Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.mft
File:                     w1VyK06KSCQKzfXzN4OKogaqAto.mft (raw, json)
Hash identifier:          wQahlW3XQ2qQs8zqN3gHqsbWx42DoCVHxz8xmOo1hzQ=
Subject key identifier:   AB:19:0A:6B:86:5A:CC:2D:3D:03:E2:5C:AB:B5:D0:0E:F8:26:BE:04
Authority key identifier: C3:55:72:2B:4E:8A:48:24:0A:CD:F5:F3:37:83:8A:A2:06:AA:02:DA
Certificate issuer:       /CN=c355722b4e8a48240acdf5f337838aa206aa02da
Certificate serial:       019654C9F354F94B2B7B9703FA6CE5DBDDCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w1VyK06KSCQKzfXzN4OKogaqAto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.mft
Manifest number:          14FC
Signing time:             Sun 20 Apr 2025 20:00:43 +0000
Manifest this update:     Sun 20 Apr 2025 20:00:43 +0000
Manifest next update:     Mon 21 Apr 2025 20:00:43 +0000
Files and hashes:         1: skK36GoSOdR0likALCjbuukKSIA.roa (hash: rM2HKFoUwc02gigzQD8leLnlbHQm3zNCncQ93i9jwp0=)
                          2: w1VyK06KSCQKzfXzN4OKogaqAto.crl (hash: si0RlgkPfSTllN5nrxF2goLUnLaYkZ/ksixA0g/bsgk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w1VyK06KSCQKzfXzN4OKogaqAto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 20:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:54:c9:f3:54:f9:4b:2b:7b:97:03:fa:6c:e5:db:dd:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c355722b4e8a48240acdf5f337838aa206aa02da
        Validity
            Not Before: Apr 20 20:00:43 2025 GMT
            Not After : Apr 21 20:00:43 2025 GMT
        Subject: CN=ab190a6b865acc2d3d03e25cabb5d00ef826be04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7c:3a:fc:ef:e8:db:3b:8f:c3:38:a2:c9:f7:
                    cf:3a:86:c0:9c:ea:c1:74:6b:af:51:f6:6f:8a:ac:
                    3c:6c:5e:ca:ad:c9:8a:7e:f9:bd:13:12:38:66:6b:
                    f6:61:a6:17:a4:73:1c:7a:e0:81:7f:1f:1b:1b:ee:
                    09:92:37:8f:cc:9c:96:2a:4d:ea:a4:36:e9:98:6a:
                    36:e0:0b:18:d4:75:e4:84:0d:d3:de:5a:d4:7b:2f:
                    8a:da:1b:8b:4e:27:0f:6d:95:c5:6f:b3:1f:35:3c:
                    08:1f:a8:41:4a:b0:1d:98:66:ea:f1:bd:46:32:0c:
                    7e:2c:a1:db:48:a0:bd:12:a4:a9:95:ff:0f:5c:3f:
                    84:c7:14:13:51:f5:01:af:79:06:1f:66:41:86:5f:
                    4d:94:1c:e9:13:c3:c0:88:3c:09:16:02:9e:de:43:
                    63:2e:15:f6:00:e6:f7:39:03:07:a7:11:bf:97:53:
                    0f:3c:46:dd:35:6f:28:47:35:0e:97:56:37:b9:4e:
                    44:50:63:09:57:8a:8c:01:5a:3a:0d:3c:40:e5:1a:
                    08:9f:6b:96:22:3f:05:c1:2a:f6:e6:1d:c8:fa:c2:
                    5f:7d:08:38:9f:2c:07:6f:dc:73:df:9e:b5:79:a5:
                    44:ce:2b:5f:53:11:e7:52:f3:b2:07:a7:9a:34:f9:
                    4a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:19:0A:6B:86:5A:CC:2D:3D:03:E2:5C:AB:B5:D0:0E:F8:26:BE:04
            X509v3 Authority Key Identifier:
                keyid:C3:55:72:2B:4E:8A:48:24:0A:CD:F5:F3:37:83:8A:A2:06:AA:02:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1VyK06KSCQKzfXzN4OKogaqAto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:00:66:79:30:ab:c2:f1:65:d8:f2:eb:c9:1b:71:79:b2:51:
         a9:00:b6:7f:32:9c:1f:cc:97:e7:ed:bd:98:51:67:57:5c:1f:
         a0:3c:67:d6:03:15:5f:f9:88:3e:b3:22:de:50:48:f5:79:3a:
         0d:f2:bd:06:ab:e1:e9:7e:93:94:02:cb:71:d3:a9:bb:6d:6c:
         11:ba:78:21:6d:bc:31:21:b2:f3:78:f3:6c:77:f3:71:6b:a0:
         79:ea:39:0c:20:87:62:0b:cd:97:a9:68:cb:25:3b:ac:f9:07:
         8b:50:ba:93:b9:de:ac:aa:5c:bf:3e:e1:7c:98:93:ff:0c:92:
         53:db:0c:a9:4e:d3:78:e5:4b:99:65:1d:9b:f2:eb:75:0f:c9:
         45:9b:4f:e3:5b:15:f2:cd:04:09:b5:2b:ab:7e:ad:ae:61:05:
         52:51:31:d6:96:e0:c5:8b:96:7f:e8:9e:64:79:39:ac:4f:02:
         ed:db:5b:ab:b4:e9:80:87:8f:ee:e9:14:18:92:04:ac:35:94:
         db:d3:a4:bc:d2:33:a6:f8:9d:62:f9:c1:99:21:7c:af:97:49:
         82:e1:a9:b1:9b:62:58:d0:c1:8f:76:de:12:28:ae:58:04:6e:
         8d:2a:f5:ad:69:29:d9:36:d1:e5:c1:bb:f1:b7:9f:77:90:e1:
         53:9f:31:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUyfNU+Usre5cD+mzl293PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNTU3MjJiNGU4YTQ4MjQwYWNkZjVmMzM3ODM4YWEyMDZh
YTAyZGEwHhcNMjUwNDIwMjAwMDQzWhcNMjUwNDIxMjAwMDQzWjAzMTEwLwYDVQQD
EyhhYjE5MGE2Yjg2NWFjYzJkM2QwM2UyNWNhYmI1ZDAwZWY4MjZiZTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXw6/O/o2zuPwziiyffPOobAnOrB
dGuvUfZviqw8bF7KrcmKfvm9ExI4Zmv2YaYXpHMceuCBfx8bG+4JkjePzJyWKk3q
pDbpmGo24AsY1HXkhA3T3lrUey+K2huLTicPbZXFb7MfNTwIH6hBSrAdmGbq8b1G
Mgx+LKHbSKC9EqSplf8PXD+ExxQTUfUBr3kGH2ZBhl9NlBzpE8PAiDwJFgKe3kNj
LhX2AOb3OQMHpxG/l1MPPEbdNW8oRzUOl1Y3uU5EUGMJV4qMAVo6DTxA5RoIn2uW
Ij8FwSr25h3I+sJffQg4nywHb9xz3561eaVEzitfUxHnUvOyB6eaNPlK6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsZCmuGWswtPQPiXKu10A74Jr4EMB8GA1UdIwQY
MBaAFMNVcitOikgkCs318zeDiqIGqgLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzFWeUswNktTQ1FLemZYek40T0tvZ2FxQXRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xZTk5NTgtOWZmMi00MTIzLTliNWYt
YTJlZjkwYzllOTEzLzEvdzFWeUswNktTQ1FLemZYek40T0tvZ2FxQXRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8xZTk5NTgtOWZmMi00MTIzLTliNWYtYTJlZjkwYzllOTEz
LzEvdzFWeUswNktTQ1FLemZYek40T0tvZ2FxQXRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsQBmeTCr
wvFl2PLryRtxebJRqQC2fzKcH8yX5+29mFFnV1wfoDxn1gMVX/mIPrMi3lBI9Xk6
DfK9Bqvh6X6TlALLcdOpu21sEbp4IW28MSGy83jzbHfzcWugeeo5DCCHYgvNl6lo
yyU7rPkHi1C6k7nerKpcvz7hfJiT/wySU9sMqU7TeOVLmWUdm/LrdQ/JRZtP41sV
8s0ECbUrq36trmEFUlEx1pbgxYuWf+ieZHk5rE8C7dtbq7TpgIeP7ukUGJIErDWU
29OkvNIzpvidYvnBmSF8r5dJguGpsZtiWNDBj3beEiiuWARujSr1rWkp2TbR5cG7
8befd5DhU58xpA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:31:05 2025 by rpki-client