Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
File:                     KYOEG8CfH9T-PemRAWwLcSb7pS4.mft (raw, json)
Hash identifier:          LbULILfO8Wgg7pklsysjJVOiT118yzXofOLY8/B+NFk=
Subject key identifier:   B9:69:59:BB:27:68:00:4C:90:12:1F:B2:3F:08:24:AC:01:E5:A7:1D
Authority key identifier: 29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
Certificate issuer:       /CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Certificate serial:       0196C42705957BFDBF1C7CF69BF0DC65B3DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
Manifest number:          0D60
Signing time:             Mon 12 May 2025 11:00:13 +0000
Manifest this update:     Mon 12 May 2025 11:00:13 +0000
Manifest next update:     Tue 13 May 2025 11:00:13 +0000
Files and hashes:         1: 8L44IrkkvnWwO7YzdGP90TGDjSg.roa (hash: CEFaAsOLSJVrCdoCjPllcGxEqTE9RA4Tw9wSIQ0mmME=)
                          2: KYOEG8CfH9T-PemRAWwLcSb7pS4.crl (hash: w2BQoPImaaNfWhg8WpRvCEvLq1u6dgTlMT25eDS3uaI=)
                          3: pLFppFwWIfA_W9uCMBC8y8BR8ts.roa (hash: dbla97+OI8Jm8+2WXqrvaQmGEN37T1/jOIGIxTsBgg0=)
                          4: tG9g7Co1XH6U8tZyoXMC-RjzpsI.roa (hash: f5hLHvCO22cXuPn8MfVWI6zy/RfS3YcwLYdVmDvuy/U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c4:27:05:95:7b:fd:bf:1c:7c:f6:9b:f0:dc:65:b3:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
        Validity
            Not Before: May 12 11:00:13 2025 GMT
            Not After : May 13 11:00:13 2025 GMT
        Subject: CN=b96959bb2768004c90121fb23f0824ac01e5a71d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:fa:89:29:0b:f6:3f:a0:9d:fe:21:4f:f2:98:
                    c5:06:a2:79:39:b3:e1:ea:65:98:af:03:2e:b6:41:
                    7e:6f:2e:5a:0f:59:9f:ef:05:19:97:e3:f2:de:a5:
                    c4:6f:10:f3:10:89:ac:7f:07:c3:5f:09:03:01:4e:
                    e1:e9:3d:3b:7e:33:cd:35:29:41:45:fc:59:05:b3:
                    ec:19:11:70:31:fc:b9:b1:df:22:d6:06:80:b1:3a:
                    a8:97:e8:a4:e9:7c:c1:36:78:c4:da:ab:a3:62:07:
                    99:b4:0d:0e:e9:a4:f5:bc:1e:c4:d1:66:44:d8:de:
                    ae:86:c5:58:c5:b8:0f:61:0f:1d:c1:b1:ce:42:66:
                    a9:8c:43:1a:2e:1c:b1:1b:d4:b9:96:0a:40:f4:e1:
                    cf:c0:76:f3:83:76:a4:34:aa:87:79:59:3d:c5:61:
                    b5:96:7a:5b:7e:6b:3a:df:0f:47:67:c4:07:7a:63:
                    6c:e4:4a:14:7a:c0:49:57:50:4e:fb:f8:68:f8:dd:
                    d6:49:b6:e3:dc:e1:6f:23:21:aa:96:be:84:5e:85:
                    37:2e:0c:c5:15:d4:aa:81:b3:0b:0d:21:a7:07:21:
                    0f:3a:92:f8:98:98:b4:40:00:60:64:7c:08:71:51:
                    84:dd:cd:27:a6:fc:ea:76:b8:e6:b7:82:3f:84:33:
                    d6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:69:59:BB:27:68:00:4C:90:12:1F:B2:3F:08:24:AC:01:E5:A7:1D
            X509v3 Authority Key Identifier:
                keyid:29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:e4:88:2a:c0:b0:29:4f:35:32:c0:c0:77:a7:6e:1d:25:7f:
         3e:09:1d:89:88:ac:ac:9d:41:bc:06:34:6a:ee:e1:9d:1c:3b:
         05:09:41:ea:b7:8d:2b:4a:09:d3:99:e8:2d:ef:e5:c2:9f:bf:
         d5:b6:c5:e8:17:51:b6:b9:5e:f4:21:17:e9:74:fa:18:1a:60:
         34:30:14:ee:77:8c:cf:89:95:17:3a:d3:86:35:fc:c4:e0:45:
         8d:da:cc:b1:ab:24:ed:1a:58:19:91:9c:3c:7e:4f:9b:c6:4a:
         76:45:29:97:5a:44:db:02:42:fe:cc:c6:9a:52:91:48:76:45:
         f5:9b:3f:e8:f4:56:cf:78:d9:83:d0:e2:a5:e5:d7:a5:14:90:
         22:b4:25:cd:15:73:43:35:16:3e:7d:82:f5:61:f5:98:fb:91:
         59:04:68:a1:0d:57:d8:a9:93:33:db:bb:ed:d1:11:6d:3c:a0:
         51:31:01:1f:a9:99:d3:93:8b:28:bc:b8:32:b8:ab:cd:71:fc:
         14:83:2c:d3:10:a1:ec:e3:f2:a5:03:9a:03:a4:98:6d:7f:17:
         81:37:85:8a:c9:c8:06:43:f2:9d:e8:71:cd:56:cc:4c:13:ec:
         97:65:5a:fd:ae:43:b8:27:36:77:3d:67:e0:78:64:a2:a2:2b:
         58:75:53:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbEJwWVe/2/HHz2m/DcZbPfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ODM4NDFiYzA5ZjFmZDRmZTNkZTk5MTAxNmMwYjcxMjZm
YmE1MmUwHhcNMjUwNTEyMTEwMDEzWhcNMjUwNTEzMTEwMDEzWjAzMTEwLwYDVQQD
EyhiOTY5NTliYjI3NjgwMDRjOTAxMjFmYjIzZjA4MjRhYzAxZTVhNzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PqJKQv2P6Cd/iFP8pjFBqJ5ObPh
6mWYrwMutkF+by5aD1mf7wUZl+Py3qXEbxDzEImsfwfDXwkDAU7h6T07fjPNNSlB
RfxZBbPsGRFwMfy5sd8i1gaAsTqol+ik6XzBNnjE2qujYgeZtA0O6aT1vB7E0WZE
2N6uhsVYxbgPYQ8dwbHOQmapjEMaLhyxG9S5lgpA9OHPwHbzg3akNKqHeVk9xWG1
lnpbfms63w9HZ8QHemNs5EoUesBJV1BO+/ho+N3WSbbj3OFvIyGqlr6EXoU3LgzF
FdSqgbMLDSGnByEPOpL4mJi0QABgZHwIcVGE3c0npvzqdrjmt4I/hDPWpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLlpWbsnaABMkBIfsj8IJKwB5acdMB8GA1UdIwQY
MBaAFCmDhBvAnx/U/j3pkQFsC3Em+6UuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1lPRUc4Q2ZIOVQtUGVtUkFXd0xjU2I3cFM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jYzM3Y2YtYjA1Ni00MWQ5LWI1N2It
MWRkNWRhYjM2ZjlmLzEvS1lPRUc4Q2ZIOVQtUGVtUkFXd0xjU2I3cFM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9jYzM3Y2YtYjA1Ni00MWQ5LWI1N2ItMWRkNWRhYjM2Zjlm
LzEvS1lPRUc4Q2ZIOVQtUGVtUkFXd0xjU2I3cFM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe+SIKsCw
KU81MsDAd6duHSV/PgkdiYisrJ1BvAY0au7hnRw7BQlB6reNK0oJ05noLe/lwp+/
1bbF6BdRtrle9CEX6XT6GBpgNDAU7neMz4mVFzrThjX8xOBFjdrMsask7RpYGZGc
PH5Pm8ZKdkUpl1pE2wJC/szGmlKRSHZF9Zs/6PRWz3jZg9DipeXXpRSQIrQlzRVz
QzUWPn2C9WH1mPuRWQRooQ1X2KmTM9u77dERbTygUTEBH6mZ05OLKLy4MrirzXH8
FIMs0xCh7OPypQOaA6SYbX8XgTeFisnIBkPynehxzVbMTBPsl2Va/a5DuCc2dz1n
4HhkoqIrWHVTRw==
-----END CERTIFICATE-----
Generated at Mon May 12 13:54:14 2025 by rpki-client