Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
File:                     9WQDvByHTu8JuKE0QVWrw_BXWxU.mft (raw, json)
Hash identifier:          DHiHMCf6giSw/y1lKg+ikMA+PTgaiB/ArSGJyYVXlD4=
Subject key identifier:   96:CD:EF:8A:15:92:D4:49:AD:27:DC:FE:01:6A:EC:2A:4F:B5:5B:C5
Authority key identifier: F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15
Certificate issuer:       /CN=f56403bc1c874eef09b8a1344155abc3f0575b15
Certificate serial:       019656813D43371D88CC304CADB5B1AA1899
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
Manifest number:          0E73
Signing time:             Mon 21 Apr 2025 04:00:32 +0000
Manifest this update:     Mon 21 Apr 2025 04:00:32 +0000
Manifest next update:     Tue 22 Apr 2025 04:00:32 +0000
Files and hashes:         1: 9WQDvByHTu8JuKE0QVWrw_BXWxU.crl (hash: dBYOfttpspy/0V1+9h/KxdqOrl7hpqepmpfWCYxBa/I=)
                          2: UpxBSWugieKNTh9apeAkjKNDuVI.roa (hash: bk8A6HGGurxjqbD4+xEVgCvr+MLGdlWXb+9IzJcqkAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:56:81:3d:43:37:1d:88:cc:30:4c:ad:b5:b1:aa:18:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f56403bc1c874eef09b8a1344155abc3f0575b15
        Validity
            Not Before: Apr 21 04:00:32 2025 GMT
            Not After : Apr 22 04:00:32 2025 GMT
        Subject: CN=96cdef8a1592d449ad27dcfe016aec2a4fb55bc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:25:99:b7:89:51:9e:06:03:99:32:32:28:da:
                    7c:3e:27:d9:95:71:c7:c6:99:73:52:c7:be:d8:a2:
                    9e:0d:a5:c4:6e:1a:bd:d1:53:86:05:39:88:ea:83:
                    6d:7a:24:03:47:35:2d:41:12:5a:b7:d5:95:49:7c:
                    59:6e:a9:5d:ed:96:0b:74:93:8e:21:70:3e:2f:1b:
                    f2:45:b8:c9:09:9c:82:b2:e1:87:28:28:ee:41:dd:
                    1a:4a:b6:c4:26:03:c1:75:c0:1a:b2:0b:ea:61:85:
                    c1:d9:a1:5e:54:38:0b:b3:65:b8:39:61:fc:8f:fe:
                    6b:8b:2c:a0:42:0a:81:d1:de:20:02:66:b8:06:d8:
                    6d:01:41:da:59:10:05:1d:2b:3c:47:8e:4e:c4:37:
                    b5:4c:ec:e1:88:a4:d1:cb:dd:98:cc:fb:41:93:ab:
                    1a:c7:5c:d7:93:93:eb:59:79:b4:5f:89:b0:6f:e9:
                    97:89:18:ca:3b:85:86:8f:e0:81:cd:77:b1:9b:f4:
                    eb:50:14:66:1c:79:76:79:42:96:89:64:de:47:7c:
                    7f:ef:13:55:b2:b7:55:d0:e7:ae:da:10:72:e1:7f:
                    b7:a1:db:67:be:cf:20:d3:a8:78:5d:6b:84:ac:48:
                    bb:1a:39:db:6d:11:3a:74:f8:c2:09:20:35:a6:f4:
                    8b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:CD:EF:8A:15:92:D4:49:AD:27:DC:FE:01:6A:EC:2A:4F:B5:5B:C5
            X509v3 Authority Key Identifier:
                keyid:F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:61:59:4d:db:15:ed:35:6b:2a:1a:89:92:76:34:22:97:8f:
         6c:e6:3d:77:16:29:f3:6b:b6:a5:3d:19:d4:e6:6c:67:94:6b:
         57:0d:b2:40:27:5f:29:13:c4:9f:41:56:49:4c:70:ed:45:d1:
         34:17:ef:af:b5:00:ce:40:7b:e3:6d:cb:e8:e3:b7:50:d5:e2:
         ca:44:4f:db:50:40:33:7c:d1:36:34:c6:3b:4c:29:bc:f3:32:
         60:3b:76:a9:32:a6:b1:3a:0e:7d:0b:da:ef:6b:10:25:7a:7e:
         b2:04:3a:f1:71:e0:9e:81:9a:8e:69:d7:01:8e:bd:7a:7d:0c:
         19:f5:11:78:19:af:93:30:e3:04:9e:5f:ee:2f:f2:32:f0:82:
         9e:1e:e5:18:7b:6f:b3:b9:71:34:60:bc:2b:09:bf:4b:08:2f:
         ec:7f:f6:22:5f:08:d1:d2:a7:e9:90:2c:0e:71:b1:ba:8f:bc:
         06:7e:01:37:a0:7c:18:0f:17:2c:43:89:76:f8:3b:a6:4d:83:
         ea:5d:7d:61:5f:8d:a2:5c:3d:8a:7c:2b:25:c7:5e:a5:45:dc:
         00:13:92:ba:cd:32:24:fb:12:21:c4:0e:de:fa:6a:38:be:5d:
         18:e0:e4:a8:56:fd:0d:05:1b:76:34:0f:67:6f:c5:3c:ec:8e:
         88:d5:40:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWgT1DNx2IzDBMrbWxqhiZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NjQwM2JjMWM4NzRlZWYwOWI4YTEzNDQxNTVhYmMzZjA1
NzViMTUwHhcNMjUwNDIxMDQwMDMyWhcNMjUwNDIyMDQwMDMyWjAzMTEwLwYDVQQD
Eyg5NmNkZWY4YTE1OTJkNDQ5YWQyN2RjZmUwMTZhZWMyYTRmYjU1YmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CWZt4lRngYDmTIyKNp8PifZlXHH
xplzUse+2KKeDaXEbhq90VOGBTmI6oNteiQDRzUtQRJat9WVSXxZbqld7ZYLdJOO
IXA+LxvyRbjJCZyCsuGHKCjuQd0aSrbEJgPBdcAasgvqYYXB2aFeVDgLs2W4OWH8
j/5riyygQgqB0d4gAma4BthtAUHaWRAFHSs8R45OxDe1TOzhiKTRy92YzPtBk6sa
x1zXk5PrWXm0X4mwb+mXiRjKO4WGj+CBzXexm/TrUBRmHHl2eUKWiWTeR3x/7xNV
srdV0Oeu2hBy4X+3odtnvs8g06h4XWuErEi7GjnbbRE6dPjCCSA1pvSLeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJbN74oVktRJrSfc/gFq7CpPtVvFMB8GA1UdIwQY
MBaAFPVkA7wch07vCbihNEFVq8PwV1sVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVdRRHZCeUhUdThKdUtFMFFWV3J3X0JYV3hVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8xNzQ4NjAtMGM1YS00NGYwLTk3ZTct
ZmFiODVlZTU3MDJhLzEvOVdRRHZCeUhUdThKdUtFMFFWV3J3X0JYV3hVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8xNzQ4NjAtMGM1YS00NGYwLTk3ZTctZmFiODVlZTU3MDJh
LzEvOVdRRHZCeUhUdThKdUtFMFFWV3J3X0JYV3hVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGWFZTdsV
7TVrKhqJknY0IpePbOY9dxYp82u2pT0Z1OZsZ5RrVw2yQCdfKRPEn0FWSUxw7UXR
NBfvr7UAzkB7423L6OO3UNXiykRP21BAM3zRNjTGO0wpvPMyYDt2qTKmsToOfQva
72sQJXp+sgQ68XHgnoGajmnXAY69en0MGfUReBmvkzDjBJ5f7i/yMvCCnh7lGHtv
s7lxNGC8Kwm/Swgv7H/2Il8I0dKn6ZAsDnGxuo+8Bn4BN6B8GA8XLEOJdvg7pk2D
6l19YV+Nolw9inwrJcdepUXcABOSus0yJPsSIcQO3vpqOL5dGODkqFb9DQUbdjQP
Z2/FPOyOiNVAug==
-----END CERTIFICATE-----
Generated at Mon Apr 21 07:53:38 2025 by rpki-client