Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
File:                     d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft (raw, json)
Hash identifier:          fI4IqK1DfNlj0Nc7nr1FoHNBaNygePj+l/yYOVn6yx0=
Subject key identifier:   B4:9D:64:9E:FE:9B:F6:67:F9:7A:08:F7:3B:99:4A:CF:63:FA:F8:0B
Authority key identifier: 77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1
Certificate issuer:       /CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1
Certificate serial:       01958BF2787953F6B7CB1E7BDD45A48C6A54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
Manifest number:          0B7B
Signing time:             Wed 12 Mar 2025 20:01:18 +0000
Manifest this update:     Wed 12 Mar 2025 20:01:18 +0000
Manifest next update:     Thu 13 Mar 2025 20:01:18 +0000
Files and hashes:         1: 3fVp55RM8WJ-CAkYXQzPen4QsPU.roa (hash: GhSbT3tbIT6J4s8weD/xKmKS+sqFk4JjUnduge7t9L0=)
                          2: d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl (hash: KdEr6hHDNgwa5fx7ukhPmZ6EeZrGxk3L78lYjiU5N+k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:f2:78:79:53:f6:b7:cb:1e:7b:dd:45:a4:8c:6a:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1
        Validity
            Not Before: Mar 12 20:01:18 2025 GMT
            Not After : Mar 13 20:01:18 2025 GMT
        Subject: CN=b49d649efe9bf667f97a08f73b994acf63faf80b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:89:31:9a:02:92:c3:4d:da:a5:dc:01:6e:dd:
                    8c:34:2d:2d:02:1c:3b:bc:9d:2e:a4:e3:64:58:7f:
                    b5:63:5d:6a:ec:b8:79:05:92:54:22:5a:96:6a:b5:
                    e3:2f:a6:ad:e1:4f:0d:d2:c8:d4:aa:1d:cd:89:38:
                    1b:d9:d7:f2:38:fb:aa:1a:60:90:29:86:d4:e5:48:
                    49:af:d6:3b:78:c7:0d:3a:c2:8b:c1:2e:f5:f7:91:
                    c5:94:69:86:f5:9f:26:07:10:09:0f:7c:2c:20:a2:
                    9d:df:c1:a6:51:f5:1f:1b:b2:9d:87:cf:37:5a:ca:
                    81:f8:07:f5:58:62:6e:f1:ca:f2:18:ef:d3:90:42:
                    3b:e5:e1:45:b5:ce:ae:e7:20:85:b8:87:1d:ee:db:
                    b6:5f:84:ed:4d:bb:db:3e:2d:3a:0d:6c:02:ae:66:
                    e3:05:aa:b8:42:5d:34:8a:35:84:5e:89:48:c8:30:
                    6c:ef:71:0f:dc:69:5a:96:54:09:dc:45:1f:17:db:
                    cd:00:7e:ff:97:3d:0f:6c:79:dd:01:6a:c6:70:4b:
                    c7:7b:20:84:72:ed:25:c6:1f:82:91:b3:70:27:ff:
                    d4:06:27:0f:e3:ff:18:51:0e:0c:89:cc:c7:2a:09:
                    fc:34:a9:90:b0:1d:f8:16:da:89:d5:1b:dc:da:9a:
                    a4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:9D:64:9E:FE:9B:F6:67:F9:7A:08:F7:3B:99:4A:CF:63:FA:F8:0B
            X509v3 Authority Key Identifier:
                keyid:77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:21:c2:f9:2b:dd:89:f7:36:5c:8a:74:88:fc:80:0b:00:47:
         45:ee:74:f3:bb:4c:e2:72:63:43:d8:e0:84:1a:52:55:d8:fd:
         f0:44:2a:da:d8:a8:ea:4d:50:43:84:c4:18:25:c4:87:62:49:
         f0:27:32:37:6f:09:2f:f8:80:f8:d5:24:2f:f2:db:ba:fc:59:
         8e:5f:a8:bd:25:6d:18:d6:ab:0f:39:52:91:ee:3c:20:dc:05:
         a4:aa:70:e8:cd:c2:6d:46:c5:3d:00:d1:ae:b3:83:8c:58:fc:
         0e:6f:8f:c0:71:5e:84:47:69:2e:25:3e:13:f2:ed:ca:39:7c:
         a2:8d:a9:ad:3b:a1:43:16:20:56:a9:9c:1b:4c:e1:eb:22:e0:
         ca:44:fa:57:31:d7:22:a1:a3:68:d8:e1:d6:27:0c:07:bb:f8:
         f9:3b:5d:d2:ee:49:58:5f:0b:f2:b9:81:8a:49:cd:b6:56:ac:
         be:dc:98:9c:69:a0:17:fd:35:bb:56:0a:59:9f:0d:d9:f4:97:
         7b:fe:1f:94:4e:bd:3e:13:1b:d0:7a:d5:d4:f0:20:2a:1c:23:
         3f:60:ff:aa:26:c4:0f:4c:e7:34:cc:b2:52:db:56:df:be:66:
         0c:e5:39:80:6e:60:a4:77:f4:ca:b4:44:fe:c8:d4:bd:39:e6:
         3d:e6:21:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWL8nh5U/a3yx573UWkjGpUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YTM1MGQ5ZmU0ZTlmOTBmZjNlODRlMmY5NjBjYjVkYzNk
NmNlZTEwHhcNMjUwMzEyMjAwMTE4WhcNMjUwMzEzMjAwMTE4WjAzMTEwLwYDVQQD
EyhiNDlkNjQ5ZWZlOWJmNjY3Zjk3YTA4ZjczYjk5NGFjZjYzZmFmODBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4kxmgKSw03apdwBbt2MNC0tAhw7
vJ0upONkWH+1Y11q7Lh5BZJUIlqWarXjL6at4U8N0sjUqh3NiTgb2dfyOPuqGmCQ
KYbU5UhJr9Y7eMcNOsKLwS7195HFlGmG9Z8mBxAJD3wsIKKd38GmUfUfG7Kdh883
WsqB+Af1WGJu8cryGO/TkEI75eFFtc6u5yCFuIcd7tu2X4TtTbvbPi06DWwCrmbj
Baq4Ql00ijWEXolIyDBs73EP3GlallQJ3EUfF9vNAH7/lz0PbHndAWrGcEvHeyCE
cu0lxh+CkbNwJ//UBicP4/8YUQ4MiczHKgn8NKmQsB34FtqJ1Rvc2pqkNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSdZJ7+m/Zn+XoI9zuZSs9j+vgLMB8GA1UdIwQY
MBaAFHejUNn+Tp+Q/z6E4vlgy13D1s7hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDZOUTJmNU9uNURfUG9UaS1XRExYY1BXenVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84YmM0NGItNWQ1YS00YjU0LWFiOTEt
ZGExYzUxNWU1YjI5LzEvZDZOUTJmNU9uNURfUG9UaS1XRExYY1BXenVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS84YmM0NGItNWQ1YS00YjU0LWFiOTEtZGExYzUxNWU1YjI5
LzEvZDZOUTJmNU9uNURfUG9UaS1XRExYY1BXenVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATiHC+Svd
ifc2XIp0iPyACwBHRe5087tM4nJjQ9jghBpSVdj98EQq2tio6k1QQ4TEGCXEh2JJ
8CcyN28JL/iA+NUkL/LbuvxZjl+ovSVtGNarDzlSke48INwFpKpw6M3CbUbFPQDR
rrODjFj8Dm+PwHFehEdpLiU+E/Ltyjl8oo2prTuhQxYgVqmcG0zh6yLgykT6VzHX
IqGjaNjh1icMB7v4+Ttd0u5JWF8L8rmBiknNtlasvtyYnGmgF/01u1YKWZ8N2fSX
e/4flE69PhMb0HrV1PAgKhwjP2D/qibED0znNMyyUttW375mDOU5gG5gpHf0yrRE
/sjUvTnmPeYhFw==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:28 2025 by rpki-client