Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
File:                     she1rEZ0EuJJxE4nOcKJ67BM0zc.mft (raw, json)
Hash identifier:          ewYocJQ5BnK1qsSYQpgn9fG0IIUGHPQyeS5FbbVVlpc=
Subject key identifier:   02:48:91:1E:52:F5:43:9D:49:FC:D9:F7:BA:04:C0:88:C0:E3:F4:7C
Authority key identifier: B2:17:B5:AC:46:74:12:E2:49:C4:4E:27:39:C2:89:EB:B0:4C:D3:37
Certificate issuer:       /CN=b217b5ac467412e249c44e2739c289ebb04cd337
Certificate serial:       0196BF37FC0574EB4E2080796A26E7BFEF5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
Manifest number:          08DD
Signing time:             Sun 11 May 2025 12:00:39 +0000
Manifest this update:     Sun 11 May 2025 12:00:39 +0000
Manifest next update:     Mon 12 May 2025 12:00:39 +0000
Files and hashes:         1: Ftnb9Ud8kWttM5-w7OSz4uHafco.roa (hash: 2d7vx7DexYl0/ojCB78Rdwk/rdaUo+im6ReM1HOn2aE=)
                          2: she1rEZ0EuJJxE4nOcKJ67BM0zc.crl (hash: kIEUT5bWuv2U86K7x15jItZ1MBjfs1fm2vsRtwLOokQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 12:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:37:fc:05:74:eb:4e:20:80:79:6a:26:e7:bf:ef:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b217b5ac467412e249c44e2739c289ebb04cd337
        Validity
            Not Before: May 11 12:00:39 2025 GMT
            Not After : May 12 12:00:39 2025 GMT
        Subject: CN=0248911e52f5439d49fcd9f7ba04c088c0e3f47c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:70:28:35:6e:29:79:9a:60:2a:c5:bc:ac:0b:
                    f3:f3:52:3d:7e:f7:44:9d:13:05:74:b7:9e:97:50:
                    a0:a3:63:ed:09:c7:1e:b6:7b:12:a5:15:20:aa:14:
                    67:7b:6c:47:a3:99:f5:37:87:bd:d0:ce:58:cb:94:
                    0d:46:57:f0:66:10:03:2a:92:7a:59:bd:6b:6d:b1:
                    65:47:53:a6:c1:74:a7:63:b9:a7:37:2d:5f:b8:9a:
                    1c:94:83:4f:2f:46:5f:98:f7:7f:77:a7:86:5e:14:
                    7a:0d:ce:66:2b:84:d0:ec:aa:c9:25:52:15:3d:25:
                    a6:82:5b:8d:6d:50:de:5b:03:44:29:fa:88:5b:85:
                    4e:cb:40:94:ac:43:e6:83:2a:e6:0c:e2:c6:2e:89:
                    af:8b:67:92:82:5b:a7:5c:e2:66:72:4c:00:f0:64:
                    53:88:b7:9d:45:6c:70:cc:a8:bc:a0:49:9b:5f:8e:
                    25:9a:b7:84:f5:00:e4:82:e6:5e:3f:bf:4a:fe:63:
                    b6:2d:c2:32:5a:86:f3:95:a6:cf:eb:aa:12:ff:72:
                    ee:10:f3:10:97:ba:ab:d7:71:b2:96:f1:14:b8:4d:
                    e3:ab:f3:5c:29:50:e8:5d:e4:3e:35:9e:49:bb:5a:
                    a6:a4:3b:61:f5:71:ba:d4:7c:cf:4b:bc:b9:af:2a:
                    8b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:48:91:1E:52:F5:43:9D:49:FC:D9:F7:BA:04:C0:88:C0:E3:F4:7C
            X509v3 Authority Key Identifier:
                keyid:B2:17:B5:AC:46:74:12:E2:49:C4:4E:27:39:C2:89:EB:B0:4C:D3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:fd:86:fa:6a:b4:5c:29:ea:df:9d:00:e8:58:1e:22:ed:4b:
         82:e5:af:9a:18:1b:f1:9e:8c:ee:0f:14:21:c6:98:a6:52:ca:
         28:6f:fb:ab:e8:07:de:fc:37:1c:98:25:5a:86:c6:89:ed:1b:
         1f:33:d4:d2:78:28:02:53:90:ca:e1:03:cb:06:5e:c4:c3:5f:
         52:3d:a6:8c:d6:56:d8:43:92:fa:2a:0f:5b:4c:f1:17:46:7c:
         64:3f:26:56:b9:32:58:91:90:3b:90:67:c6:ed:20:1a:8d:7d:
         d1:83:38:20:6b:78:e3:d4:9d:c5:22:99:4a:ff:d3:55:df:e3:
         a9:12:e5:30:54:ab:94:78:9e:d0:0c:1d:b9:2c:bd:00:b1:bd:
         b4:ae:39:a3:eb:3e:2f:b4:42:2d:c2:07:58:d4:c9:bf:0c:80:
         ce:ec:b8:cd:71:72:2d:dd:80:8b:ca:65:60:43:f0:30:10:6f:
         28:f7:a6:0c:d6:a8:51:dd:40:9a:5e:e8:9c:7b:8b:84:eb:78:
         9f:2b:1d:cb:13:a7:79:90:46:03:7c:e4:1b:16:eb:85:25:12:
         7a:2a:49:0f:d2:47:18:64:fc:48:7a:b6:af:8d:0f:b7:c3:9b:
         07:64:2b:e6:d9:35:3e:27:83:a7:58:6d:2a:2c:02:f2:ec:d5:
         d1:d0:92:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/N/wFdOtOIIB5aibnv+9bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMTdiNWFjNDY3NDEyZTI0OWM0NGUyNzM5YzI4OWViYjA0
Y2QzMzcwHhcNMjUwNTExMTIwMDM5WhcNMjUwNTEyMTIwMDM5WjAzMTEwLwYDVQQD
EygwMjQ4OTExZTUyZjU0MzlkNDlmY2Q5ZjdiYTA0YzA4OGMwZTNmNDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XAoNW4peZpgKsW8rAvz81I9fvdE
nRMFdLeel1Cgo2PtCccetnsSpRUgqhRne2xHo5n1N4e90M5Yy5QNRlfwZhADKpJ6
Wb1rbbFlR1OmwXSnY7mnNy1fuJoclINPL0ZfmPd/d6eGXhR6Dc5mK4TQ7KrJJVIV
PSWmgluNbVDeWwNEKfqIW4VOy0CUrEPmgyrmDOLGLomvi2eSglunXOJmckwA8GRT
iLedRWxwzKi8oEmbX44lmreE9QDkguZeP79K/mO2LcIyWobzlabP66oS/3LuEPMQ
l7qr13GylvEUuE3jq/NcKVDoXeQ+NZ5Ju1qmpDth9XG61HzPS7y5ryqLMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJIkR5S9UOdSfzZ97oEwIjA4/R8MB8GA1UdIwQY
MBaAFLIXtaxGdBLiScROJznCieuwTNM3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2hlMXJFWjBFdUpKeEU0bk9jS0o2N0JNMHpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iOTgzMzYtNGMzZS00Nzk1LWExZjct
M2RiZDMyZDY5OTJlLzEvc2hlMXJFWjBFdUpKeEU0bk9jS0o2N0JNMHpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9iOTgzMzYtNGMzZS00Nzk1LWExZjctM2RiZDMyZDY5OTJl
LzEvc2hlMXJFWjBFdUpKeEU0bk9jS0o2N0JNMHpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAff2G+mq0
XCnq350A6FgeIu1LguWvmhgb8Z6M7g8UIcaYplLKKG/7q+gH3vw3HJglWobGie0b
HzPU0ngoAlOQyuEDywZexMNfUj2mjNZW2EOS+ioPW0zxF0Z8ZD8mVrkyWJGQO5Bn
xu0gGo190YM4IGt449SdxSKZSv/TVd/jqRLlMFSrlHie0AwduSy9ALG9tK45o+s+
L7RCLcIHWNTJvwyAzuy4zXFyLd2Ai8plYEPwMBBvKPemDNaoUd1Aml7onHuLhOt4
nysdyxOneZBGA3zkGxbrhSUSeipJD9JHGGT8SHq2r40Pt8ObB2Qr5tk1PieDp1ht
KiwC8uzV0dCSmA==
-----END CERTIFICATE-----
Generated at Sun May 11 21:20:35 2025 by rpki-client