Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
File:                     rLICUNTN02Zxm5adb0EjAcE-uQE.mft (raw, json)
Hash identifier:          sRR2jL0+2i4LRBhSPRxhuLwrXenoWN0N9v1TmOng8Ow=
Subject key identifier:   84:73:2F:10:F5:8B:3E:BF:95:54:7B:D7:9A:BA:B9:DE:2F:C6:C0:A9
Authority key identifier: AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01
Certificate issuer:       /CN=acb20250d4cdd366719b969d6f412301c13eb901
Certificate serial:       0196B7B61706001139EBF000E9A1880AD877
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
Manifest number:          152E
Signing time:             Sat 10 May 2025 01:01:26 +0000
Manifest this update:     Sat 10 May 2025 01:01:26 +0000
Manifest next update:     Sun 11 May 2025 01:01:26 +0000
Files and hashes:         1: 5n7dgIWemJ_305TpiU3O_0-YbeA.roa (hash: LdWHm24O7+fxQTfSmSb6FS6jzu11KxxrVzOXyxJmUuE=)
                          2: rLICUNTN02Zxm5adb0EjAcE-uQE.crl (hash: rqG5Cx4cZZDVKIFd6T0cPgqfxA2KzwTBdeTSnkhc5GE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:b6:17:06:00:11:39:eb:f0:00:e9:a1:88:0a:d8:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acb20250d4cdd366719b969d6f412301c13eb901
        Validity
            Not Before: May 10 01:01:26 2025 GMT
            Not After : May 11 01:01:26 2025 GMT
        Subject: CN=84732f10f58b3ebf95547bd79abab9de2fc6c0a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1c:e4:ae:be:3a:93:88:6d:73:a1:fa:1a:ae:
                    91:c1:e0:8e:d4:a3:9f:f8:52:e5:8e:51:04:33:45:
                    c6:d1:f7:95:dc:59:99:b7:52:b6:f6:e4:85:b6:1e:
                    4a:cd:40:a2:56:b8:1e:5a:1a:8d:ad:18:74:90:3e:
                    fc:cc:ef:80:1a:b1:74:9d:16:f9:7a:89:df:68:c6:
                    95:5a:75:57:f6:cb:f4:e4:76:95:c5:5f:85:32:50:
                    35:1d:15:31:de:c5:28:50:54:0e:47:27:d6:3e:1e:
                    b8:c7:21:bb:e0:e8:30:19:fa:4d:37:ad:04:90:5b:
                    ec:81:8c:14:4f:69:d6:94:f3:2c:5c:38:96:9f:a3:
                    9b:10:a4:1e:4c:00:55:22:54:a2:9f:1a:1d:6d:a7:
                    09:b3:b2:29:d3:d9:dd:65:36:2a:25:9b:49:4f:57:
                    24:ba:4b:58:75:fe:c7:53:de:61:27:55:6e:7b:4f:
                    f7:49:0c:ad:f9:01:49:42:b8:8b:3b:e5:b3:ed:b1:
                    9d:7f:2d:85:b8:c3:fb:d7:9d:4a:95:7f:62:48:82:
                    e6:30:f6:bd:33:6f:ac:53:95:6a:c1:07:62:8c:a8:
                    81:5d:71:fa:8b:47:32:c9:bc:4f:09:f6:8f:5f:0e:
                    eb:fa:26:38:98:ce:4b:d6:ca:69:3c:df:a7:6b:8b:
                    58:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:73:2F:10:F5:8B:3E:BF:95:54:7B:D7:9A:BA:B9:DE:2F:C6:C0:A9
            X509v3 Authority Key Identifier:
                keyid:AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:44:4a:37:82:5d:b7:e0:c4:1e:38:25:1f:4b:0f:d9:35:95:
         7f:05:3e:ad:dd:d3:a2:7d:9d:59:72:ec:84:bf:be:bc:76:d5:
         6f:6e:47:30:75:4a:51:39:15:92:cd:1e:e2:6f:2b:45:dd:6d:
         7b:1c:63:81:ad:82:ef:ce:a8:05:bf:9c:27:a3:db:b7:98:a7:
         60:e4:99:7b:57:3c:b5:6a:56:06:0b:a5:6c:89:a2:bd:27:92:
         56:aa:70:fb:bf:af:09:4d:b6:02:67:eb:6a:4a:2f:64:48:6d:
         47:47:71:fa:eb:37:e1:b9:73:f6:20:00:01:6d:d7:f5:8f:ff:
         1f:35:d1:5f:d1:c3:10:c6:6b:61:e3:e1:ca:41:bb:4e:44:b3:
         14:47:36:c5:54:54:75:c8:64:02:a4:4f:fd:60:c9:c7:31:9f:
         85:17:f1:6f:39:b4:0f:b6:e4:13:fd:42:6b:a5:d1:dc:20:ac:
         3f:be:03:9e:07:fd:76:67:b2:b7:b4:ee:b1:83:d4:02:fb:ab:
         22:23:48:52:7f:5c:c7:65:22:af:82:1d:31:45:07:e2:75:9a:
         1b:94:50:02:a7:32:8e:48:31:a7:61:29:6b:6b:75:9b:bf:27:
         40:b0:5d:37:9c:e6:90:22:8b:9e:b3:fe:b3:80:1b:9b:0a:a1:
         4e:be:04:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa3thcGABE56/AA6aGICth3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYjIwMjUwZDRjZGQzNjY3MTliOTY5ZDZmNDEyMzAxYzEz
ZWI5MDEwHhcNMjUwNTEwMDEwMTI2WhcNMjUwNTExMDEwMTI2WjAzMTEwLwYDVQQD
Eyg4NDczMmYxMGY1OGIzZWJmOTU1NDdiZDc5YWJhYjlkZTJmYzZjMGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Rzkrr46k4htc6H6Gq6RweCO1KOf
+FLljlEEM0XG0feV3FmZt1K29uSFth5KzUCiVrgeWhqNrRh0kD78zO+AGrF0nRb5
eonfaMaVWnVX9sv05HaVxV+FMlA1HRUx3sUoUFQORyfWPh64xyG74OgwGfpNN60E
kFvsgYwUT2nWlPMsXDiWn6ObEKQeTABVIlSinxodbacJs7Ip09ndZTYqJZtJT1ck
uktYdf7HU95hJ1Vue0/3SQyt+QFJQriLO+Wz7bGdfy2FuMP7151KlX9iSILmMPa9
M2+sU5VqwQdijKiBXXH6i0cyybxPCfaPXw7r+iY4mM5L1sppPN+na4tY9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRzLxD1iz6/lVR715q6ud4vxsCpMB8GA1UdIwQY
MBaAFKyyAlDUzdNmcZuWnW9BIwHBPrkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckxJQ1VOVE4wMlp4bTVhZGIwRWpBY0UtdVFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8zZTllM2UtOTQxNi00MmM4LWEzNWQt
NmY0ZjAzMWVlYWUyLzEvckxJQ1VOVE4wMlp4bTVhZGIwRWpBY0UtdVFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8zZTllM2UtOTQxNi00MmM4LWEzNWQtNmY0ZjAzMWVlYWUy
LzEvckxJQ1VOVE4wMlp4bTVhZGIwRWpBY0UtdVFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWERKN4Jd
t+DEHjglH0sP2TWVfwU+rd3Ton2dWXLshL++vHbVb25HMHVKUTkVks0e4m8rRd1t
exxjga2C786oBb+cJ6Pbt5inYOSZe1c8tWpWBgulbImivSeSVqpw+7+vCU22Amfr
akovZEhtR0dx+us34blz9iAAAW3X9Y//HzXRX9HDEMZrYePhykG7TkSzFEc2xVRU
dchkAqRP/WDJxzGfhRfxbzm0D7bkE/1Ca6XR3CCsP74Dngf9dmeyt7TusYPUAvur
IiNIUn9cx2Uir4IdMUUH4nWaG5RQAqcyjkgxp2Epa2t1m78nQLBdN5zmkCKLnrP+
s4AbmwqhTr4EOQ==
-----END CERTIFICATE-----
Generated at Sat May 10 03:29:38 2025 by rpki-client