Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
File:                     vosVwjfzTFxcU0S0B567OlidAUg.mft (raw, json)
Hash identifier:          ouCTEiM0xgChdfG+k04JvYSc0ARcwOarBPsQFCfM2pM=
Subject key identifier:   74:02:CE:75:AC:EE:D9:1B:1F:1C:B8:34:5B:47:68:20:A1:99:51:5D
Authority key identifier: BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48
Certificate issuer:       /CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
Certificate serial:       01965E3AF3F4A0DBB3AF7720593DE3794770
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
Manifest number:          0AD5
Signing time:             Tue 22 Apr 2025 16:00:43 +0000
Manifest this update:     Tue 22 Apr 2025 16:00:43 +0000
Manifest next update:     Wed 23 Apr 2025 16:00:43 +0000
Files and hashes:         1: hKsPJ4MnZD2pYCjFxua95M8Pd_I.roa (hash: doF91Tq6urawTtlcrWXugjS7shhgWKPbbEAfjccw0S8=)
                          2: vosVwjfzTFxcU0S0B567OlidAUg.crl (hash: y8qZohtzaaF+g+jWvoaacCR3J8YCOm10mv5UjBOqwqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 16:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5e:3a:f3:f4:a0:db:b3:af:77:20:59:3d:e3:79:47:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
        Validity
            Not Before: Apr 22 16:00:43 2025 GMT
            Not After : Apr 23 16:00:43 2025 GMT
        Subject: CN=7402ce75aceed91b1f1cb8345b476820a199515d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8b:77:2e:6f:68:1b:43:99:68:ae:71:e6:64:
                    bf:7c:f5:c5:2b:4d:b8:7b:b0:f6:d3:34:83:c3:bd:
                    da:fc:75:f7:6f:1a:10:70:3d:5b:24:e5:6a:f2:42:
                    e0:aa:0d:16:b6:86:53:e0:e5:02:56:82:44:ac:a8:
                    f5:bf:13:23:37:79:a4:04:df:96:67:7d:ce:26:06:
                    35:4e:66:89:87:e9:26:ec:90:08:8f:e4:61:3d:66:
                    fd:dc:4a:2b:a0:1e:ed:d0:d5:ba:75:40:54:30:16:
                    4c:f3:93:3a:34:b5:a3:63:0e:be:b4:0c:98:72:7f:
                    9e:7d:33:93:51:2b:bb:b4:0b:e0:39:8e:d2:80:50:
                    b4:bc:97:de:4d:b4:77:d9:12:87:a9:ff:60:e2:ea:
                    71:a0:ce:82:96:00:c4:01:31:5d:c9:26:bf:67:8a:
                    74:75:19:96:cb:31:46:f5:62:9b:8b:57:93:a6:c2:
                    d7:ac:20:b5:76:57:49:1a:47:3d:e5:bc:9d:a8:82:
                    7c:11:3a:a9:53:1c:64:4c:5c:1e:7b:61:4a:fa:6b:
                    71:64:d8:8e:41:95:fb:c7:0e:a2:f0:c6:27:9a:6c:
                    bd:41:8b:d8:3b:0b:28:7c:d8:d8:61:ee:62:d1:0a:
                    91:bd:76:12:fb:b2:dd:ce:53:58:b9:6d:79:cb:4c:
                    c3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:02:CE:75:AC:EE:D9:1B:1F:1C:B8:34:5B:47:68:20:A1:99:51:5D
            X509v3 Authority Key Identifier:
                keyid:BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:4b:1f:1a:2e:86:7f:b3:bc:d3:51:49:41:79:bf:a6:44:01:
         de:86:ae:c7:0f:28:e5:b2:09:b1:84:b3:ea:56:61:65:93:1b:
         8b:c7:14:75:d4:e8:c7:b1:37:ab:4c:eb:8b:d8:9b:9c:e0:53:
         1b:a4:47:06:51:91:74:cd:e7:e5:50:bb:c8:9e:1d:87:77:8a:
         57:7c:e9:38:cf:a9:14:f5:1a:f6:09:f4:f2:49:56:80:f7:c2:
         62:40:0c:9e:f4:cd:f0:c9:cb:af:3f:1c:a3:f6:5b:92:6f:54:
         71:80:6e:a4:75:d9:ad:bb:fb:95:92:b6:63:f2:76:cd:41:37:
         a8:49:01:c4:cb:29:bf:0a:2b:8d:ff:e0:e3:a2:04:3e:65:07:
         7b:e4:91:13:eb:89:11:6f:31:93:e5:0d:3b:7d:06:12:c1:0d:
         8c:78:d5:6c:f6:f2:cb:d0:d1:f2:0d:1e:f9:b0:27:f1:65:80:
         90:5b:fe:da:b1:66:88:2f:bb:f0:67:9a:ca:ca:76:ea:20:12:
         43:23:3f:13:91:5a:78:0e:0b:d6:a3:7e:ef:75:bf:ec:3b:07:
         80:cc:d4:61:32:76:19:f2:e6:14:d6:05:07:48:42:05:70:6e:
         59:6f:ca:c7:f4:00:6d:05:f0:11:a9:ad:28:84:94:d7:8d:15:
         33:15:ff:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZeOvP0oNuzr3cgWT3jeUdwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlOGIxNWMyMzdmMzRjNWM1YzUzNDRiNDA3OWViYjNhNTg5
ZDAxNDgwHhcNMjUwNDIyMTYwMDQzWhcNMjUwNDIzMTYwMDQzWjAzMTEwLwYDVQQD
Eyg3NDAyY2U3NWFjZWVkOTFiMWYxY2I4MzQ1YjQ3NjgyMGExOTk1MTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArot3Lm9oG0OZaK5x5mS/fPXFK024
e7D20zSDw73a/HX3bxoQcD1bJOVq8kLgqg0WtoZT4OUCVoJErKj1vxMjN3mkBN+W
Z33OJgY1TmaJh+km7JAIj+RhPWb93EoroB7t0NW6dUBUMBZM85M6NLWjYw6+tAyY
cn+efTOTUSu7tAvgOY7SgFC0vJfeTbR32RKHqf9g4upxoM6ClgDEATFdySa/Z4p0
dRmWyzFG9WKbi1eTpsLXrCC1dldJGkc95bydqIJ8ETqpUxxkTFwee2FK+mtxZNiO
QZX7xw6i8MYnmmy9QYvYOwsofNjYYe5i0QqRvXYS+7LdzlNYuW15y0zDzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQCznWs7tkbHxy4NFtHaCChmVFdMB8GA1UdIwQY
MBaAFL6LFcI380xcXFNEtAeeuzpYnQFIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdm9zVndqZnpURnhjVTBTMEI1NjdPbGlkQVVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9hYTU5NzItMzUzOC00MzYxLWExMzQt
MzFkZTE3NjlmZDhhLzEvdm9zVndqZnpURnhjVTBTMEI1NjdPbGlkQVVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9hYTU5NzItMzUzOC00MzYxLWExMzQtMzFkZTE3NjlmZDhh
LzEvdm9zVndqZnpURnhjVTBTMEI1NjdPbGlkQVVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPksfGi6G
f7O801FJQXm/pkQB3oauxw8o5bIJsYSz6lZhZZMbi8cUddTox7E3q0zri9ibnOBT
G6RHBlGRdM3n5VC7yJ4dh3eKV3zpOM+pFPUa9gn08klWgPfCYkAMnvTN8MnLrz8c
o/Zbkm9UcYBupHXZrbv7lZK2Y/J2zUE3qEkBxMspvworjf/g46IEPmUHe+SRE+uJ
EW8xk+UNO30GEsENjHjVbPbyy9DR8g0e+bAn8WWAkFv+2rFmiC+78Geaysp26iAS
QyM/E5FaeA4L1qN+73W/7DsHgMzUYTJ2GfLmFNYFB0hCBXBuWW/Kx/QAbQXwEamt
KISU140VMxX/5g==
-----END CERTIFICATE-----
Generated at Wed Apr 23 01:51:10 2025 by rpki-client