Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
File:                     ygAblIWVvOJJE_gRr_cePM5F1lY.mft (raw, json)
Hash identifier:          7GnIDsOxCFPkXvPuISoa6AF6b+Duicrtzm3ihcyPrtA=
Subject key identifier:   99:FA:AE:4A:0B:20:A8:F9:63:72:D5:6A:45:A7:B4:7C:32:C0:B1:8B
Authority key identifier: CA:00:1B:94:85:95:BC:E2:49:13:F8:11:AF:F7:1E:3C:CE:45:D6:56
Certificate issuer:       /CN=ca001b948595bce24913f811aff71e3cce45d656
Certificate serial:       01964D7EC32C22C31DA9539C185F19F2AC04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
Manifest number:          14FD
Signing time:             Sat 19 Apr 2025 10:01:15 +0000
Manifest this update:     Sat 19 Apr 2025 10:01:15 +0000
Manifest next update:     Sun 20 Apr 2025 10:01:15 +0000
Files and hashes:         1: ygAblIWVvOJJE_gRr_cePM5F1lY.crl (hash: 2qNpIxUNwR5kHWcpAwxRoFm6XeERcf63zIfaE4ZXx5M=)
                          2: zr3t3IA44QoorxZIsw1MTeuie_g.roa (hash: ompX8t7N2TkHWnLirBbMhvCUBmfybfJcK/n6fwWr0hs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:7e:c3:2c:22:c3:1d:a9:53:9c:18:5f:19:f2:ac:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca001b948595bce24913f811aff71e3cce45d656
        Validity
            Not Before: Apr 19 10:01:15 2025 GMT
            Not After : Apr 20 10:01:15 2025 GMT
        Subject: CN=99faae4a0b20a8f96372d56a45a7b47c32c0b18b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:60:84:d7:18:16:34:41:4a:ab:bf:f0:bd:a0:
                    20:7d:dc:43:ba:74:53:5d:4e:e3:f9:96:81:82:04:
                    49:8a:f6:e3:e3:6c:14:a1:04:21:26:03:54:c2:b0:
                    48:0a:05:f8:f4:26:ee:b8:6c:e5:01:20:7b:25:c6:
                    e6:06:9b:8d:36:c7:93:9f:96:45:73:46:02:1b:e4:
                    b3:41:59:20:8e:2d:00:17:71:4c:61:e9:e9:a4:f4:
                    5d:14:7a:8c:4e:13:6e:6c:38:98:f2:d4:0b:44:d5:
                    63:6f:1c:60:2b:49:70:c1:0a:2c:22:9e:8f:fe:b7:
                    9a:d1:b5:a0:3e:64:56:d1:fd:ea:57:84:2a:d6:07:
                    9a:41:85:49:63:da:12:f3:21:94:8a:32:c7:5f:f2:
                    c0:01:09:d8:e7:66:e7:5d:67:78:bc:46:2d:18:f7:
                    a0:05:2a:b6:a8:51:e8:25:b9:86:37:e8:30:6e:e5:
                    28:23:3a:04:cd:22:72:37:13:9e:b5:29:c9:1c:3f:
                    f2:e1:cc:c3:5e:52:a2:db:db:a8:4f:39:42:7e:ed:
                    f7:7e:14:3f:16:40:af:7e:8f:40:30:81:70:07:bb:
                    96:6b:59:04:8b:e7:eb:a4:29:5f:e8:29:55:bf:59:
                    87:17:e6:04:15:b2:75:84:75:26:95:01:fb:b2:eb:
                    04:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:FA:AE:4A:0B:20:A8:F9:63:72:D5:6A:45:A7:B4:7C:32:C0:B1:8B
            X509v3 Authority Key Identifier:
                keyid:CA:00:1B:94:85:95:BC:E2:49:13:F8:11:AF:F7:1E:3C:CE:45:D6:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:42:06:3e:4b:d7:72:c0:4e:6b:e0:05:14:e4:f4:d1:59:b2:
         45:c0:39:08:23:d2:8b:d3:6c:94:ed:e2:d3:9b:64:29:99:50:
         2d:90:30:a0:d1:fe:8e:00:ba:0a:20:45:29:3d:f0:77:6e:12:
         aa:f5:12:7b:db:5d:61:c2:63:0c:ff:2c:81:d0:d1:6e:2d:e8:
         c2:e3:cd:90:1e:74:99:6c:66:1b:0d:dc:1c:3c:3d:cc:3c:9b:
         51:c2:0d:e6:bc:4f:85:ad:7d:a9:48:97:32:4e:f5:b2:f7:ad:
         0a:08:31:90:88:a6:92:2b:23:ca:6e:9a:3a:70:e0:25:74:7b:
         f7:83:f4:f6:16:19:ec:16:58:3f:00:9d:f5:f0:d7:9b:f8:92:
         a0:a4:2c:52:0a:1c:ff:d1:42:d2:80:2d:fe:40:00:89:9a:ad:
         17:07:fb:d7:3a:5e:6b:b5:78:a9:c4:7c:e0:db:63:44:2f:66:
         bb:35:85:95:ed:1d:1c:c4:49:9c:5d:8c:0c:fa:82:ae:b6:7f:
         92:bc:21:35:4c:d9:ca:1b:8a:61:f6:4d:7d:f0:8c:7f:59:96:
         79:15:cc:10:79:14:b7:55:d5:c7:f4:fe:9f:f1:69:f3:38:1c:
         44:24:59:b6:9e:d5:2f:47:d9:ee:57:05:1d:73:22:2e:8e:a7:
         e9:a3:bc:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNfsMsIsMdqVOcGF8Z8qwEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMDAxYjk0ODU5NWJjZTI0OTEzZjgxMWFmZjcxZTNjY2U0
NWQ2NTYwHhcNMjUwNDE5MTAwMTE1WhcNMjUwNDIwMTAwMTE1WjAzMTEwLwYDVQQD
Eyg5OWZhYWU0YTBiMjBhOGY5NjM3MmQ1NmE0NWE3YjQ3YzMyYzBiMThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GCE1xgWNEFKq7/wvaAgfdxDunRT
XU7j+ZaBggRJivbj42wUoQQhJgNUwrBICgX49CbuuGzlASB7JcbmBpuNNseTn5ZF
c0YCG+SzQVkgji0AF3FMYenppPRdFHqMThNubDiY8tQLRNVjbxxgK0lwwQosIp6P
/rea0bWgPmRW0f3qV4Qq1geaQYVJY9oS8yGUijLHX/LAAQnY52bnXWd4vEYtGPeg
BSq2qFHoJbmGN+gwbuUoIzoEzSJyNxOetSnJHD/y4czDXlKi29uoTzlCfu33fhQ/
FkCvfo9AMIFwB7uWa1kEi+frpClf6ClVv1mHF+YEFbJ1hHUmlQH7susEUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJn6rkoLIKj5Y3LVakWntHwywLGLMB8GA1UdIwQY
MBaAFMoAG5SFlbziSRP4Ea/3HjzORdZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWdBYmxJV1Z2T0pKRV9nUnJfY2VQTTVGMWxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9mZmQ0Y2EtZTUxZS00NDdiLWJjZDIt
Y2ZjNmFhMDE2NjY5LzEveWdBYmxJV1Z2T0pKRV9nUnJfY2VQTTVGMWxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9mZmQ0Y2EtZTUxZS00NDdiLWJjZDItY2ZjNmFhMDE2NjY5
LzEveWdBYmxJV1Z2T0pKRV9nUnJfY2VQTTVGMWxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW0IGPkvX
csBOa+AFFOT00VmyRcA5CCPSi9NslO3i05tkKZlQLZAwoNH+jgC6CiBFKT3wd24S
qvUSe9tdYcJjDP8sgdDRbi3owuPNkB50mWxmGw3cHDw9zDybUcIN5rxPha19qUiX
Mk71svetCggxkIimkisjym6aOnDgJXR794P09hYZ7BZYPwCd9fDXm/iSoKQsUgoc
/9FC0oAt/kAAiZqtFwf71zpea7V4qcR84NtjRC9muzWFle0dHMRJnF2MDPqCrrZ/
krwhNUzZyhuKYfZNffCMf1mWeRXMEHkUt1XVx/T+n/Fp8zgcRCRZtp7VL0fZ7lcF
HXMiLo6n6aO8EQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:33:03 2025 by rpki-client