Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.mft
File:                     J2GFBdO0wAAhdZD3t7Wb9h_y83U.mft (raw, json)
Hash identifier:          4gEbZ7JcKQe3e0I2bB5twXOFj+6gisSMtC2CRXqGFOc=
Subject key identifier:   40:59:D2:0A:8F:14:A1:EC:CE:C4:0B:F6:E1:83:B5:AE:E5:B6:C6:5F
Authority key identifier: 27:61:85:05:D3:B4:C0:00:21:75:90:F7:B7:B5:9B:F6:1F:F2:F3:75
Certificate issuer:       /CN=27618505d3b4c000217590f7b7b59bf61ff2f375
Certificate serial:       0196B8239759F30C701987A72E8916CDA23E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J2GFBdO0wAAhdZD3t7Wb9h_y83U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.mft
Manifest number:          1532
Signing time:             Sat 10 May 2025 03:01:02 +0000
Manifest this update:     Sat 10 May 2025 03:01:02 +0000
Manifest next update:     Sun 11 May 2025 03:01:02 +0000
Files and hashes:         1: 5K6nIVbP5K11dvspcfl4G-MfJZw.roa (hash: 1GirTU1av48FvuHpXhFOsW26MgpLG9B9BqlLOufNX8M=)
                          2: J2GFBdO0wAAhdZD3t7Wb9h_y83U.crl (hash: guLo1SsfIGWUnuvQg21u+u9zW0okKjOPgwLSyHkQRsc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J2GFBdO0wAAhdZD3t7Wb9h_y83U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 03:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:23:97:59:f3:0c:70:19:87:a7:2e:89:16:cd:a2:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27618505d3b4c000217590f7b7b59bf61ff2f375
        Validity
            Not Before: May 10 03:01:02 2025 GMT
            Not After : May 11 03:01:02 2025 GMT
        Subject: CN=4059d20a8f14a1eccec40bf6e183b5aee5b6c65f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a8:55:f4:d5:29:77:60:57:a5:bd:8a:82:1b:
                    b3:e6:bd:56:a7:c2:b6:92:51:3d:19:e6:ea:a7:e1:
                    42:00:6a:c6:3e:e1:67:c2:e9:50:cb:01:11:d6:d8:
                    ef:9f:65:fa:6a:b6:c8:9c:d9:77:fc:f0:35:b6:e2:
                    45:64:95:2a:7b:db:80:a7:d2:99:6e:1d:2b:5a:7f:
                    6a:86:6f:ff:b0:d6:66:6f:80:0f:f4:dc:88:13:29:
                    bd:70:c0:8b:d6:9f:19:6c:5a:d9:a6:2c:19:b0:7c:
                    f9:d7:6e:a6:86:64:d3:8f:a2:31:af:b9:d1:72:23:
                    86:0d:39:1a:fe:c8:16:db:c5:81:dd:06:7e:51:2e:
                    ff:53:b0:7b:54:22:bd:cd:fb:f3:91:2c:0b:63:e7:
                    1d:41:85:94:c5:d5:ff:57:b1:fd:97:1a:cc:11:7e:
                    06:8e:2f:d9:ea:0c:ab:2f:7c:bf:7e:ac:52:fc:07:
                    90:37:76:41:29:f3:0e:18:51:86:95:4f:2a:84:e7:
                    fb:5f:50:f1:cd:91:4d:6e:26:8f:e3:9a:cf:44:1f:
                    a1:6d:5d:4d:c3:74:c1:e0:ee:af:3a:df:b0:6b:6e:
                    34:2b:23:87:6c:cd:56:66:65:5b:f8:be:a2:a8:0b:
                    71:98:04:c3:db:29:1c:41:84:8e:fe:da:f0:1e:cc:
                    57:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:59:D2:0A:8F:14:A1:EC:CE:C4:0B:F6:E1:83:B5:AE:E5:B6:C6:5F
            X509v3 Authority Key Identifier:
                keyid:27:61:85:05:D3:B4:C0:00:21:75:90:F7:B7:B5:9B:F6:1F:F2:F3:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2GFBdO0wAAhdZD3t7Wb9h_y83U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:15:cb:20:eb:22:3a:1a:01:bf:dd:d4:74:18:89:f4:f7:7e:
         59:93:ff:a8:91:d5:30:77:5a:0e:c8:34:3f:42:57:2d:48:d8:
         6e:d8:68:72:74:24:f4:e6:ea:6c:ce:4e:93:47:d1:1f:76:f9:
         9c:2b:d0:f3:82:cd:01:e3:45:33:d8:00:9b:bd:1c:c5:34:b1:
         74:8b:27:8d:e0:f4:c0:35:98:2e:29:b6:32:4e:19:91:78:19:
         ad:c8:7c:1d:c4:c9:16:0f:46:ef:13:52:29:39:c8:34:ec:dd:
         c3:d6:8f:b9:35:f5:65:64:5f:39:46:ce:cb:a0:8e:e0:3a:18:
         b6:d6:d9:2a:a2:9f:7b:f1:d3:6a:8a:38:20:be:0d:cf:eb:fa:
         cd:76:bd:86:05:a7:14:d5:89:cb:9f:fd:f6:15:47:ae:18:54:
         1a:0d:82:0a:1f:fa:b8:6c:01:04:6c:9f:86:a3:a9:08:0d:a6:
         05:59:9a:3d:2b:49:1e:2f:6b:3b:74:80:fe:f1:a3:46:0c:bf:
         ba:b4:77:04:4f:d7:ec:dc:d9:16:78:89:3d:4f:71:24:34:18:
         0f:20:f4:2c:a5:cb:2a:a7:68:bc:8c:1d:66:15:87:ec:e0:e4:
         85:eb:16:bd:92:eb:7b:53:1d:90:c0:8a:56:b5:f3:d2:34:53:
         3c:6a:cd:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4I5dZ8wxwGYenLokWzaI+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NjE4NTA1ZDNiNGMwMDAyMTc1OTBmN2I3YjU5YmY2MWZm
MmYzNzUwHhcNMjUwNTEwMDMwMTAyWhcNMjUwNTExMDMwMTAyWjAzMTEwLwYDVQQD
Eyg0MDU5ZDIwYThmMTRhMWVjY2VjNDBiZjZlMTgzYjVhZWU1YjZjNjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6hV9NUpd2BXpb2Kghuz5r1Wp8K2
klE9Gebqp+FCAGrGPuFnwulQywER1tjvn2X6arbInNl3/PA1tuJFZJUqe9uAp9KZ
bh0rWn9qhm//sNZmb4AP9NyIEym9cMCL1p8ZbFrZpiwZsHz5126mhmTTj6Ixr7nR
ciOGDTka/sgW28WB3QZ+US7/U7B7VCK9zfvzkSwLY+cdQYWUxdX/V7H9lxrMEX4G
ji/Z6gyrL3y/fqxS/AeQN3ZBKfMOGFGGlU8qhOf7X1DxzZFNbiaP45rPRB+hbV1N
w3TB4O6vOt+wa240KyOHbM1WZmVb+L6iqAtxmATD2ykcQYSO/trwHsxXiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEBZ0gqPFKHszsQL9uGDta7ltsZfMB8GA1UdIwQY
MBaAFCdhhQXTtMAAIXWQ97e1m/Yf8vN1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjJHRkJkTzB3QUFoZFpEM3Q3V2I5aF95ODNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83ZTYyNjItZWNkZC00MzM0LThiOWYt
OWQ1ZTU5Zjc2ZTZiLzEvSjJHRkJkTzB3QUFoZFpEM3Q3V2I5aF95ODNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83ZTYyNjItZWNkZC00MzM0LThiOWYtOWQ1ZTU5Zjc2ZTZi
LzEvSjJHRkJkTzB3QUFoZFpEM3Q3V2I5aF95ODNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHhXLIOsi
OhoBv93UdBiJ9Pd+WZP/qJHVMHdaDsg0P0JXLUjYbthocnQk9ObqbM5Ok0fRH3b5
nCvQ84LNAeNFM9gAm70cxTSxdIsnjeD0wDWYLim2Mk4ZkXgZrch8HcTJFg9G7xNS
KTnINOzdw9aPuTX1ZWRfOUbOy6CO4DoYttbZKqKfe/HTaoo4IL4Nz+v6zXa9hgWn
FNWJy5/99hVHrhhUGg2CCh/6uGwBBGyfhqOpCA2mBVmaPStJHi9rO3SA/vGjRgy/
urR3BE/X7NzZFniJPU9xJDQYDyD0LKXLKqdovIwdZhWH7ODkhesWvZLre1MdkMCK
VrXz0jRTPGrNjg==
-----END CERTIFICATE-----
Generated at Sat May 10 13:27:04 2025 by rpki-client