Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft
File:                     k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft (raw, json)
Hash identifier:          yXzDDjzlmaCaDGMdNZCi2sc6cnvsK1RvLHpXP3wxuBo=
Subject key identifier:   26:C7:E5:E0:44:F1:16:A8:27:C1:23:F7:79:D1:3F:A2:20:D0:E5:0B
Authority key identifier: 93:C6:4C:66:8E:FF:34:74:08:16:ED:A8:5A:45:9D:0C:42:2E:06:3C
Certificate issuer:       /CN=93c64c668eff34740816eda85a459d0c422e063c
Certificate serial:       01964D471E2B5D7364A5DA6583C74B52D7F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft
Manifest number:          148A
Signing time:             Sat 19 Apr 2025 09:00:28 +0000
Manifest this update:     Sat 19 Apr 2025 09:00:28 +0000
Manifest next update:     Sun 20 Apr 2025 09:00:28 +0000
Files and hashes:         1: k8ZMZo7_NHQIFu2oWkWdDEIuBjw.crl (hash: VO3k6qwBsWWQ0HDEZm2x90Tj3HEV3HF52KEXPoRiMUo=)
                          2: zR4iLeAlwp_N8F3SE1jgzNAAf5g.roa (hash: xWq9xR6Qocj5qbdstuQx7KrJz2/dodBVSQAGA+Ot/AI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:47:1e:2b:5d:73:64:a5:da:65:83:c7:4b:52:d7:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93c64c668eff34740816eda85a459d0c422e063c
        Validity
            Not Before: Apr 19 09:00:28 2025 GMT
            Not After : Apr 20 09:00:28 2025 GMT
        Subject: CN=26c7e5e044f116a827c123f779d13fa220d0e50b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2a:93:c7:32:05:c7:27:b6:70:ea:be:8c:db:
                    9b:f3:40:d4:f6:59:52:ca:08:ad:75:89:cb:89:a8:
                    0f:ab:cf:88:b3:c8:80:35:66:c5:25:0f:c5:15:c4:
                    67:f3:2c:69:a6:19:49:17:f8:8f:99:95:2a:24:a9:
                    d8:98:9a:36:d9:d8:5b:be:93:bc:eb:39:05:f7:3e:
                    21:57:54:9b:89:95:27:af:32:ef:1c:1e:de:85:14:
                    6b:3e:d1:0a:71:ca:6c:45:96:0b:08:5a:39:54:53:
                    b7:92:d7:87:a4:dc:30:0b:ac:d0:7f:50:10:4b:c8:
                    e6:43:99:2e:85:e0:a3:d2:ec:73:62:cd:c0:a6:d3:
                    f9:85:e2:e8:2d:28:fa:14:f6:ba:db:77:e7:e4:4c:
                    a1:6f:fe:18:cf:d9:08:f0:cb:68:08:7a:21:23:7c:
                    10:76:02:96:05:23:37:93:c8:bf:b3:bf:b7:7e:b1:
                    ba:bd:f0:8a:9e:32:95:e0:09:8d:3c:32:df:93:49:
                    59:f4:a9:f3:47:13:29:5f:4e:1f:f2:b8:36:1b:e3:
                    07:48:0e:ba:49:d9:be:14:2d:00:49:de:b0:55:4e:
                    b8:e3:db:b0:20:e9:97:17:04:50:53:92:fb:40:9c:
                    10:a8:28:16:42:df:7b:c3:ca:1f:86:ee:c2:bb:40:
                    55:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C7:E5:E0:44:F1:16:A8:27:C1:23:F7:79:D1:3F:A2:20:D0:E5:0B
            X509v3 Authority Key Identifier:
                keyid:93:C6:4C:66:8E:FF:34:74:08:16:ED:A8:5A:45:9D:0C:42:2E:06:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:e2:5a:28:a3:d3:1d:6f:ec:5c:68:38:5f:1d:4b:6b:b9:9a:
         b6:0e:f5:5a:de:14:ee:e1:52:ad:62:10:a6:01:5a:9e:62:56:
         51:53:58:40:40:80:49:e8:20:49:70:41:71:17:7d:c8:83:93:
         5c:ef:f6:10:51:61:3f:ae:ca:38:9a:b5:2d:bb:32:54:0b:03:
         0c:a3:ef:59:39:ad:d4:7a:97:54:a3:ae:7d:be:8a:cb:4b:8b:
         a9:a5:47:f6:df:7f:ed:e7:41:c2:18:e8:3e:3a:df:db:8b:82:
         d7:db:3f:53:c4:8b:57:1f:fe:ed:43:3f:c5:85:1a:af:06:97:
         8a:64:ca:0d:f6:76:52:ba:39:43:54:29:e1:39:9c:e4:91:c4:
         25:1a:d7:80:a3:1e:07:fb:d7:fc:0b:ab:9e:7e:3d:67:cb:6a:
         6d:e3:51:b5:c3:9a:fe:4f:99:23:d4:97:ac:44:47:fd:63:ed:
         9a:1b:ff:83:ac:3b:0d:47:f7:20:b4:3b:bb:2d:9b:e5:65:77:
         d9:4c:71:9b:e7:86:69:2c:f7:c0:ad:00:0f:85:67:45:aa:79:
         4f:2a:73:92:80:6e:57:ac:8a:eb:f1:97:cb:56:26:2e:6a:f9:
         71:e7:94:d8:01:5f:03:ff:91:25:99:3d:63:49:45:58:bd:f6:
         4d:ff:48:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNRx4rXXNkpdplg8dLUtfzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYzY0YzY2OGVmZjM0NzQwODE2ZWRhODVhNDU5ZDBjNDIy
ZTA2M2MwHhcNMjUwNDE5MDkwMDI4WhcNMjUwNDIwMDkwMDI4WjAzMTEwLwYDVQQD
EygyNmM3ZTVlMDQ0ZjExNmE4MjdjMTIzZjc3OWQxM2ZhMjIwZDBlNTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviqTxzIFxye2cOq+jNub80DU9llS
ygitdYnLiagPq8+Is8iANWbFJQ/FFcRn8yxpphlJF/iPmZUqJKnYmJo22dhbvpO8
6zkF9z4hV1SbiZUnrzLvHB7ehRRrPtEKccpsRZYLCFo5VFO3kteHpNwwC6zQf1AQ
S8jmQ5kuheCj0uxzYs3AptP5heLoLSj6FPa623fn5Eyhb/4Yz9kI8MtoCHohI3wQ
dgKWBSM3k8i/s7+3frG6vfCKnjKV4AmNPDLfk0lZ9KnzRxMpX04f8rg2G+MHSA66
Sdm+FC0ASd6wVU6449uwIOmXFwRQU5L7QJwQqCgWQt97w8ofhu7Cu0BVWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCbH5eBE8RaoJ8Ej93nRP6Ig0OULMB8GA1UdIwQY
MBaAFJPGTGaO/zR0CBbtqFpFnQxCLgY8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazhaTVpvN19OSFFJRnUyb1drV2RERUl1Qmp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC82MmQxNWItN2JkNS00YjNiLWJlNzIt
MTQ3ZWM5NmVhNzMwLzEvazhaTVpvN19OSFFJRnUyb1drV2RERUl1Qmp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC82MmQxNWItN2JkNS00YjNiLWJlNzItMTQ3ZWM5NmVhNzMw
LzEvazhaTVpvN19OSFFJRnUyb1drV2RERUl1Qmp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv+JaKKPT
HW/sXGg4Xx1La7matg71Wt4U7uFSrWIQpgFanmJWUVNYQECASeggSXBBcRd9yIOT
XO/2EFFhP67KOJq1LbsyVAsDDKPvWTmt1HqXVKOufb6Ky0uLqaVH9t9/7edBwhjo
Pjrf24uC19s/U8SLVx/+7UM/xYUarwaXimTKDfZ2Uro5Q1Qp4Tmc5JHEJRrXgKMe
B/vX/Aurnn49Z8tqbeNRtcOa/k+ZI9SXrERH/WPtmhv/g6w7DUf3ILQ7uy2b5WV3
2Uxxm+eGaSz3wK0AD4VnRap5TypzkoBuV6yK6/GXy1YmLmr5ceeU2AFfA/+RJZk9
Y0lFWL32Tf9IPg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 14:00:18 2025 by rpki-client