Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft
File:                     BrjtmF7yA06OMHxEfzSWwyra0sg.mft (raw, json)
Hash identifier:          Mnn9Q4vfV3DatT2HLMhlwwNQL9tqQ9vflKx0S83VKk0=
Subject key identifier:   38:59:BD:AD:9B:F8:B5:5D:C8:A7:E2:CA:67:D7:BE:4C:19:3A:6C:40
Authority key identifier: 06:B8:ED:98:5E:F2:03:4E:8E:30:7C:44:7F:34:96:C3:2A:DA:D2:C8
Certificate issuer:       /CN=06b8ed985ef2034e8e307c447f3496c32adad2c8
Certificate serial:       01963F8B57B79A9BB89D43B48DAB96BA2970
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BrjtmF7yA06OMHxEfzSWwyra0sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft
Manifest number:          14F3
Signing time:             Wed 16 Apr 2025 17:00:18 +0000
Manifest this update:     Wed 16 Apr 2025 17:00:18 +0000
Manifest next update:     Thu 17 Apr 2025 17:00:18 +0000
Files and hashes:         1: BrjtmF7yA06OMHxEfzSWwyra0sg.crl (hash: qSx7PW3l8Q4f91UKnt4s4xqSTx1aZUqCGSjCeAI3/bA=)
                          2: NqaLmcA0hS3kbvvGXTMO3PSyQ-c.roa (hash: /fpzuan/b2/lZgMGOV41W9znkrskBH2VUdOsvVz//ik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BrjtmF7yA06OMHxEfzSWwyra0sg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3f:8b:57:b7:9a:9b:b8:9d:43:b4:8d:ab:96:ba:29:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06b8ed985ef2034e8e307c447f3496c32adad2c8
        Validity
            Not Before: Apr 16 17:00:18 2025 GMT
            Not After : Apr 17 17:00:18 2025 GMT
        Subject: CN=3859bdad9bf8b55dc8a7e2ca67d7be4c193a6c40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5f:6c:3b:be:3e:b0:8f:ca:65:ba:ab:71:d2:
                    4e:36:27:0b:15:d5:14:bb:4f:50:b0:8b:42:4b:10:
                    7a:c9:6a:7a:1d:18:1c:98:3a:85:7d:9a:be:e4:6d:
                    6a:9c:74:a3:f3:09:b9:08:65:55:24:6a:02:a7:e2:
                    a0:71:f0:e9:ab:87:8c:4c:7d:0d:26:e4:23:8d:57:
                    36:58:15:62:da:47:cb:5b:9a:19:19:b3:9a:4f:a0:
                    70:29:49:e4:65:5b:52:6f:ff:c8:28:27:de:91:e3:
                    1a:88:0d:f5:bf:4b:49:5e:c0:8f:eb:99:c7:95:39:
                    77:db:f6:6c:38:89:05:0e:ac:54:6f:88:ae:d6:5e:
                    4f:69:93:b9:ef:d8:0a:b3:0a:72:86:d8:49:c6:7a:
                    ce:93:4d:c1:2a:3d:45:91:99:ac:2f:a7:32:66:0e:
                    5d:75:7e:d1:2a:9a:51:2a:68:45:f7:d6:f4:81:c8:
                    88:22:4e:28:74:24:64:6f:9f:6d:dc:8b:87:f7:f1:
                    20:35:b0:aa:6e:03:ac:de:93:01:b0:89:cb:d6:77:
                    e5:6c:92:05:64:60:68:fe:df:31:52:23:02:e1:4a:
                    11:59:06:b3:16:84:0e:95:06:96:94:d6:e0:8b:04:
                    7e:cc:8c:0a:49:75:b7:01:b3:a7:5f:07:42:bd:2f:
                    8e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:59:BD:AD:9B:F8:B5:5D:C8:A7:E2:CA:67:D7:BE:4C:19:3A:6C:40
            X509v3 Authority Key Identifier:
                keyid:06:B8:ED:98:5E:F2:03:4E:8E:30:7C:44:7F:34:96:C3:2A:DA:D2:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BrjtmF7yA06OMHxEfzSWwyra0sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:95:78:85:d6:f4:3e:68:ac:0d:7e:7c:a0:11:9c:ab:f1:7a:
         e3:ff:84:a1:d1:de:af:5c:ca:76:8d:16:da:03:69:6d:1e:fc:
         62:14:64:4f:ac:eb:56:04:14:15:64:82:c2:51:61:3d:da:ed:
         fd:ab:47:fd:9e:fa:b5:95:52:a3:32:21:20:93:f6:1f:92:3e:
         f9:99:e8:cb:8d:37:e9:7a:2a:7a:61:8c:e8:9e:30:5a:c8:3c:
         cb:89:4c:14:51:22:c3:3e:dc:78:06:bd:a2:3c:03:a2:e8:69:
         18:87:59:17:0b:d0:d9:cb:a9:b8:d2:e8:0d:d9:69:56:a9:fd:
         0a:3a:b3:41:55:0c:bf:d3:20:63:b0:39:20:34:26:54:08:b8:
         4d:e5:9d:e0:08:13:69:4e:67:dc:03:16:36:8e:b6:e4:18:90:
         58:fb:59:6f:4a:d7:14:3c:a1:89:c3:fd:0f:95:55:2e:0e:74:
         94:1f:c2:81:e2:a2:bc:da:fd:76:bf:84:a3:dd:be:20:73:bc:
         88:12:00:02:06:e9:ac:04:1c:e5:38:2a:9e:ca:79:93:bd:63:
         0f:a7:de:10:c0:9a:c7:6f:70:96:35:17:8c:9d:69:00:c0:b1:
         a6:d5:86:48:71:46:f4:4e:77:57:3d:64:64:43:f0:60:05:bc:
         99:11:e2:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY/i1e3mpu4nUO0jauWuilwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YjhlZDk4NWVmMjAzNGU4ZTMwN2M0NDdmMzQ5NmMzMmFk
YWQyYzgwHhcNMjUwNDE2MTcwMDE4WhcNMjUwNDE3MTcwMDE4WjAzMTEwLwYDVQQD
EygzODU5YmRhZDliZjhiNTVkYzhhN2UyY2E2N2Q3YmU0YzE5M2E2YzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzF9sO74+sI/KZbqrcdJONicLFdUU
u09QsItCSxB6yWp6HRgcmDqFfZq+5G1qnHSj8wm5CGVVJGoCp+KgcfDpq4eMTH0N
JuQjjVc2WBVi2kfLW5oZGbOaT6BwKUnkZVtSb//IKCfekeMaiA31v0tJXsCP65nH
lTl32/ZsOIkFDqxUb4iu1l5PaZO579gKswpyhthJxnrOk03BKj1FkZmsL6cyZg5d
dX7RKppRKmhF99b0gciIIk4odCRkb59t3IuH9/EgNbCqbgOs3pMBsInL1nflbJIF
ZGBo/t8xUiMC4UoRWQazFoQOlQaWlNbgiwR+zIwKSXW3AbOnXwdCvS+OKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhZva2b+LVdyKfiymfXvkwZOmxAMB8GA1UdIwQY
MBaAFAa47Zhe8gNOjjB8RH80lsMq2tLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnJqdG1GN3lBMDZPTUh4RWZ6U1d3eXJhMHNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mYzVhZjUtMGI1MC00NTMxLTkzNzQt
ZWJlYjlhOTkxNDg4LzEvQnJqdG1GN3lBMDZPTUh4RWZ6U1d3eXJhMHNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mYzVhZjUtMGI1MC00NTMxLTkzNzQtZWJlYjlhOTkxNDg4
LzEvQnJqdG1GN3lBMDZPTUh4RWZ6U1d3eXJhMHNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGpV4hdb0
PmisDX58oBGcq/F64/+EodHer1zKdo0W2gNpbR78YhRkT6zrVgQUFWSCwlFhPdrt
/atH/Z76tZVSozIhIJP2H5I++Znoy4036XoqemGM6J4wWsg8y4lMFFEiwz7ceAa9
ojwDouhpGIdZFwvQ2cupuNLoDdlpVqn9CjqzQVUMv9MgY7A5IDQmVAi4TeWd4AgT
aU5n3AMWNo625BiQWPtZb0rXFDyhicP9D5VVLg50lB/CgeKivNr9dr+Eo92+IHO8
iBIAAgbprAQc5Tgqnsp5k71jD6feEMCax29wljUXjJ1pAMCxptWGSHFG9E53Vz1k
ZEPwYAW8mRHi8g==
-----END CERTIFICATE-----
Generated at Thu Apr 17 02:43:25 2025 by rpki-client