Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft
File:                     7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft (raw, json)
Hash identifier:          +W2THgYNJlLUsLUhuV3pTft/gFhj7p2V5jyfpxIYDFw=
Subject key identifier:   E0:E9:2D:B0:18:C5:A3:36:90:07:54:6C:F2:5B:1C:0F:C8:AB:0D:B4
Authority key identifier: ED:8E:87:97:EA:06:83:57:AD:6B:B0:3A:35:C9:5B:D7:03:4E:15:41
Certificate issuer:       /CN=ed8e8797ea068357ad6bb03a35c95bd7034e1541
Certificate serial:       01965424E8D256C3EE80DBB6368AFE7AEFF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft
Manifest number:          14FF
Signing time:             Sun 20 Apr 2025 17:00:27 +0000
Manifest this update:     Sun 20 Apr 2025 17:00:27 +0000
Manifest next update:     Mon 21 Apr 2025 17:00:27 +0000
Files and hashes:         1: 7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl (hash: E7NUXi/6byOXMl6H/aixYTHm8KYB1LEUlrfpAgXWWKM=)
                          2: Ao7-x_8NPg2IIluWIinvFu8yH0U.roa (hash: A3P+oKM2oi9ju+YskOIABqGTeUYgSje5pwMOXAO8OH4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:54:24:e8:d2:56:c3:ee:80:db:b6:36:8a:fe:7a:ef:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed8e8797ea068357ad6bb03a35c95bd7034e1541
        Validity
            Not Before: Apr 20 17:00:27 2025 GMT
            Not After : Apr 21 17:00:27 2025 GMT
        Subject: CN=e0e92db018c5a3369007546cf25b1c0fc8ab0db4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4e:be:d2:51:f4:8e:e2:33:0c:61:8e:c4:0a:
                    6e:41:07:7e:c5:9a:26:a9:d5:d4:fe:a5:3d:c0:42:
                    8c:c9:5e:38:a9:3d:81:4d:12:b9:b1:c8:51:de:15:
                    02:0e:a8:c4:ec:fa:be:64:6e:77:79:b8:c7:1b:ba:
                    14:ff:9f:a7:3d:ef:8a:e6:40:6b:0d:c4:8c:06:dc:
                    4e:1a:ae:a3:06:01:fb:09:69:bb:17:7c:33:35:0b:
                    2c:b3:b7:d8:df:cb:0b:71:75:99:c4:24:33:1a:a3:
                    28:03:30:9e:e0:31:4f:38:67:3a:46:77:05:a1:28:
                    a1:24:04:ec:28:a9:66:a5:7f:c1:8f:9c:c7:c5:19:
                    0b:8d:8f:3f:72:42:1c:d3:0a:81:6f:43:5a:a4:92:
                    dd:19:49:f0:ae:e6:1f:64:7b:81:ef:08:a0:f0:b0:
                    cc:ae:f6:7b:b3:09:39:c6:d8:b0:0e:94:3c:10:60:
                    bd:14:c2:4d:b8:7c:ab:65:e3:34:ca:29:68:81:f5:
                    b0:6a:0d:85:37:33:3f:44:37:4e:0c:18:4b:dc:7f:
                    09:9a:79:93:7a:d7:6c:c7:32:08:f8:9b:e2:7a:e8:
                    a3:2c:01:b0:6d:89:61:37:27:c1:9f:f3:65:0f:7a:
                    2a:a0:d8:cc:79:4e:ab:e3:38:cb:2b:39:8e:72:93:
                    ed:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E9:2D:B0:18:C5:A3:36:90:07:54:6C:F2:5B:1C:0F:C8:AB:0D:B4
            X509v3 Authority Key Identifier:
                keyid:ED:8E:87:97:EA:06:83:57:AD:6B:B0:3A:35:C9:5B:D7:03:4E:15:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:c0:53:f0:3d:c9:06:90:b6:e0:90:70:f5:da:30:9f:8f:9f:
         47:40:7b:c6:ba:a0:10:01:cb:70:71:2e:27:c4:67:04:86:42:
         4a:95:e1:f5:9d:5c:ac:53:56:f6:42:af:fd:0b:ba:b7:db:54:
         9a:95:04:6c:b8:b8:d7:03:b1:69:51:c5:b3:56:e5:84:d6:24:
         b9:7d:b1:4a:37:67:d1:ed:1c:ca:5c:6d:ec:d7:c8:54:75:9a:
         1a:d8:88:42:d1:e8:19:fa:24:c4:08:c9:f6:83:31:c9:55:4a:
         1a:5c:f5:45:c3:33:52:47:05:3b:6d:8d:e4:24:d4:b3:ee:4f:
         5a:16:5b:aa:d5:18:ec:e4:4a:c2:64:ef:63:c0:4a:e8:52:0f:
         bd:01:69:f2:bf:97:4b:a1:26:e7:c7:0e:9f:f3:ae:d8:ce:4a:
         e8:ca:18:6f:4f:23:23:32:c5:1d:22:e8:1a:4e:b8:a9:4b:f2:
         44:a7:73:4b:e8:04:eb:43:41:40:48:ae:ce:18:f1:6a:8a:84:
         2a:8f:e5:6e:f5:87:c8:e2:3e:f4:80:71:6d:d7:73:df:45:63:
         35:a3:8d:64:86:19:bd:c1:fa:bb:a9:bd:fb:e1:f2:1f:f6:6a:
         a7:4d:80:c1:59:f1:c6:01:fd:4d:7e:95:81:30:a8:b9:f1:19:
         3b:45:10:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUJOjSVsPugNu2Nor+eu/1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkOGU4Nzk3ZWEwNjgzNTdhZDZiYjAzYTM1Yzk1YmQ3MDM0
ZTE1NDEwHhcNMjUwNDIwMTcwMDI3WhcNMjUwNDIxMTcwMDI3WjAzMTEwLwYDVQQD
EyhlMGU5MmRiMDE4YzVhMzM2OTAwNzU0NmNmMjViMWMwZmM4YWIwZGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApk6+0lH0juIzDGGOxApuQQd+xZom
qdXU/qU9wEKMyV44qT2BTRK5schR3hUCDqjE7Pq+ZG53ebjHG7oU/5+nPe+K5kBr
DcSMBtxOGq6jBgH7CWm7F3wzNQsss7fY38sLcXWZxCQzGqMoAzCe4DFPOGc6RncF
oSihJATsKKlmpX/Bj5zHxRkLjY8/ckIc0wqBb0NapJLdGUnwruYfZHuB7wig8LDM
rvZ7swk5xtiwDpQ8EGC9FMJNuHyrZeM0yilogfWwag2FNzM/RDdODBhL3H8JmnmT
etdsxzII+JvieuijLAGwbYlhNyfBn/NlD3oqoNjMeU6r4zjLKzmOcpPt9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFODpLbAYxaM2kAdUbPJbHA/Iqw20MB8GA1UdIwQY
MBaAFO2Oh5fqBoNXrWuwOjXJW9cDThVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1k2SGwtb0dnMWV0YTdBNk5jbGIxd05PRlVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS83ZWI0MDktN2YxMy00ODZkLTg2YTgt
YWUxYjBhY2QyOGE4LzEvN1k2SGwtb0dnMWV0YTdBNk5jbGIxd05PRlVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS83ZWI0MDktN2YxMy00ODZkLTg2YTgtYWUxYjBhY2QyOGE4
LzEvN1k2SGwtb0dnMWV0YTdBNk5jbGIxd05PRlVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVcBT8D3J
BpC24JBw9down4+fR0B7xrqgEAHLcHEuJ8RnBIZCSpXh9Z1crFNW9kKv/Qu6t9tU
mpUEbLi41wOxaVHFs1blhNYkuX2xSjdn0e0cylxt7NfIVHWaGtiIQtHoGfokxAjJ
9oMxyVVKGlz1RcMzUkcFO22N5CTUs+5PWhZbqtUY7ORKwmTvY8BK6FIPvQFp8r+X
S6Em58cOn/Ou2M5K6MoYb08jIzLFHSLoGk64qUvyRKdzS+gE60NBQEiuzhjxaoqE
Ko/lbvWHyOI+9IBxbddz30VjNaONZIYZvcH6u6m9++HyH/Zqp02AwVnxxgH9TX6V
gTCoufEZO0UQ1g==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:31:18 2025 by rpki-client