Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
File:                     dahWeFOS2ifQC9snCRxZJsMVXYk.mft (raw, json)
Hash identifier:          RzxIUF4+bI77jZHZvrVKC/7sSQeDhR9Ou+MYQj1OpMU=
Subject key identifier:   87:EF:EC:7B:82:0F:04:07:99:CC:84:BB:5F:27:61:E2:C7:26:89:01
Authority key identifier: 75:A8:56:78:53:92:DA:27:D0:0B:DB:27:09:1C:59:26:C3:15:5D:89
Certificate issuer:       /CN=75a856785392da27d00bdb27091c5926c3155d89
Certificate serial:       01969E634E38D843F8FA18208F1C0B13554A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
Manifest number:          0D57
Signing time:             Mon 05 May 2025 03:00:30 +0000
Manifest this update:     Mon 05 May 2025 03:00:30 +0000
Manifest next update:     Tue 06 May 2025 03:00:30 +0000
Files and hashes:         1: 4Ibv1mRm3BSugEZRLZ50GEzm6Bc.roa (hash: Ox7Eku50X67DCQ6L0nXfJGgK/iPhql76+0sQGSQq9Q4=)
                          2: dahWeFOS2ifQC9snCRxZJsMVXYk.crl (hash: Pti8yhqZKl37xUIZWQ4ZtUBSvsEHxnqieJ55D2jxtWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:63:4e:38:d8:43:f8:fa:18:20:8f:1c:0b:13:55:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75a856785392da27d00bdb27091c5926c3155d89
        Validity
            Not Before: May  5 03:00:30 2025 GMT
            Not After : May  6 03:00:30 2025 GMT
        Subject: CN=87efec7b820f040799cc84bb5f2761e2c7268901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:66:21:1e:05:70:2d:c7:06:81:a2:7d:3b:11:
                    5a:6c:ea:c3:26:63:a8:1f:f7:d3:19:f9:51:75:30:
                    1c:85:82:f2:89:b9:e8:36:a3:63:f3:29:f5:2d:5c:
                    47:18:f0:2e:c5:72:f5:44:ff:96:d3:7e:a4:75:72:
                    54:4b:bf:66:fb:ca:ab:d8:44:bb:60:0b:47:2f:7e:
                    4d:3e:19:91:f4:52:18:76:fc:59:d9:9b:f2:f0:ea:
                    9b:d4:16:7e:83:e2:bb:aa:71:e6:c0:9f:b4:0a:a5:
                    9e:9c:9a:66:5a:fd:32:77:25:6b:d8:e3:64:30:a1:
                    b6:7f:c1:44:0b:a8:02:ce:09:5b:40:87:82:ca:7e:
                    97:1a:c4:54:a5:b2:0a:2c:ca:aa:dd:5a:98:0e:d8:
                    a2:9c:57:cc:43:a9:2b:c3:d8:57:fb:21:e7:5b:4e:
                    59:05:cc:fd:fc:b9:6c:e5:2a:05:d2:ba:ea:0c:f3:
                    78:47:66:02:4d:d3:a3:da:9e:60:55:9d:30:de:38:
                    8f:1b:0f:cf:c5:af:8e:7b:ba:d3:74:45:56:4f:4d:
                    a2:15:0c:d2:79:c8:f3:7b:be:63:38:e2:4c:12:92:
                    ea:93:95:27:48:ca:ed:29:36:3e:77:a9:33:7b:e4:
                    69:f2:88:34:4f:92:ba:c7:67:25:1c:1f:ab:58:cb:
                    b7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:EF:EC:7B:82:0F:04:07:99:CC:84:BB:5F:27:61:E2:C7:26:89:01
            X509v3 Authority Key Identifier:
                keyid:75:A8:56:78:53:92:DA:27:D0:0B:DB:27:09:1C:59:26:C3:15:5D:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:b9:38:b6:51:50:ea:37:7b:c0:62:a9:51:b7:48:e1:7f:dc:
         6b:ee:f5:70:c6:5e:d3:cf:84:2e:fb:7e:5f:ee:e0:ce:4c:e5:
         21:36:07:ce:35:68:ac:18:2a:3e:9a:2b:94:8f:a1:81:ca:51:
         ca:ca:66:b9:ed:09:55:8e:ae:5d:8d:19:5e:eb:06:b5:a1:15:
         25:bd:10:7f:73:56:2e:99:9f:a7:e5:1b:cc:93:f4:06:39:db:
         62:d9:ef:49:44:0b:fa:43:78:18:fd:ca:99:a6:a3:cf:13:7e:
         7b:b6:e7:d2:cc:41:04:a4:7f:16:14:ee:c4:fc:0e:45:98:d1:
         66:81:95:8c:34:99:b5:0c:0b:74:00:f8:90:bc:64:65:b3:f7:
         ff:48:59:59:e7:30:ca:36:86:9c:80:32:e0:b3:61:1d:de:85:
         50:1f:44:6a:65:53:b2:be:56:28:c1:b3:a2:83:5d:34:37:52:
         4a:e0:58:95:18:44:4f:79:05:28:23:32:17:28:50:f3:15:fa:
         16:ec:92:fe:02:20:93:b9:9f:a0:87:fb:c8:30:12:06:6a:61:
         28:03:57:d0:60:82:2c:cd:d8:b0:e1:12:9b:13:f8:d5:d8:98:
         b8:ce:d5:a4:ac:22:d1:e2:ec:89:a1:24:ed:55:ab:7c:91:c5:
         8a:47:f1:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaeY0442EP4+hggjxwLE1VKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YTg1Njc4NTM5MmRhMjdkMDBiZGIyNzA5MWM1OTI2YzMx
NTVkODkwHhcNMjUwNTA1MDMwMDMwWhcNMjUwNTA2MDMwMDMwWjAzMTEwLwYDVQQD
Eyg4N2VmZWM3YjgyMGYwNDA3OTljYzg0YmI1ZjI3NjFlMmM3MjY4OTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGYhHgVwLccGgaJ9OxFabOrDJmOo
H/fTGflRdTAchYLyibnoNqNj8yn1LVxHGPAuxXL1RP+W036kdXJUS79m+8qr2ES7
YAtHL35NPhmR9FIYdvxZ2Zvy8Oqb1BZ+g+K7qnHmwJ+0CqWenJpmWv0ydyVr2ONk
MKG2f8FEC6gCzglbQIeCyn6XGsRUpbIKLMqq3VqYDtiinFfMQ6krw9hX+yHnW05Z
Bcz9/Lls5SoF0rrqDPN4R2YCTdOj2p5gVZ0w3jiPGw/Pxa+Oe7rTdEVWT02iFQzS
ecjze75jOOJMEpLqk5UnSMrtKTY+d6kze+Rp8og0T5K6x2clHB+rWMu3wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfv7HuCDwQHmcyEu18nYeLHJokBMB8GA1UdIwQY
MBaAFHWoVnhTkton0AvbJwkcWSbDFV2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGFoV2VGT1MyaWZRQzlzbkNSeFpKc01WWFlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9lYzBkYTktZWE4Yy00YjhlLWEzMmEt
YTViYzBjNzBjNTEzLzEvZGFoV2VGT1MyaWZRQzlzbkNSeFpKc01WWFlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9lYzBkYTktZWE4Yy00YjhlLWEzMmEtYTViYzBjNzBjNTEz
LzEvZGFoV2VGT1MyaWZRQzlzbkNSeFpKc01WWFlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARbk4tlFQ
6jd7wGKpUbdI4X/ca+71cMZe08+ELvt+X+7gzkzlITYHzjVorBgqPporlI+hgcpR
yspmue0JVY6uXY0ZXusGtaEVJb0Qf3NWLpmfp+UbzJP0BjnbYtnvSUQL+kN4GP3K
maajzxN+e7bn0sxBBKR/FhTuxPwORZjRZoGVjDSZtQwLdAD4kLxkZbP3/0hZWecw
yjaGnIAy4LNhHd6FUB9EamVTsr5WKMGzooNdNDdSSuBYlRhET3kFKCMyFyhQ8xX6
FuyS/gIgk7mfoIf7yDASBmphKANX0GCCLM3YsOESmxP41diYuM7VpKwi0eLsiaEk
7VWrfJHFikfxCw==
-----END CERTIFICATE-----
Generated at Mon May 5 05:52:48 2025 by rpki-client