Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
File:                     ISaWdazvu_hJex4hynN2SvSqjHs.mft (raw, json)
Hash identifier:          AqpJohZWXQuOPIBJ5vQ5W5QO35bt8hrgpFPIgBW88Yg=
Subject key identifier:   FE:F8:96:7F:D3:0C:91:20:D8:4F:D7:16:36:C8:7B:C8:9E:B3:99:02
Authority key identifier: 21:26:96:75:AC:EF:BB:F8:49:7B:1E:21:CA:73:76:4A:F4:AA:8C:7B
Certificate issuer:       /CN=21269675acefbbf8497b1e21ca73764af4aa8c7b
Certificate serial:       0196BB5ACFB83F06C525E4AC1CD31C364F4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
Manifest number:          1533
Signing time:             Sat 10 May 2025 18:00:12 +0000
Manifest this update:     Sat 10 May 2025 18:00:12 +0000
Manifest next update:     Sun 11 May 2025 18:00:12 +0000
Files and hashes:         1: 9C6x-AKKWqFQOmPoDrEfsQ86Plo.roa (hash: y8yBYrZmk+rE4RIfdIqZnZ3JFWI95gG2qC5oXNpQHjI=)
                          2: ISaWdazvu_hJex4hynN2SvSqjHs.crl (hash: UVfdZKe6TI2Ls5SrLrwBlMmBldLjdJA5/vCrF61Fo1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:5a:cf:b8:3f:06:c5:25:e4:ac:1c:d3:1c:36:4f:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21269675acefbbf8497b1e21ca73764af4aa8c7b
        Validity
            Not Before: May 10 18:00:12 2025 GMT
            Not After : May 11 18:00:12 2025 GMT
        Subject: CN=fef8967fd30c9120d84fd71636c87bc89eb39902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:08:b0:48:fe:02:f3:60:f7:18:7c:23:1e:e2:
                    70:12:11:e1:a1:35:56:b5:3c:b7:97:f9:40:f5:b9:
                    bf:87:6f:14:1b:5a:af:5a:88:18:dc:2c:d6:e3:fa:
                    9e:d6:19:e2:e8:c6:d5:bb:48:ba:15:c3:da:19:8b:
                    23:b1:b4:30:98:82:cf:fa:d6:fd:e9:bf:17:89:6d:
                    a4:c6:76:f9:0b:64:25:ea:89:04:14:c5:00:88:72:
                    d1:8f:c9:eb:a4:ae:62:76:05:a9:58:8f:09:c4:53:
                    81:9c:74:8b:bf:7f:f8:3c:00:86:91:8e:0b:d8:69:
                    1c:54:9c:ab:ba:d3:53:44:04:ce:d2:c1:88:46:34:
                    28:09:89:03:94:2d:e5:fe:2a:7e:9f:cf:67:11:91:
                    84:a1:84:66:f7:26:69:ff:9e:74:2d:66:47:bb:5d:
                    b9:cc:95:7e:57:0a:78:14:a1:1e:f8:24:65:10:5b:
                    ec:24:67:92:82:a8:6c:3a:07:cf:10:3a:50:20:a9:
                    36:59:24:de:5a:7f:c6:10:43:dd:04:86:af:d4:72:
                    ae:15:93:36:92:6f:2a:07:9c:e5:5b:2e:b8:7f:23:
                    33:59:21:0e:45:1d:e1:1d:58:51:fa:6f:24:51:ec:
                    79:08:65:42:46:b8:87:ce:3f:a9:d6:0a:dc:f0:b9:
                    84:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F8:96:7F:D3:0C:91:20:D8:4F:D7:16:36:C8:7B:C8:9E:B3:99:02
            X509v3 Authority Key Identifier:
                keyid:21:26:96:75:AC:EF:BB:F8:49:7B:1E:21:CA:73:76:4A:F4:AA:8C:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:da:f0:53:d7:65:c4:af:14:db:dd:8a:9d:7c:a7:fc:da:7a:
         93:e1:2e:39:9a:fb:8a:92:d5:f1:f5:4a:c7:fe:88:83:82:c8:
         73:b8:65:63:57:d1:84:aa:95:7b:e8:3e:66:45:79:32:96:d3:
         db:56:48:85:4c:27:df:92:48:2d:96:2b:2d:e9:99:3e:68:53:
         c5:33:25:33:fc:ec:7d:29:90:e9:66:61:82:c3:e4:73:05:60:
         8f:db:01:84:1d:e8:b9:ec:da:32:2f:a9:88:0d:11:08:19:73:
         16:a4:6b:8f:10:2e:9e:f9:04:c7:06:47:ac:66:87:6c:73:f0:
         e5:4b:1d:c6:9c:55:05:d2:5d:a5:b1:7f:a8:71:e4:95:f3:a9:
         23:4c:19:fc:06:58:6d:91:3b:e8:cd:0e:b8:05:0c:79:3d:8d:
         40:25:61:1e:6d:46:da:b5:2e:04:54:95:1f:12:f7:d5:fc:9b:
         5f:9a:02:81:3a:36:30:0b:85:6b:28:0e:89:cf:17:c4:29:28:
         90:f9:b9:32:ed:5f:b1:a0:2d:79:bf:0e:22:8f:33:0a:da:3b:
         d9:ab:6e:80:ce:35:3a:85:f7:c1:df:b3:fa:27:a8:06:f8:38:
         de:4e:a7:25:25:7c:c0:2a:4d:56:31:27:01:34:50:ff:f0:a1:
         b8:ab:19:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7Ws+4PwbFJeSsHNMcNk9MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMjY5Njc1YWNlZmJiZjg0OTdiMWUyMWNhNzM3NjRhZjRh
YThjN2IwHhcNMjUwNTEwMTgwMDEyWhcNMjUwNTExMTgwMDEyWjAzMTEwLwYDVQQD
EyhmZWY4OTY3ZmQzMGM5MTIwZDg0ZmQ3MTYzNmM4N2JjODllYjM5OTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwiwSP4C82D3GHwjHuJwEhHhoTVW
tTy3l/lA9bm/h28UG1qvWogY3CzW4/qe1hni6MbVu0i6FcPaGYsjsbQwmILP+tb9
6b8XiW2kxnb5C2Ql6okEFMUAiHLRj8nrpK5idgWpWI8JxFOBnHSLv3/4PACGkY4L
2GkcVJyrutNTRATO0sGIRjQoCYkDlC3l/ip+n89nEZGEoYRm9yZp/550LWZHu125
zJV+Vwp4FKEe+CRlEFvsJGeSgqhsOgfPEDpQIKk2WSTeWn/GEEPdBIav1HKuFZM2
km8qB5zlWy64fyMzWSEORR3hHVhR+m8kUex5CGVCRriHzj+p1grc8LmEpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP74ln/TDJEg2E/XFjbIe8ies5kCMB8GA1UdIwQY
MBaAFCEmlnWs77v4SXseIcpzdkr0qox7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVNhV2RhenZ1X2hKZXg0aHluTjJTdlNxakhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS81YWY2OTktYjFhOS00OWRjLWJkYzkt
MWQ0ZGZiNGY0ODAwLzEvSVNhV2RhenZ1X2hKZXg0aHluTjJTdlNxakhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS81YWY2OTktYjFhOS00OWRjLWJkYzktMWQ0ZGZiNGY0ODAw
LzEvSVNhV2RhenZ1X2hKZXg0aHluTjJTdlNxakhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJtrwU9dl
xK8U292KnXyn/Np6k+EuOZr7ipLV8fVKx/6Ig4LIc7hlY1fRhKqVe+g+ZkV5MpbT
21ZIhUwn35JILZYrLemZPmhTxTMlM/zsfSmQ6WZhgsPkcwVgj9sBhB3ouezaMi+p
iA0RCBlzFqRrjxAunvkExwZHrGaHbHPw5UsdxpxVBdJdpbF/qHHklfOpI0wZ/AZY
bZE76M0OuAUMeT2NQCVhHm1G2rUuBFSVHxL31fybX5oCgTo2MAuFaygOic8XxCko
kPm5Mu1fsaAteb8OIo8zCto72atugM41OoX3wd+z+ieoBvg43k6nJSV8wCpNVjEn
ATRQ//ChuKsZOA==
-----END CERTIFICATE-----
Generated at Sat May 10 20:50:41 2025 by rpki-client