Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft
File:                     xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft (raw, json)
Hash identifier:          98lp3KGeISGgmCjp6jK0y1VQoAiyFITryNuN1IRLJuk=
Subject key identifier:   C0:D1:FD:57:E2:B0:1A:69:F1:95:FB:B0:56:14:6F:B6:B5:70:D3:C8
Authority key identifier: C4:9C:88:44:2B:A9:73:45:BC:01:06:55:9E:6F:A7:86:94:4A:DC:A4
Certificate issuer:       /CN=c49c88442ba97345bc0106559e6fa786944adca4
Certificate serial:       0196BDB78C9E92A14BB35D06B997655F1D97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xJyIRCupc0W8AQZVnm-nhpRK3KQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft
Manifest number:          0B01
Signing time:             Sun 11 May 2025 05:00:44 +0000
Manifest this update:     Sun 11 May 2025 05:00:44 +0000
Manifest next update:     Mon 12 May 2025 05:00:44 +0000
Files and hashes:         1: tSWx1lY4W5RWfIoEa9ZiLZAUrJw.roa (hash: BXE0UWACwtmo2QDwp5Gd5dEhuobHdzrduyzOxIVuE/M=)
                          2: xJyIRCupc0W8AQZVnm-nhpRK3KQ.crl (hash: B6tmTKPGdBBeznQcApWHgZCtrAOKSpVmCv/HDmS075g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xJyIRCupc0W8AQZVnm-nhpRK3KQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 05:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:b7:8c:9e:92:a1:4b:b3:5d:06:b9:97:65:5f:1d:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c49c88442ba97345bc0106559e6fa786944adca4
        Validity
            Not Before: May 11 05:00:44 2025 GMT
            Not After : May 12 05:00:44 2025 GMT
        Subject: CN=c0d1fd57e2b01a69f195fbb056146fb6b570d3c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fe:1c:9f:f4:69:30:99:16:32:06:a0:fc:ca:
                    69:b8:96:75:dc:a8:e8:7c:c3:6b:cc:94:82:29:0e:
                    b6:22:b7:4c:c2:8b:eb:f8:38:72:bb:11:c4:74:39:
                    1d:99:31:e2:16:38:28:2a:e6:a1:f6:02:90:78:f7:
                    e8:08:73:2b:0e:82:51:87:70:1e:d6:4d:6b:c3:65:
                    09:c9:83:14:53:26:86:b3:76:15:3a:f0:17:b7:68:
                    da:f3:d2:85:b5:d6:06:d4:ce:09:93:59:12:b7:98:
                    24:74:96:46:88:5b:71:f3:b2:08:b9:13:f5:9c:15:
                    c6:63:19:95:8b:98:2a:f9:3e:81:60:6e:56:d2:99:
                    48:5e:fe:89:ff:0a:1d:c6:6f:83:6d:33:94:b0:6d:
                    30:fd:f0:fa:07:25:a6:a4:e0:5a:04:b0:01:8a:48:
                    ba:9d:3e:83:1e:c5:53:44:1d:7c:ee:ae:72:b5:89:
                    06:22:de:4a:dc:0b:2d:8d:e5:a3:8b:c4:98:de:ae:
                    c0:a2:0b:32:0b:48:c7:71:24:74:22:c8:f1:9b:ab:
                    3c:31:ac:4d:d1:69:91:73:d1:c7:ac:23:d0:58:a9:
                    67:39:e4:b9:7c:f8:02:bb:45:38:89:0f:d6:36:cf:
                    e6:80:d3:2a:ec:33:0e:c4:1e:9d:7a:38:67:96:2c:
                    9b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D1:FD:57:E2:B0:1A:69:F1:95:FB:B0:56:14:6F:B6:B5:70:D3:C8
            X509v3 Authority Key Identifier:
                keyid:C4:9C:88:44:2B:A9:73:45:BC:01:06:55:9E:6F:A7:86:94:4A:DC:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJyIRCupc0W8AQZVnm-nhpRK3KQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:e4:dd:3d:21:d4:a0:0b:cb:c0:f7:ab:ae:d7:d6:44:9f:d2:
         23:e4:ca:ba:98:a5:4f:47:a0:83:0a:53:5b:c4:eb:5a:26:4f:
         49:44:b9:49:4f:ff:37:88:43:ca:d4:4a:e1:ff:2e:a1:81:bc:
         16:f2:d4:07:9c:5b:d6:37:fa:a5:f9:62:a4:3c:39:99:75:e3:
         9d:37:c3:66:0b:56:33:b9:ed:77:f6:38:8b:87:2f:86:7d:9b:
         c0:c2:77:4d:a0:17:6e:7e:9c:01:f6:89:1a:00:e1:6f:62:3d:
         d5:10:22:ce:2b:b4:0d:9d:1b:df:c7:1c:fb:f2:13:0e:10:99:
         3a:c9:ef:40:a6:18:ae:35:e8:74:1c:ee:af:23:03:5e:d0:07:
         ae:17:ea:e0:b8:56:51:bc:27:f2:33:ab:fb:bc:c9:b9:47:5e:
         55:62:6c:77:c3:dd:8a:41:63:5b:83:46:90:43:5b:4e:27:b0:
         d9:ed:ef:43:a4:3b:72:3c:84:ba:be:1b:c3:b0:77:11:57:1c:
         cd:88:b3:6f:ae:28:42:b8:fe:0c:6c:c0:57:a1:5c:bc:bc:3c:
         6c:91:76:50:fc:73:32:ba:a6:d5:c3:0b:4f:25:1e:0e:04:53:
         b7:32:76:bd:0d:63:0f:13:ef:15:67:51:74:0f:77:8a:b8:e6:
         93:5b:ae:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa9t4yekqFLs10GuZdlXx2XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0OWM4ODQ0MmJhOTczNDViYzAxMDY1NTllNmZhNzg2OTQ0
YWRjYTQwHhcNMjUwNTExMDUwMDQ0WhcNMjUwNTEyMDUwMDQ0WjAzMTEwLwYDVQQD
EyhjMGQxZmQ1N2UyYjAxYTY5ZjE5NWZiYjA1NjE0NmZiNmI1NzBkM2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0P4cn/RpMJkWMgag/MppuJZ13Kjo
fMNrzJSCKQ62IrdMwovr+DhyuxHEdDkdmTHiFjgoKuah9gKQePfoCHMrDoJRh3Ae
1k1rw2UJyYMUUyaGs3YVOvAXt2ja89KFtdYG1M4Jk1kSt5gkdJZGiFtx87IIuRP1
nBXGYxmVi5gq+T6BYG5W0plIXv6J/wodxm+DbTOUsG0w/fD6ByWmpOBaBLABiki6
nT6DHsVTRB187q5ytYkGIt5K3AstjeWji8SY3q7AogsyC0jHcSR0Isjxm6s8MaxN
0WmRc9HHrCPQWKlnOeS5fPgCu0U4iQ/WNs/mgNMq7DMOxB6dejhnliybcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDR/VfisBpp8ZX7sFYUb7a1cNPIMB8GA1UdIwQY
MBaAFMSciEQrqXNFvAEGVZ5vp4aUStykMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEp5SVJDdXBjMFc4QVFaVm5tLW5ocFJLM0tRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi80ZjYxODctYmM2Ny00YWMzLTljOGQt
YTcwZjk5MmE1NTI5LzEveEp5SVJDdXBjMFc4QVFaVm5tLW5ocFJLM0tRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi80ZjYxODctYmM2Ny00YWMzLTljOGQtYTcwZjk5MmE1NTI5
LzEveEp5SVJDdXBjMFc4QVFaVm5tLW5ocFJLM0tRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmeTdPSHU
oAvLwPerrtfWRJ/SI+TKupilT0eggwpTW8TrWiZPSUS5SU//N4hDytRK4f8uoYG8
FvLUB5xb1jf6pflipDw5mXXjnTfDZgtWM7ntd/Y4i4cvhn2bwMJ3TaAXbn6cAfaJ
GgDhb2I91RAiziu0DZ0b38cc+/ITDhCZOsnvQKYYrjXodBzuryMDXtAHrhfq4LhW
Ubwn8jOr+7zJuUdeVWJsd8PdikFjW4NGkENbTiew2e3vQ6Q7cjyEur4bw7B3EVcc
zYizb64oQrj+DGzAV6FcvLw8bJF2UPxzMrqm1cMLTyUeDgRTtzJ2vQ1jDxPvFWdR
dA93irjmk1uu0g==
-----END CERTIFICATE-----
Generated at Sun May 11 15:20:27 2025 by rpki-client