Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft
File:                     YMjVd0f3KXAO8vVhT2397I0Rny0.mft (raw, json)
Hash identifier:          seiWYlPdk/YNhMRR9LQpBajatgBSLLW704TZT1GmIbE=
Subject key identifier:   D8:54:A0:F0:9F:CE:CD:D6:C5:32:CE:69:98:B5:68:A7:A0:89:F9:D1
Authority key identifier: 60:C8:D5:77:47:F7:29:70:0E:F2:F5:61:4F:6D:FD:EC:8D:11:9F:2D
Certificate issuer:       /CN=60c8d57747f729700ef2f5614f6dfdec8d119f2d
Certificate serial:       0196B59022579D6DC918C461A2B66E7A1235
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft
Manifest number:          0E0B
Signing time:             Fri 09 May 2025 15:00:44 +0000
Manifest this update:     Fri 09 May 2025 15:00:44 +0000
Manifest next update:     Sat 10 May 2025 15:00:44 +0000
Files and hashes:         1: YMjVd0f3KXAO8vVhT2397I0Rny0.crl (hash: VHUofOhOL+CHAmu2leOCwRna/qH5Q6HPd1b/Egxc8kc=)
                          2: qx-NGj8MV_Cd9zpPet-1VEa08Ro.roa (hash: cxZbSa6oQLmYFFxeIAfjlhTWw1+qGjLvscb3SdGJg1o=)
                          3: r2K_C06ic0Dj0a3NFZhhI6ooNvs.roa (hash: bne8Sm5wB0CMu858I+GoE6ZpkxWpdhA80NITFW1Cun8=)
                          4: yeRaarOsqQL6T8MId8Dw-zjDpyI.roa (hash: PcKi02vr0pDiDVlpa/LbtFTT0UyPuUQNtlWvZyQzOuw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b5:90:22:57:9d:6d:c9:18:c4:61:a2:b6:6e:7a:12:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60c8d57747f729700ef2f5614f6dfdec8d119f2d
        Validity
            Not Before: May  9 15:00:44 2025 GMT
            Not After : May 10 15:00:44 2025 GMT
        Subject: CN=d854a0f09fcecdd6c532ce6998b568a7a089f9d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fc:6a:ea:8b:27:81:59:d3:2c:ba:6f:17:98:
                    96:81:36:29:46:4a:c1:a0:77:31:4f:ed:ee:e8:fe:
                    7e:9b:26:57:81:bb:0d:6e:1e:43:27:0a:55:63:f2:
                    be:29:f4:ec:46:8b:ca:be:3d:68:3c:fa:9b:5d:c6:
                    72:ee:3b:20:3a:b7:16:e1:74:3f:d4:65:47:11:c5:
                    2c:0e:39:84:64:97:3a:1b:55:8c:09:1a:2e:48:39:
                    63:7d:b2:b1:b6:8b:4f:92:0a:8f:88:2a:f5:31:09:
                    32:82:23:7d:45:df:69:52:2b:45:f9:ee:d2:b9:06:
                    7b:15:e2:56:c7:ea:ea:73:11:32:ca:5e:97:2c:36:
                    b2:55:ce:2f:e4:85:a8:93:67:f1:8a:9b:69:21:5f:
                    be:bd:92:04:5e:f0:4a:72:fa:83:46:75:ea:4f:88:
                    7c:c3:26:1a:2f:96:b3:bb:c0:17:76:a0:18:49:ab:
                    aa:27:41:91:6e:fa:a6:9f:19:d4:29:dd:fb:76:20:
                    da:6a:d7:07:9d:23:56:0d:92:29:e4:e6:5d:e5:8e:
                    bb:fe:04:06:95:6a:a1:b8:f5:05:ad:e5:84:71:05:
                    10:6f:0a:1c:f2:d9:df:53:92:fe:f3:cc:4f:56:10:
                    d3:33:36:8d:d1:98:40:c7:a2:52:20:5d:73:a4:df:
                    15:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:54:A0:F0:9F:CE:CD:D6:C5:32:CE:69:98:B5:68:A7:A0:89:F9:D1
            X509v3 Authority Key Identifier:
                keyid:60:C8:D5:77:47:F7:29:70:0E:F2:F5:61:4F:6D:FD:EC:8D:11:9F:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:f5:7f:df:c3:fb:46:aa:2a:9f:bb:82:38:6c:b8:9f:18:2f:
         05:e4:48:02:f7:67:61:8f:6b:14:14:86:c5:90:61:31:86:bc:
         d5:0d:6e:26:b6:19:9a:4f:39:11:86:de:df:10:3f:48:fa:46:
         62:69:a3:e0:46:e8:92:e7:8c:c7:18:93:b9:ae:95:ec:65:f0:
         bf:d7:a1:00:a4:65:aa:72:18:d6:84:8c:66:3f:3e:ee:d6:49:
         14:9a:4e:ee:6d:eb:40:90:b7:90:09:36:d6:c8:43:d9:b8:a9:
         9d:84:4e:ea:a2:f4:e8:fa:8c:e0:27:65:17:30:ec:73:e1:07:
         f4:cc:2b:ae:59:3e:16:5a:90:c3:5c:8b:dc:ef:19:5b:36:4b:
         b9:f0:a4:d3:52:98:16:06:f9:6f:71:f6:8f:9a:be:c0:45:24:
         c5:b1:df:9f:58:4e:b4:cf:00:ec:d0:04:de:dc:3b:8c:36:bf:
         23:b7:12:f1:0f:3b:36:ec:bb:43:e9:4a:6c:31:4c:50:46:77:
         91:b0:13:e7:d7:21:7a:2c:61:8f:5e:4f:61:f9:4d:00:01:c9:
         c8:cb:b3:28:86:05:16:05:bf:47:37:77:ca:b9:00:5c:c3:ed:
         21:2f:a5:8f:44:cb:f1:d3:be:0d:99:6e:0e:52:3a:60:97:96:
         70:12:02:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa1kCJXnW3JGMRhorZuehI1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwYzhkNTc3NDdmNzI5NzAwZWYyZjU2MTRmNmRmZGVjOGQx
MTlmMmQwHhcNMjUwNTA5MTUwMDQ0WhcNMjUwNTEwMTUwMDQ0WjAzMTEwLwYDVQQD
EyhkODU0YTBmMDlmY2VjZGQ2YzUzMmNlNjk5OGI1NjhhN2EwODlmOWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPxq6osngVnTLLpvF5iWgTYpRkrB
oHcxT+3u6P5+myZXgbsNbh5DJwpVY/K+KfTsRovKvj1oPPqbXcZy7jsgOrcW4XQ/
1GVHEcUsDjmEZJc6G1WMCRouSDljfbKxtotPkgqPiCr1MQkygiN9Rd9pUitF+e7S
uQZ7FeJWx+rqcxEyyl6XLDayVc4v5IWok2fxiptpIV++vZIEXvBKcvqDRnXqT4h8
wyYaL5azu8AXdqAYSauqJ0GRbvqmnxnUKd37diDaatcHnSNWDZIp5OZd5Y67/gQG
lWqhuPUFreWEcQUQbwoc8tnfU5L+88xPVhDTMzaN0ZhAx6JSIF1zpN8VlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNhUoPCfzs3WxTLOaZi1aKegifnRMB8GA1UdIwQY
MBaAFGDI1XdH9ylwDvL1YU9t/eyNEZ8tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU1qVmQwZjNLWEFPOHZWaFQyMzk3STBSbnkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8zOWQ3MzQtNmZiMS00ZGMwLWExMjgt
ZDc1ZjU5NWZhN2MzLzEvWU1qVmQwZjNLWEFPOHZWaFQyMzk3STBSbnkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8zOWQ3MzQtNmZiMS00ZGMwLWExMjgtZDc1ZjU5NWZhN2Mz
LzEvWU1qVmQwZjNLWEFPOHZWaFQyMzk3STBSbnkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiPV/38P7
Rqoqn7uCOGy4nxgvBeRIAvdnYY9rFBSGxZBhMYa81Q1uJrYZmk85EYbe3xA/SPpG
Ymmj4EbokueMxxiTua6V7GXwv9ehAKRlqnIY1oSMZj8+7tZJFJpO7m3rQJC3kAk2
1shD2bipnYRO6qL06PqM4CdlFzDsc+EH9Mwrrlk+FlqQw1yL3O8ZWzZLufCk01KY
Fgb5b3H2j5q+wEUkxbHfn1hOtM8A7NAE3tw7jDa/I7cS8Q87Nuy7Q+lKbDFMUEZ3
kbAT59cheixhj15PYflNAAHJyMuzKIYFFgW/Rzd3yrkAXMPtIS+lj0TL8dO+DZlu
DlI6YJeWcBICcg==
-----END CERTIFICATE-----
Generated at Fri May 9 17:35:44 2025 by rpki-client