Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
File:                     XM3soXHkIseck4wnMqkNSKjFPAY.mft (raw, json)
Hash identifier:          tU9XQ/foedkuBoeZofl2izJMCG+QqlV6ARw9e9vKVhc=
Subject key identifier:   F6:78:BE:4E:54:F9:7E:A5:86:F9:D4:2C:89:EE:24:F0:FC:B7:AD:F5
Authority key identifier: 5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
Certificate issuer:       /CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Certificate serial:       01960F4494CC98098CAB9B7D8045488852EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
Manifest number:          14E5
Signing time:             Mon 07 Apr 2025 08:01:14 +0000
Manifest this update:     Mon 07 Apr 2025 08:01:14 +0000
Manifest next update:     Tue 08 Apr 2025 08:01:14 +0000
Files and hashes:         1: 1ZFRCjoLi_l_VlnDb8o8tJWIa2E.roa (hash: vVgcWoftvDNuMTcgCwdMnGyQwGXGLdFZoBkxUeU+jcg=)
                          2: LxxlY-veNdEFSuClmgliyHMOZOA.roa (hash: eyCm9s0PQeZ1TTpko+C38z1BbPAWbfE1nA0PWObj7+Q=)
                          3: NqBM7SejbvGbff9d0C8tNNMd9cE.roa (hash: NsdFpCr4tDnCXl/0XE2a5AdGU138fFNht03h3yMplDQ=)
                          4: VxT65LZX5OJbZTHZNAIInJvh5YE.roa (hash: FdPAlwlk9S7n3Fuj8UVdtKrTsnGqgq5r13WKEZND4dA=)
                          5: XM3soXHkIseck4wnMqkNSKjFPAY.crl (hash: 7kcR7rSuDZFwLtqjwxjoEMwXXL62Vt0CFH1qQE9T9d4=)
                          6: aa3wYkdpjQEDieV4Tr1D1UlS-yQ.roa (hash: OvNz6w0TsSCTT94cQ7JVYM2YwdlsjARoid2lWLlXj5c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:0f:44:94:cc:98:09:8c:ab:9b:7d:80:45:48:88:52:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
        Validity
            Not Before: Apr  7 08:01:14 2025 GMT
            Not After : Apr  8 08:01:14 2025 GMT
        Subject: CN=f678be4e54f97ea586f9d42c89ee24f0fcb7adf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8b:e6:b4:c9:3c:bd:22:2f:bf:84:35:ab:91:
                    02:72:d8:61:99:31:70:23:05:b7:81:36:31:23:60:
                    da:d3:4d:70:71:ad:d4:65:8e:01:6f:ad:df:f6:05:
                    63:41:7f:b4:9e:94:56:60:5f:09:c2:6f:16:c0:54:
                    66:f9:61:4d:e2:d8:07:45:1a:a4:0e:bf:80:39:4c:
                    80:8b:aa:25:53:fa:47:66:71:cb:63:91:a5:0e:49:
                    c7:34:d4:71:26:58:e9:e7:55:27:10:8b:db:ce:b1:
                    c9:5a:96:87:a7:91:d4:2d:1d:16:99:75:76:51:67:
                    f7:9b:d1:9f:db:95:28:83:a7:d5:2e:57:bf:bf:47:
                    59:81:98:bc:b4:74:b7:4a:f7:30:a0:84:a8:c0:d2:
                    3f:b9:f8:d5:21:aa:ae:a5:e3:5e:0d:41:d4:f8:2c:
                    b6:11:fd:9b:a6:e5:ff:5a:a0:70:ae:72:70:b4:e9:
                    d0:2f:9e:d6:26:64:47:b3:90:b6:8c:7f:77:f8:77:
                    8e:19:2a:79:be:61:ae:44:2b:fc:e7:7b:85:01:fa:
                    3d:93:1c:21:8a:40:8d:b8:91:65:1c:1b:7e:b2:8e:
                    c7:1a:c4:e7:4a:de:f1:3f:25:57:44:14:7a:81:7c:
                    c5:56:e1:89:39:78:90:23:cb:8a:61:23:55:b5:57:
                    d7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:78:BE:4E:54:F9:7E:A5:86:F9:D4:2C:89:EE:24:F0:FC:B7:AD:F5
            X509v3 Authority Key Identifier:
                keyid:5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:53:a9:a7:ea:43:23:1e:84:fe:a1:b3:c5:fd:db:1c:54:ee:
         50:08:70:b2:ea:d9:57:c9:b9:df:fd:33:08:9e:11:ca:15:f2:
         fd:8d:e7:b3:64:08:e2:1e:c7:d3:b5:d9:21:25:13:ee:27:b3:
         30:3a:f7:95:8c:29:72:d5:88:e7:fb:c1:40:b8:91:9a:28:ac:
         f7:9f:04:83:66:ee:c0:e7:7b:ba:b7:33:c9:26:97:e8:7b:0a:
         b4:72:e7:cd:75:e2:d5:9f:34:a4:e8:cd:0c:63:d6:de:64:c1:
         f7:6d:b3:0c:a6:04:bb:c0:20:9f:af:1d:24:40:79:62:3e:3e:
         7c:e2:1d:25:1c:4b:15:18:03:5d:fb:ea:99:63:cd:45:83:aa:
         5f:19:91:5d:05:b0:58:c1:ac:cb:98:90:f6:c9:6c:d7:1f:cb:
         12:0d:47:a5:2b:ab:cc:4b:3c:0d:69:46:d1:c2:e3:b4:53:f8:
         68:4d:27:84:8b:0a:a3:10:76:46:0d:ed:f5:e6:f2:b4:27:59:
         64:5f:40:87:69:b8:ed:59:73:65:76:7d:32:19:77:ef:d2:84:
         ef:66:ca:fe:f8:2a:c2:b5:37:a4:88:55:7b:eb:76:b4:3b:23:
         6a:80:b9:39:f3:4f:49:9c:da:15:32:11:82:99:78:80:41:93:
         66:08:39:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYPRJTMmAmMq5t9gEVIiFLrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjY2RlY2ExNzFlNDIyYzc5YzkzOGMyNzMyYTkwZDQ4YThj
NTNjMDYwHhcNMjUwNDA3MDgwMTE0WhcNMjUwNDA4MDgwMTE0WjAzMTEwLwYDVQQD
EyhmNjc4YmU0ZTU0Zjk3ZWE1ODZmOWQ0MmM4OWVlMjRmMGZjYjdhZGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIvmtMk8vSIvv4Q1q5ECcthhmTFw
IwW3gTYxI2Da001wca3UZY4Bb63f9gVjQX+0npRWYF8Jwm8WwFRm+WFN4tgHRRqk
Dr+AOUyAi6olU/pHZnHLY5GlDknHNNRxJljp51UnEIvbzrHJWpaHp5HULR0WmXV2
UWf3m9Gf25Uog6fVLle/v0dZgZi8tHS3SvcwoISowNI/ufjVIaqupeNeDUHU+Cy2
Ef2bpuX/WqBwrnJwtOnQL57WJmRHs5C2jH93+HeOGSp5vmGuRCv853uFAfo9kxwh
ikCNuJFlHBt+so7HGsTnSt7xPyVXRBR6gXzFVuGJOXiQI8uKYSNVtVfXkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZ4vk5U+X6lhvnULInuJPD8t631MB8GA1UdIwQY
MBaAFFzN7KFx5CLHnJOMJzKpDUioxTwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWE0zc29YSGtJc2VjazR3bk1xa05TS2pGUEFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9iOGY1ZTYtYzk1MS00ZGRiLWI0ZjUt
YTg4MWVjODIyOGI1LzEvWE0zc29YSGtJc2VjazR3bk1xa05TS2pGUEFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9iOGY1ZTYtYzk1MS00ZGRiLWI0ZjUtYTg4MWVjODIyOGI1
LzEvWE0zc29YSGtJc2VjazR3bk1xa05TS2pGUEFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU1Opp+pD
Ix6E/qGzxf3bHFTuUAhwsurZV8m53/0zCJ4RyhXy/Y3ns2QI4h7H07XZISUT7iez
MDr3lYwpctWI5/vBQLiRmiis958Eg2buwOd7urczySaX6HsKtHLnzXXi1Z80pOjN
DGPW3mTB922zDKYEu8Agn68dJEB5Yj4+fOIdJRxLFRgDXfvqmWPNRYOqXxmRXQWw
WMGsy5iQ9sls1x/LEg1HpSurzEs8DWlG0cLjtFP4aE0nhIsKoxB2Rg3t9ebytCdZ
ZF9Ah2m47VlzZXZ9Mhl379KE72bK/vgqwrU3pIhVe+t2tDsjaoC5OfNPSZzaFTIR
gpl4gEGTZgg59A==
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:25:50 2025 by rpki-client