Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
File:                     IMXuAtLgWGHdkG_gazhE8E03jHM.mft (raw, json)
Hash identifier:          YczBM+LaPokDo9Sl3vqldeavRyGP5r5OLHOt5ZG54qs=
Subject key identifier:   36:11:03:D5:AA:E5:B7:99:1D:53:73:8D:E6:E1:D7:78:92:3D:70:8B
Authority key identifier: 20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73
Certificate issuer:       /CN=20c5ee02d2e05861dd906fe06b3844f04d378c73
Certificate serial:       0196D1075159D0B70EE55BBE25F38E640750
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
Manifest number:          0407
Signing time:             Wed 14 May 2025 23:00:39 +0000
Manifest this update:     Wed 14 May 2025 23:00:39 +0000
Manifest next update:     Thu 15 May 2025 23:00:39 +0000
Files and hashes:         1: 7xOhUPHtrbr-aDnyk2sqIXaZxmE.roa (hash: kq8yM7VvfoH1+ATjkQ5zBAmoZIPQA7DySnzjc28AM7I=)
                          2: EO7_sAa5INTWdb0sB8KoIZTsSpE.roa (hash: SZljpS9Me6EqFyINGEQdOy6JlEANEGEhl0H6HmWV3fM=)
                          3: IMXuAtLgWGHdkG_gazhE8E03jHM.crl (hash: 4OX5bcOlEN8A7SvEE05dUqDqBUmlh9uxKtw8vZmDQLI=)
                          4: Wr8EOmHckxzTGd0Aamj6K9DADdU.roa (hash: OPshObN2z5FsqJnygnFeWGUMJE0uYykW0pM3DUOjmQQ=)
                          5: YqXOQdzyJGKEIsRRKloxLXSE6Ms.roa (hash: oxg1KeTKZ090F7XaYRFBJpN4jEk7flH1GMsXEE67BF0=)
                          6: wS-ZYWnE9Zk6DJUs3sCV5yBn3ak.roa (hash: 4bRb80RRs/QoIhxBs4Ime6HGYShS2787nhwQD+lr7Xw=)
                          7: wnHzclbUTpmI2i25YXVP3hxML5Y.roa (hash: aE81auZ0/hL8t66uhuMDoL2Ds7gb0agCHWXH7RqZEB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d1:07:51:59:d0:b7:0e:e5:5b:be:25:f3:8e:64:07:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20c5ee02d2e05861dd906fe06b3844f04d378c73
        Validity
            Not Before: May 14 23:00:39 2025 GMT
            Not After : May 15 23:00:39 2025 GMT
        Subject: CN=361103d5aae5b7991d53738de6e1d778923d708b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6d:ae:50:d4:ef:57:04:0a:72:f6:75:96:88:
                    a8:e2:ba:19:a0:c9:91:05:66:09:83:86:b8:09:6e:
                    53:b7:2d:8d:6e:5b:95:a6:5c:3a:01:1f:ca:f5:68:
                    54:04:0b:d0:17:ee:75:79:47:83:e4:45:52:43:08:
                    6f:c6:38:68:83:fa:ff:a4:4a:d9:8c:c5:66:a1:6c:
                    1e:58:a4:af:4a:28:86:31:de:4c:34:25:2c:29:8b:
                    58:c3:c7:9f:93:8a:a8:2a:62:39:ad:ac:81:e6:b1:
                    f6:98:20:cb:1f:f8:20:36:94:ff:96:2b:d2:0e:18:
                    c6:09:0d:9f:e6:8c:e3:d4:35:e0:b7:d9:64:aa:a8:
                    6c:50:3f:18:5a:71:97:76:3c:43:d5:6d:2f:56:b5:
                    2f:44:2e:b0:3f:f7:e4:03:ad:8d:eb:7b:d0:9c:2e:
                    17:1f:7a:10:2e:bc:94:3a:e2:1f:97:45:39:45:88:
                    91:5d:8c:e3:cc:87:f1:7d:d1:1b:03:88:ef:5f:ff:
                    c2:89:48:41:ee:b2:f2:46:e9:44:be:90:fa:9d:05:
                    46:3e:45:91:bb:4e:d7:0d:85:5d:54:31:3a:e4:bb:
                    73:82:29:56:75:40:88:02:e6:2a:a8:a3:ea:33:25:
                    a5:4c:8b:3e:08:5c:2a:9e:17:ef:42:e9:f5:03:88:
                    42:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:11:03:D5:AA:E5:B7:99:1D:53:73:8D:E6:E1:D7:78:92:3D:70:8B
            X509v3 Authority Key Identifier:
                keyid:20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:e0:de:f9:6b:c8:4d:39:a5:47:3c:c2:cd:08:78:a7:70:8a:
         e4:56:fe:48:79:f0:3e:e0:ea:f6:dd:b8:99:b2:5b:e1:ca:0e:
         72:ec:ad:ee:24:51:03:dd:88:de:5b:a7:fc:e5:11:fb:b7:7b:
         23:dd:22:dd:10:7d:72:9b:76:7c:03:9b:db:16:51:e1:8a:cb:
         4f:3d:62:25:dc:09:bc:bd:21:d0:ac:6a:f8:26:7a:e9:b7:cd:
         da:1d:5b:91:65:1b:95:93:ab:dd:cf:02:c1:e8:d5:9f:68:60:
         2e:68:c5:3f:bc:c8:d1:ed:4c:75:3f:83:5b:e2:8c:ff:d3:67:
         a0:21:d2:fc:85:59:06:81:71:7d:89:cd:06:f2:03:c2:2f:cb:
         dd:4c:72:3b:25:36:e8:d1:bf:d5:ac:ee:69:2e:da:f0:11:f3:
         33:68:32:92:f8:7c:90:51:d9:f6:bd:03:39:c3:f8:97:a0:51:
         70:83:2a:73:a5:6b:a1:06:40:ba:2f:e3:f5:1d:cf:b4:5a:4e:
         b7:88:10:68:12:cb:87:96:89:ec:9a:89:50:cd:6c:ee:84:91:
         01:95:62:cc:24:8d:9e:34:f1:ba:a4:82:0f:67:c0:cb:14:b2:
         8e:07:ca:5b:e5:1c:97:ab:df:b6:f4:34:40:8d:71:6e:58:0a:
         e3:8d:a6:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbRB1FZ0LcO5Vu+JfOOZAdQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYzVlZTAyZDJlMDU4NjFkZDkwNmZlMDZiMzg0NGYwNGQz
NzhjNzMwHhcNMjUwNTE0MjMwMDM5WhcNMjUwNTE1MjMwMDM5WjAzMTEwLwYDVQQD
EygzNjExMDNkNWFhZTViNzk5MWQ1MzczOGRlNmUxZDc3ODkyM2Q3MDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0W2uUNTvVwQKcvZ1loio4roZoMmR
BWYJg4a4CW5Tty2NbluVplw6AR/K9WhUBAvQF+51eUeD5EVSQwhvxjhog/r/pErZ
jMVmoWweWKSvSiiGMd5MNCUsKYtYw8efk4qoKmI5rayB5rH2mCDLH/ggNpT/livS
DhjGCQ2f5ozj1DXgt9lkqqhsUD8YWnGXdjxD1W0vVrUvRC6wP/fkA62N63vQnC4X
H3oQLryUOuIfl0U5RYiRXYzjzIfxfdEbA4jvX//CiUhB7rLyRulEvpD6nQVGPkWR
u07XDYVdVDE65LtzgilWdUCIAuYqqKPqMyWlTIs+CFwqnhfvQun1A4hC4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDYRA9Wq5beZHVNzjebh13iSPXCLMB8GA1UdIwQY
MBaAFCDF7gLS4Fhh3ZBv4Gs4RPBNN4xzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU1YdUF0TGdXR0hka0dfZ2F6aEU4RTAzakhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC85NzkyOTYtZWY3YS00YmFjLThjMTUt
Njc3NzEzNTlhMmIzLzEvSU1YdUF0TGdXR0hka0dfZ2F6aEU4RTAzakhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC85NzkyOTYtZWY3YS00YmFjLThjMTUtNjc3NzEzNTlhMmIz
LzEvSU1YdUF0TGdXR0hka0dfZ2F6aEU4RTAzakhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG+De+WvI
TTmlRzzCzQh4p3CK5Fb+SHnwPuDq9t24mbJb4coOcuyt7iRRA92I3lun/OUR+7d7
I90i3RB9cpt2fAOb2xZR4YrLTz1iJdwJvL0h0Kxq+CZ66bfN2h1bkWUblZOr3c8C
wejVn2hgLmjFP7zI0e1MdT+DW+KM/9NnoCHS/IVZBoFxfYnNBvIDwi/L3UxyOyU2
6NG/1azuaS7a8BHzM2gykvh8kFHZ9r0DOcP4l6BRcIMqc6VroQZAui/j9R3PtFpO
t4gQaBLLh5aJ7JqJUM1s7oSRAZVizCSNnjTxuqSCD2fAyxSyjgfKW+Ucl6vftvQ0
QI1xblgK442mNw==
-----END CERTIFICATE-----
Generated at Thu May 15 06:46:24 2025 by rpki-client