Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.mft
File:                     V_u26yzsmpt7uBo7Fgwaq5kOSCY.mft (raw, json)
Hash identifier:          PGlveqZtxMJeFsrbT2OxA6RXamq260c9vzDoR+vHX4Y=
Subject key identifier:   69:C1:00:9F:4B:D4:25:4F:CF:51:49:D0:9F:E7:A5:E1:2F:D8:3F:86
Authority key identifier: 57:FB:B6:EB:2C:EC:9A:9B:7B:B8:1A:3B:16:0C:1A:AB:99:0E:48:26
Certificate issuer:       /CN=57fbb6eb2cec9a9b7bb81a3b160c1aab990e4826
Certificate serial:       0196A1D2A0E4A1B464E3D66B5EE792DF7CAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V_u26yzsmpt7uBo7Fgwaq5kOSCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.mft
Manifest number:          0EF8
Signing time:             Mon 05 May 2025 19:00:57 +0000
Manifest this update:     Mon 05 May 2025 19:00:57 +0000
Manifest next update:     Tue 06 May 2025 19:00:57 +0000
Files and hashes:         1: J61W22rNG-zDQHqba8KpMVr9eOQ.roa (hash: egaR8HryPVOatJDhc71F1yZLfEpoS66sYQjBb1aN/QU=)
                          2: V_u26yzsmpt7uBo7Fgwaq5kOSCY.crl (hash: Dva9ep8Ncovcwy78i5hl9g1Tlpje2hwkrMaNa7ZYU8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V_u26yzsmpt7uBo7Fgwaq5kOSCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 18:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a1:d2:a0:e4:a1:b4:64:e3:d6:6b:5e:e7:92:df:7c:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57fbb6eb2cec9a9b7bb81a3b160c1aab990e4826
        Validity
            Not Before: May  5 19:00:57 2025 GMT
            Not After : May  6 19:00:57 2025 GMT
        Subject: CN=69c1009f4bd4254fcf5149d09fe7a5e12fd83f86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3f:98:bc:9c:28:89:52:42:69:07:14:80:90:
                    22:55:9a:44:22:9b:37:64:00:65:32:03:79:ac:7d:
                    05:c0:80:78:a3:7d:51:7a:37:0a:5d:26:6f:18:8d:
                    cf:5a:df:6e:b3:5f:3a:ba:98:fb:51:e9:af:54:82:
                    5d:50:7f:b1:6c:a7:40:94:4d:94:3f:37:be:53:44:
                    ef:c0:47:84:70:22:9e:be:fb:92:fa:c2:cc:1c:30:
                    19:c3:21:9a:11:7f:86:cd:e1:6a:10:ff:19:91:93:
                    c9:ff:6d:0a:26:8d:49:7b:cb:fb:14:57:53:96:b7:
                    ee:4d:7a:af:27:27:a0:5c:c1:76:de:4e:6c:32:35:
                    f4:48:9c:6a:8b:0a:4f:f5:c9:fe:de:21:70:ee:8a:
                    01:8c:78:4a:48:0d:a4:5e:27:7f:fe:d9:f3:94:e1:
                    f6:18:da:1b:66:9d:a6:13:1c:13:f4:61:3a:83:d2:
                    03:d7:d1:29:7f:17:81:e9:b5:e7:f3:35:69:a3:26:
                    0b:0c:0b:be:29:90:08:2a:18:07:16:cf:2c:94:22:
                    ca:d6:3b:7d:ee:83:98:8d:c1:a4:31:d6:b7:7a:1a:
                    28:87:e1:3a:bf:31:b9:3b:bb:37:67:90:97:73:5c:
                    ef:72:92:b6:60:c9:e2:09:51:d1:32:d7:73:d1:c8:
                    f2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C1:00:9F:4B:D4:25:4F:CF:51:49:D0:9F:E7:A5:E1:2F:D8:3F:86
            X509v3 Authority Key Identifier:
                keyid:57:FB:B6:EB:2C:EC:9A:9B:7B:B8:1A:3B:16:0C:1A:AB:99:0E:48:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V_u26yzsmpt7uBo7Fgwaq5kOSCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:70:a2:28:39:9b:24:97:25:a0:92:93:d3:4a:e4:8c:47:0e:
         ab:ed:13:cc:15:d2:ec:69:60:e9:4e:8e:51:12:4d:e7:a0:d3:
         fa:0d:e2:74:fe:cd:29:41:1c:af:9f:c6:99:b9:37:93:18:0d:
         86:b2:72:82:8c:06:fa:f3:45:5d:34:af:e9:a6:e0:aa:9d:40:
         7a:b2:b8:3a:6f:5e:0c:fc:d0:63:17:d2:5b:48:b6:6c:80:10:
         92:d2:c6:5b:c8:54:15:e9:bd:38:0f:5a:fc:a2:30:77:20:e3:
         38:1d:f3:63:5b:8a:b5:b0:a1:c7:57:0c:fc:de:da:19:a5:1b:
         e2:7d:f7:54:7e:a8:d2:8e:8c:38:08:67:4f:02:19:e0:6d:9e:
         cf:c1:94:78:6c:56:fe:48:c0:0d:4d:6f:92:f1:53:1f:f3:be:
         36:d8:df:4b:c4:93:08:c4:49:b9:59:a7:73:81:da:fc:fb:28:
         e4:20:7b:57:fd:fb:8b:0d:81:37:08:e6:40:42:da:a3:38:f8:
         13:ce:21:7f:f2:dc:b6:6d:13:d4:90:cb:33:10:a3:63:c1:c9:
         09:07:67:20:a8:c7:38:11:71:18:99:31:82:92:bc:98:d1:2e:
         a5:ee:d0:43:20:79:73:23:30:e3:d2:f2:d1:81:74:4f:fd:60:
         06:19:1a:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZah0qDkobRk49ZrXueS33yqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ZmJiNmViMmNlYzlhOWI3YmI4MWEzYjE2MGMxYWFiOTkw
ZTQ4MjYwHhcNMjUwNTA1MTkwMDU3WhcNMjUwNTA2MTkwMDU3WjAzMTEwLwYDVQQD
Eyg2OWMxMDA5ZjRiZDQyNTRmY2Y1MTQ5ZDA5ZmU3YTVlMTJmZDgzZjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjj+YvJwoiVJCaQcUgJAiVZpEIps3
ZABlMgN5rH0FwIB4o31RejcKXSZvGI3PWt9us186upj7UemvVIJdUH+xbKdAlE2U
Pze+U0TvwEeEcCKevvuS+sLMHDAZwyGaEX+GzeFqEP8ZkZPJ/20KJo1Je8v7FFdT
lrfuTXqvJyegXMF23k5sMjX0SJxqiwpP9cn+3iFw7ooBjHhKSA2kXid//tnzlOH2
GNobZp2mExwT9GE6g9ID19EpfxeB6bXn8zVpoyYLDAu+KZAIKhgHFs8slCLK1jt9
7oOYjcGkMda3ehooh+E6vzG5O7s3Z5CXc1zvcpK2YMniCVHRMtdz0cjyQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGnBAJ9L1CVPz1FJ0J/npeEv2D+GMB8GA1UdIwQY
MBaAFFf7tuss7Jqbe7gaOxYMGquZDkgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVl91MjZ5enNtcHQ3dUJvN0Znd2FxNWtPU0NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi81ODg4ZmYtM2I4ZS00NTU2LWFkZjQt
NGQ5ZWNmY2UwZGJjLzEvVl91MjZ5enNtcHQ3dUJvN0Znd2FxNWtPU0NZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi81ODg4ZmYtM2I4ZS00NTU2LWFkZjQtNGQ5ZWNmY2UwZGJj
LzEvVl91MjZ5enNtcHQ3dUJvN0Znd2FxNWtPU0NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApnCiKDmb
JJcloJKT00rkjEcOq+0TzBXS7Glg6U6OURJN56DT+g3idP7NKUEcr5/Gmbk3kxgN
hrJygowG+vNFXTSv6abgqp1AerK4Om9eDPzQYxfSW0i2bIAQktLGW8hUFem9OA9a
/KIwdyDjOB3zY1uKtbChx1cM/N7aGaUb4n33VH6o0o6MOAhnTwIZ4G2ez8GUeGxW
/kjADU1vkvFTH/O+NtjfS8STCMRJuVmnc4Ha/Pso5CB7V/37iw2BNwjmQELaozj4
E84hf/Lctm0T1JDLMxCjY8HJCQdnIKjHOBFxGJkxgpK8mNEupe7QQyB5cyMw49Ly
0YF0T/1gBhkaXA==
-----END CERTIFICATE-----
Generated at Tue May 6 03:13:04 2025 by rpki-client