Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
File:                     zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft (raw, json)
Hash identifier:          l2QsfzYAH3K49OK0tuaGfv4d/pTqTYjmT3sbL8bYUZ4=
Subject key identifier:   E5:9C:8F:25:6F:32:B2:9D:1C:93:27:36:AC:70:7C:61:69:73:01:5D
Authority key identifier: CC:9F:A0:B3:0D:54:55:AD:67:FB:07:E0:99:F0:FA:95:F8:B6:C1:9E
Certificate issuer:       /CN=cc9fa0b30d5455ad67fb07e099f0fa95f8b6c19e
Certificate serial:       0196BC008AA354266A2773A2084486DBFB75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
Manifest number:          0EB0
Signing time:             Sat 10 May 2025 21:01:14 +0000
Manifest this update:     Sat 10 May 2025 21:01:14 +0000
Manifest next update:     Sun 11 May 2025 21:01:14 +0000
Files and hashes:         1: rsGdnGFpgH2iITobH0zZzM2Hibw.roa (hash: pbnlIU03Otl/z/Rf4EwmC3o03jvLSqloWpA+ITG+uik=)
                          2: zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl (hash: gh3rcZqLzTE6UrsrC9k8nqrcym0Nd5RJgXRWrsHQ9FA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 21:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:00:8a:a3:54:26:6a:27:73:a2:08:44:86:db:fb:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9fa0b30d5455ad67fb07e099f0fa95f8b6c19e
        Validity
            Not Before: May 10 21:01:14 2025 GMT
            Not After : May 11 21:01:14 2025 GMT
        Subject: CN=e59c8f256f32b29d1c932736ac707c616973015d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:32:29:77:17:e6:8e:b9:c0:a7:25:80:0d:97:
                    6f:62:59:7d:05:28:9e:95:4a:bd:25:87:22:27:17:
                    a4:6b:04:75:c6:a7:df:dc:6e:c9:25:51:97:40:c8:
                    1a:72:fa:db:80:52:95:51:a2:16:b5:95:1d:6d:54:
                    d2:7d:c5:0d:7f:05:af:b6:3d:e8:07:a6:cf:3b:2b:
                    c8:13:ea:f4:ab:b6:4a:4e:e9:49:8e:cf:1b:9f:2a:
                    5d:7d:9a:de:d4:7f:b3:bc:28:24:55:32:4f:35:76:
                    32:8d:35:8a:a8:d7:13:e3:7b:59:2e:2b:6b:11:37:
                    74:d9:9b:67:54:a2:29:b8:88:cb:82:68:e2:f4:50:
                    5e:1d:ce:3a:01:e3:18:c8:bd:8c:68:c5:f5:83:86:
                    65:64:5d:49:46:b4:fe:08:ce:c4:5b:b7:4d:78:e5:
                    ad:b7:b6:48:89:7e:70:8b:63:70:0d:8f:e1:40:17:
                    06:83:fe:8d:9e:ff:b3:30:c0:d3:c1:da:a2:6f:ae:
                    b4:6d:ec:88:ab:f6:0f:86:70:67:95:b7:ce:69:ef:
                    11:d2:26:6a:82:c9:6d:50:57:ac:49:f7:d5:c3:04:
                    44:17:f2:7c:a0:70:82:f2:1d:69:25:43:52:a5:8c:
                    c0:c4:87:28:d6:40:38:1b:02:b9:c6:2d:66:59:0a:
                    e5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:9C:8F:25:6F:32:B2:9D:1C:93:27:36:AC:70:7C:61:69:73:01:5D
            X509v3 Authority Key Identifier:
                keyid:CC:9F:A0:B3:0D:54:55:AD:67:FB:07:E0:99:F0:FA:95:F8:B6:C1:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:27:b8:82:f0:6b:ff:94:54:dd:be:e3:32:3d:7f:11:87:aa:
         0a:7f:b5:cf:dc:e7:86:64:1a:44:2f:2f:bd:f7:e7:8a:34:11:
         98:c8:ea:d8:7a:0b:a6:a1:c7:3a:b4:83:49:36:84:44:84:4e:
         4d:ff:6c:39:40:1e:91:60:02:3c:25:bc:00:0d:87:84:0c:72:
         30:c7:2e:a3:4e:37:20:97:59:1a:8b:a9:c4:cd:e5:30:ce:f9:
         ac:3c:6e:a5:45:c0:3d:7b:e0:7b:3e:f7:06:cd:65:b9:c4:47:
         8b:68:81:5d:d4:a3:40:a6:e3:45:e6:ed:3e:49:a6:cd:2e:14:
         85:1d:6b:ca:e9:a6:74:74:58:2f:2e:1f:d9:d5:07:53:63:d2:
         ed:15:82:5b:44:06:f1:b9:d1:3b:cd:0a:3c:2c:d9:1e:fa:db:
         76:5e:0f:a8:5d:ac:bd:b9:08:86:ea:27:b1:b9:82:b9:c3:6d:
         4e:0f:df:8f:42:34:0d:e5:1c:3b:3f:f1:cf:69:38:f7:03:6b:
         ee:fa:9c:ce:26:48:44:98:f0:90:f4:15:39:97:41:81:13:21:
         6b:54:ce:4a:94:91:7d:28:e9:06:08:ba:16:55:64:29:d9:1a:
         6a:88:ee:6f:74:bb:10:5b:38:ab:cb:5f:47:38:63:9a:1c:44:
         ab:71:22:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa8AIqjVCZqJ3OiCESG2/t1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjOWZhMGIzMGQ1NDU1YWQ2N2ZiMDdlMDk5ZjBmYTk1Zjhi
NmMxOWUwHhcNMjUwNTEwMjEwMTE0WhcNMjUwNTExMjEwMTE0WjAzMTEwLwYDVQQD
EyhlNTljOGYyNTZmMzJiMjlkMWM5MzI3MzZhYzcwN2M2MTY5NzMwMTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9DIpdxfmjrnApyWADZdvYll9BSie
lUq9JYciJxekawR1xqff3G7JJVGXQMgacvrbgFKVUaIWtZUdbVTSfcUNfwWvtj3o
B6bPOyvIE+r0q7ZKTulJjs8bnypdfZre1H+zvCgkVTJPNXYyjTWKqNcT43tZLitr
ETd02ZtnVKIpuIjLgmji9FBeHc46AeMYyL2MaMX1g4ZlZF1JRrT+CM7EW7dNeOWt
t7ZIiX5wi2NwDY/hQBcGg/6Nnv+zMMDTwdqib660beyIq/YPhnBnlbfOae8R0iZq
gsltUFesSffVwwREF/J8oHCC8h1pJUNSpYzAxIco1kA4GwK5xi1mWQrlTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWcjyVvMrKdHJMnNqxwfGFpcwFdMB8GA1UdIwQY
MBaAFMyfoLMNVFWtZ/sH4Jnw+pX4tsGeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekotZ3N3MVVWYTFuLXdmZ21mRDZsZmkyd1o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC80ODgzZDQtODQ3OS00NDQ3LWFmNjct
MWU2Y2EyZjBkMTU1LzEvekotZ3N3MVVWYTFuLXdmZ21mRDZsZmkyd1o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC80ODgzZDQtODQ3OS00NDQ3LWFmNjctMWU2Y2EyZjBkMTU1
LzEvekotZ3N3MVVWYTFuLXdmZ21mRDZsZmkyd1o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhSe4gvBr
/5RU3b7jMj1/EYeqCn+1z9znhmQaRC8vvffnijQRmMjq2HoLpqHHOrSDSTaERIRO
Tf9sOUAekWACPCW8AA2HhAxyMMcuo043IJdZGoupxM3lMM75rDxupUXAPXvgez73
Bs1lucRHi2iBXdSjQKbjRebtPkmmzS4UhR1ryummdHRYLy4f2dUHU2PS7RWCW0QG
8bnRO80KPCzZHvrbdl4PqF2svbkIhuonsbmCucNtTg/fj0I0DeUcOz/xz2k49wNr
7vqcziZIRJjwkPQVOZdBgRMha1TOSpSRfSjpBgi6FlVkKdkaaojub3S7EFs4q8tf
RzhjmhxEq3EivA==
-----END CERTIFICATE-----
Generated at Sun May 11 06:16:28 2025 by rpki-client