Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
File:                     eH4xzl1QHRqUr9q71OAkzCp4jvU.mft (raw, json)
Hash identifier:          ctZ7+OWBFWLG+cABeLWsR7jNTFAJXDLkh5MUKvwinI8=
Subject key identifier:   29:87:06:61:55:34:2D:37:01:CF:8D:C2:65:CA:3F:FE:CD:58:63:EA
Authority key identifier: 78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5
Certificate issuer:       /CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5
Certificate serial:       0196BF6F321020FD2E7B94E70073FE1802D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
Manifest number:          1538
Signing time:             Sun 11 May 2025 13:00:57 +0000
Manifest this update:     Sun 11 May 2025 13:00:57 +0000
Manifest next update:     Mon 12 May 2025 13:00:57 +0000
Files and hashes:         1: GrkcftVthMbuFOuUmrwl5HnX76A.roa (hash: vQYdY8EKtEz2Hu89OKKocq2BRdvKpSXmSdv2pqjq+sg=)
                          2: JGZf0kINrFpmjWepb2PsAYcmWTs.roa (hash: U1eRU67s2DvJxllsDjz9sUyozODDDexgknm9DQzTkEA=)
                          3: WRR5LY8_1pJUgURwLaVmIo-E2-o.roa (hash: +qrg2tL2ng6DI1UCOg4tOsQWLYbjmu9xrdicU5ox5vQ=)
                          4: aTmEQc7rZSqiS9xlo8D5J910hiA.roa (hash: gp8EnuKJWDEH/vTaQx7oV8ya6rcqLHa/Gr9Zkh0GUXA=)
                          5: eH4xzl1QHRqUr9q71OAkzCp4jvU.crl (hash: ZUrKPxozqgPC3unKw8srKP0TZojYKRCzo7XJ1hcNflA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 13:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:6f:32:10:20:fd:2e:7b:94:e7:00:73:fe:18:02:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5
        Validity
            Not Before: May 11 13:00:57 2025 GMT
            Not After : May 12 13:00:57 2025 GMT
        Subject: CN=2987066155342d3701cf8dc265ca3ffecd5863ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:de:70:9e:ee:a1:98:76:15:2d:d4:79:df:d0:
                    51:19:a3:b6:a4:eb:7d:f6:d0:01:86:26:88:3d:4f:
                    c8:99:29:ef:40:11:d0:2a:49:8f:f2:96:c8:5f:84:
                    1b:82:38:00:7e:3a:d5:d1:38:a5:24:2a:43:82:92:
                    9a:1e:2d:d1:65:f0:1b:61:2d:06:a7:28:61:89:b6:
                    25:03:e4:e6:e4:a0:93:fb:4d:3e:5d:c8:42:ce:a8:
                    7c:d3:97:83:0a:8e:c6:0e:88:a3:ad:34:88:54:8a:
                    97:2d:dc:cf:b8:94:d0:ea:1b:3d:77:e5:3f:fc:f7:
                    24:d8:52:7a:cd:19:cf:d6:78:2e:c9:97:df:0f:df:
                    4d:99:8e:1a:44:46:d9:c0:b8:84:17:75:06:cd:3f:
                    32:41:97:51:d1:44:cc:12:69:52:17:90:0b:fe:81:
                    8d:3c:a8:b0:b8:40:ff:09:cd:1e:0a:1a:dc:9e:a5:
                    04:ec:95:65:a5:cb:75:67:46:13:76:bb:ff:7f:dc:
                    f4:70:69:c4:69:bb:14:98:d8:50:1a:55:db:f8:94:
                    1e:74:56:ce:c4:7c:ec:e0:7c:3a:ec:b1:0c:5a:9a:
                    ab:fd:a6:05:dc:63:96:ca:c4:34:e3:50:b8:59:00:
                    3b:20:43:60:27:37:2a:f4:0e:28:0e:9d:d5:c9:8b:
                    24:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:87:06:61:55:34:2D:37:01:CF:8D:C2:65:CA:3F:FE:CD:58:63:EA
            X509v3 Authority Key Identifier:
                keyid:78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:59:6a:26:cd:0c:b3:e8:1e:3f:58:3d:bb:b8:80:96:f4:14:
         d5:4e:94:e1:ce:a0:7c:4b:4b:74:a1:85:08:79:77:dd:96:6a:
         e2:91:55:5b:a9:2a:d7:7a:0f:45:44:44:a3:33:8c:70:a1:bf:
         77:9f:23:d4:82:14:49:a6:7a:fa:e2:1b:dd:fd:5b:dd:ef:a0:
         ec:80:91:56:fe:06:37:9a:8d:86:b6:2c:c5:88:1a:6c:f5:67:
         ea:d6:77:40:99:55:70:b0:cc:67:dd:70:7c:6e:37:6f:44:5a:
         99:ae:d0:c3:bd:3e:ec:4e:e3:2e:99:f8:c7:32:11:d2:67:29:
         53:8a:89:8d:90:66:8c:a3:5a:fd:42:09:c5:31:0f:63:9b:64:
         62:b5:d6:71:f1:d3:da:5e:92:a5:cc:01:8e:d8:f4:81:fd:c8:
         55:d1:39:77:d4:4f:50:d7:a5:20:4e:11:d7:2b:da:43:4b:c0:
         88:ad:99:2d:ae:3a:6e:8e:38:b2:41:6f:fe:b0:69:ef:fe:7e:
         d3:43:a8:7c:3d:47:1e:43:7e:7f:77:ca:d9:37:00:8a:4a:1c:
         69:02:c4:39:b0:48:c0:26:a3:16:bb:ce:bd:37:5a:0c:f5:25:
         4f:73:5d:85:9a:8a:78:9c:6c:e8:04:3e:77:c3:7f:b9:30:42:
         58:68:b0:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/bzIQIP0ue5TnAHP+GALRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4N2UzMWNlNWQ1MDFkMWE5NGFmZGFiYmQ0ZTAyNGNjMmE3
ODhlZjUwHhcNMjUwNTExMTMwMDU3WhcNMjUwNTEyMTMwMDU3WjAzMTEwLwYDVQQD
EygyOTg3MDY2MTU1MzQyZDM3MDFjZjhkYzI2NWNhM2ZmZWNkNTg2M2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApN5wnu6hmHYVLdR539BRGaO2pOt9
9tABhiaIPU/ImSnvQBHQKkmP8pbIX4QbgjgAfjrV0TilJCpDgpKaHi3RZfAbYS0G
pyhhibYlA+Tm5KCT+00+XchCzqh805eDCo7GDoijrTSIVIqXLdzPuJTQ6hs9d+U/
/Pck2FJ6zRnP1nguyZffD99NmY4aREbZwLiEF3UGzT8yQZdR0UTMEmlSF5AL/oGN
PKiwuED/Cc0eChrcnqUE7JVlpct1Z0YTdrv/f9z0cGnEabsUmNhQGlXb+JQedFbO
xHzs4Hw67LEMWpqr/aYF3GOWysQ041C4WQA7IENgJzcq9A4oDp3VyYsk8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCmHBmFVNC03Ac+NwmXKP/7NWGPqMB8GA1UdIwQY
MBaAFHh+Mc5dUB0alK/au9TgJMwqeI71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUg0eHpsMVFIUnFVcjlxNzFPQWt6Q3A0anZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83YzU1ZDItMzgxYy00ZTg3LThjYTUt
MjMwN2JiNTkyMjVmLzEvZUg0eHpsMVFIUnFVcjlxNzFPQWt6Q3A0anZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi83YzU1ZDItMzgxYy00ZTg3LThjYTUtMjMwN2JiNTkyMjVm
LzEvZUg0eHpsMVFIUnFVcjlxNzFPQWt6Q3A0anZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp1lqJs0M
s+geP1g9u7iAlvQU1U6U4c6gfEtLdKGFCHl33ZZq4pFVW6kq13oPRUREozOMcKG/
d58j1IIUSaZ6+uIb3f1b3e+g7ICRVv4GN5qNhrYsxYgabPVn6tZ3QJlVcLDMZ91w
fG43b0Rama7Qw70+7E7jLpn4xzIR0mcpU4qJjZBmjKNa/UIJxTEPY5tkYrXWcfHT
2l6SpcwBjtj0gf3IVdE5d9RPUNelIE4R1yvaQ0vAiK2ZLa46bo44skFv/rBp7/5+
00OofD1HHkN+f3fK2TcAikocaQLEObBIwCajFrvOvTdaDPUlT3NdhZqKeJxs6AQ+
d8N/uTBCWGiwBA==
-----END CERTIFICATE-----
Generated at Sun May 11 22:17:15 2025 by rpki-client