Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/abb89f-09b9-44e8-8487-e31c0fdecd27/1/rTn6fNFTPal1zzmbms_-v-0mqes.mft
File:                     rTn6fNFTPal1zzmbms_-v-0mqes.mft (raw, json)
Hash identifier:          /eXMzd5xNkPy/uIJVdL9Y5/qCSoMjO7eVygPe1dWa8s=
Subject key identifier:   F0:2D:73:B4:3D:82:1F:0A:CD:F6:18:BA:5C:BC:B7:5E:57:B6:6B:D0
Authority key identifier: AD:39:FA:7C:D1:53:3D:A9:75:CF:39:9B:9A:CF:FE:BF:ED:26:A9:EB
Certificate issuer:       /CN=ad39fa7cd1533da975cf399b9acffebfed26a9eb
Certificate serial:       0196AE4433AD6A25F9E48292AB21F66A08B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rTn6fNFTPal1zzmbms_-v-0mqes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/abb89f-09b9-44e8-8487-e31c0fdecd27/1/rTn6fNFTPal1zzmbms_-v-0mqes.mft
Manifest number:          0BE6
Signing time:             Thu 08 May 2025 05:00:27 +0000
Manifest this update:     Thu 08 May 2025 05:00:27 +0000
Manifest next update:     Fri 09 May 2025 05:00:27 +0000
Files and hashes:         1: CMlrDDFsYjHx1MPg2lyXpQ3DpFs.roa (hash: MsLGIx/t++duqgpMvVk0jo/ApATi4rMLAAgAWe7j6rM=)
                          2: rTn6fNFTPal1zzmbms_-v-0mqes.crl (hash: HIUZ8mMR7uZbmQloiclfDLcJ241BcnRq0sAtprRI8HU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/abb89f-09b9-44e8-8487-e31c0fdecd27/1/rTn6fNFTPal1zzmbms_-v-0mqes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/abb89f-09b9-44e8-8487-e31c0fdecd27/1/rTn6fNFTPal1zzmbms_-v-0mqes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rTn6fNFTPal1zzmbms_-v-0mqes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 05:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ae:44:33:ad:6a:25:f9:e4:82:92:ab:21:f6:6a:08:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad39fa7cd1533da975cf399b9acffebfed26a9eb
        Validity
            Not Before: May  8 05:00:27 2025 GMT
            Not After : May  9 05:00:27 2025 GMT
        Subject: CN=f02d73b43d821f0acdf618ba5cbcb75e57b66bd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e1:b4:96:46:49:3e:5a:d9:ed:38:ea:ab:19:
                    20:56:94:2f:e1:d6:07:31:8f:a6:ae:4d:f7:dd:19:
                    dc:84:54:bb:a4:9b:9f:c9:14:f5:30:77:13:bb:c2:
                    31:14:1d:c3:2f:8e:b9:6a:a3:df:e2:1e:54:52:cb:
                    6d:45:94:e3:50:c2:ac:e2:e0:53:2a:4b:2f:85:a1:
                    f6:88:df:2c:41:c3:22:29:e2:0a:76:32:74:07:57:
                    ea:8f:27:1a:cb:8e:82:2e:ff:59:d0:9b:e3:8b:2e:
                    5b:ba:e8:19:99:d0:57:8b:f9:11:10:ea:c4:65:b9:
                    cf:0f:45:a8:f9:ff:a1:c2:14:02:ba:4e:6d:00:3c:
                    43:eb:a9:df:f0:20:4c:fb:d0:97:d7:07:bc:4f:4c:
                    2a:eb:d5:82:4f:e6:e3:72:57:b7:c0:be:e4:a2:89:
                    d6:59:84:9b:9f:37:75:bb:54:60:bf:6f:35:d0:26:
                    9c:9f:a8:9b:2e:00:70:10:13:42:ff:2c:f8:33:4c:
                    5f:21:f6:82:4a:4f:61:ca:b0:23:ba:be:a6:1a:48:
                    47:bf:28:68:08:a3:bf:e5:d1:6c:1b:c6:9c:0a:1b:
                    a4:a6:a9:f8:3a:df:7f:34:29:ef:06:20:e3:d7:78:
                    46:7f:8e:c3:58:a4:b4:a9:45:a0:fd:a1:b3:8f:d3:
                    7b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:2D:73:B4:3D:82:1F:0A:CD:F6:18:BA:5C:BC:B7:5E:57:B6:6B:D0
            X509v3 Authority Key Identifier:
                keyid:AD:39:FA:7C:D1:53:3D:A9:75:CF:39:9B:9A:CF:FE:BF:ED:26:A9:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTn6fNFTPal1zzmbms_-v-0mqes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/abb89f-09b9-44e8-8487-e31c0fdecd27/1/rTn6fNFTPal1zzmbms_-v-0mqes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/abb89f-09b9-44e8-8487-e31c0fdecd27/1/rTn6fNFTPal1zzmbms_-v-0mqes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:d2:d9:75:35:2b:0a:50:52:0f:9b:98:32:df:e7:f9:70:53:
         ea:c1:4a:3d:ba:85:a9:6b:54:4d:36:43:bd:28:28:cf:9d:4c:
         8f:9d:77:ea:47:6e:59:08:5a:21:7d:a1:3a:2c:15:f8:7c:51:
         a3:de:78:0f:ec:9e:62:f9:52:ea:d9:68:99:6a:a7:70:56:a4:
         d4:7b:b2:93:83:1d:f8:f1:aa:0c:77:9d:d7:4a:59:fb:64:9d:
         79:94:e5:76:b7:a5:90:72:a7:06:58:ff:68:e8:a8:40:8e:47:
         f3:37:7d:9f:fa:b0:a4:4c:80:36:14:f6:fe:52:6f:b3:13:94:
         ec:21:54:d3:91:08:fb:1b:7e:1f:76:8d:5a:02:65:7e:ab:c4:
         27:91:be:64:a3:fd:c3:0c:52:51:80:38:92:ab:66:79:80:1e:
         9c:da:cd:ae:b0:a4:1d:60:8a:f8:bd:71:d2:a6:76:63:e7:35:
         ac:ae:7a:ac:2a:3c:18:ae:49:cf:56:e4:9c:cb:99:ca:cd:15:
         85:93:ac:8f:1e:37:f2:a3:c9:e5:27:83:2e:76:b0:51:b2:04:
         c2:c8:d9:53:d7:47:bd:25:f7:88:c3:8b:1f:cd:60:db:24:15:
         ce:78:3b:06:30:d9:89:18:35:ce:dc:6c:16:e7:09:ab:b9:7c:
         3f:6b:76:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZauRDOtaiX55IKSqyH2agixMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMzlmYTdjZDE1MzNkYTk3NWNmMzk5YjlhY2ZmZWJmZWQy
NmE5ZWIwHhcNMjUwNTA4MDUwMDI3WhcNMjUwNTA5MDUwMDI3WjAzMTEwLwYDVQQD
EyhmMDJkNzNiNDNkODIxZjBhY2RmNjE4YmE1Y2JjYjc1ZTU3YjY2YmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uG0lkZJPlrZ7TjqqxkgVpQv4dYH
MY+mrk333RnchFS7pJufyRT1MHcTu8IxFB3DL465aqPf4h5UUsttRZTjUMKs4uBT
KksvhaH2iN8sQcMiKeIKdjJ0B1fqjycay46CLv9Z0Jvjiy5buugZmdBXi/kREOrE
ZbnPD0Wo+f+hwhQCuk5tADxD66nf8CBM+9CX1we8T0wq69WCT+bjcle3wL7koonW
WYSbnzd1u1Rgv2810Cacn6ibLgBwEBNC/yz4M0xfIfaCSk9hyrAjur6mGkhHvyho
CKO/5dFsG8acChukpqn4Ot9/NCnvBiDj13hGf47DWKS0qUWg/aGzj9N7WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAtc7Q9gh8KzfYYuly8t15XtmvQMB8GA1UdIwQY
MBaAFK05+nzRUz2pdc85m5rP/r/tJqnrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclRuNmZORlRQYWwxenptYm1zXy12LTBtcWVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9hYmI4OWYtMDliOS00NGU4LTg0ODct
ZTMxYzBmZGVjZDI3LzEvclRuNmZORlRQYWwxenptYm1zXy12LTBtcWVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9hYmI4OWYtMDliOS00NGU4LTg0ODctZTMxYzBmZGVjZDI3
LzEvclRuNmZORlRQYWwxenptYm1zXy12LTBtcWVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFtLZdTUr
ClBSD5uYMt/n+XBT6sFKPbqFqWtUTTZDvSgoz51Mj5136kduWQhaIX2hOiwV+HxR
o954D+yeYvlS6tlomWqncFak1Huyk4Md+PGqDHed10pZ+2SdeZTldrelkHKnBlj/
aOioQI5H8zd9n/qwpEyANhT2/lJvsxOU7CFU05EI+xt+H3aNWgJlfqvEJ5G+ZKP9
wwxSUYA4kqtmeYAenNrNrrCkHWCK+L1x0qZ2Y+c1rK56rCo8GK5Jz1bknMuZys0V
hZOsjx438qPJ5SeDLnawUbIEwsjZU9dHvSX3iMOLH81g2yQVzng7BjDZiRg1ztxs
FucJq7l8P2t2/Q==
-----END CERTIFICATE-----
Generated at Thu May 8 11:10:31 2025 by rpki-client