Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft
File:                     F6yAsO71cIxkOQVF0acTkCRLbRs.mft (raw, json)
Hash identifier:          Va7/nrtueZ1DMqEcFyfAlclz6I15GBT5GFvbQsNIlUs=
Subject key identifier:   3C:7D:13:F8:A5:8F:08:42:D3:7A:86:C1:1D:C7:6B:1D:85:3F:DA:70
Authority key identifier: 17:AC:80:B0:EE:F5:70:8C:64:39:05:45:D1:A7:13:90:24:4B:6D:1B
Certificate issuer:       /CN=17ac80b0eef5708c64390545d1a71390244b6d1b
Certificate serial:       01951210DA7AD580B208F288BE4CF2032BC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F6yAsO71cIxkOQVF0acTkCRLbRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft
Manifest number:          117F
Signing time:             Mon 17 Feb 2025 04:00:49 +0000
Manifest this update:     Mon 17 Feb 2025 04:00:49 +0000
Manifest next update:     Tue 18 Feb 2025 04:00:49 +0000
Files and hashes:         1: F6yAsO71cIxkOQVF0acTkCRLbRs.crl (hash: 52yps0pUbqoMRdEVllEoevUhvemNFW5RnSlKb4wL9aQ=)
                          2: zSUjlVA_3mzAMpyrhKZAaPLaNJs.roa (hash: 72zL3nwgCvbu+myGvWOjXCnDMo56NxzjVOkIDgx8eQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F6yAsO71cIxkOQVF0acTkCRLbRs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:10:da:7a:d5:80:b2:08:f2:88:be:4c:f2:03:2b:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ac80b0eef5708c64390545d1a71390244b6d1b
        Validity
            Not Before: Feb 17 04:00:49 2025 GMT
            Not After : Feb 18 04:00:49 2025 GMT
        Subject: CN=3c7d13f8a58f0842d37a86c11dc76b1d853fda70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:90:12:40:56:cc:14:16:1d:fa:80:40:17:fa:
                    23:0b:fe:dc:d0:ae:11:d0:ec:50:0f:64:90:8a:f6:
                    f9:76:11:0b:fd:6f:c8:23:53:c1:63:47:cb:3b:82:
                    87:eb:56:fb:c0:62:69:4a:c9:15:d6:bb:5d:ae:2d:
                    a2:8c:8e:30:29:bf:5b:0e:2a:96:95:18:2b:a3:fe:
                    9a:23:a8:b3:56:a2:02:c6:11:71:47:8e:b6:2c:fa:
                    af:cc:b3:21:bd:27:33:77:94:12:08:e4:07:b2:55:
                    34:99:02:68:74:f9:ac:36:c2:d2:43:5c:ee:74:7b:
                    25:ef:89:45:31:c4:7f:38:32:80:0f:55:2f:1c:2a:
                    2d:ff:3d:2d:9c:2e:60:7b:38:5d:ed:a4:c6:4a:50:
                    10:dc:f7:9b:6b:ab:8b:64:fc:d4:99:53:97:79:ac:
                    c6:85:24:58:f4:e9:14:13:e0:f5:8b:dc:78:b3:84:
                    e3:8e:c2:6f:69:07:16:8f:b0:27:dc:a0:c1:0f:6a:
                    25:b2:cc:ee:70:cb:bc:7b:22:18:57:95:80:49:fe:
                    82:3c:d9:1e:56:0c:b6:01:33:ab:25:76:96:f2:3a:
                    89:1c:b1:f2:45:0a:90:a1:7d:0a:68:7b:dd:85:ac:
                    a1:62:38:bf:55:01:94:0c:77:f4:76:8e:07:49:91:
                    0b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:7D:13:F8:A5:8F:08:42:D3:7A:86:C1:1D:C7:6B:1D:85:3F:DA:70
            X509v3 Authority Key Identifier:
                keyid:17:AC:80:B0:EE:F5:70:8C:64:39:05:45:D1:A7:13:90:24:4B:6D:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6yAsO71cIxkOQVF0acTkCRLbRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:31:f3:ce:d9:26:7f:5b:76:fa:d0:e6:51:18:7f:5f:95:3b:
         e1:cb:b9:f5:67:a5:58:4d:37:6d:d5:a4:6c:02:4f:69:b0:8f:
         99:77:4f:f7:24:3c:05:57:78:91:33:2c:d7:5c:26:84:ee:bb:
         60:ec:a8:06:b1:40:80:55:50:76:26:6b:e8:ac:d0:4d:13:b6:
         df:4c:39:fc:eb:21:42:5b:5b:0a:e6:ae:c1:0f:fd:00:4a:a0:
         7f:77:39:fd:aa:8d:82:4b:c1:cf:88:7b:11:f5:4e:9a:a9:1b:
         b5:94:22:bf:32:54:98:81:6e:be:55:cb:e5:52:be:53:18:06:
         15:06:f1:07:44:a1:5c:36:d6:c4:ce:19:c2:4a:ef:9e:e3:0e:
         be:2a:54:8f:ad:e0:0a:71:2e:e6:e9:bc:3e:bd:ff:a6:c5:52:
         35:c8:96:85:f6:bd:90:9d:33:b2:d1:ef:3e:e8:89:6e:cc:a2:
         46:21:d3:37:8a:58:fb:76:65:6a:ce:17:a5:be:0f:3b:07:58:
         6f:ed:5c:2b:39:ea:43:32:7c:d9:36:6a:6a:bf:52:6a:8b:ee:
         a4:a2:63:65:88:83:f2:f0:61:71:72:01:9e:24:a0:e2:f0:59:
         db:b4:c7:79:51:4b:47:b2:64:c2:e5:de:7c:b7:a8:04:19:de:
         7d:4a:76:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSENp61YCyCPKIvkzyAyvCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3YWM4MGIwZWVmNTcwOGM2NDM5MDU0NWQxYTcxMzkwMjQ0
YjZkMWIwHhcNMjUwMjE3MDQwMDQ5WhcNMjUwMjE4MDQwMDQ5WjAzMTEwLwYDVQQD
EygzYzdkMTNmOGE1OGYwODQyZDM3YTg2YzExZGM3NmIxZDg1M2ZkYTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZASQFbMFBYd+oBAF/ojC/7c0K4R
0OxQD2SQivb5dhEL/W/II1PBY0fLO4KH61b7wGJpSskV1rtdri2ijI4wKb9bDiqW
lRgro/6aI6izVqICxhFxR462LPqvzLMhvSczd5QSCOQHslU0mQJodPmsNsLSQ1zu
dHsl74lFMcR/ODKAD1UvHCot/z0tnC5gezhd7aTGSlAQ3Peba6uLZPzUmVOXeazG
hSRY9OkUE+D1i9x4s4TjjsJvaQcWj7An3KDBD2olsszucMu8eyIYV5WASf6CPNke
Vgy2ATOrJXaW8jqJHLHyRQqQoX0KaHvdhayhYji/VQGUDHf0do4HSZELsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDx9E/iljwhC03qGwR3Hax2FP9pwMB8GA1UdIwQY
MBaAFBesgLDu9XCMZDkFRdGnE5AkS20bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjZ5QXNPNzFjSXhrT1FWRjBhY1RrQ1JMYlJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83ZTJhZGEtMGRjMS00ZjNlLWE1OGQt
YTI5ZTgxNGI5YjI5LzEvRjZ5QXNPNzFjSXhrT1FWRjBhY1RrQ1JMYlJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy83ZTJhZGEtMGRjMS00ZjNlLWE1OGQtYTI5ZTgxNGI5YjI5
LzEvRjZ5QXNPNzFjSXhrT1FWRjBhY1RrQ1JMYlJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUDHzztkm
f1t2+tDmURh/X5U74cu59WelWE03bdWkbAJPabCPmXdP9yQ8BVd4kTMs11wmhO67
YOyoBrFAgFVQdiZr6KzQTRO230w5/OshQltbCuauwQ/9AEqgf3c5/aqNgkvBz4h7
EfVOmqkbtZQivzJUmIFuvlXL5VK+UxgGFQbxB0ShXDbWxM4ZwkrvnuMOvipUj63g
CnEu5um8Pr3/psVSNciWhfa9kJ0zstHvPuiJbsyiRiHTN4pY+3Zlas4Xpb4POwdY
b+1cKznqQzJ82TZqar9SaovupKJjZYiD8vBhcXIBniSg4vBZ27THeVFLR7JkwuXe
fLeoBBnefUp2xw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:36 2025 by rpki-client