Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft
File:                     RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft (raw, json)
Hash identifier:          bAnb+Q/YJ94GXOPLQDXL/Xqk6yt4xE2oUjYiElWYars=
Subject key identifier:   6E:0F:E0:BE:84:62:15:54:07:58:6B:1F:21:15:7D:CA:20:80:0B:5F
Authority key identifier: 44:7C:D4:1D:9E:6C:CF:80:30:6C:1B:46:BD:C0:B5:77:B1:EE:2C:AE
Certificate issuer:       /CN=447cd41d9e6ccf80306c1b46bdc0b577b1ee2cae
Certificate serial:       01965E3ADC8C9B4EDA516BCA7ACFBE06D52A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft
Manifest number:          12F9
Signing time:             Tue 22 Apr 2025 16:00:37 +0000
Manifest this update:     Tue 22 Apr 2025 16:00:37 +0000
Manifest next update:     Wed 23 Apr 2025 16:00:37 +0000
Files and hashes:         1: RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl (hash: xmad0IopG7jy8rRoPMrjveOm7+IqVUGHfKphcBJBvuE=)
                          2: UK2n5J82Y8mJ_ChH-Mf3D9V405E.roa (hash: tUUMnCPKY1tGYA08Lbr1dGnhLn6RW32Wd2MZ44NLy2E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 16:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5e:3a:dc:8c:9b:4e:da:51:6b:ca:7a:cf:be:06:d5:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=447cd41d9e6ccf80306c1b46bdc0b577b1ee2cae
        Validity
            Not Before: Apr 22 16:00:37 2025 GMT
            Not After : Apr 23 16:00:37 2025 GMT
        Subject: CN=6e0fe0be8462155407586b1f21157dca20800b5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:63:fc:fa:27:b5:79:e5:42:9c:35:9a:7b:a8:
                    78:8c:0a:31:95:d1:87:9f:31:1b:5a:e9:92:0d:41:
                    43:07:cd:79:fc:77:52:3b:de:66:a7:d4:3c:14:f4:
                    eb:95:60:e4:8b:69:bf:69:58:91:0d:5e:23:83:57:
                    5b:91:d7:eb:77:45:f9:fc:be:82:ee:14:86:09:19:
                    11:a3:2f:6f:18:76:07:bd:f5:d4:3b:a1:81:ca:a7:
                    3c:68:17:8b:3d:e0:ac:9d:2c:ff:3f:a5:f3:df:aa:
                    69:b8:c5:66:8c:0c:7e:40:99:b3:40:a8:45:73:a7:
                    5e:95:78:de:5c:77:bf:ff:43:4d:83:d6:f0:10:da:
                    90:57:a7:61:7b:c9:ab:93:b1:a4:7e:5b:6b:67:de:
                    01:6a:80:4c:c9:a5:69:9b:a0:89:84:fe:1c:ec:89:
                    f9:ad:7c:d5:b4:c0:d7:eb:68:15:24:5f:d2:0d:4a:
                    8d:0a:09:46:37:ba:2f:f5:97:2b:ac:d1:3d:5c:ad:
                    31:44:fb:cd:8a:be:58:0d:c3:bb:5d:19:ed:10:0f:
                    3f:95:d1:c5:f3:a0:c3:c4:21:f1:71:a6:5d:43:b2:
                    df:ac:26:09:86:b6:af:ae:97:15:96:c8:31:4d:85:
                    5b:8a:a9:b5:a5:99:4c:06:bb:e9:43:21:57:c3:9d:
                    d6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0F:E0:BE:84:62:15:54:07:58:6B:1F:21:15:7D:CA:20:80:0B:5F
            X509v3 Authority Key Identifier:
                keyid:44:7C:D4:1D:9E:6C:CF:80:30:6C:1B:46:BD:C0:B5:77:B1:EE:2C:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:e2:b7:55:84:6a:6b:86:b2:2e:9c:b2:8e:89:0b:a1:0c:e1:
         be:a0:93:12:70:57:43:73:d5:3b:f8:7a:01:9e:3c:f5:4b:56:
         2a:16:b3:77:62:ad:e4:95:66:63:84:b8:5c:26:dd:4c:1a:6f:
         20:4e:e6:37:4c:33:62:f2:1f:03:ee:bc:e8:dd:ae:af:69:e3:
         8c:4c:33:da:db:77:13:95:7c:71:4a:ea:46:6b:83:13:5a:c1:
         d4:b1:30:90:0e:c2:56:c0:9f:6e:a4:10:d2:ea:06:0b:72:e3:
         16:4c:96:29:b6:ef:3e:9e:ea:16:5a:fd:ef:2e:2c:85:ed:9b:
         a1:22:19:88:d9:4f:6d:ce:4c:60:70:7f:0f:dd:c0:2c:0a:91:
         c5:2f:59:23:0d:ee:76:76:95:d2:ce:2e:b0:45:62:87:44:d0:
         06:87:6d:43:f7:0c:ae:c0:80:30:87:0e:fa:21:4c:be:a5:27:
         77:f4:58:c2:7c:4d:32:ad:5f:ca:5d:f7:b9:93:ce:93:0d:d3:
         ad:68:d1:68:89:96:e6:83:dd:a3:96:e1:2b:47:5c:90:46:de:
         be:5a:32:0b:f8:73:ff:f0:6c:54:7f:7c:72:bc:e0:0b:c3:dc:
         a7:b4:c2:7c:6c:95:12:7d:11:6c:33:46:6a:07:c3:e1:d7:5f:
         a3:8d:e3:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZeOtyMm07aUWvKes++BtUqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0N2NkNDFkOWU2Y2NmODAzMDZjMWI0NmJkYzBiNTc3YjFl
ZTJjYWUwHhcNMjUwNDIyMTYwMDM3WhcNMjUwNDIzMTYwMDM3WjAzMTEwLwYDVQQD
Eyg2ZTBmZTBiZTg0NjIxNTU0MDc1ODZiMWYyMTE1N2RjYTIwODAwYjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGP8+ie1eeVCnDWae6h4jAoxldGH
nzEbWumSDUFDB815/HdSO95mp9Q8FPTrlWDki2m/aViRDV4jg1dbkdfrd0X5/L6C
7hSGCRkRoy9vGHYHvfXUO6GByqc8aBeLPeCsnSz/P6Xz36ppuMVmjAx+QJmzQKhF
c6delXjeXHe//0NNg9bwENqQV6dhe8mrk7GkfltrZ94BaoBMyaVpm6CJhP4c7In5
rXzVtMDX62gVJF/SDUqNCglGN7ov9ZcrrNE9XK0xRPvNir5YDcO7XRntEA8/ldHF
86DDxCHxcaZdQ7LfrCYJhravrpcVlsgxTYVbiqm1pZlMBrvpQyFXw53WVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4P4L6EYhVUB1hrHyEVfcoggAtfMB8GA1UdIwQY
MBaAFER81B2ebM+AMGwbRr3AtXex7iyuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkh6VUhaNXN6NEF3YkJ0R3ZjQzFkN0h1TEs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8xMjAzZDctNDFhYi00MDRjLTkyOWIt
Yjk3ODM4YzhkNjU4LzEvUkh6VUhaNXN6NEF3YkJ0R3ZjQzFkN0h1TEs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8xMjAzZDctNDFhYi00MDRjLTkyOWItYjk3ODM4YzhkNjU4
LzEvUkh6VUhaNXN6NEF3YkJ0R3ZjQzFkN0h1TEs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcOK3VYRq
a4ayLpyyjokLoQzhvqCTEnBXQ3PVO/h6AZ489UtWKhazd2Kt5JVmY4S4XCbdTBpv
IE7mN0wzYvIfA+686N2ur2njjEwz2tt3E5V8cUrqRmuDE1rB1LEwkA7CVsCfbqQQ
0uoGC3LjFkyWKbbvPp7qFlr97y4she2boSIZiNlPbc5MYHB/D93ALAqRxS9ZIw3u
dnaV0s4usEVih0TQBodtQ/cMrsCAMIcO+iFMvqUnd/RYwnxNMq1fyl33uZPOkw3T
rWjRaImW5oPdo5bhK0dckEbevloyC/hz//BsVH98crzgC8Pcp7TCfGyVEn0RbDNG
agfD4ddfo43j1w==
-----END CERTIFICATE-----
Generated at Wed Apr 23 02:14:25 2025 by rpki-client