Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft
File:                     aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft (raw, json)
Hash identifier:          UgLUVY3YBycKbqAkF0ZBjii7VpTbsrZQT4e09iVYEgI=
Subject key identifier:   1E:52:78:2F:DC:28:36:79:61:4C:14:8A:C9:B8:F8:A3:05:91:44:6D
Authority key identifier: 6A:AE:E7:BB:A3:2A:8F:93:A4:CC:F5:69:1C:81:D1:6D:04:B8:50:8A
Certificate issuer:       /CN=6aaee7bba32a8f93a4ccf5691c81d16d04b8508a
Certificate serial:       0196ACC41E9F234827FB1C7489B79E06EFBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft
Manifest number:          016C
Signing time:             Wed 07 May 2025 22:00:56 +0000
Manifest this update:     Wed 07 May 2025 22:00:56 +0000
Manifest next update:     Thu 08 May 2025 22:00:56 +0000
Files and hashes:         1: Uk__OZgps3cW-lHF28p4Fkxzez8.roa (hash: xpOF8IhBwl9sbc7jkk5/9vqgBdRwATYGkdLVpY/CHdk=)
                          2: aq7nu6Mqj5OkzPVpHIHRbQS4UIo.crl (hash: kCvlH3KhbCa5x8jMwwpfcMY4jS78cX21D7fj/7Bdhrk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 20:38:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ac:c4:1e:9f:23:48:27:fb:1c:74:89:b7:9e:06:ef:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aaee7bba32a8f93a4ccf5691c81d16d04b8508a
        Validity
            Not Before: May  7 22:00:56 2025 GMT
            Not After : May  8 22:00:56 2025 GMT
        Subject: CN=1e52782fdc283679614c148ac9b8f8a30591446d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d0:b3:df:b6:e8:c9:4f:76:85:87:17:27:05:
                    60:e0:21:83:e1:de:5f:db:41:81:de:57:0f:6d:2b:
                    06:57:1f:82:82:23:21:9f:d9:52:14:1d:44:79:43:
                    fe:24:1a:0b:0c:0a:4f:da:84:54:8c:b4:73:bd:7f:
                    94:49:d5:bd:3f:01:24:54:78:9a:c9:18:68:e6:d6:
                    db:30:2b:c9:ac:eb:a4:a5:4e:7e:37:38:d9:9d:a3:
                    f2:53:60:1a:54:73:eb:00:3c:77:4e:93:84:0b:c1:
                    c3:ba:09:96:e7:5e:03:5e:8b:01:98:51:2f:2b:7e:
                    4b:2b:99:f0:d7:59:ee:a3:fe:48:e5:52:a9:0d:17:
                    4e:77:b0:3e:9e:38:11:6f:0d:38:55:7d:8d:40:4a:
                    38:f1:8f:95:00:70:72:84:e3:30:13:e5:14:28:cb:
                    a8:f5:10:76:24:bf:e7:04:6d:e9:7d:25:a2:aa:3c:
                    7a:d4:ea:a9:6c:1d:d0:bd:4d:cc:8d:7e:d7:cb:21:
                    33:dd:f8:27:aa:f4:9d:02:24:e9:bd:19:b7:48:88:
                    c4:38:2e:58:a7:6b:fb:93:64:cb:75:6f:2e:d4:37:
                    b8:6b:53:cf:de:97:93:ba:89:19:b4:f6:3c:1d:3b:
                    3f:63:01:8a:19:66:24:18:9c:80:a7:a3:28:d6:eb:
                    8e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:52:78:2F:DC:28:36:79:61:4C:14:8A:C9:B8:F8:A3:05:91:44:6D
            X509v3 Authority Key Identifier:
                keyid:6A:AE:E7:BB:A3:2A:8F:93:A4:CC:F5:69:1C:81:D1:6D:04:B8:50:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:72:f1:01:08:00:66:ec:4c:25:25:a4:b5:0f:3f:1a:cc:4a:
         e0:44:1a:35:7c:ff:55:d7:89:9b:ef:f9:65:97:4d:2b:00:0b:
         62:77:00:51:34:40:e5:e8:04:37:3c:61:0d:e8:e8:99:87:23:
         2b:3f:fd:4f:31:fb:46:24:68:19:58:53:1c:55:9c:d1:f9:e9:
         20:ec:28:cb:59:45:d8:5a:af:52:99:72:d7:eb:5e:47:4a:ac:
         ec:cd:8d:68:76:04:7d:69:37:fd:72:f7:ff:8d:51:3b:0c:75:
         3c:67:e8:61:7d:7a:c9:44:a8:34:ee:8a:d6:64:b0:82:58:8a:
         c5:e8:7f:77:67:ab:a1:ea:68:9d:79:72:b1:68:23:8b:c6:f9:
         0e:c0:fe:ca:94:c5:38:e0:58:ba:fe:b8:e6:08:b0:46:20:86:
         b2:d0:6f:37:97:65:70:97:a1:31:2b:b9:db:a9:0c:dc:3b:75:
         2c:21:54:24:69:b2:2d:52:95:c4:6c:39:bb:8a:d8:5d:a8:80:
         92:77:5b:a8:70:7c:37:ba:21:7d:dd:28:93:b6:62:6d:1d:fa:
         cc:ba:5e:27:a6:f2:9d:bd:36:a5:5c:8e:2e:ae:32:12:1a:8a:
         ce:0d:c3:eb:c5:00:a3:be:3d:73:2f:27:bd:b6:a7:03:1d:19:
         2f:91:44:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZasxB6fI0gn+xx0ibeeBu+9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhYWVlN2JiYTMyYThmOTNhNGNjZjU2OTFjODFkMTZkMDRi
ODUwOGEwHhcNMjUwNTA3MjIwMDU2WhcNMjUwNTA4MjIwMDU2WjAzMTEwLwYDVQQD
EygxZTUyNzgyZmRjMjgzNjc5NjE0YzE0OGFjOWI4ZjhhMzA1OTE0NDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNCz37boyU92hYcXJwVg4CGD4d5f
20GB3lcPbSsGVx+CgiMhn9lSFB1EeUP+JBoLDApP2oRUjLRzvX+USdW9PwEkVHia
yRho5tbbMCvJrOukpU5+NzjZnaPyU2AaVHPrADx3TpOEC8HDugmW514DXosBmFEv
K35LK5nw11nuo/5I5VKpDRdOd7A+njgRbw04VX2NQEo48Y+VAHByhOMwE+UUKMuo
9RB2JL/nBG3pfSWiqjx61OqpbB3QvU3MjX7XyyEz3fgnqvSdAiTpvRm3SIjEOC5Y
p2v7k2TLdW8u1De4a1PP3peTuokZtPY8HTs/YwGKGWYkGJyAp6Mo1uuO6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5SeC/cKDZ5YUwUism4+KMFkURtMB8GA1UdIwQY
MBaAFGqu57ujKo+TpMz1aRyB0W0EuFCKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXE3bnU2TXFqNU9relBWcEhJSFJiUVM0VUlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8yM2FkODgtMmY0Yy00ZWY2LWE5ZTUt
NTAzMmEzZWYyNTRjLzEvYXE3bnU2TXFqNU9relBWcEhJSFJiUVM0VUlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8yM2FkODgtMmY0Yy00ZWY2LWE5ZTUtNTAzMmEzZWYyNTRj
LzEvYXE3bnU2TXFqNU9relBWcEhJSFJiUVM0VUlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeHLxAQgA
ZuxMJSWktQ8/GsxK4EQaNXz/VdeJm+/5ZZdNKwALYncAUTRA5egENzxhDejomYcj
Kz/9TzH7RiRoGVhTHFWc0fnpIOwoy1lF2FqvUply1+teR0qs7M2NaHYEfWk3/XL3
/41ROwx1PGfoYX16yUSoNO6K1mSwgliKxeh/d2eroeponXlysWgji8b5DsD+ypTF
OOBYuv645giwRiCGstBvN5dlcJehMSu526kM3Dt1LCFUJGmyLVKVxGw5u4rYXaiA
kndbqHB8N7ohfd0ok7ZibR36zLpeJ6bynb02pVyOLq4yEhqKzg3D68UAo749cy8n
vbanAx0ZL5FE7g==
-----END CERTIFICATE-----
Generated at Thu May 8 00:34:54 2025 by rpki-client