Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.mft
File:                     4VhJEBJK93bjDlrPBV1rrhdhpTY.mft (raw, json)
Hash identifier:          52yOduyMCqD5vbOa0a8Ya0IQmQPqTE9SMkN2NXO5IE0=
Subject key identifier:   5F:A1:B0:08:0F:32:A9:D9:62:B1:FE:67:90:59:AC:73:DA:F0:C7:2C
Authority key identifier: E1:58:49:10:12:4A:F7:76:E3:0E:5A:CF:05:5D:6B:AE:17:61:A5:36
Certificate issuer:       /CN=e1584910124af776e30e5acf055d6bae1761a536
Certificate serial:       0196C2390D2C6FEA182A8C49BCB625E3D57D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.mft
Manifest number:          0A23
Signing time:             Mon 12 May 2025 02:00:40 +0000
Manifest this update:     Mon 12 May 2025 02:00:40 +0000
Manifest next update:     Tue 13 May 2025 02:00:40 +0000
Files and hashes:         1: 4VhJEBJK93bjDlrPBV1rrhdhpTY.crl (hash: yNpFEq2E6ybZo2kfC7fNEPuQ9iuJ8W46l4b2A2Pwdt8=)
                          2: FYVKqcf4TLt5l_nECN8Q3YrnHV8.roa (hash: wVS2RJnxIK54lkzq6flASzNiEFd2go/wiBjtoCVLPnw=)
                          3: pV9NJLxdi4jqw_UmIw3qNFIfWPE.roa (hash: JcjmMNBvioeNG+wkxM3r1KDyWfSA64pDYh6jv6Qb2JI=)
                          4: zTNz5q56WyGtwKzYlcHUYQPhEqU.roa (hash: KL+PDxc9WFQD8wrSMYnMHzYnKzeF40iSXkJ1EtPgaHE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 02:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:39:0d:2c:6f:ea:18:2a:8c:49:bc:b6:25:e3:d5:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1584910124af776e30e5acf055d6bae1761a536
        Validity
            Not Before: May 12 02:00:40 2025 GMT
            Not After : May 13 02:00:40 2025 GMT
        Subject: CN=5fa1b0080f32a9d962b1fe679059ac73daf0c72c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c7:28:ed:d0:8e:1c:71:be:15:0c:d5:a8:b7:
                    a6:c6:54:6e:27:f4:58:4b:3e:17:aa:9b:8e:ca:bb:
                    11:cb:b7:79:5a:94:a3:da:4a:6c:36:38:d4:11:a9:
                    11:b2:d3:0e:74:12:57:c5:d8:04:66:c8:cb:c0:f7:
                    2a:d8:5b:25:d7:c6:62:91:31:29:d0:f2:7c:ad:d3:
                    75:d5:be:69:16:81:cd:aa:57:f1:ad:b4:5d:8a:fe:
                    de:ee:38:d1:12:6b:10:85:0c:65:e8:53:ed:34:41:
                    7e:59:a9:8d:06:eb:53:09:92:1f:1c:34:13:58:f5:
                    05:3b:4d:40:52:09:c8:04:0c:50:ac:87:a0:7e:0f:
                    15:c5:9c:51:4e:57:7d:40:8e:e4:c2:97:1a:aa:fb:
                    80:9e:29:04:5c:c4:b2:88:a3:06:9d:1d:e9:fb:27:
                    31:5b:24:0e:d2:cb:af:13:be:e1:f9:c3:a4:04:ff:
                    bb:42:3a:11:24:81:7a:9b:f6:1a:54:dc:ce:1d:bd:
                    d2:31:de:21:af:bf:85:02:78:ca:45:db:e9:68:87:
                    44:b3:44:08:5a:1a:60:95:06:8f:99:75:c0:9e:e7:
                    e5:11:28:66:06:b7:fb:d9:01:6d:f2:f6:73:12:d4:
                    df:e5:5d:03:14:11:1b:d0:aa:2b:d6:69:3f:08:55:
                    c0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A1:B0:08:0F:32:A9:D9:62:B1:FE:67:90:59:AC:73:DA:F0:C7:2C
            X509v3 Authority Key Identifier:
                keyid:E1:58:49:10:12:4A:F7:76:E3:0E:5A:CF:05:5D:6B:AE:17:61:A5:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:0f:25:29:5f:fc:51:a6:88:07:d7:aa:9d:68:74:0f:61:a7:
         82:82:72:5d:54:2b:e6:6f:4c:23:0a:24:21:09:cf:b7:fd:27:
         31:67:e3:95:d4:cf:b9:94:89:8a:cb:4d:36:36:9c:ce:db:57:
         cf:94:f4:fa:45:46:69:07:92:ae:ae:4b:5a:9f:b5:c0:57:57:
         c4:8d:7a:f5:a3:ec:07:dd:94:4d:0c:df:ce:5f:4c:c9:65:b2:
         ec:6a:e9:7d:33:36:c3:94:8d:a7:6d:68:ec:3c:3e:94:81:5e:
         f7:f8:73:26:95:5a:c8:68:98:80:d2:e0:1f:30:47:55:8d:8e:
         c3:a3:5c:25:30:92:da:44:87:89:e2:5e:5e:7c:74:c9:f5:57:
         43:ab:88:6f:33:9b:0c:29:87:bc:c9:40:28:4b:3b:95:39:f9:
         53:64:d1:38:d3:3a:fb:e3:e9:e7:e1:47:54:c6:d5:d0:ef:75:
         43:a7:f7:1f:e8:ce:ee:97:05:da:bf:90:cd:97:1e:ce:e8:ee:
         29:6b:5d:99:fe:62:1e:38:3f:85:05:69:6c:5e:0e:8f:01:ed:
         93:0b:d0:19:5b:06:34:83:c2:78:ad:55:58:51:4a:bc:bd:c4:
         b4:c0:1f:d2:69:73:e7:89:38:e3:4a:ad:9f:48:c9:52:87:47:
         cb:1e:e8:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCOQ0sb+oYKoxJvLYl49V9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNTg0OTEwMTI0YWY3NzZlMzBlNWFjZjA1NWQ2YmFlMTc2
MWE1MzYwHhcNMjUwNTEyMDIwMDQwWhcNMjUwNTEzMDIwMDQwWjAzMTEwLwYDVQQD
Eyg1ZmExYjAwODBmMzJhOWQ5NjJiMWZlNjc5MDU5YWM3M2RhZjBjNzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcco7dCOHHG+FQzVqLemxlRuJ/RY
Sz4XqpuOyrsRy7d5WpSj2kpsNjjUEakRstMOdBJXxdgEZsjLwPcq2Fsl18ZikTEp
0PJ8rdN11b5pFoHNqlfxrbRdiv7e7jjREmsQhQxl6FPtNEF+WamNButTCZIfHDQT
WPUFO01AUgnIBAxQrIegfg8VxZxRTld9QI7kwpcaqvuAnikEXMSyiKMGnR3p+ycx
WyQO0suvE77h+cOkBP+7QjoRJIF6m/YaVNzOHb3SMd4hr7+FAnjKRdvpaIdEs0QI
WhpglQaPmXXAnuflEShmBrf72QFt8vZzEtTf5V0DFBEb0Kor1mk/CFXA5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+hsAgPMqnZYrH+Z5BZrHPa8McsMB8GA1UdIwQY
MBaAFOFYSRASSvd24w5azwVda64XYaU2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFZoSkVCSks5M2JqRGxyUEJWMXJyaGRocFRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83MjE1ZTAtOWFiOC00YTEzLWE2MDUt
MzFhYjMyZmY3YzY4LzEvNFZoSkVCSks5M2JqRGxyUEJWMXJyaGRocFRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi83MjE1ZTAtOWFiOC00YTEzLWE2MDUtMzFhYjMyZmY3YzY4
LzEvNFZoSkVCSks5M2JqRGxyUEJWMXJyaGRocFRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOg8lKV/8
UaaIB9eqnWh0D2GngoJyXVQr5m9MIwokIQnPt/0nMWfjldTPuZSJistNNjaczttX
z5T0+kVGaQeSrq5LWp+1wFdXxI169aPsB92UTQzfzl9MyWWy7GrpfTM2w5SNp21o
7Dw+lIFe9/hzJpVayGiYgNLgHzBHVY2Ow6NcJTCS2kSHieJeXnx0yfVXQ6uIbzOb
DCmHvMlAKEs7lTn5U2TRONM6++Pp5+FHVMbV0O91Q6f3H+jO7pcF2r+QzZcezuju
KWtdmf5iHjg/hQVpbF4OjwHtkwvQGVsGNIPCeK1VWFFKvL3EtMAf0mlz54k440qt
n0jJUodHyx7oRA==
-----END CERTIFICATE-----
Generated at Mon May 12 12:00:12 2025 by rpki-client