Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/43e959-397e-4e95-9978-9e128cf3c3ad/1/79YM7FOzoM_Iy0VDotCopZ5glu4.mft
File:                     79YM7FOzoM_Iy0VDotCopZ5glu4.mft (raw, json)
Hash identifier:          yp8F27EDv3EFlRLQlJ01/8jGY/2vbsOi+VpM3wqWZu8=
Subject key identifier:   84:E6:DB:B2:C3:84:D1:84:1A:61:A0:B5:E6:5C:5B:B1:32:C1:21:0F
Authority key identifier: EF:D6:0C:EC:53:B3:A0:CF:C8:CB:45:43:A2:D0:A8:A5:9E:60:96:EE
Certificate issuer:       /CN=efd60cec53b3a0cfc8cb4543a2d0a8a59e6096ee
Certificate serial:       019746D4F93A21E8CC63F8F833291AC42CB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79YM7FOzoM_Iy0VDotCopZ5glu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/43e959-397e-4e95-9978-9e128cf3c3ad/1/79YM7FOzoM_Iy0VDotCopZ5glu4.mft
Manifest number:          1452
Signing time:             Fri 06 Jun 2025 20:00:51 +0000
Manifest this update:     Fri 06 Jun 2025 20:00:51 +0000
Manifest next update:     Sat 07 Jun 2025 20:00:51 +0000
Files and hashes:         1: 79YM7FOzoM_Iy0VDotCopZ5glu4.crl (hash: /qX2q27qbr6XywvSLwgTmwMd45bbgz7Htp9Ln8UCieA=)
                          2: hSNRyfJ3PH2KGCseUOEvDGpfyK8.roa (hash: XdLLCZX0/z3+SIY+d7BWzoDcMrU0AuJsTdPOrDQnlMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/43e959-397e-4e95-9978-9e128cf3c3ad/1/79YM7FOzoM_Iy0VDotCopZ5glu4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/43e959-397e-4e95-9978-9e128cf3c3ad/1/79YM7FOzoM_Iy0VDotCopZ5glu4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/79YM7FOzoM_Iy0VDotCopZ5glu4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:d4:f9:3a:21:e8:cc:63:f8:f8:33:29:1a:c4:2c:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efd60cec53b3a0cfc8cb4543a2d0a8a59e6096ee
        Validity
            Not Before: Jun  6 20:00:51 2025 GMT
            Not After : Jun  7 20:00:51 2025 GMT
        Subject: CN=84e6dbb2c384d1841a61a0b5e65c5bb132c1210f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:41:d7:dd:e3:67:b7:cf:62:5f:5f:6d:0f:df:
                    c6:32:2f:c5:38:77:00:a8:50:2b:81:98:90:ec:7a:
                    24:a0:88:b7:4b:79:15:61:0a:73:42:34:2a:60:75:
                    7c:dc:38:52:ee:32:38:14:94:69:27:da:1a:7b:ce:
                    ea:f8:21:4d:15:04:b2:20:c4:54:77:d8:eb:5d:53:
                    3f:17:e8:8b:0f:5f:ed:68:c1:98:50:e1:37:af:a5:
                    0d:45:38:98:4f:97:2e:76:1b:22:17:e0:c5:8e:9c:
                    77:54:af:e2:ff:91:72:7f:c4:7d:d2:ae:69:db:19:
                    10:80:e5:f6:eb:87:68:14:4b:8e:52:23:ed:4f:a8:
                    73:ac:12:60:ff:b3:77:77:3c:de:7b:20:3d:21:65:
                    87:ec:15:73:c6:f1:16:45:4d:d2:96:12:1e:4b:5d:
                    c4:e3:bd:54:81:78:d8:83:e4:7b:80:35:f5:c3:52:
                    15:86:f8:01:56:9f:f0:d8:56:3a:f0:65:ee:6d:ec:
                    b4:a4:fd:9b:c8:3d:0a:76:8a:ef:97:1d:7c:53:27:
                    98:ce:89:dc:b9:cc:6c:aa:e7:ff:a5:fb:2b:df:57:
                    1b:8f:6b:51:58:e7:13:ab:50:47:5f:8b:ed:d3:1a:
                    1c:86:d6:5c:5b:cb:4a:c0:15:40:91:df:49:e5:08:
                    96:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E6:DB:B2:C3:84:D1:84:1A:61:A0:B5:E6:5C:5B:B1:32:C1:21:0F
            X509v3 Authority Key Identifier:
                keyid:EF:D6:0C:EC:53:B3:A0:CF:C8:CB:45:43:A2:D0:A8:A5:9E:60:96:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79YM7FOzoM_Iy0VDotCopZ5glu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/43e959-397e-4e95-9978-9e128cf3c3ad/1/79YM7FOzoM_Iy0VDotCopZ5glu4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/43e959-397e-4e95-9978-9e128cf3c3ad/1/79YM7FOzoM_Iy0VDotCopZ5glu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:ab:cc:7e:d1:30:1a:c4:f9:eb:bc:c1:48:c8:b0:c0:46:87:
         e9:28:a3:f8:5d:e4:01:f0:e2:e0:96:bc:b0:ca:d0:6c:35:93:
         8f:6f:f4:06:c2:09:cf:7f:d1:6d:e9:4b:20:62:70:29:c6:6c:
         96:2c:5f:ba:c0:71:89:8b:8d:3e:c8:5b:2e:d9:35:3a:e8:55:
         11:be:6b:17:1a:17:94:c0:cb:43:dd:82:59:42:74:76:82:44:
         76:db:87:1e:83:5e:a5:11:f2:c0:f4:8d:d3:aa:8b:8b:e8:50:
         6b:1f:67:a9:1e:f5:6f:c7:9e:fd:d4:d7:37:cc:ae:ba:18:44:
         a0:1b:8e:44:f1:ed:81:b3:0d:f6:12:d8:1d:90:2d:78:71:a8:
         f3:de:ea:e2:d0:37:ad:43:d7:88:68:49:da:e8:f0:45:a7:21:
         79:ad:65:f3:c9:f5:0c:9a:bc:85:73:89:b8:d9:67:0a:28:86:
         d0:60:bf:55:9f:a0:ff:9f:3f:21:d9:04:91:ed:97:da:ef:b9:
         26:f8:32:0d:fd:0b:e9:68:b0:33:fb:ab:bd:3e:69:e3:c4:da:
         5e:01:42:2f:14:fe:54:ad:41:bb:13:8d:dd:63:53:8e:75:c0:
         49:fa:d6:88:7d:14:11:20:0d:0c:35:20:f2:fc:29:da:5a:f5:
         6d:b3:d1:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdG1Pk6IejMY/j4MykaxCy4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmZDYwY2VjNTNiM2EwY2ZjOGNiNDU0M2EyZDBhOGE1OWU2
MDk2ZWUwHhcNMjUwNjA2MjAwMDUxWhcNMjUwNjA3MjAwMDUxWjAzMTEwLwYDVQQD
Eyg4NGU2ZGJiMmMzODRkMTg0MWE2MWEwYjVlNjVjNWJiMTMyYzEyMTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUHX3eNnt89iX19tD9/GMi/FOHcA
qFArgZiQ7HokoIi3S3kVYQpzQjQqYHV83DhS7jI4FJRpJ9oae87q+CFNFQSyIMRU
d9jrXVM/F+iLD1/taMGYUOE3r6UNRTiYT5cudhsiF+DFjpx3VK/i/5Fyf8R90q5p
2xkQgOX264doFEuOUiPtT6hzrBJg/7N3dzzeeyA9IWWH7BVzxvEWRU3SlhIeS13E
471UgXjYg+R7gDX1w1IVhvgBVp/w2FY68GXubey0pP2byD0Kdorvlx18UyeYzonc
ucxsquf/pfsr31cbj2tRWOcTq1BHX4vt0xochtZcW8tKwBVAkd9J5QiWIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITm27LDhNGEGmGgteZcW7EywSEPMB8GA1UdIwQY
MBaAFO/WDOxTs6DPyMtFQ6LQqKWeYJbuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzlZTTdGT3pvTV9JeTBWRG90Q29wWjVnbHU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS80M2U5NTktMzk3ZS00ZTk1LTk5Nzgt
OWUxMjhjZjNjM2FkLzEvNzlZTTdGT3pvTV9JeTBWRG90Q29wWjVnbHU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS80M2U5NTktMzk3ZS00ZTk1LTk5NzgtOWUxMjhjZjNjM2Fk
LzEvNzlZTTdGT3pvTV9JeTBWRG90Q29wWjVnbHU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr6vMftEw
GsT567zBSMiwwEaH6Sij+F3kAfDi4Ja8sMrQbDWTj2/0BsIJz3/RbelLIGJwKcZs
lixfusBxiYuNPshbLtk1OuhVEb5rFxoXlMDLQ92CWUJ0doJEdtuHHoNepRHywPSN
06qLi+hQax9nqR71b8ee/dTXN8yuuhhEoBuORPHtgbMN9hLYHZAteHGo897q4tA3
rUPXiGhJ2ujwRachea1l88n1DJq8hXOJuNlnCiiG0GC/VZ+g/58/IdkEke2X2u+5
JvgyDf0L6WiwM/urvT5p48TaXgFCLxT+VK1BuxON3WNTjnXASfrWiH0UESANDDUg
8vwp2lr1bbPRzQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:23:53 2025 by rpki-client