Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
File:                     ebUTSxH5QJEfD_MVyUjapT9zLuA.mft (raw, json)
Hash identifier:          USdxongX6EfrjwGxLN7AWEJggCZ54Nr1XlqHDEl8uhs=
Subject key identifier:   35:27:34:9A:83:87:CA:C8:28:11:F3:DB:34:02:BC:B7:FC:07:DA:FD
Authority key identifier: 79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
Certificate issuer:       /CN=79b5134b11f940911f0ff315c948daa53f732ee0
Certificate serial:       0196C3B9C635A0F8E474759B624893505524
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
Manifest number:          153E
Signing time:             Mon 12 May 2025 09:00:54 +0000
Manifest this update:     Mon 12 May 2025 09:00:54 +0000
Manifest next update:     Tue 13 May 2025 09:00:54 +0000
Files and hashes:         1: 0bwTTnBwoc2_yeiCZSrmukFpa98.roa (hash: yFkhE2XktYrWBrn6EmrqtgFzZBMcDiKsauGCorzriGU=)
                          2: ebUTSxH5QJEfD_MVyUjapT9zLuA.crl (hash: W6hvbE0/+8xzYvxnRqqiRfDt/YscI/IHGLR12p0yDTw=)
                          3: xEtUzfcqpQeJhZAcCyxrsVLjxCQ.roa (hash: PA6mXqLoVfB1vl9Qdv2t3v0X7M3ZLEJapIRIGu4wxNc=)
                          4: xO6LE8_q3PK-EbV6Eeaj1MNpS5g.roa (hash: fd8tHh3AiS9bFzCxVNDYTejvw2lI8UvtB+kXLLVRR6A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:b9:c6:35:a0:f8:e4:74:75:9b:62:48:93:50:55:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79b5134b11f940911f0ff315c948daa53f732ee0
        Validity
            Not Before: May 12 09:00:54 2025 GMT
            Not After : May 13 09:00:54 2025 GMT
        Subject: CN=3527349a8387cac82811f3db3402bcb7fc07dafd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:dd:0b:8a:d9:ee:e8:48:d7:50:29:a6:43:c6:
                    09:94:df:97:5f:28:28:6f:60:22:ba:bd:65:a3:09:
                    0b:87:66:e6:c4:86:2a:8c:ac:c8:dd:dc:f8:ae:93:
                    41:eb:9a:16:f7:7b:3a:aa:da:ad:cb:f1:34:fd:93:
                    48:30:48:8d:25:30:0d:43:57:ef:47:91:69:94:36:
                    ec:c7:54:85:4d:13:bd:de:23:9d:9d:ce:5e:65:50:
                    8e:4a:57:44:04:90:13:65:92:d8:f8:3c:9e:47:a0:
                    b4:de:f9:66:eb:a7:f7:43:6c:91:72:17:00:2f:00:
                    c2:af:8c:7c:cb:3d:cd:e4:af:d7:f4:62:37:1a:db:
                    01:43:61:19:cb:24:73:f3:7c:8e:c8:7a:0b:eb:06:
                    7b:4c:3c:fb:4f:0f:c9:9f:86:3f:29:50:b7:db:5f:
                    92:bd:ec:dc:8e:bc:c2:ea:63:c0:d7:a4:26:c5:37:
                    65:5e:ef:ff:1a:4c:e6:22:36:bb:04:1b:0d:ae:b9:
                    09:c9:e3:31:38:e8:e0:b2:d6:dd:f5:3c:8a:87:ea:
                    fb:3b:a0:f4:54:03:af:4b:eb:a5:2c:a5:e0:85:6f:
                    b0:68:03:84:59:c8:81:1f:0c:24:c1:03:2f:37:2d:
                    d6:52:08:aa:df:5e:5f:81:1f:4e:a4:62:68:65:44:
                    47:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:27:34:9A:83:87:CA:C8:28:11:F3:DB:34:02:BC:B7:FC:07:DA:FD
            X509v3 Authority Key Identifier:
                keyid:79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ab:7f:90:b1:b0:e9:06:05:a8:5a:33:a6:dc:06:53:f0:96:
         2f:cd:6d:40:8a:1e:ad:9c:f8:10:16:d1:9c:55:93:97:94:e3:
         c6:0f:ad:35:48:95:42:e8:89:07:b0:37:39:f6:7c:00:f3:7f:
         4f:9b:81:64:16:fe:20:a6:e0:f4:f2:46:21:b9:66:3d:c6:15:
         e3:f7:b0:3d:42:d6:b6:2d:5e:c7:dd:95:e7:af:2c:e9:e9:47:
         8e:ca:a2:c6:15:5f:87:11:a5:05:2d:06:0d:d4:0a:6d:f8:29:
         e5:d3:aa:fe:28:8a:ac:e4:ce:da:d7:de:98:c8:a7:cf:be:4c:
         04:db:76:b5:80:0a:b1:c7:b5:d7:b3:0c:db:99:93:44:8e:b3:
         4b:26:e2:a7:09:08:77:bf:3f:23:4c:c5:01:8c:d4:ca:a6:ef:
         24:28:10:23:0f:20:87:07:85:d1:55:60:b4:26:22:19:e2:56:
         ad:7b:6b:19:01:1c:06:68:5b:8a:c0:97:4a:3e:de:c9:27:8a:
         56:23:92:30:68:ca:69:a7:03:b1:fb:58:d7:ba:d6:a2:53:9d:
         8d:aa:b0:2d:d1:0b:16:4c:c8:6c:dc:23:4b:b3:0b:69:8d:8b:
         a5:67:5a:5c:ee:b8:ba:b5:7c:d9:df:44:be:2e:e8:bb:2e:8a:
         bf:63:51:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDucY1oPjkdHWbYkiTUFUkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YjUxMzRiMTFmOTQwOTExZjBmZjMxNWM5NDhkYWE1M2Y3
MzJlZTAwHhcNMjUwNTEyMDkwMDU0WhcNMjUwNTEzMDkwMDU0WjAzMTEwLwYDVQQD
EygzNTI3MzQ5YTgzODdjYWM4MjgxMWYzZGIzNDAyYmNiN2ZjMDdkYWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxt0Litnu6EjXUCmmQ8YJlN+XXygo
b2Aiur1lowkLh2bmxIYqjKzI3dz4rpNB65oW93s6qtqty/E0/ZNIMEiNJTANQ1fv
R5FplDbsx1SFTRO93iOdnc5eZVCOSldEBJATZZLY+DyeR6C03vlm66f3Q2yRchcA
LwDCr4x8yz3N5K/X9GI3GtsBQ2EZyyRz83yOyHoL6wZ7TDz7Tw/Jn4Y/KVC321+S
vezcjrzC6mPA16QmxTdlXu//GkzmIja7BBsNrrkJyeMxOOjgstbd9TyKh+r7O6D0
VAOvS+ulLKXghW+waAOEWciBHwwkwQMvNy3WUgiq315fgR9OpGJoZURH/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUnNJqDh8rIKBHz2zQCvLf8B9r9MB8GA1UdIwQY
MBaAFHm1E0sR+UCRHw/zFclI2qU/cy7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWJVVFN4SDVRSkVmRF9NVnlVamFwVDl6THVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS81ZTA5OTQtOTRkMi00NmUxLTgwNjYt
Y2VjMjJlYTc5NTEzLzEvZWJVVFN4SDVRSkVmRF9NVnlVamFwVDl6THVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS81ZTA5OTQtOTRkMi00NmUxLTgwNjYtY2VjMjJlYTc5NTEz
LzEvZWJVVFN4SDVRSkVmRF9NVnlVamFwVDl6THVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhat/kLGw
6QYFqFozptwGU/CWL81tQIoerZz4EBbRnFWTl5Tjxg+tNUiVQuiJB7A3OfZ8APN/
T5uBZBb+IKbg9PJGIblmPcYV4/ewPULWti1ex92V568s6elHjsqixhVfhxGlBS0G
DdQKbfgp5dOq/iiKrOTO2tfemMinz75MBNt2tYAKsce117MM25mTRI6zSybipwkI
d78/I0zFAYzUyqbvJCgQIw8ghweF0VVgtCYiGeJWrXtrGQEcBmhbisCXSj7eySeK
ViOSMGjKaacDsftY17rWolOdjaqwLdELFkzIbNwjS7MLaY2LpWdaXO64urV82d9E
vi7ouy6Kv2NRsQ==
-----END CERTIFICATE-----
Generated at Mon May 12 11:25:52 2025 by rpki-client