Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
File:                     5wn3YuCC6tPW1-TK4p77tNEvV14.mft (raw, json)
Hash identifier:          nN747ubFADQPSHeb2j1PKMlO4R2z8rzF7bABCIc+Epg=
Subject key identifier:   5B:50:4D:94:79:83:86:A7:BC:C9:86:A5:7C:8C:0C:DF:23:FB:65:26
Authority key identifier: E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E
Certificate issuer:       /CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e
Certificate serial:       0196AC55BB4370EE8801F51261C4A03E4C09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
Manifest number:          0B82
Signing time:             Wed 07 May 2025 20:00:21 +0000
Manifest this update:     Wed 07 May 2025 20:00:21 +0000
Manifest next update:     Thu 08 May 2025 20:00:21 +0000
Files and hashes:         1: 0I90jYLDsjsh8A1WdLN05NbEjj4.roa (hash: Kf+mfo5G5myFzzGKcZGygmTNr3GGZjTxsLuEcsJyKBc=)
                          2: 5wn3YuCC6tPW1-TK4p77tNEvV14.crl (hash: nh8TmdNs/Bm/0M8+CrGvz+UlLlDfjIzgOXjucsGs1aA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 20:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ac:55:bb:43:70:ee:88:01:f5:12:61:c4:a0:3e:4c:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e
        Validity
            Not Before: May  7 20:00:21 2025 GMT
            Not After : May  8 20:00:21 2025 GMT
        Subject: CN=5b504d94798386a7bcc986a57c8c0cdf23fb6526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1b:f0:15:5a:96:25:23:a0:3a:ba:14:db:c1:
                    e2:1c:be:f1:11:1c:ab:0d:b8:b6:b7:4c:8c:7f:2f:
                    80:3f:aa:f6:99:d2:e6:ae:94:af:8d:26:93:41:70:
                    0d:da:9d:6d:bb:b6:9c:fb:62:41:88:87:91:76:ab:
                    69:eb:e3:d4:5a:b4:7f:9a:b5:a4:ca:89:c0:a1:b4:
                    10:d1:36:7d:18:57:2e:ca:1c:65:9b:7e:b0:1a:8b:
                    00:3c:1b:da:27:cc:61:9f:7b:49:37:b3:49:4f:bf:
                    19:61:88:8e:06:36:7b:19:06:1d:f1:5d:ff:34:d9:
                    68:c1:d2:4c:47:50:63:4b:8b:5d:90:ec:12:c4:1e:
                    a0:03:3f:2e:10:b8:0f:4c:2e:68:cd:22:fd:cc:b3:
                    36:f0:48:23:b3:4b:d7:e9:eb:0f:96:84:42:35:41:
                    ba:aa:e5:8f:59:9a:e4:98:5f:1f:64:2a:db:e7:0a:
                    2c:a0:9c:c5:3c:59:ea:bb:d3:3f:f6:af:98:79:9d:
                    77:7c:63:9d:2f:94:41:ce:2d:3a:8b:c4:2f:5f:65:
                    17:8a:a2:2c:ef:21:02:c9:35:1a:91:7f:27:f5:78:
                    c3:c4:79:29:42:3b:3f:23:0b:ce:28:66:d7:44:37:
                    e9:46:6d:16:d7:9d:c5:b7:6c:55:12:9e:a4:44:8e:
                    56:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:50:4D:94:79:83:86:A7:BC:C9:86:A5:7C:8C:0C:DF:23:FB:65:26
            X509v3 Authority Key Identifier:
                keyid:E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:fe:ff:33:46:57:cc:f5:b5:03:60:d3:88:d2:05:50:6f:5b:
         96:2d:1e:37:da:80:13:ef:17:e9:7c:e0:6d:20:44:2e:5d:81:
         c4:7d:0e:a9:b4:e1:9e:23:f5:80:8b:22:c5:41:39:41:e6:79:
         76:35:45:29:4f:2f:42:92:e7:96:df:6e:1a:11:60:5a:9a:6c:
         e9:08:4c:7f:66:6c:f4:41:d6:99:ef:49:cb:41:3d:88:a7:5e:
         16:f0:9e:44:f8:79:df:e1:db:fc:d0:9c:71:23:16:13:38:8e:
         3f:1d:1f:f4:ce:d9:91:fa:73:92:6c:d0:35:5b:bb:28:cf:44:
         3c:b8:5c:50:b5:d2:b7:70:7e:dc:80:95:87:db:bc:5a:5e:cc:
         35:bc:fa:73:22:95:ba:7c:60:b5:92:4e:74:e0:d3:0f:c9:80:
         dc:c1:48:43:53:ee:17:f6:6d:de:1d:52:75:73:c6:42:f9:a9:
         98:27:fa:48:f4:95:49:44:f1:50:ec:df:1c:fa:9a:47:61:e2:
         f4:b5:3e:16:cb:be:3c:9d:df:86:6a:07:27:97:82:1e:4f:b0:
         ae:9b:b4:ee:60:47:c4:40:50:d5:c2:98:2b:9d:88:2e:65:37:
         71:f8:f6:d6:b7:35:c9:3a:36:93:5e:e6:3c:78:af:60:da:3f:
         45:09:68:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZasVbtDcO6IAfUSYcSgPkwJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MDlmNzYyZTA4MmVhZDNkNmQ3ZTRjYWUyOWVmYmI0ZDEy
ZjU3NWUwHhcNMjUwNTA3MjAwMDIxWhcNMjUwNTA4MjAwMDIxWjAzMTEwLwYDVQQD
Eyg1YjUwNGQ5NDc5ODM4NmE3YmNjOTg2YTU3YzhjMGNkZjIzZmI2NTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RvwFVqWJSOgOroU28HiHL7xERyr
Dbi2t0yMfy+AP6r2mdLmrpSvjSaTQXAN2p1tu7ac+2JBiIeRdqtp6+PUWrR/mrWk
yonAobQQ0TZ9GFcuyhxlm36wGosAPBvaJ8xhn3tJN7NJT78ZYYiOBjZ7GQYd8V3/
NNlowdJMR1BjS4tdkOwSxB6gAz8uELgPTC5ozSL9zLM28Egjs0vX6esPloRCNUG6
quWPWZrkmF8fZCrb5wosoJzFPFnqu9M/9q+YeZ13fGOdL5RBzi06i8QvX2UXiqIs
7yECyTUakX8n9XjDxHkpQjs/IwvOKGbXRDfpRm0W153Ft2xVEp6kRI5WsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtQTZR5g4anvMmGpXyMDN8j+2UmMB8GA1UdIwQY
MBaAFOcJ92LggurT1tfkyuKe+7TRL1deMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXduM1l1Q0M2dFBXMS1USzRwNzd0TkV2VjE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wYmRhNGEtNWMxMC00NGRiLThmNjIt
YWU0ZmE3ZjE3ZjljLzEvNXduM1l1Q0M2dFBXMS1USzRwNzd0TkV2VjE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wYmRhNGEtNWMxMC00NGRiLThmNjItYWU0ZmE3ZjE3Zjlj
LzEvNXduM1l1Q0M2dFBXMS1USzRwNzd0TkV2VjE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGv7/M0ZX
zPW1A2DTiNIFUG9bli0eN9qAE+8X6XzgbSBELl2BxH0OqbThniP1gIsixUE5QeZ5
djVFKU8vQpLnlt9uGhFgWpps6QhMf2Zs9EHWme9Jy0E9iKdeFvCeRPh53+Hb/NCc
cSMWEziOPx0f9M7ZkfpzkmzQNVu7KM9EPLhcULXSt3B+3ICVh9u8Wl7MNbz6cyKV
unxgtZJOdODTD8mA3MFIQ1PuF/Zt3h1SdXPGQvmpmCf6SPSVSUTxUOzfHPqaR2Hi
9LU+Fsu+PJ3fhmoHJ5eCHk+wrpu07mBHxEBQ1cKYK52ILmU3cfj21rc1yTo2k17m
PHivYNo/RQlozA==
-----END CERTIFICATE-----
Generated at Thu May 8 01:16:43 2025 by rpki-client