Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft
File:                     yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft (raw, json)
Hash identifier:          dqYuUH/oEGcNFOKcgMnWVNCSxS75WB+ImxoW1dq4mJo=
Subject key identifier:   5A:8E:28:B8:2E:1D:3C:8F:B8:60:32:32:D3:1D:79:32:23:44:AF:2F
Authority key identifier: C8:47:58:05:3A:0C:4C:6D:5E:00:3F:3C:86:9A:89:E4:F2:A9:E1:77
Certificate issuer:       /CN=c84758053a0c4c6d5e003f3c869a89e4f2a9e177
Certificate serial:       0196A5E628BD0247C27DD6F51455FFF5CA9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yEdYBToMTG1eAD88hpqJ5PKp4Xc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft
Manifest number:          0BB4
Signing time:             Tue 06 May 2025 14:00:46 +0000
Manifest this update:     Tue 06 May 2025 14:00:46 +0000
Manifest next update:     Wed 07 May 2025 14:00:46 +0000
Files and hashes:         1: _Z27vdbVNx1AkVs4_tUBUqOLYnE.roa (hash: GcXnOCS0CtBJVhbx+3s+RdmGrB9WpH4rUku+ZZjo1A8=)
                          2: yEdYBToMTG1eAD88hpqJ5PKp4Xc.crl (hash: PfaCohjZttaJFldNL574Pxh46erRseb4Lr1ixU8nzNg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yEdYBToMTG1eAD88hpqJ5PKp4Xc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 14:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a5:e6:28:bd:02:47:c2:7d:d6:f5:14:55:ff:f5:ca:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84758053a0c4c6d5e003f3c869a89e4f2a9e177
        Validity
            Not Before: May  6 14:00:46 2025 GMT
            Not After : May  7 14:00:46 2025 GMT
        Subject: CN=5a8e28b82e1d3c8fb8603232d31d79322344af2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a2:37:5c:dd:12:ea:06:49:9b:71:3b:01:8f:
                    80:66:a9:3e:e0:50:bb:cc:9f:83:6c:0f:72:1e:64:
                    7b:0c:7d:07:c0:16:9a:79:1f:a9:78:7f:78:71:01:
                    82:87:fc:45:e2:b6:78:96:00:87:94:8e:d8:6a:b3:
                    5c:05:eb:81:8f:7d:1b:f6:1b:62:a7:7f:8e:98:67:
                    b3:cc:86:da:53:99:f6:d1:a5:db:e1:0e:71:44:94:
                    24:3f:6e:01:c1:ac:31:19:85:18:35:1d:4a:a0:62:
                    1a:b8:2f:84:da:33:87:e3:37:d9:8c:7f:c4:92:e7:
                    ca:9d:12:be:f2:8a:80:bd:e1:14:01:dc:1a:9f:ce:
                    17:39:68:e5:1d:21:c5:f8:b7:0f:e1:97:e2:3e:ef:
                    ae:9d:e9:23:bd:f4:d3:f6:d0:16:3d:52:89:f6:e8:
                    d8:2d:a9:9e:dc:a6:9e:88:b8:bd:4a:d3:e6:78:38:
                    44:83:24:a7:ca:06:cb:8f:e3:7e:51:d9:cf:32:66:
                    ad:72:2f:44:cd:4e:50:8b:28:da:23:a2:05:52:13:
                    4a:a0:87:b5:77:5d:7a:99:16:5f:91:e7:56:13:43:
                    df:c6:67:36:49:a8:2c:77:a5:47:d6:b7:76:6b:fa:
                    92:c0:64:7a:9e:b6:88:f7:6b:d7:e5:2f:31:ac:0b:
                    63:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:8E:28:B8:2E:1D:3C:8F:B8:60:32:32:D3:1D:79:32:23:44:AF:2F
            X509v3 Authority Key Identifier:
                keyid:C8:47:58:05:3A:0C:4C:6D:5E:00:3F:3C:86:9A:89:E4:F2:A9:E1:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yEdYBToMTG1eAD88hpqJ5PKp4Xc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:f4:ea:6f:9c:d4:9c:67:56:f2:48:ac:31:e6:06:36:46:7f:
         85:2e:39:79:4b:1a:71:31:0e:39:56:46:2b:69:11:12:ee:a1:
         33:fe:b6:83:c6:d9:da:16:07:25:8e:c9:49:6b:21:49:84:1d:
         88:74:36:d7:32:9b:02:f4:46:4a:71:eb:a0:3d:e0:ae:dc:db:
         35:f8:9d:ca:41:00:ea:bf:5c:8e:4c:c2:e1:a2:e7:2c:0e:11:
         16:4b:b6:d5:ee:51:dc:65:23:91:08:d4:2d:b9:ac:16:07:87:
         b7:62:c9:04:7e:15:67:78:91:35:9f:b5:8a:ac:ea:0b:4e:80:
         4b:73:06:ab:69:c7:d3:f7:de:09:49:e1:7a:44:c7:77:96:a2:
         4c:cc:f7:68:94:5b:68:d6:34:38:eb:f3:1c:38:ba:58:d2:b0:
         63:55:80:a0:5e:e2:92:b1:d8:1c:49:74:96:9e:b0:ba:f7:b3:
         6e:a4:e4:2d:ae:ac:f7:17:2a:b4:c2:1f:03:68:11:ad:53:61:
         d9:c7:aa:fb:23:66:35:8e:1d:0a:6c:33:e7:6b:ae:bb:0d:b9:
         73:9f:9f:59:c4:34:20:1a:17:4c:46:7d:10:b9:a7:9f:fe:46:
         9e:7f:b6:0f:ba:ef:d0:9c:d9:ad:1f:ac:a5:46:9a:be:67:45:
         7c:e3:8d:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZal5ii9AkfCfdb1FFX/9cqeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NDc1ODA1M2EwYzRjNmQ1ZTAwM2YzYzg2OWE4OWU0ZjJh
OWUxNzcwHhcNMjUwNTA2MTQwMDQ2WhcNMjUwNTA3MTQwMDQ2WjAzMTEwLwYDVQQD
Eyg1YThlMjhiODJlMWQzYzhmYjg2MDMyMzJkMzFkNzkzMjIzNDRhZjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKI3XN0S6gZJm3E7AY+AZqk+4FC7
zJ+DbA9yHmR7DH0HwBaaeR+peH94cQGCh/xF4rZ4lgCHlI7YarNcBeuBj30b9hti
p3+OmGezzIbaU5n20aXb4Q5xRJQkP24BwawxGYUYNR1KoGIauC+E2jOH4zfZjH/E
kufKnRK+8oqAveEUAdwan84XOWjlHSHF+LcP4ZfiPu+unekjvfTT9tAWPVKJ9ujY
Lame3KaeiLi9StPmeDhEgySnygbLj+N+UdnPMmatci9EzU5QiyjaI6IFUhNKoIe1
d116mRZfkedWE0Pfxmc2Sagsd6VH1rd2a/qSwGR6nraI92vX5S8xrAtj7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqOKLguHTyPuGAyMtMdeTIjRK8vMB8GA1UdIwQY
MBaAFMhHWAU6DExtXgA/PIaaieTyqeF3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUVkWUJUb01URzFlQUQ4OGhwcUo1UEtwNFhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mMDhkOWMtNWNhOS00ZTUzLTk3ZTMt
OWFmMmNiNWRjY2YzLzEveUVkWUJUb01URzFlQUQ4OGhwcUo1UEtwNFhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9mMDhkOWMtNWNhOS00ZTUzLTk3ZTMtOWFmMmNiNWRjY2Yz
LzEveUVkWUJUb01URzFlQUQ4OGhwcUo1UEtwNFhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADfTqb5zU
nGdW8kisMeYGNkZ/hS45eUsacTEOOVZGK2kREu6hM/62g8bZ2hYHJY7JSWshSYQd
iHQ21zKbAvRGSnHroD3grtzbNfidykEA6r9cjkzC4aLnLA4RFku21e5R3GUjkQjU
LbmsFgeHt2LJBH4VZ3iRNZ+1iqzqC06AS3MGq2nH0/feCUnhekTHd5aiTMz3aJRb
aNY0OOvzHDi6WNKwY1WAoF7ikrHYHEl0lp6wuvezbqTkLa6s9xcqtMIfA2gRrVNh
2ceq+yNmNY4dCmwz52uuuw25c5+fWcQ0IBoXTEZ9ELmnn/5Gnn+2D7rv0JzZrR+s
pUaavmdFfOONwg==
-----END CERTIFICATE-----
Generated at Wed May 7 00:06:33 2025 by rpki-client