Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft
File:                     F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft (raw, json)
Hash identifier:          A9K0QqBcSwfvasuRoL+Jist2jlX+Q71Ge7/Q0hTAcjs=
Subject key identifier:   8C:97:C4:38:D4:D4:8D:C1:25:EE:55:58:6F:EF:5F:51:99:AE:18:F8
Authority key identifier: 17:88:25:28:6B:EE:C9:12:D1:98:8D:08:D2:E2:77:F5:18:F3:E4:AA
Certificate issuer:       /CN=178825286beec912d1988d08d2e277f518f3e4aa
Certificate serial:       0196BE2570C21BFF68CD49FF476785A3573B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft
Manifest number:          1534
Signing time:             Sun 11 May 2025 07:00:46 +0000
Manifest this update:     Sun 11 May 2025 07:00:46 +0000
Manifest next update:     Mon 12 May 2025 07:00:46 +0000
Files and hashes:         1: F4glKGvuyRLRmI0I0uJ39Rjz5Ko.crl (hash: Tzzf/lGIHd8f1Hn/1reqcGpiDVvFnAiU3RWrQaJo4No=)
                          2: JTEomKX4OOyZxOy0baHsaALemoI.roa (hash: JGEo9LSNLQbTCM9QYbM4j5mLQD81VFGImQN07wE3Oxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:be:25:70:c2:1b:ff:68:cd:49:ff:47:67:85:a3:57:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=178825286beec912d1988d08d2e277f518f3e4aa
        Validity
            Not Before: May 11 07:00:46 2025 GMT
            Not After : May 12 07:00:46 2025 GMT
        Subject: CN=8c97c438d4d48dc125ee55586fef5f5199ae18f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1a:5a:ce:34:8f:a5:0e:b3:52:8d:38:ab:cd:
                    3a:72:f2:6f:f1:6b:96:42:72:a8:95:f9:43:74:d5:
                    27:d9:18:0f:e0:06:aa:43:dd:d9:8b:6e:47:0b:b6:
                    02:08:08:1e:dc:62:d1:18:69:fd:5c:31:e7:ef:cb:
                    b1:97:5b:1c:c2:fe:25:f9:28:19:83:60:b6:75:fb:
                    fa:ee:f8:67:ac:64:be:bb:9e:28:ac:ab:23:9a:d6:
                    0b:01:69:81:01:97:22:c3:0f:47:9e:49:44:af:5d:
                    1c:93:e0:db:02:74:64:c4:c5:c7:fe:d4:c8:5a:39:
                    39:e1:6a:40:d2:06:41:94:9f:59:0a:1c:5a:e7:8d:
                    5a:cc:e8:31:fd:fa:c8:2f:02:e4:3c:ce:d3:ae:b7:
                    f9:46:e3:0e:28:66:3b:16:73:1b:0a:31:91:ef:bd:
                    ab:41:18:2e:76:cc:18:d3:39:19:28:d0:49:5e:ae:
                    ae:d8:b2:b7:93:a7:a7:61:b2:98:df:87:eb:02:3d:
                    8f:3b:71:4c:7c:ef:b3:ff:1a:d3:b2:ee:3b:7f:3a:
                    82:5b:68:d8:ee:c8:4e:0d:74:65:5e:28:7e:f1:92:
                    04:ba:f8:a8:ba:2a:d2:c5:50:d7:aa:c4:23:ac:0f:
                    1d:f1:62:f4:f2:c8:96:ad:0f:19:0a:af:7a:9b:f2:
                    48:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:97:C4:38:D4:D4:8D:C1:25:EE:55:58:6F:EF:5F:51:99:AE:18:F8
            X509v3 Authority Key Identifier:
                keyid:17:88:25:28:6B:EE:C9:12:D1:98:8D:08:D2:E2:77:F5:18:F3:E4:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:be:6c:55:66:06:f7:ea:42:07:24:f2:40:1c:43:8b:b0:30:
         3a:89:79:bc:49:0d:46:ba:54:61:67:9e:01:72:93:a4:8c:bf:
         ce:c0:c8:ba:8a:05:dd:9d:66:fc:df:8c:f3:6c:d9:77:1f:14:
         78:20:0e:d4:61:8b:3d:4d:c9:f0:14:36:a6:b8:e6:eb:32:3b:
         41:aa:a5:46:68:b3:7d:57:3d:ff:05:e6:d5:2a:49:d3:39:9f:
         66:ba:58:64:8d:b2:6f:6b:47:b8:a6:02:44:cb:a5:47:7a:eb:
         90:91:20:3e:6a:1f:c1:5e:14:6f:d4:40:8e:00:fa:83:fa:af:
         91:28:71:47:65:ce:c2:2c:57:42:63:ff:ef:6a:e2:ce:d9:88:
         41:15:a3:73:3d:e4:cd:c5:7f:08:4f:8b:88:c1:4d:3b:d9:d8:
         ae:d1:64:65:26:72:32:0a:e0:d3:ce:d1:1b:78:52:79:38:66:
         31:c7:5f:38:d9:04:01:65:a8:51:86:6f:26:2c:75:36:4d:9a:
         05:fe:ae:ad:1c:a3:32:d8:4a:df:1e:b4:b4:46:a6:fb:1e:a3:
         1f:4f:fb:aa:7e:fb:e8:4c:ae:66:a0:cf:1f:2c:9f:33:d0:38:
         0f:a7:d5:8b:ad:d3:12:7b:bb:99:d9:07:48:ea:fd:18:3b:5a:
         95:dc:25:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+JXDCG/9ozUn/R2eFo1c7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ODgyNTI4NmJlZWM5MTJkMTk4OGQwOGQyZTI3N2Y1MThm
M2U0YWEwHhcNMjUwNTExMDcwMDQ2WhcNMjUwNTEyMDcwMDQ2WjAzMTEwLwYDVQQD
Eyg4Yzk3YzQzOGQ0ZDQ4ZGMxMjVlZTU1NTg2ZmVmNWY1MTk5YWUxOGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhpazjSPpQ6zUo04q806cvJv8WuW
QnKolflDdNUn2RgP4AaqQ93Zi25HC7YCCAge3GLRGGn9XDHn78uxl1scwv4l+SgZ
g2C2dfv67vhnrGS+u54orKsjmtYLAWmBAZciww9HnklEr10ck+DbAnRkxMXH/tTI
Wjk54WpA0gZBlJ9ZChxa541azOgx/frILwLkPM7Trrf5RuMOKGY7FnMbCjGR772r
QRgudswY0zkZKNBJXq6u2LK3k6enYbKY34frAj2PO3FMfO+z/xrTsu47fzqCW2jY
7shODXRlXih+8ZIEuviouirSxVDXqsQjrA8d8WL08siWrQ8ZCq96m/JI2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIyXxDjU1I3BJe5VWG/vX1GZrhj4MB8GA1UdIwQY
MBaAFBeIJShr7skS0ZiNCNLid/UY8+SqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjRnbEtHdnV5UkxSbUkwSTB1SjM5Ump6NUtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lZmJiMDUtODk0MC00M2NmLWFkMWQt
MjhhY2M3ZjMxOTNhLzEvRjRnbEtHdnV5UkxSbUkwSTB1SjM5Ump6NUtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9lZmJiMDUtODk0MC00M2NmLWFkMWQtMjhhY2M3ZjMxOTNh
LzEvRjRnbEtHdnV5UkxSbUkwSTB1SjM5Ump6NUtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjr5sVWYG
9+pCByTyQBxDi7AwOol5vEkNRrpUYWeeAXKTpIy/zsDIuooF3Z1m/N+M82zZdx8U
eCAO1GGLPU3J8BQ2prjm6zI7QaqlRmizfVc9/wXm1SpJ0zmfZrpYZI2yb2tHuKYC
RMulR3rrkJEgPmofwV4Ub9RAjgD6g/qvkShxR2XOwixXQmP/72riztmIQRWjcz3k
zcV/CE+LiMFNO9nYrtFkZSZyMgrg087RG3hSeThmMcdfONkEAWWoUYZvJix1Nk2a
Bf6urRyjMthK3x60tEam+x6jH0/7qn776EyuZqDPHyyfM9A4D6fVi63TEnu7mdkH
SOr9GDtaldwlYw==
-----END CERTIFICATE-----
Generated at Sun May 11 13:26:46 2025 by rpki-client