Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft
File:                     7rB4916j1TWPzKRmx1XXXRIw-Ng.mft (raw, json)
Hash identifier:          syr9n7wcdq2TieIn7+1Gv7nubEHmZW4hq1nFLK+s7y8=
Subject key identifier:   3E:B5:36:86:2F:71:A2:5C:82:0C:DD:59:63:A7:C5:3F:2C:52:2A:44
Authority key identifier: EE:B0:78:F7:5E:A3:D5:35:8F:CC:A4:66:C7:55:D7:5D:12:30:F8:D8
Certificate issuer:       /CN=eeb078f75ea3d5358fcca466c755d75d1230f8d8
Certificate serial:       0196BF00F717BA2DE4AF4940CE7D945797AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft
Manifest number:          1534
Signing time:             Sun 11 May 2025 11:00:33 +0000
Manifest this update:     Sun 11 May 2025 11:00:33 +0000
Manifest next update:     Mon 12 May 2025 11:00:33 +0000
Files and hashes:         1: 7rB4916j1TWPzKRmx1XXXRIw-Ng.crl (hash: oO/T8ZnayjHAmGP+irq+LhGYJxkb1DbqVcMbG+0BDQ8=)
                          2: 9fGQxsuW9o57MuSnTQw97jZkBOE.roa (hash: YnRNIOwoiTRXwdxivY6tYKVNEPgEv0Qon+zlyQpniFM=)
                          3: QQXV9PR2UUw9UDrT_DWglwU8ZS8.roa (hash: uF9Uh/MfGV5Li33CKiFO0iwqxXl5ow/SpNSUJI6hYY8=)
                          4: _y3NM5_0f7MsfhtkcKzuJLDPoBk.roa (hash: bwtNcBrGNEEfhGhbBMEoAmqI9q4hwa8bfh0IBzWlro4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:00:f7:17:ba:2d:e4:af:49:40:ce:7d:94:57:97:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeb078f75ea3d5358fcca466c755d75d1230f8d8
        Validity
            Not Before: May 11 11:00:33 2025 GMT
            Not After : May 12 11:00:33 2025 GMT
        Subject: CN=3eb536862f71a25c820cdd5963a7c53f2c522a44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:48:e5:c6:1f:ab:5b:59:12:1d:63:34:fe:27:
                    90:d8:6a:15:7a:4c:84:fe:60:7c:60:09:cf:ae:1f:
                    d3:c0:65:07:12:b7:6e:0d:1e:05:c8:a0:b5:f4:05:
                    18:ff:6b:78:25:0b:be:0d:87:e2:e9:97:3c:4a:dd:
                    68:13:c9:84:83:1c:58:bf:52:1f:33:cd:2f:7c:d1:
                    c2:c7:9a:9d:09:07:61:72:f1:b3:67:bb:95:c9:52:
                    75:23:73:6c:a3:75:00:10:18:e1:71:e1:fa:8d:e4:
                    05:1f:0f:fe:99:f0:6a:b0:ab:43:6b:f5:cd:9f:e0:
                    0c:d6:e9:ed:4d:00:24:64:96:67:d4:82:56:8d:b5:
                    b7:12:e8:0a:a7:27:30:89:f7:1b:e2:68:72:09:ad:
                    c5:9f:3a:d8:1b:35:65:a6:af:4e:e1:f9:e7:16:7c:
                    c2:37:f1:e6:46:d0:c2:27:ca:2c:09:84:1e:2c:d9:
                    8b:d7:e4:ae:7f:19:52:b1:5e:ae:54:7e:12:15:38:
                    da:bb:4c:1b:29:4b:74:eb:20:63:0c:d9:c2:92:05:
                    08:c2:51:9d:8c:0e:56:57:b0:44:a4:9f:df:94:a7:
                    31:a9:e5:1d:07:17:f7:de:2f:b9:bc:b0:42:01:1d:
                    f2:83:bd:db:40:58:7e:49:14:3e:ff:dd:e2:d3:b2:
                    8e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B5:36:86:2F:71:A2:5C:82:0C:DD:59:63:A7:C5:3F:2C:52:2A:44
            X509v3 Authority Key Identifier:
                keyid:EE:B0:78:F7:5E:A3:D5:35:8F:CC:A4:66:C7:55:D7:5D:12:30:F8:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:5f:20:c6:28:3a:04:56:b2:53:a4:e6:3e:85:08:ec:54:56:
         d8:2a:ed:e5:70:14:00:90:02:2d:5c:f1:92:49:c0:e8:f3:b4:
         49:11:6d:58:f2:1b:c8:5a:07:45:fc:1e:df:01:d6:ae:44:6a:
         c3:45:ba:61:21:4c:c9:f2:ab:75:96:65:cb:29:76:6d:bc:97:
         13:ae:37:c8:ca:57:4e:2c:fd:0a:d6:d7:a3:60:cc:d6:cc:bd:
         c7:34:46:2f:0b:5a:0a:e4:10:42:ac:88:54:d7:ed:55:31:c1:
         10:ad:2a:3d:a9:55:85:f9:12:98:01:09:60:69:a7:7d:05:0c:
         5f:ea:3a:b7:91:76:82:3e:b0:ab:fd:74:8a:0d:a6:70:d6:e4:
         38:f1:7e:6d:fc:ef:7b:f6:3e:93:81:4e:31:df:33:93:a7:be:
         5f:5a:9a:73:12:de:90:5f:46:88:fe:24:93:8e:0b:b8:d2:3a:
         f9:b5:d5:b7:da:78:b3:0c:70:1b:e7:c0:d3:1a:6d:71:4a:a2:
         88:10:9f:dd:da:a0:73:ba:f3:c0:a8:d3:51:84:2b:04:9a:a9:
         25:e9:60:94:15:af:7d:33:08:2d:c1:bf:f4:65:8c:a8:c1:f3:
         46:de:31:55:f5:eb:27:00:27:30:05:c2:a7:cc:18:68:cb:90:
         90:f1:2e:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/APcXui3kr0lAzn2UV5etMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYjA3OGY3NWVhM2Q1MzU4ZmNjYTQ2NmM3NTVkNzVkMTIz
MGY4ZDgwHhcNMjUwNTExMTEwMDMzWhcNMjUwNTEyMTEwMDMzWjAzMTEwLwYDVQQD
EygzZWI1MzY4NjJmNzFhMjVjODIwY2RkNTk2M2E3YzUzZjJjNTIyYTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEjlxh+rW1kSHWM0/ieQ2GoVekyE
/mB8YAnPrh/TwGUHErduDR4FyKC19AUY/2t4JQu+DYfi6Zc8St1oE8mEgxxYv1If
M80vfNHCx5qdCQdhcvGzZ7uVyVJ1I3Nso3UAEBjhceH6jeQFHw/+mfBqsKtDa/XN
n+AM1untTQAkZJZn1IJWjbW3EugKpycwifcb4mhyCa3FnzrYGzVlpq9O4fnnFnzC
N/HmRtDCJ8osCYQeLNmL1+SufxlSsV6uVH4SFTjau0wbKUt06yBjDNnCkgUIwlGd
jA5WV7BEpJ/flKcxqeUdBxf33i+5vLBCAR3yg73bQFh+SRQ+/93i07KOkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD61NoYvcaJcggzdWWOnxT8sUipEMB8GA1UdIwQY
MBaAFO6wePdeo9U1j8ykZsdV110SMPjYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3JCNDkxNmoxVFdQektSbXgxWFhYUkl3LU5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hZTYwZmEtOTZlNS00ZjZhLThiOTMt
ODIxNzA3ZTJjMDAyLzEvN3JCNDkxNmoxVFdQektSbXgxWFhYUkl3LU5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9hZTYwZmEtOTZlNS00ZjZhLThiOTMtODIxNzA3ZTJjMDAy
LzEvN3JCNDkxNmoxVFdQektSbXgxWFhYUkl3LU5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmF8gxig6
BFayU6TmPoUI7FRW2Crt5XAUAJACLVzxkknA6PO0SRFtWPIbyFoHRfwe3wHWrkRq
w0W6YSFMyfKrdZZlyyl2bbyXE643yMpXTiz9CtbXo2DM1sy9xzRGLwtaCuQQQqyI
VNftVTHBEK0qPalVhfkSmAEJYGmnfQUMX+o6t5F2gj6wq/10ig2mcNbkOPF+bfzv
e/Y+k4FOMd8zk6e+X1qacxLekF9GiP4kk44LuNI6+bXVt9p4swxwG+fA0xptcUqi
iBCf3dqgc7rzwKjTUYQrBJqpJelglBWvfTMILcG/9GWMqMHzRt4xVfXrJwAnMAXC
p8wYaMuQkPEuzA==
-----END CERTIFICATE-----
Generated at Sun May 11 16:44:53 2025 by rpki-client