Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft
File:                     Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft (raw, json)
Hash identifier:          GqBlWtSLbPq+hSgmZ3mGqTt8vpXANmoo4ex9aHm3wXs=
Subject key identifier:   0A:71:65:36:EF:11:8A:33:C2:BB:30:51:69:CE:F2:E8:AB:C2:F7:B7
Authority key identifier: 67:4C:50:7A:0C:DB:53:13:74:43:7E:BF:46:DD:59:A6:BD:07:48:6C
Certificate issuer:       /CN=674c507a0cdb531374437ebf46dd59a6bd07486c
Certificate serial:       01965349D01386FB313DEEF4D4EE32928605
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft
Manifest number:          0458
Signing time:             Sun 20 Apr 2025 13:01:08 +0000
Manifest this update:     Sun 20 Apr 2025 13:01:08 +0000
Manifest next update:     Mon 21 Apr 2025 13:01:08 +0000
Files and hashes:         1: Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.crl (hash: aw6ImrwN6o8kipHS0RuX2+eWExgZLrGUCDRC684hkxA=)
                          2: nK_HCXY32Fzl4tvEIKTBph2J1Ds.roa (hash: Q85T1yXG2eaPvyBQfWAsYo6WtcGYElCI5jZL6LC33r0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:53:49:d0:13:86:fb:31:3d:ee:f4:d4:ee:32:92:86:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c507a0cdb531374437ebf46dd59a6bd07486c
        Validity
            Not Before: Apr 20 13:01:08 2025 GMT
            Not After : Apr 21 13:01:08 2025 GMT
        Subject: CN=0a716536ef118a33c2bb305169cef2e8abc2f7b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0b:b2:06:eb:18:a4:35:1b:bf:76:ba:78:91:
                    55:82:ed:21:9f:66:55:e4:9d:fa:86:cb:70:93:a2:
                    be:3e:73:02:27:a5:d9:ca:fd:16:f8:2a:76:49:69:
                    87:04:01:7a:d8:0e:a4:47:e9:c2:85:a0:f8:2f:67:
                    a0:be:d3:c9:c8:df:33:b4:8a:9e:3f:7f:f4:50:d5:
                    ab:cd:8b:96:23:c2:0d:b7:a7:d0:71:00:70:05:0d:
                    b2:8f:9c:9b:db:53:44:15:89:66:48:cb:30:dc:92:
                    4f:88:d6:5b:33:35:ec:ba:f3:25:e9:64:2c:f8:0a:
                    7f:78:9e:de:72:4f:14:34:9e:ed:c5:d5:ab:5c:8a:
                    24:0e:3c:24:73:f8:be:8d:ab:64:54:92:6b:08:46:
                    cb:0f:b0:46:82:0a:83:98:74:97:b2:c5:d4:89:98:
                    cf:b5:01:59:bf:8e:10:db:4c:a4:4d:e4:3e:b3:44:
                    ad:77:22:e8:13:0b:e2:50:01:9f:5e:87:ce:b9:db:
                    57:43:ec:19:0d:66:eb:82:b1:9c:db:45:8f:b6:11:
                    0d:5a:ee:e0:3b:43:a1:52:46:82:59:d0:72:a0:d1:
                    f0:d0:f8:a2:14:92:67:0d:0d:a2:28:17:62:61:e6:
                    c4:b6:3d:06:40:c4:e7:93:2f:96:af:33:16:72:8e:
                    45:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:71:65:36:EF:11:8A:33:C2:BB:30:51:69:CE:F2:E8:AB:C2:F7:B7
            X509v3 Authority Key Identifier:
                keyid:67:4C:50:7A:0C:DB:53:13:74:43:7E:BF:46:DD:59:A6:BD:07:48:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:ca:0e:c3:29:b4:a6:e9:9f:fe:d8:51:73:e0:a8:99:a8:16:
         f7:58:1f:83:13:9a:47:80:9b:f1:5c:fd:5f:0d:78:7f:0b:9f:
         66:c0:20:02:7b:14:50:bc:61:1d:4d:c4:5d:cd:2e:5d:3b:21:
         1d:7a:f8:60:f9:c7:9e:b3:46:27:57:16:90:a9:65:df:6a:00:
         51:4c:1b:3a:d4:37:49:6f:62:e9:be:dc:c9:fe:c1:27:3e:b6:
         76:73:ff:eb:0f:f1:b4:32:0b:a9:fa:df:23:47:2b:f5:0e:9e:
         6b:09:34:ef:62:f7:05:01:49:9a:9d:2a:7c:12:fc:ce:87:9d:
         2e:98:7c:2d:6f:8a:ea:d6:48:fd:7f:04:d4:b0:19:38:29:12:
         19:69:f6:f1:72:cf:3f:7a:66:cb:f5:2f:47:fb:70:d4:72:c4:
         e3:40:37:ea:71:ba:e9:f4:0d:41:23:ee:ab:57:99:ce:5c:77:
         79:c1:de:df:a1:ea:cd:6a:19:66:2e:20:88:48:aa:6b:32:ff:
         9f:9e:65:b3:be:88:f5:82:03:33:99:af:33:18:50:40:a0:e0:
         61:f0:7e:a2:f0:bc:fc:c8:31:10:82:44:fa:a8:28:48:bf:0c:
         5f:2d:d9:2a:a7:68:1e:6a:98:c5:99:1d:fb:76:fc:d1:c6:76:
         9c:dd:95:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTSdAThvsxPe701O4ykoYFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NGM1MDdhMGNkYjUzMTM3NDQzN2ViZjQ2ZGQ1OWE2YmQw
NzQ4NmMwHhcNMjUwNDIwMTMwMTA4WhcNMjUwNDIxMTMwMTA4WjAzMTEwLwYDVQQD
EygwYTcxNjUzNmVmMTE4YTMzYzJiYjMwNTE2OWNlZjJlOGFiYzJmN2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwuyBusYpDUbv3a6eJFVgu0hn2ZV
5J36hstwk6K+PnMCJ6XZyv0W+Cp2SWmHBAF62A6kR+nChaD4L2egvtPJyN8ztIqe
P3/0UNWrzYuWI8INt6fQcQBwBQ2yj5yb21NEFYlmSMsw3JJPiNZbMzXsuvMl6WQs
+Ap/eJ7eck8UNJ7txdWrXIokDjwkc/i+jatkVJJrCEbLD7BGggqDmHSXssXUiZjP
tQFZv44Q20ykTeQ+s0StdyLoEwviUAGfXofOudtXQ+wZDWbrgrGc20WPthENWu7g
O0OhUkaCWdByoNHw0PiiFJJnDQ2iKBdiYebEtj0GQMTnky+WrzMWco5FCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApxZTbvEYozwrswUWnO8uirwve3MB8GA1UdIwQY
MBaAFGdMUHoM21MTdEN+v0bdWaa9B0hsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjB4UWVnemJVeE4wUTM2X1J0MVpwcjBIU0d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8xMGZhMDAtYWQ2Yi00Yjc2LTg2M2Ut
NGIzNWFkNzBjYzFhLzEvWjB4UWVnemJVeE4wUTM2X1J0MVpwcjBIU0d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8xMGZhMDAtYWQ2Yi00Yjc2LTg2M2UtNGIzNWFkNzBjYzFh
LzEvWjB4UWVnemJVeE4wUTM2X1J0MVpwcjBIU0d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAasoOwym0
pumf/thRc+ComagW91gfgxOaR4Cb8Vz9Xw14fwufZsAgAnsUULxhHU3EXc0uXTsh
HXr4YPnHnrNGJ1cWkKll32oAUUwbOtQ3SW9i6b7cyf7BJz62dnP/6w/xtDILqfrf
I0cr9Q6eawk072L3BQFJmp0qfBL8zoedLph8LW+K6tZI/X8E1LAZOCkSGWn28XLP
P3pmy/UvR/tw1HLE40A36nG66fQNQSPuq1eZzlx3ecHe36HqzWoZZi4giEiqazL/
n55ls76I9YIDM5mvMxhQQKDgYfB+ovC8/MgxEIJE+qgoSL8MXy3ZKqdoHmqYxZkd
+3b80cZ2nN2Vrg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 15:34:44 2025 by rpki-client