Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft
File:                     zM1YPI1xokJ-AGDjzJJPMtwaggs.mft (raw, json)
Hash identifier:          iWUhH9J5IDHIiSP1EFqj4YzoOkERXR9tAGNtoeMo6Tk=
Subject key identifier:   54:03:D3:DA:64:A7:8A:22:8C:29:71:DC:17:77:D4:82:52:09:22:C6
Authority key identifier: CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B
Certificate issuer:       /CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b
Certificate serial:       0196A0896889DF32485E8BBC348F772003E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft
Manifest number:          0AC0
Signing time:             Mon 05 May 2025 13:01:21 +0000
Manifest this update:     Mon 05 May 2025 13:01:21 +0000
Manifest next update:     Tue 06 May 2025 13:01:21 +0000
Files and hashes:         1: MkrzUPp2fw2MTxDAyX7xHZLlYbk.roa (hash: slTzkCKMJrVrVLZuZQUzVX464caMJ5HD4oz3QsYxNQY=)
                          2: _2rlTorI9d4EskVB3Q2AELQgntg.roa (hash: MJ/JOjkufW/i3x6kFr8d78WsqqTFtkNpKnXIQ8qokdg=)
                          3: aXdWyB6YGPpk-J46No4vsmKxGCE.roa (hash: TIgYhNRVQ3p/R3gXtf1t15mu2N3p/Mr9E78IoFCU1PY=)
                          4: lTK57WKRl8JHYSn3Me1JiHVYX6c.roa (hash: OsSENyDZ+wkTwyFgI+grH7k0F+jqVnxydXIxiH9U0Ng=)
                          5: oJSpmKHDBTQennb3bFM-AUri38c.roa (hash: gaj/8isA/Vy8LzqeD5fj8KpWVmIYxfupI+6YOWca7WI=)
                          6: yroUuw1scM5vJqw9L2C1NZloBMg.roa (hash: tq+65QQs/oxlmOUT1sm7YA/yaQJk+Rn+QS41OHsKCiw=)
                          7: zM1YPI1xokJ-AGDjzJJPMtwaggs.crl (hash: MYYPAaH7EM2LqaFF6y7skOzH7zcAb9r5/QnoQ7cIQBQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a0:89:68:89:df:32:48:5e:8b:bc:34:8f:77:20:03:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b
        Validity
            Not Before: May  5 13:01:21 2025 GMT
            Not After : May  6 13:01:21 2025 GMT
        Subject: CN=5403d3da64a78a228c2971dc1777d482520922c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:98:4d:00:df:b2:28:c8:ab:5f:92:0f:f0:71:
                    e0:ac:1d:56:07:ca:2d:88:d4:ce:26:b6:94:4c:ce:
                    53:0f:f3:19:27:52:65:58:94:98:65:f7:ad:5a:0a:
                    d9:bc:54:e6:27:b0:ae:b5:82:f7:ce:2e:61:8f:f0:
                    c0:e4:20:aa:82:66:b0:14:2e:38:52:43:65:cc:32:
                    8c:c2:70:c3:3c:0b:86:fb:84:b0:ab:d8:a2:33:70:
                    be:3a:fd:58:bc:f7:94:52:05:78:f4:65:5e:bc:b2:
                    36:f7:fe:04:c5:79:4e:57:f2:19:39:8a:47:c3:71:
                    5e:a9:d5:28:b8:49:fc:d6:ad:47:a0:4c:6c:80:cc:
                    81:83:f4:39:5b:08:d3:44:0a:1c:30:10:70:69:f0:
                    7f:7b:c8:84:ec:d5:2d:58:a4:ef:bd:7b:1a:fe:39:
                    be:4b:ec:87:5a:00:76:94:40:f4:1f:68:e5:97:4b:
                    6e:a3:52:48:7c:ee:12:8f:52:87:15:ee:1d:f9:3b:
                    ab:0b:71:55:b3:42:da:2a:4e:3d:71:bc:68:7d:ef:
                    fe:ad:43:6c:be:ab:1e:76:d8:ec:a7:43:0b:04:ec:
                    40:3b:db:48:90:37:ed:22:17:df:4a:ce:76:76:19:
                    3e:e0:a8:c9:04:02:a6:31:b7:7c:81:6d:b6:18:51:
                    63:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:03:D3:DA:64:A7:8A:22:8C:29:71:DC:17:77:D4:82:52:09:22:C6
            X509v3 Authority Key Identifier:
                keyid:CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:b4:ff:35:ad:3d:04:90:06:c8:20:32:64:cc:ba:5c:f3:07:
         4b:97:9e:03:83:49:29:11:20:e7:09:f4:7a:69:ac:fe:29:77:
         e9:9b:ff:51:c4:b0:de:33:65:3e:0c:c0:bc:65:6c:a0:b9:cc:
         17:59:52:b9:7f:1b:ee:f0:c3:ad:f8:89:2f:a4:5a:6c:f6:08:
         3e:6a:91:2d:86:ab:25:71:f0:73:1a:17:e6:b3:76:00:a8:95:
         ff:67:2c:06:b9:b9:aa:86:7c:a2:65:83:f6:be:1c:46:b4:ca:
         0a:43:26:9a:6b:cb:3e:2a:e1:64:af:96:e5:8a:f1:0b:fe:56:
         c5:20:ee:57:18:f8:11:2e:c9:be:15:e4:ba:33:8f:01:45:23:
         51:d9:ac:08:f5:19:48:ef:0d:f5:f6:6d:71:fa:d4:55:8e:fd:
         ca:2f:95:a6:45:80:ea:c4:78:c7:d6:7f:d4:67:02:c5:e8:b4:
         5a:27:c8:46:5c:b0:52:f3:54:23:e4:da:a4:57:2e:d9:ae:6d:
         1a:2f:55:ce:ef:f2:d2:1a:0a:3e:32:bd:7b:9f:98:c2:ef:b3:
         49:92:be:bd:05:7d:08:d0:6d:be:36:43:9f:e7:ec:7b:6b:7d:
         8c:d5:40:c5:80:db:60:bb:f3:44:23:84:91:26:49:fa:bf:04:
         20:43:84:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZagiWiJ3zJIXou8NI93IAPjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjY2Q1ODNjOGQ3MWEyNDI3ZTAwNjBlM2NjOTI0ZjMyZGMx
YTgyMGIwHhcNMjUwNTA1MTMwMTIxWhcNMjUwNTA2MTMwMTIxWjAzMTEwLwYDVQQD
Eyg1NDAzZDNkYTY0YTc4YTIyOGMyOTcxZGMxNzc3ZDQ4MjUyMDkyMmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5hNAN+yKMirX5IP8HHgrB1WB8ot
iNTOJraUTM5TD/MZJ1JlWJSYZfetWgrZvFTmJ7CutYL3zi5hj/DA5CCqgmawFC44
UkNlzDKMwnDDPAuG+4Swq9iiM3C+Ov1YvPeUUgV49GVevLI29/4ExXlOV/IZOYpH
w3FeqdUouEn81q1HoExsgMyBg/Q5WwjTRAocMBBwafB/e8iE7NUtWKTvvXsa/jm+
S+yHWgB2lED0H2jll0tuo1JIfO4Sj1KHFe4d+TurC3FVs0LaKk49cbxofe/+rUNs
vqsedtjsp0MLBOxAO9tIkDftIhffSs52dhk+4KjJBAKmMbd8gW22GFFjjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQD09pkp4oijClx3Bd31IJSCSLGMB8GA1UdIwQY
MBaAFMzNWDyNcaJCfgBg48ySTzLcGoILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek0xWVBJMXhva0otQUdEanpKSlBNdHdhZ2dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81NmEwMmEtYzVmZC00MTE5LThjNWYt
ZjQ4NTAyZDEzOTQ4LzEvek0xWVBJMXhva0otQUdEanpKSlBNdHdhZ2dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi81NmEwMmEtYzVmZC00MTE5LThjNWYtZjQ4NTAyZDEzOTQ4
LzEvek0xWVBJMXhva0otQUdEanpKSlBNdHdhZ2dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB7T/Na09
BJAGyCAyZMy6XPMHS5eeA4NJKREg5wn0emms/il36Zv/UcSw3jNlPgzAvGVsoLnM
F1lSuX8b7vDDrfiJL6RabPYIPmqRLYarJXHwcxoX5rN2AKiV/2csBrm5qoZ8omWD
9r4cRrTKCkMmmmvLPirhZK+W5YrxC/5WxSDuVxj4ES7JvhXkujOPAUUjUdmsCPUZ
SO8N9fZtcfrUVY79yi+VpkWA6sR4x9Z/1GcCxei0WifIRlywUvNUI+TapFcu2a5t
Gi9Vzu/y0hoKPjK9e5+Ywu+zSZK+vQV9CNBtvjZDn+fse2t9jNVAxYDbYLvzRCOE
kSZJ+r8EIEOE+A==
-----END CERTIFICATE-----
Generated at Mon May 5 19:50:07 2025 by rpki-client