow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 09:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c8:e0:09:27:e7:6d:61:f9:87:93:af:73:e1:fa:01:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bdd42ccd13d7f8a7c3eda5b5502d8d6dcbbbe11
        Validity
            Not Before: May 13 09:00:47 2025 GMT
            Not After : May 14 09:00:47 2025 GMT
        Subject: CN=056e6e315c356bd14f53ccc6ac2d1ae01f92cf79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:39:42:fc:0c:80:19:8d:63:f4:3b:19:8b:08:
                    0c:c5:6f:48:06:a6:15:a6:b1:28:62:30:36:e1:9c:
                    fb:7d:29:ef:86:29:e6:56:82:e2:72:45:d5:c4:cb:
                    87:ca:c5:df:be:85:13:6e:ac:60:72:29:35:ae:75:
                    05:37:99:ed:24:60:46:15:01:2b:2c:0b:c5:22:0a:
                    5a:8c:be:2c:12:ce:95:f8:95:c7:cf:92:0a:ab:83:
                    1e:d9:38:4d:c2:e2:dd:d4:ce:6e:c9:28:46:9b:a0:
                    e2:64:2c:8c:58:1c:ee:c0:52:e3:f0:6b:d8:83:f1:
                    d3:a2:bb:6c:c7:13:b6:14:f0:f5:67:0b:28:79:84:
                    54:12:ff:ec:f5:1a:4f:45:d1:af:35:4a:90:27:96:
                    bf:bc:20:38:2d:ae:23:e5:03:b0:17:c2:95:a6:ab:
                    bb:f0:43:05:f4:0b:c3:6f:34:af:65:b6:e8:bd:83:
                    b3:d1:47:74:27:d5:a5:80:7a:74:04:ef:74:61:a4:
                    2f:e3:9e:b4:32:85:fa:68:f7:b1:44:21:da:0f:34:
                    b0:cd:19:f1:d9:ff:f6:14:43:8d:3a:ef:01:a7:5f:
                    7d:79:f7:6f:a5:26:59:89:67:0c:51:61:31:0a:58:
                    cc:59:c5:a0:7a:85:d0:23:af:4f:d2:2f:0d:fb:0b:
                    df:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:6E:6E:31:5C:35:6B:D1:4F:53:CC:C6:AC:2D:1A:E0:1F:92:CF:79
            X509v3 Authority Key Identifier:
                keyid:4B:DD:42:CC:D1:3D:7F:8A:7C:3E:DA:5B:55:02:D8:D6:DC:BB:BE:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:1a:95:8d:5a:76:87:13:0a:b8:14:15:c5:e4:05:01:e7:84:
         56:47:cd:df:d0:49:57:c2:8e:c7:24:9b:40:64:db:c4:ec:28:
         4e:19:ad:dd:e6:20:2b:9e:6d:8a:27:1a:c6:20:e9:20:10:93:
         f3:13:f0:8f:d5:05:1c:8c:ac:42:98:69:8f:35:a3:ca:1c:c2:
         b8:fa:b6:28:92:f9:08:e3:17:3a:88:79:3f:6b:6b:41:ff:a6:
         13:a7:cb:67:96:66:43:ee:65:65:33:32:3b:73:19:2c:6f:ad:
         de:7e:ef:a0:84:e0:66:8e:14:7b:0b:eb:54:8e:be:48:3f:b3:
         b5:b9:db:6f:1a:c2:3d:43:88:08:df:eb:6e:82:25:cc:6f:64:
         7b:15:3d:e0:26:06:21:76:27:b7:d3:d0:af:26:ab:70:40:e2:
         cd:01:38:64:a0:59:86:5d:cb:d3:51:a8:c9:4d:5c:db:6c:37:
         43:64:b1:fe:46:ae:ad:33:78:83:d7:cf:e2:ba:c6:2f:e5:62:
         4a:07:5e:2a:5e:ec:23:ff:72:79:28:c4:35:01:0f:c1:8f:74:
         33:ea:50:9c:94:47:fe:20:a8:49:d3:d7:c8:c7:c6:57:6f:8e:
         4c:62:01:44:54:fc:7c:3c:67:7e:89:3f:6e:1a:71:ea:8b:8a:
         ab:bb:ff:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbI4Akn521h+YeTr3Ph+gF1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZGQ0MmNjZDEzZDdmOGE3YzNlZGE1YjU1MDJkOGQ2ZGNi
YmJlMTEwHhcNMjUwNTEzMDkwMDQ3WhcNMjUwNTE0MDkwMDQ3WjAzMTEwLwYDVQQD
EygwNTZlNmUzMTVjMzU2YmQxNGY1M2NjYzZhYzJkMWFlMDFmOTJjZjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDlC/AyAGY1j9DsZiwgMxW9IBqYV
prEoYjA24Zz7fSnvhinmVoLickXVxMuHysXfvoUTbqxgcik1rnUFN5ntJGBGFQEr
LAvFIgpajL4sEs6V+JXHz5IKq4Me2ThNwuLd1M5uyShGm6DiZCyMWBzuwFLj8GvY
g/HTortsxxO2FPD1ZwsoeYRUEv/s9RpPRdGvNUqQJ5a/vCA4La4j5QOwF8KVpqu7
8EMF9AvDbzSvZbbovYOz0Ud0J9WlgHp0BO90YaQv4560MoX6aPexRCHaDzSwzRnx
2f/2FEONOu8Bp199efdvpSZZiWcMUWExCljMWcWgeoXQI69P0i8N+wvfSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVubjFcNWvRT1PMxqwtGuAfks95MB8GA1UdIwQY
MBaAFEvdQszRPX+KfD7aW1UC2Nbcu74RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzkxQ3pORTlmNHA4UHRwYlZRTFkxdHk3dmhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9mYzhlMjItOWEzYi00NjQ2LWJhYmUt
MWNhMjEyMGVlNDM2LzEvUzkxQ3pORTlmNHA4UHRwYlZRTFkxdHk3dmhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9mYzhlMjItOWEzYi00NjQ2LWJhYmUtMWNhMjEyMGVlNDM2
LzEvUzkxQ3pORTlmNHA4UHRwYlZRTFkxdHk3dmhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWBqVjVp2
hxMKuBQVxeQFAeeEVkfN39BJV8KOxySbQGTbxOwoThmt3eYgK55tiicaxiDpIBCT
8xPwj9UFHIysQphpjzWjyhzCuPq2KJL5COMXOoh5P2trQf+mE6fLZ5ZmQ+5lZTMy
O3MZLG+t3n7voITgZo4UewvrVI6+SD+ztbnbbxrCPUOICN/rboIlzG9kexU94CYG
IXYnt9PQryarcEDizQE4ZKBZhl3L01GoyU1c22w3Q2Sx/kaurTN4g9fP4rrGL+Vi
SgdeKl7sI/9yeSjENQEPwY90M+pQnJRH/iCoSdPXyMfGV2+OTGIBRFT8fDxnfok/
bhpx6ouKq7v/dA==
-----END CERTIFICATE-----
Generated at Tue May 13 18:01:35 2025 by rpki-client