Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
File:                     CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft (raw, json)
Hash identifier:          bTnj4ZCARBtYolhFR/NQGzIZPbpwXpkYmGL/MgSDR+w=
Subject key identifier:   67:6B:9D:01:7B:C1:C7:A5:83:22:CC:75:57:47:C0:BE:E6:18:2F:1D
Authority key identifier: 08:1C:A6:0E:04:84:7B:D2:F7:C4:5C:86:87:E5:F5:AA:D1:FE:E8:FB
Certificate issuer:       /CN=081ca60e04847bd2f7c45c8687e5f5aad1fee8fb
Certificate serial:       0196A8AFE7422DA7695F8486ECEF443D77BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
Manifest number:          152A
Signing time:             Wed 07 May 2025 03:00:22 +0000
Manifest this update:     Wed 07 May 2025 03:00:22 +0000
Manifest next update:     Thu 08 May 2025 03:00:22 +0000
Files and hashes:         1: CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl (hash: Tkpid5R3utV62EXKp9J/fSiAdvRXq2UV2YE/V9MCuOI=)
                          2: ZnV_8X8pYoAVKjZWPYlTDet39Po.roa (hash: AQ2CtHZNHtcjULxTw0rAIotVl7Ai3G/vKLwZOUyWiLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 03:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a8:af:e7:42:2d:a7:69:5f:84:86:ec:ef:44:3d:77:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=081ca60e04847bd2f7c45c8687e5f5aad1fee8fb
        Validity
            Not Before: May  7 03:00:22 2025 GMT
            Not After : May  8 03:00:22 2025 GMT
        Subject: CN=676b9d017bc1c7a58322cc755747c0bee6182f1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c4:72:d9:44:d4:7f:5d:67:73:54:32:31:9d:
                    b3:de:e7:42:50:58:78:ff:f6:17:82:29:cc:7d:f5:
                    a0:4a:62:58:fb:ba:d4:61:3a:86:87:8e:db:7d:36:
                    f8:b8:77:21:f8:14:a5:f0:0c:4c:2a:6e:40:e5:87:
                    5f:76:d2:3f:1f:ad:52:f3:1d:ab:b4:d4:fe:03:2f:
                    fc:da:c9:1b:11:4a:2f:f4:32:aa:01:ec:6b:70:9f:
                    8f:07:83:78:28:33:ed:c1:11:77:c7:b9:f6:a3:81:
                    2e:8e:ea:50:f3:1b:7e:0d:61:4f:3e:aa:3f:b3:22:
                    f8:d5:7d:d5:80:c9:a7:c8:49:c3:fc:b0:37:a8:6c:
                    5e:5b:d5:13:dd:82:2d:c5:b6:d5:a0:ca:cd:10:13:
                    a4:49:11:84:71:34:1c:7a:14:0a:b7:9a:91:4f:f7:
                    28:09:4d:75:64:80:c0:82:5c:b7:e4:55:a3:19:d2:
                    ed:ab:c5:7e:d1:ed:fc:67:38:b0:8f:cc:67:7c:7d:
                    5f:e3:31:b5:92:a7:d7:29:85:8d:1e:d2:0b:16:95:
                    e0:7b:b7:f4:80:32:fd:f7:2c:a9:54:77:51:23:ca:
                    6b:a8:a4:0d:b0:b6:04:b9:85:b5:75:d1:51:7d:5e:
                    60:99:b6:d9:39:7a:82:42:48:59:e7:e1:74:eb:e9:
                    5b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:6B:9D:01:7B:C1:C7:A5:83:22:CC:75:57:47:C0:BE:E6:18:2F:1D
            X509v3 Authority Key Identifier:
                keyid:08:1C:A6:0E:04:84:7B:D2:F7:C4:5C:86:87:E5:F5:AA:D1:FE:E8:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:25:6b:92:ac:e2:77:16:a1:c6:94:7f:e8:94:4d:15:a2:90:
         78:4b:ab:06:dc:48:36:48:84:0b:bd:c2:1f:e1:18:00:e6:f1:
         81:29:90:5a:f9:a5:87:fa:23:e4:ea:5a:07:78:7b:ca:ad:2c:
         1d:c8:f9:6a:a1:0f:64:85:9f:61:ea:07:b3:93:5a:7a:2d:b7:
         a7:4e:66:c7:13:b8:d7:9d:20:27:d6:23:e9:06:3a:53:56:00:
         5b:c7:75:97:4b:c1:50:98:81:41:61:3a:fc:2b:0a:7a:9b:04:
         21:11:f9:57:45:58:41:59:d7:c9:b3:ab:fa:cb:8c:17:ed:c3:
         17:4b:1c:44:aa:dc:aa:47:e6:3b:7b:c8:ed:75:07:db:bb:82:
         21:2f:07:a3:44:53:4d:51:c7:d7:d9:8d:47:a0:e5:91:65:47:
         1f:28:c9:a4:8c:94:42:5c:cf:21:69:85:ef:30:8f:04:f0:93:
         0c:38:3c:61:11:c1:93:33:65:10:80:fd:02:4a:33:b5:58:0e:
         be:b2:ed:3d:29:b5:4a:55:fe:31:6c:2d:86:e3:5d:29:eb:0f:
         46:df:16:7f:f2:e5:57:29:40:b9:07:ff:a1:12:62:8c:e7:98:
         06:01:80:f6:d3:76:90:0f:75:7b:04:84:e0:4d:09:66:e0:c9:
         05:b7:29:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaor+dCLadpX4SG7O9EPXe8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MWNhNjBlMDQ4NDdiZDJmN2M0NWM4Njg3ZTVmNWFhZDFm
ZWU4ZmIwHhcNMjUwNTA3MDMwMDIyWhcNMjUwNTA4MDMwMDIyWjAzMTEwLwYDVQQD
Eyg2NzZiOWQwMTdiYzFjN2E1ODMyMmNjNzU1NzQ3YzBiZWU2MTgyZjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsRy2UTUf11nc1QyMZ2z3udCUFh4
//YXginMffWgSmJY+7rUYTqGh47bfTb4uHch+BSl8AxMKm5A5YdfdtI/H61S8x2r
tNT+Ay/82skbEUov9DKqAexrcJ+PB4N4KDPtwRF3x7n2o4EujupQ8xt+DWFPPqo/
syL41X3VgMmnyEnD/LA3qGxeW9UT3YItxbbVoMrNEBOkSRGEcTQcehQKt5qRT/co
CU11ZIDAgly35FWjGdLtq8V+0e38Zziwj8xnfH1f4zG1kqfXKYWNHtILFpXge7f0
gDL99yypVHdRI8prqKQNsLYEuYW1ddFRfV5gmbbZOXqCQkhZ5+F06+lbpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdrnQF7wcelgyLMdVdHwL7mGC8dMB8GA1UdIwQY
MBaAFAgcpg4EhHvS98Rchofl9arR/uj7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0J5bURnU0VlOUwzeEZ5R2gtWDFxdEgtNlBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kOTRmY2UtNTQ3ZS00MjQyLWI3MmMt
YjdhYjY4NmMwNzZlLzEvQ0J5bURnU0VlOUwzeEZ5R2gtWDFxdEgtNlBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kOTRmY2UtNTQ3ZS00MjQyLWI3MmMtYjdhYjY4NmMwNzZl
LzEvQ0J5bURnU0VlOUwzeEZ5R2gtWDFxdEgtNlBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGyVrkqzi
dxahxpR/6JRNFaKQeEurBtxINkiEC73CH+EYAObxgSmQWvmlh/oj5OpaB3h7yq0s
Hcj5aqEPZIWfYeoHs5Naei23p05mxxO4150gJ9Yj6QY6U1YAW8d1l0vBUJiBQWE6
/CsKepsEIRH5V0VYQVnXybOr+suMF+3DF0scRKrcqkfmO3vI7XUH27uCIS8Ho0RT
TVHH19mNR6DlkWVHHyjJpIyUQlzPIWmF7zCPBPCTDDg8YRHBkzNlEID9AkoztVgO
vrLtPSm1SlX+MWwthuNdKesPRt8Wf/LlVylAuQf/oRJijOeYBgGA9tN2kA91ewSE
4E0JZuDJBbcpTQ==
-----END CERTIFICATE-----
Generated at Wed May 7 11:01:34 2025 by rpki-client