Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.mft
File:                     i5sBY-7p55KqoWt9UQXTRyEfMSM.mft (raw, json)
Hash identifier:          Dud93b324ZrTatjE7QB5qkgdt8M3O4x02FIyIQ6g3IE=
Subject key identifier:   F1:70:85:53:A7:2E:42:53:D9:E7:FE:51:A4:7E:9B:23:6F:97:92:FF
Authority key identifier: 8B:9B:01:63:EE:E9:E7:92:AA:A1:6B:7D:51:05:D3:47:21:1F:31:23
Certificate issuer:       /CN=8b9b0163eee9e792aaa16b7d5105d347211f3123
Certificate serial:       0197CE3BAF46FE52363175971BDDC9D99C0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i5sBY-7p55KqoWt9UQXTRyEfMSM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.mft
Manifest number:          0E0E
Signing time:             Thu 03 Jul 2025 03:01:47 +0000
Manifest this update:     Thu 03 Jul 2025 03:01:47 +0000
Manifest next update:     Fri 04 Jul 2025 03:01:47 +0000
Files and hashes:         1: 0SrGSoxm46KHk5s_SkJdGCE1HAE.roa (hash: JwOVM2pq6uVpoEw0ksou2dKNGwx9rwOtGk9iEkBHbFc=)
                          2: Fj752bkxuJMKiLz6DxiNHNPGnCc.roa (hash: igeXZDlVZiFGBhSeEn8vHaUr4m/y63zRGTprEOmyBsQ=)
                          3: i5sBY-7p55KqoWt9UQXTRyEfMSM.crl (hash: XxjSUWKewB2Fu5ATVrAgue3D5PNF5rK+vEi7/Y1uGOQ=)
                          4: t9CNJf3eXwpeMjr9B2y5JwU1fgQ.roa (hash: 1VYdgaCmthgCjQEP8F7ZlA1j3DUuIWlR2jF27HX+0/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i5sBY-7p55KqoWt9UQXTRyEfMSM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Jul 2025 03:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ce:3b:af:46:fe:52:36:31:75:97:1b:dd:c9:d9:9c:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b9b0163eee9e792aaa16b7d5105d347211f3123
        Validity
            Not Before: Jul  3 03:01:47 2025 GMT
            Not After : Jul  4 03:01:47 2025 GMT
        Subject: CN=f1708553a72e4253d9e7fe51a47e9b236f9792ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:45:84:90:d1:3c:84:74:f2:2f:e4:a3:fe:0d:
                    b6:89:bf:b1:11:80:f3:c8:1e:65:57:30:ed:53:19:
                    41:72:33:09:f6:62:7f:fc:8d:0d:db:44:d8:06:a7:
                    17:ff:78:55:fa:5a:c3:1c:85:ec:e1:88:90:7d:6a:
                    a2:0d:ad:c7:87:ca:4a:df:ce:92:3d:48:4f:ac:cd:
                    e8:ae:61:be:42:00:f7:73:b4:4a:a0:1d:48:dc:61:
                    e9:6a:5a:10:69:91:d7:bd:4c:df:f3:b2:95:b1:1a:
                    41:22:ca:36:f3:af:8c:ab:47:ca:fa:5d:64:42:df:
                    43:e2:e5:9d:42:fb:17:d9:a7:17:95:c5:04:e0:e5:
                    db:9b:c5:e3:da:17:57:8d:f5:e4:cc:c3:38:8d:7c:
                    dc:34:76:fb:22:cd:77:35:8b:ed:93:ce:fc:79:51:
                    3d:6d:29:18:91:83:25:d1:d1:22:a6:22:b2:34:b2:
                    5a:47:a2:b7:97:3f:bb:fc:b3:12:fd:17:9a:26:f9:
                    fe:41:2e:56:4f:60:74:38:ac:21:e9:3c:75:8c:7a:
                    59:a3:82:9b:6a:7e:56:ce:d4:bc:91:76:18:b9:23:
                    e6:50:4d:f5:f1:69:40:0b:23:e5:08:0d:c9:e9:3c:
                    c3:e8:54:25:03:d4:56:1c:3e:e5:e2:37:b2:18:ee:
                    3c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:70:85:53:A7:2E:42:53:D9:E7:FE:51:A4:7E:9B:23:6F:97:92:FF
            X509v3 Authority Key Identifier:
                keyid:8B:9B:01:63:EE:E9:E7:92:AA:A1:6B:7D:51:05:D3:47:21:1F:31:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5sBY-7p55KqoWt9UQXTRyEfMSM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:26:17:04:f5:ea:f3:62:06:74:c3:de:4e:15:f5:5e:3c:10:
         3c:f7:91:7e:d6:72:7c:cb:47:61:83:26:73:32:3c:bf:a2:a3:
         59:7f:54:8c:70:e5:ac:c1:ff:8f:21:0e:27:04:3d:4c:60:d9:
         41:05:41:6d:8f:3b:f9:d6:ee:91:8a:98:b1:00:b5:0e:12:86:
         f9:cd:d0:4f:c1:dc:12:5f:85:11:59:04:81:34:b8:7c:15:df:
         ca:2c:f2:5f:f5:a3:ef:8b:66:85:ae:72:05:37:fd:e8:2d:4a:
         82:5c:b1:8e:e0:c1:f0:fd:39:4d:e6:ff:c5:57:99:0c:31:67:
         a6:fb:03:f6:2a:e1:85:b1:14:6b:49:38:56:2e:89:e1:74:71:
         f6:63:45:bb:3a:fa:5b:11:f7:17:69:33:db:57:88:12:d7:50:
         7d:cd:cb:d5:33:37:d3:d7:b4:a6:b4:c2:9a:2a:a0:ab:45:91:
         c4:06:26:72:2d:e0:dd:64:00:af:c3:f8:16:5d:a9:a5:b1:bf:
         d6:65:3e:c3:b0:f0:e3:03:a4:ef:03:a8:26:4a:ee:02:b5:91:
         45:8c:2a:aa:60:b6:1d:2e:47:2d:3f:44:75:89:0a:9e:36:05:
         e4:9e:63:64:4b:f1:c4:cf:cb:5b:18:60:04:b6:85:94:45:d5:
         f7:36:b1:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfOO69G/lI2MXWXG93J2ZwLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiOWIwMTYzZWVlOWU3OTJhYWExNmI3ZDUxMDVkMzQ3MjEx
ZjMxMjMwHhcNMjUwNzAzMDMwMTQ3WhcNMjUwNzA0MDMwMTQ3WjAzMTEwLwYDVQQD
EyhmMTcwODU1M2E3MmU0MjUzZDllN2ZlNTFhNDdlOWIyMzZmOTc5MmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kWEkNE8hHTyL+Sj/g22ib+xEYDz
yB5lVzDtUxlBcjMJ9mJ//I0N20TYBqcX/3hV+lrDHIXs4YiQfWqiDa3Hh8pK386S
PUhPrM3ormG+QgD3c7RKoB1I3GHpaloQaZHXvUzf87KVsRpBIso286+Mq0fK+l1k
Qt9D4uWdQvsX2acXlcUE4OXbm8Xj2hdXjfXkzMM4jXzcNHb7Is13NYvtk878eVE9
bSkYkYMl0dEipiKyNLJaR6K3lz+7/LMS/ReaJvn+QS5WT2B0OKwh6Tx1jHpZo4Kb
an5WztS8kXYYuSPmUE318WlACyPlCA3J6TzD6FQlA9RWHD7l4jeyGO48+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFwhVOnLkJT2ef+UaR+myNvl5L/MB8GA1UdIwQY
MBaAFIubAWPu6eeSqqFrfVEF00chHzEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTVzQlktN3A1NUtxb1d0OVVRWFRSeUVmTVNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yYjgwMGUtNjk1My00MDA5LWIxOTUt
NDFiMjY2MDdiZjM2LzEvaTVzQlktN3A1NUtxb1d0OVVRWFRSeUVmTVNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8yYjgwMGUtNjk1My00MDA5LWIxOTUtNDFiMjY2MDdiZjM2
LzEvaTVzQlktN3A1NUtxb1d0OVVRWFRSeUVmTVNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzSYXBPXq
82IGdMPeThX1XjwQPPeRftZyfMtHYYMmczI8v6KjWX9UjHDlrMH/jyEOJwQ9TGDZ
QQVBbY87+dbukYqYsQC1DhKG+c3QT8HcEl+FEVkEgTS4fBXfyizyX/Wj74tmha5y
BTf96C1KglyxjuDB8P05Teb/xVeZDDFnpvsD9irhhbEUa0k4Vi6J4XRx9mNFuzr6
WxH3F2kz21eIEtdQfc3L1TM309e0prTCmiqgq0WRxAYmci3g3WQAr8P4Fl2ppbG/
1mU+w7Dw4wOk7wOoJkruArWRRYwqqmC2HS5HLT9EdYkKnjYF5J5jZEvxxM/LWxhg
BLaFlEXV9zaxWQ==
-----END CERTIFICATE-----
Generated at Thu Jul 3 12:21:02 2025 by rpki-client