Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/ehDuIoBzMoosIIHLsqls0SZNvvE.mft
File:                     ehDuIoBzMoosIIHLsqls0SZNvvE.mft (raw, json)
Hash identifier:          anxqlkcPCz2sU1vJhB+Xti4itwww856TBU3sKzpnd8Y=
Subject key identifier:   D0:F6:A9:3B:D5:9F:C7:D2:AC:B3:E1:AA:86:DE:32:FA:5B:2C:3F:B1
Authority key identifier: 7A:10:EE:22:80:73:32:8A:2C:20:81:CB:B2:A9:6C:D1:26:4D:BE:F1
Certificate issuer:       /CN=7a10ee228073328a2c2081cbb2a96cd1264dbef1
Certificate serial:       01950FEB11F3B8A7157CC2DA8804328913F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ehDuIoBzMoosIIHLsqls0SZNvvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/ehDuIoBzMoosIIHLsqls0SZNvvE.mft
Manifest number:          043E
Signing time:             Sun 16 Feb 2025 18:00:18 +0000
Manifest this update:     Sun 16 Feb 2025 18:00:18 +0000
Manifest next update:     Mon 17 Feb 2025 18:00:18 +0000
Files and hashes:         1: 9SFdi7V4q-05lNgfIa-K_CLlxc0.roa (hash: Kxe5R+STpor8dRXj7m0AfgFUBqqAzp8M8cMC2zERYAE=)
                          2: YOoATeftAqa3NPiX4GaHabwS1wo.roa (hash: DFj5QH8pLrMMR4sLFXByWiOjYdjY2qX4JxhZH4EeUc8=)
                          3: ehDuIoBzMoosIIHLsqls0SZNvvE.crl (hash: ABKaItq7+l99Ck+Bv9nmwubFpRxsW3PbNSjhewSrO6g=)
                          4: iId92xKtiFHP1gLGCJzcRznJ-x8.roa (hash: K/cBgrLnI3n5D0y566D4mvg3caFRpTqECvwpfj65k50=)
                          5: nGtIZ1A0r3xiykXpIIhUDVqM2rM.roa (hash: GlsG6Os9dw7nPxzZGJzrKgTYWqeKyXt9Ngu3pmbbKe4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/ehDuIoBzMoosIIHLsqls0SZNvvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/ehDuIoBzMoosIIHLsqls0SZNvvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ehDuIoBzMoosIIHLsqls0SZNvvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:0f:eb:11:f3:b8:a7:15:7c:c2:da:88:04:32:89:13:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a10ee228073328a2c2081cbb2a96cd1264dbef1
        Validity
            Not Before: Feb 16 18:00:18 2025 GMT
            Not After : Feb 17 18:00:18 2025 GMT
        Subject: CN=d0f6a93bd59fc7d2acb3e1aa86de32fa5b2c3fb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:45:84:f6:24:32:73:b5:ba:bb:3f:56:33:16:
                    bd:ec:c9:ff:48:31:29:86:2c:53:a4:cc:18:c9:13:
                    dc:d9:3b:44:f2:e4:38:2a:89:9a:31:a8:f3:4b:2d:
                    03:a4:90:5d:1f:1b:1c:73:1c:a1:24:1e:a8:43:50:
                    87:86:c4:56:59:d2:9a:92:bb:ac:78:47:47:e1:66:
                    74:3d:38:10:8a:6c:48:89:74:a3:46:45:a3:53:27:
                    03:0b:58:30:21:52:e4:b8:14:5f:72:fc:00:bc:47:
                    e9:ac:d6:98:41:1b:74:1e:a5:a1:b4:6d:22:b6:6e:
                    b6:54:eb:43:d2:ff:13:ec:e3:32:f0:87:00:f6:9d:
                    95:8b:ed:dc:10:b7:2b:12:c9:c0:47:3e:e8:cf:aa:
                    dd:e6:1b:ae:9e:8b:fb:52:2d:8d:c9:40:3c:9f:9e:
                    0c:c4:bd:4a:85:49:18:b8:e7:cb:93:b3:ae:40:e5:
                    f6:ac:c3:24:67:ce:a0:2a:48:a6:bf:25:25:b6:0f:
                    07:6f:d7:36:29:65:17:0f:20:f9:df:05:76:01:d2:
                    4a:4c:5c:fc:2f:63:87:e3:5a:3d:65:9f:46:0f:48:
                    ab:41:9e:16:0d:53:ff:a3:88:b6:64:1a:4e:27:55:
                    f8:4b:81:3e:5d:40:69:ef:d8:13:91:d6:1a:a4:5f:
                    83:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:F6:A9:3B:D5:9F:C7:D2:AC:B3:E1:AA:86:DE:32:FA:5B:2C:3F:B1
            X509v3 Authority Key Identifier:
                keyid:7A:10:EE:22:80:73:32:8A:2C:20:81:CB:B2:A9:6C:D1:26:4D:BE:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehDuIoBzMoosIIHLsqls0SZNvvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/ehDuIoBzMoosIIHLsqls0SZNvvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/ehDuIoBzMoosIIHLsqls0SZNvvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:54:12:06:88:aa:21:42:45:e1:f3:bd:eb:3c:cc:b8:e5:01:
         39:34:dd:55:b8:13:99:b7:74:5f:6a:d0:45:d9:fe:c1:28:20:
         9e:3b:5f:e9:35:a3:ea:77:bb:38:9b:6c:87:7d:1d:2d:e5:5a:
         26:bc:b7:ef:2f:5b:9b:48:6a:cd:3b:ca:7f:10:90:57:20:1c:
         68:34:78:12:98:ca:a8:7a:e9:25:c9:f2:fe:a8:81:86:2c:b7:
         52:56:8b:20:98:a3:d6:ca:d4:0f:90:6a:e0:55:b5:6c:7e:75:
         95:29:a2:42:14:61:33:91:f5:62:ad:ad:4f:a1:11:69:83:ac:
         be:21:dd:84:3a:02:ac:1b:0c:2c:b0:be:2b:bb:6e:33:4e:eb:
         82:a1:0a:ef:62:71:9c:1f:73:02:cb:c6:4b:01:70:46:f5:ae:
         58:53:b5:76:fb:d0:78:cc:5a:17:82:c1:bc:84:46:25:a9:e0:
         68:54:4a:72:bb:20:7a:be:db:d5:f4:81:ef:b6:b7:df:31:68:
         ac:39:d0:41:a8:16:51:7d:c4:b3:7e:f2:7d:07:09:80:62:4e:
         4e:10:88:60:aa:fb:29:e4:ef:7c:f3:e0:0c:d2:ae:4d:bc:64:
         29:9d:04:bc:5c:17:1a:24:08:66:cb:2d:2f:3f:f9:f9:fe:93:
         08:5b:4b:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUP6xHzuKcVfMLaiAQyiRP2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMTBlZTIyODA3MzMyOGEyYzIwODFjYmIyYTk2Y2QxMjY0
ZGJlZjEwHhcNMjUwMjE2MTgwMDE4WhcNMjUwMjE3MTgwMDE4WjAzMTEwLwYDVQQD
EyhkMGY2YTkzYmQ1OWZjN2QyYWNiM2UxYWE4NmRlMzJmYTViMmMzZmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykWE9iQyc7W6uz9WMxa97Mn/SDEp
hixTpMwYyRPc2TtE8uQ4KomaMajzSy0DpJBdHxsccxyhJB6oQ1CHhsRWWdKakrus
eEdH4WZ0PTgQimxIiXSjRkWjUycDC1gwIVLkuBRfcvwAvEfprNaYQRt0HqWhtG0i
tm62VOtD0v8T7OMy8IcA9p2Vi+3cELcrEsnARz7oz6rd5huunov7Ui2NyUA8n54M
xL1KhUkYuOfLk7OuQOX2rMMkZ86gKkimvyUltg8Hb9c2KWUXDyD53wV2AdJKTFz8
L2OH41o9ZZ9GD0irQZ4WDVP/o4i2ZBpOJ1X4S4E+XUBp79gTkdYapF+DWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFND2qTvVn8fSrLPhqobeMvpbLD+xMB8GA1UdIwQY
MBaAFHoQ7iKAczKKLCCBy7KpbNEmTb7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWhEdUlvQnpNb29zSUlITHNxbHMwU1pOdnZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9mYjE4MjctYTdlOS00NWM4LWI2NDMt
NzZlMDdhNTc3ZTRkLzEvZWhEdUlvQnpNb29zSUlITHNxbHMwU1pOdnZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9mYjE4MjctYTdlOS00NWM4LWI2NDMtNzZlMDdhNTc3ZTRk
LzEvZWhEdUlvQnpNb29zSUlITHNxbHMwU1pOdnZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqVQSBoiq
IUJF4fO96zzMuOUBOTTdVbgTmbd0X2rQRdn+wSggnjtf6TWj6ne7OJtsh30dLeVa
Jry37y9bm0hqzTvKfxCQVyAcaDR4EpjKqHrpJcny/qiBhiy3UlaLIJij1srUD5Bq
4FW1bH51lSmiQhRhM5H1Yq2tT6ERaYOsviHdhDoCrBsMLLC+K7tuM07rgqEK72Jx
nB9zAsvGSwFwRvWuWFO1dvvQeMxaF4LBvIRGJangaFRKcrsger7b1fSB77a33zFo
rDnQQagWUX3Es37yfQcJgGJOThCIYKr7KeTvfPPgDNKuTbxkKZ0EvFwXGiQIZsst
Lz/5+f6TCFtLGg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:58 2025 by rpki-client