Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft
File:                     fz4LJ7jk15j5K53hV_HaWkPNSeU.mft (raw, json)
Hash identifier:          5kJ7+PEM3EFSFJFbVsL5WeJfEzbeT/40Xn60n3W6Ke0=
Subject key identifier:   43:E9:78:C0:00:57:0D:57:86:3A:29:E6:B5:01:14:07:AD:A2:A2:E1
Authority key identifier: 7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5
Certificate issuer:       /CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5
Certificate serial:       01963EAFBE0A20CC4D7B3BD4E55EF0A11E1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft
Manifest number:          0F2E
Signing time:             Wed 16 Apr 2025 13:00:26 +0000
Manifest this update:     Wed 16 Apr 2025 13:00:26 +0000
Manifest next update:     Thu 17 Apr 2025 13:00:26 +0000
Files and hashes:         1: L9AVUKjVgjcjBjCh3XKgvGTA1hk.roa (hash: MRdftqqKSbxUqqyJAk4X82kFe7zRmWPvMYuMjvwKsdI=)
                          2: QV4GiX-_NmB8bXeYFpiPeoYvPgs.roa (hash: ExzZIsYL5CpNKY2xKGueRJzqSweDgaHE92K03gK5p6M=)
                          3: fz4LJ7jk15j5K53hV_HaWkPNSeU.crl (hash: ziC1OCgdTThrUpNqkwl6ci66EmDuJnZr3jWZDqTRADo=)
                          4: lEhVQNOMvqw54edqH7zh3c7mW1U.roa (hash: nQoP405LztBAkFL0e8Rma4sgogpaQEPhwJTWJogq2nE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3e:af:be:0a:20:cc:4d:7b:3b:d4:e5:5e:f0:a1:1e:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5
        Validity
            Not Before: Apr 16 13:00:26 2025 GMT
            Not After : Apr 17 13:00:26 2025 GMT
        Subject: CN=43e978c000570d57863a29e6b5011407ada2a2e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b9:54:c8:04:ba:8b:73:2b:89:3d:49:87:e5:
                    9b:ed:cb:d4:47:54:0a:e9:b8:9a:ff:4f:91:5a:c7:
                    6e:b0:f9:89:83:5c:4d:d4:7f:ab:d3:32:a8:5a:5f:
                    bd:2c:44:f9:fd:47:2e:11:28:12:d3:b7:19:b6:4a:
                    3e:d3:49:1a:2f:e0:83:28:4d:08:54:b0:39:d2:68:
                    9e:7f:cb:31:4a:7d:0e:14:ae:15:7e:51:97:40:84:
                    ba:bf:5e:a0:30:3c:89:18:fb:7f:2a:2f:bd:ba:c3:
                    26:44:9c:33:bb:08:3d:c0:5b:4b:6b:d9:c3:e0:62:
                    78:11:40:69:a0:9e:4b:7a:1f:ac:bb:46:4a:08:02:
                    c6:d0:ca:58:2c:79:03:19:af:2b:c8:02:20:c5:fb:
                    48:6b:b1:54:9a:9e:50:a2:45:c7:56:12:c7:84:f0:
                    b4:03:92:9d:2c:a8:63:6f:4c:cf:15:fd:3f:97:ea:
                    37:a1:b5:05:93:e9:7e:e5:ed:94:22:ae:fb:4b:12:
                    ff:8d:07:34:f5:d1:8d:fe:74:ef:2e:4c:96:11:6a:
                    dd:b5:ff:16:87:1e:89:cf:b9:37:35:63:dd:4a:b3:
                    b9:e4:57:95:cf:35:58:ea:cc:2b:42:c7:eb:a8:43:
                    6c:af:86:88:5d:d1:d8:5b:8a:ec:8b:8d:a0:db:09:
                    a9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E9:78:C0:00:57:0D:57:86:3A:29:E6:B5:01:14:07:AD:A2:A2:E1
            X509v3 Authority Key Identifier:
                keyid:7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:00:9b:2a:16:d5:6f:ea:b2:79:99:06:f0:ee:d5:3c:f6:35:
         a8:16:f8:39:55:10:32:3f:f0:f3:25:a5:fa:12:19:99:3e:0c:
         1b:04:4d:57:6a:9d:56:ae:54:a7:dc:74:f0:1d:86:3c:84:80:
         2e:99:1c:74:15:b7:d5:82:09:32:b9:0e:6d:1a:eb:56:49:27:
         ab:cf:91:a5:ff:25:11:2b:29:29:89:ee:a4:04:9d:5c:55:bc:
         11:39:67:c2:f6:91:9c:fc:c3:03:bb:e1:f6:82:99:3a:60:26:
         ea:57:f7:31:89:6b:0e:cb:b6:b1:a6:41:99:72:88:f2:9c:cb:
         3c:46:11:b7:57:41:0b:7e:47:2d:25:1a:c0:71:d0:ad:6e:1d:
         7a:f7:36:85:ad:80:06:75:8a:6f:3e:87:3b:8a:ac:6c:a7:a4:
         07:ee:1e:c0:9a:ea:10:2a:2b:3d:16:1a:7c:54:55:59:8e:b6:
         2c:50:ef:7d:a3:68:c8:e0:3a:8b:3f:2a:0e:45:ef:b6:3d:24:
         e9:0b:54:2d:5b:a7:60:31:db:7b:9d:98:c3:25:07:a7:be:53:
         93:dc:00:e1:78:72:af:0a:ba:f4:a9:9b:71:56:65:37:26:2c:
         0d:33:5d:0d:37:cf:4b:96:31:e1:fa:8d:5c:29:b4:eb:c3:f4:
         43:a0:03:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY+r74KIMxNezvU5V7woR4dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmM2UwYjI3YjhlNGQ3OThmOTJiOWRlMTU3ZjFkYTVhNDNj
ZDQ5ZTUwHhcNMjUwNDE2MTMwMDI2WhcNMjUwNDE3MTMwMDI2WjAzMTEwLwYDVQQD
Eyg0M2U5NzhjMDAwNTcwZDU3ODYzYTI5ZTZiNTAxMTQwN2FkYTJhMmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwblUyAS6i3MriT1Jh+Wb7cvUR1QK
6bia/0+RWsdusPmJg1xN1H+r0zKoWl+9LET5/UcuESgS07cZtko+00kaL+CDKE0I
VLA50mief8sxSn0OFK4VflGXQIS6v16gMDyJGPt/Ki+9usMmRJwzuwg9wFtLa9nD
4GJ4EUBpoJ5Leh+su0ZKCALG0MpYLHkDGa8ryAIgxftIa7FUmp5QokXHVhLHhPC0
A5KdLKhjb0zPFf0/l+o3obUFk+l+5e2UIq77SxL/jQc09dGN/nTvLkyWEWrdtf8W
hx6Jz7k3NWPdSrO55FeVzzVY6swrQsfrqENsr4aIXdHYW4rsi42g2wmpQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPpeMAAVw1Xhjop5rUBFAetoqLhMB8GA1UdIwQY
MBaAFH8+Cye45NeY+Sud4Vfx2lpDzUnlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZno0TEo3amsxNWo1SzUzaFZfSGFXa1BOU2VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9hMGM5YWMtM2E0Ny00ZDZjLWFhMTUt
YTQyZWM4Nzc2ZmJiLzEvZno0TEo3amsxNWo1SzUzaFZfSGFXa1BOU2VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9hMGM5YWMtM2E0Ny00ZDZjLWFhMTUtYTQyZWM4Nzc2ZmJi
LzEvZno0TEo3amsxNWo1SzUzaFZfSGFXa1BOU2VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAQCbKhbV
b+qyeZkG8O7VPPY1qBb4OVUQMj/w8yWl+hIZmT4MGwRNV2qdVq5Up9x08B2GPISA
LpkcdBW31YIJMrkObRrrVkknq8+Rpf8lESspKYnupASdXFW8ETlnwvaRnPzDA7vh
9oKZOmAm6lf3MYlrDsu2saZBmXKI8pzLPEYRt1dBC35HLSUawHHQrW4devc2ha2A
BnWKbz6HO4qsbKekB+4ewJrqECorPRYafFRVWY62LFDvfaNoyOA6iz8qDkXvtj0k
6QtULVunYDHbe52YwyUHp75Tk9wA4Xhyrwq69KmbcVZlNyYsDTNdDTfPS5Yx4fqN
XCm068P0Q6ADXQ==
-----END CERTIFICATE-----
Generated at Wed Apr 16 21:41:37 2025 by rpki-client