Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.mft
File:                     i1EYZZMCmXY-Dl8tglZ9xaHVPnk.mft (raw, json)
Hash identifier:          WbfzKwLwx/OVlGGJg6tLflvarB/s1hcaCipnjaNpGZU=
Subject key identifier:   FA:29:DB:94:41:BB:4B:06:14:CD:DD:74:4A:E9:8B:E9:2E:0A:64:9F
Authority key identifier: 8B:51:18:65:93:02:99:76:3E:0E:5F:2D:82:56:7D:C5:A1:D5:3E:79
Certificate issuer:       /CN=8b511865930299763e0e5f2d82567dc5a1d53e79
Certificate serial:       019640305616EF0BCB962D19F26CF190DDD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.mft
Manifest number:          112F
Signing time:             Wed 16 Apr 2025 20:00:31 +0000
Manifest this update:     Wed 16 Apr 2025 20:00:31 +0000
Manifest next update:     Thu 17 Apr 2025 20:00:31 +0000
Files and hashes:         1: i1EYZZMCmXY-Dl8tglZ9xaHVPnk.crl (hash: LWjKleXj7u97yNiWeDQhLF7sJokHdRM+Qnycl69r90M=)
                          2: vWNF9c9xh0UQ-FU-UmVlKKmFXu0.roa (hash: 6rkEiKqMQhH3x9WDxfo0uMKCtMaKKNiS0hRACYb4UZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 20:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:40:30:56:16:ef:0b:cb:96:2d:19:f2:6c:f1:90:dd:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b511865930299763e0e5f2d82567dc5a1d53e79
        Validity
            Not Before: Apr 16 20:00:31 2025 GMT
            Not After : Apr 17 20:00:31 2025 GMT
        Subject: CN=fa29db9441bb4b0614cddd744ae98be92e0a649f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:31:3b:85:c3:49:45:38:c6:a2:65:16:a6:ca:
                    b3:f9:e7:d2:c5:e2:45:a3:6c:0e:d0:8c:33:a5:62:
                    cf:fe:c4:8e:49:17:0d:b9:79:9c:42:b4:7a:29:4a:
                    a9:fc:c5:5c:7f:87:97:70:39:c1:3f:54:95:31:1a:
                    a4:28:cd:7f:88:97:51:74:c1:9b:4b:f6:74:64:a2:
                    87:2d:f8:45:cf:18:32:41:63:c0:74:97:5d:6b:13:
                    e1:89:e2:f9:c7:65:59:46:f6:6c:70:cd:b1:73:5a:
                    d8:54:3d:ca:08:99:97:c2:bb:18:cf:c7:ba:75:fd:
                    c3:89:9c:87:61:9f:6a:ca:05:1f:f1:d9:48:c3:6c:
                    df:5e:72:23:4a:72:d6:54:d0:7b:c5:2d:f9:f6:f9:
                    1a:33:77:1a:52:f5:ec:9e:a8:47:fd:e5:8b:12:80:
                    11:7a:bc:d9:31:8f:86:2e:a2:2f:4c:ec:fb:44:87:
                    9e:91:7d:7b:46:4d:4c:ab:9c:4c:51:27:92:22:58:
                    bb:4f:8f:f7:5f:a7:3e:77:65:7b:93:50:98:f3:ee:
                    68:1f:f7:48:06:98:b7:d8:bb:23:e0:64:78:02:9a:
                    ca:62:9c:02:21:f9:75:ce:c1:0d:06:71:77:e7:7e:
                    49:10:73:d8:42:da:76:9d:8c:83:ae:44:67:8d:04:
                    b7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:29:DB:94:41:BB:4B:06:14:CD:DD:74:4A:E9:8B:E9:2E:0A:64:9F
            X509v3 Authority Key Identifier:
                keyid:8B:51:18:65:93:02:99:76:3E:0E:5F:2D:82:56:7D:C5:A1:D5:3E:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:b3:f9:0d:8d:57:ee:89:88:be:c5:a3:57:9c:19:a7:8e:f6:
         df:b3:8c:30:bc:71:8c:df:42:74:3c:8e:73:96:6d:d3:df:39:
         6f:85:76:01:8e:04:be:00:2e:33:16:20:65:44:00:70:fd:a8:
         ca:16:4c:c0:0b:89:b1:57:55:d6:01:18:d3:24:77:55:9c:7a:
         91:12:08:14:5c:b8:80:9c:65:77:03:15:6a:2f:5c:5a:bc:65:
         d6:77:3e:db:39:d6:e7:e3:b3:dd:ce:53:28:3f:a6:81:0a:b5:
         bf:35:5c:b4:07:9a:56:5c:7e:24:fb:3e:9d:19:96:43:af:68:
         bd:da:56:0f:df:8b:9e:c8:1b:22:8f:cd:96:c3:e9:a5:79:05:
         73:ce:bd:1d:69:98:89:35:ae:a9:63:db:43:e6:6b:90:8c:f0:
         cd:e2:78:29:bb:6a:31:bb:5d:8e:91:6f:88:b8:7a:b4:37:cf:
         73:33:df:28:37:a2:d7:dc:8a:ca:55:a5:4c:43:c0:df:b1:e1:
         0b:ab:27:1b:d0:06:2f:fb:16:05:cc:fa:e9:35:09:a1:5b:fa:
         33:86:3e:bc:81:f5:5a:d2:a2:b8:0d:4b:08:af:7d:65:42:9f:
         49:2d:60:55:a2:d6:5a:48:b4:4c:14:0e:88:67:5b:04:eb:0f:
         49:db:96:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZAMFYW7wvLli0Z8mzxkN3VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNTExODY1OTMwMjk5NzYzZTBlNWYyZDgyNTY3ZGM1YTFk
NTNlNzkwHhcNMjUwNDE2MjAwMDMxWhcNMjUwNDE3MjAwMDMxWjAzMTEwLwYDVQQD
EyhmYTI5ZGI5NDQxYmI0YjA2MTRjZGRkNzQ0YWU5OGJlOTJlMGE2NDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjE7hcNJRTjGomUWpsqz+efSxeJF
o2wO0IwzpWLP/sSOSRcNuXmcQrR6KUqp/MVcf4eXcDnBP1SVMRqkKM1/iJdRdMGb
S/Z0ZKKHLfhFzxgyQWPAdJddaxPhieL5x2VZRvZscM2xc1rYVD3KCJmXwrsYz8e6
df3DiZyHYZ9qygUf8dlIw2zfXnIjSnLWVNB7xS359vkaM3caUvXsnqhH/eWLEoAR
erzZMY+GLqIvTOz7RIeekX17Rk1Mq5xMUSeSIli7T4/3X6c+d2V7k1CY8+5oH/dI
Bpi32Lsj4GR4AprKYpwCIfl1zsENBnF3535JEHPYQtp2nYyDrkRnjQS3DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPop25RBu0sGFM3ddErpi+kuCmSfMB8GA1UdIwQY
MBaAFItRGGWTApl2Pg5fLYJWfcWh1T55MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTFFWVpaTUNtWFktRGw4dGdsWjl4YUhWUG5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9hOGYwMmItNjU2My00MGE5LWEzNWEt
MWYwOWJiNmRiMWI2LzEvaTFFWVpaTUNtWFktRGw4dGdsWjl4YUhWUG5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9hOGYwMmItNjU2My00MGE5LWEzNWEtMWYwOWJiNmRiMWI2
LzEvaTFFWVpaTUNtWFktRGw4dGdsWjl4YUhWUG5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmLP5DY1X
7omIvsWjV5wZp47237OMMLxxjN9CdDyOc5Zt0985b4V2AY4EvgAuMxYgZUQAcP2o
yhZMwAuJsVdV1gEY0yR3VZx6kRIIFFy4gJxldwMVai9cWrxl1nc+2znW5+Oz3c5T
KD+mgQq1vzVctAeaVlx+JPs+nRmWQ69ovdpWD9+LnsgbIo/NlsPppXkFc869HWmY
iTWuqWPbQ+ZrkIzwzeJ4KbtqMbtdjpFviLh6tDfPczPfKDei19yKylWlTEPA37Hh
C6snG9AGL/sWBcz66TUJoVv6M4Y+vIH1WtKiuA1LCK99ZUKfSS1gVaLWWki0TBQO
iGdbBOsPSduWPg==
-----END CERTIFICATE-----
Generated at Thu Apr 17 01:15:21 2025 by rpki-client