Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
File:                     H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft (raw, json)
Hash identifier:          MjUOG6EWAUr3GdU8wFpeTRs67GmlCdPM3tuHg13MKaw=
Subject key identifier:   A1:85:A2:B7:00:02:FD:72:91:88:C7:78:ED:1A:F9:BB:62:3F:51:ED
Authority key identifier: 1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
Certificate issuer:       /CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Certificate serial:       01965047F62093F244A35595D43B0C1687AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
Manifest number:          1509
Signing time:             Sat 19 Apr 2025 23:00:15 +0000
Manifest this update:     Sat 19 Apr 2025 23:00:15 +0000
Manifest next update:     Sun 20 Apr 2025 23:00:15 +0000
Files and hashes:         1: 7aUz8499DPhigJrtymvFDvH_yp8.roa (hash: XTyGxDVpkkql4iOBZC2KvGPinizfN4vZAGbc34EqO8o=)
                          2: H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl (hash: 0hTCCJ8sXehkvkpQXSKHPUWL710sK2+hYx6R0Dc4mLc=)
                          3: bAq7NCQg3KQUq0C73n9DTh9N3QA.roa (hash: pzC3spTIvf8gdOkRG+uQC8E+FO/P4+4NR9s5ZCQt3sM=)
                          4: eYwcDrbCOrfqP-rYaXCht21Elhk.roa (hash: WzOCjqAS7iS6+2PXJkstuDJeHt/haFGrL007cy+fVt4=)
                          5: jz7r0U5OaA8Q59L6HsVMDy2LM6I.roa (hash: /rl8PmJ+zraPwkfaCv5VsqQ2CSC3ynTwyG8Gqt6YLTA=)
                          6: qV3R0UAizgijs5QCSxdT_ZxyeJU.roa (hash: jWqqT/TB6ljo6j5Y6hMA8Ua3/FJYmLx0V80plcSr/6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:50:47:f6:20:93:f2:44:a3:55:95:d4:3b:0c:16:87:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
        Validity
            Not Before: Apr 19 23:00:15 2025 GMT
            Not After : Apr 20 23:00:15 2025 GMT
        Subject: CN=a185a2b70002fd729188c778ed1af9bb623f51ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b3:38:98:e3:40:c1:bf:2f:45:94:8d:d7:9e:
                    e0:a9:48:10:0e:d6:38:f1:a7:ba:a0:a5:69:3c:d7:
                    12:2a:06:86:d4:8d:e0:6c:ca:72:f1:e0:bb:54:b4:
                    0b:30:9f:45:a1:4c:c8:72:26:dd:43:66:14:fc:c6:
                    8d:5d:93:01:79:47:5e:36:64:50:c3:83:af:ff:8e:
                    7e:3c:b4:c9:df:90:4a:47:d6:2b:f1:cb:0b:03:59:
                    7f:bb:7f:82:6f:05:31:7f:1a:1d:93:f2:ac:7c:37:
                    e9:0a:de:47:a2:de:d2:31:f2:72:62:5f:b6:7d:3e:
                    5e:9c:1f:4b:6d:bc:fa:78:76:ce:23:53:6b:67:7e:
                    96:ce:a8:01:a4:0e:8d:13:a1:ca:42:85:50:4f:ce:
                    7f:9e:3c:a1:93:26:27:76:d6:08:4f:cc:da:91:39:
                    d2:37:5f:8a:b2:98:e1:df:c6:80:d0:fd:5a:0e:9b:
                    7d:99:f9:03:61:d3:ab:34:66:12:6e:ab:16:cc:68:
                    fa:6c:1c:65:29:5a:c3:03:dd:6e:af:6b:ba:39:2c:
                    a5:d8:53:15:3a:61:11:80:97:fa:b8:1d:e5:1d:01:
                    26:a7:f9:54:47:d9:94:79:95:76:11:ea:a1:e8:1b:
                    aa:25:df:32:0e:fb:95:0b:c1:e4:e2:49:f1:5f:96:
                    e2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:85:A2:B7:00:02:FD:72:91:88:C7:78:ED:1A:F9:BB:62:3F:51:ED
            X509v3 Authority Key Identifier:
                keyid:1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:fb:e0:7f:27:01:8c:a4:0c:0d:00:44:b8:0b:fe:15:d0:0f:
         9f:e3:fa:fc:b5:92:b9:80:38:f9:8d:ac:bb:58:02:b2:7d:e4:
         6b:fc:86:3b:75:03:c6:50:86:19:93:92:41:b3:87:69:19:9d:
         06:64:be:67:1e:d1:b1:1d:f0:98:ca:82:7d:33:6c:75:69:14:
         75:85:ad:0d:c9:3e:20:95:6c:1d:41:3e:24:15:87:0e:59:98:
         df:19:64:65:46:61:5d:67:1a:4f:f6:1b:ad:72:aa:06:31:f0:
         93:bc:b3:9a:96:2b:44:8a:41:e3:ab:a4:35:cb:7c:aa:c8:d3:
         db:76:df:cd:a6:0e:dc:d6:3b:be:82:0d:58:9a:b8:d2:99:f9:
         20:18:7a:32:bc:ee:f8:90:ad:7a:62:22:bd:16:97:e9:57:8c:
         28:be:1d:9b:90:9c:ad:ea:bc:a0:85:d2:45:a5:c6:d3:d6:01:
         0f:2f:1e:2a:3f:c0:fa:55:a0:ae:08:49:f0:2b:0d:af:bf:51:
         65:5f:2e:27:7b:a1:08:a7:95:39:dd:7a:f1:93:bf:4c:61:cc:
         f1:90:35:95:df:7a:72:c5:15:60:bd:22:3c:52:7e:51:91:5e:
         10:5c:70:ee:6d:66:a0:9f:f7:80:a9:1e:94:41:a6:71:f7:46:
         a4:32:a0:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQR/Ygk/JEo1WV1DsMFoetMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDZmNTc3MzVhNGU2M2RiZWY4NDhlZTBkOWQxOTllMjE1
ZjgzMDQwHhcNMjUwNDE5MjMwMDE1WhcNMjUwNDIwMjMwMDE1WjAzMTEwLwYDVQQD
EyhhMTg1YTJiNzAwMDJmZDcyOTE4OGM3NzhlZDFhZjliYjYyM2Y1MWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7M4mONAwb8vRZSN157gqUgQDtY4
8ae6oKVpPNcSKgaG1I3gbMpy8eC7VLQLMJ9FoUzIcibdQ2YU/MaNXZMBeUdeNmRQ
w4Ov/45+PLTJ35BKR9Yr8csLA1l/u3+CbwUxfxodk/KsfDfpCt5Hot7SMfJyYl+2
fT5enB9Lbbz6eHbOI1NrZ36WzqgBpA6NE6HKQoVQT85/njyhkyYndtYIT8zakTnS
N1+Kspjh38aA0P1aDpt9mfkDYdOrNGYSbqsWzGj6bBxlKVrDA91ur2u6OSyl2FMV
OmERgJf6uB3lHQEmp/lUR9mUeZV2Eeqh6BuqJd8yDvuVC8Hk4knxX5bi4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGForcAAv1ykYjHeO0a+btiP1HtMB8GA1UdIwQY
MBaAFB9G9Xc1pOY9vvhI7g2dGZ4hX4MEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBiMWR6V2s1ajItLUVqdURaMFpuaUZmZ3dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8xMDcyNjYtYWI1MS00NjJiLTlmYzIt
YTdjOTg5OGVlY2JjLzEvSDBiMWR6V2s1ajItLUVqdURaMFpuaUZmZ3dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8xMDcyNjYtYWI1MS00NjJiLTlmYzItYTdjOTg5OGVlY2Jj
LzEvSDBiMWR6V2s1ajItLUVqdURaMFpuaUZmZ3dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPvvgfycB
jKQMDQBEuAv+FdAPn+P6/LWSuYA4+Y2su1gCsn3ka/yGO3UDxlCGGZOSQbOHaRmd
BmS+Zx7RsR3wmMqCfTNsdWkUdYWtDck+IJVsHUE+JBWHDlmY3xlkZUZhXWcaT/Yb
rXKqBjHwk7yzmpYrRIpB46ukNct8qsjT23bfzaYO3NY7voINWJq40pn5IBh6Mrzu
+JCtemIivRaX6VeMKL4dm5Ccreq8oIXSRaXG09YBDy8eKj/A+lWgrghJ8CsNr79R
ZV8uJ3uhCKeVOd168ZO/TGHM8ZA1ld96csUVYL0iPFJ+UZFeEFxw7m1moJ/3gKke
lEGmcfdGpDKgqA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:22:40 2025 by rpki-client