Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
File:                     EsiJlks1tRuo5eZ5oVsZox8TNXg.mft (raw, json)
Hash identifier:          hP5YvINWx+WwgBzJjMB7717J/8/8cpq3JGXtsBnGL1A=
Subject key identifier:   2C:8E:8E:76:A5:34:96:A2:EE:C5:ED:D4:98:AD:37:E4:37:60:6D:96
Authority key identifier: 12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
Certificate issuer:       /CN=12c889964b35b51ba8e5e679a15b19a31f133578
Certificate serial:       019512108166ADCD01261DC67D64EBE376EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
Manifest number:          145C
Signing time:             Mon 17 Feb 2025 04:00:26 +0000
Manifest this update:     Mon 17 Feb 2025 04:00:26 +0000
Manifest next update:     Tue 18 Feb 2025 04:00:26 +0000
Files and hashes:         1: 1-Ltr4X7tHgiN803h8jPbBnWrAv0.roa (hash: 7OUkteLe8nHwqeQk9zlC7/yoJRlbZiYexJ0JFvbqk0Y=)
                          2: 9N77sGkqVPgPzl64HnlAQCAiJiI.roa (hash: 8rr1/h/HEPqZmQ/y+1jYrrv0fcfQ6nqe4NWrJHpDdT8=)
                          3: EsiJlks1tRuo5eZ5oVsZox8TNXg.crl (hash: y65TaeK7JYF2cv5j0Ex84p0w2q803fYdFpQj3NheUWk=)
                          4: GxKilLVepL5t_pYKZrftFkg3OVM.roa (hash: XTTU+F0aFJFtKQUVRMP8YL9IwYldi2UmnMmIwVJ9a0s=)
                          5: Iav_qyY5ImtZ4ANKY_BlD16EiB4.roa (hash: o26HJXNrKDGMVRomgVXRlnZ79f/49jllECyaOAkuhL8=)
                          6: LTvU0JWVsSQgu0MVSG_VtxZcgMA.roa (hash: xmPZIz9nJEAlB3NELOSNPxxAUtJ8mR0ajbEAHYuN+DA=)
                          7: prOvIV94SipWj181Foj7X04Xy-c.roa (hash: fEs9h6WUn0wA3/zm4fis57AzqK3n8+IhBDsb2ZxLQfw=)
                          8: yTPU9KBT_yF9oFmQNNIcb5x-2m4.roa (hash: 4gwBmGsupWB21IC5fpENG4yVPsL+VM2s0DNtBND4taM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:10:81:66:ad:cd:01:26:1d:c6:7d:64:eb:e3:76:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12c889964b35b51ba8e5e679a15b19a31f133578
        Validity
            Not Before: Feb 17 04:00:26 2025 GMT
            Not After : Feb 18 04:00:26 2025 GMT
        Subject: CN=2c8e8e76a53496a2eec5edd498ad37e437606d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:01:ed:2a:ae:b8:24:bc:91:23:67:e4:a9:b8:
                    8a:40:62:5f:57:22:41:8d:4d:ee:b0:80:37:03:17:
                    c7:7a:2f:d0:bf:ed:f1:8c:74:5d:47:42:ec:9c:d1:
                    23:c3:d5:4c:20:03:53:d8:1a:93:66:aa:6d:45:bb:
                    1a:ab:1f:1a:6b:ec:8b:e5:48:77:5d:df:15:7b:66:
                    65:3a:ca:8d:b7:fe:7d:eb:c4:8d:21:43:a0:6b:6a:
                    22:87:7e:0b:7d:be:1b:a3:78:a2:4f:0c:8f:59:c9:
                    e3:7a:04:6c:c4:02:47:21:ad:c5:10:b2:f0:c5:77:
                    b2:4f:41:fe:b9:8b:7d:74:6e:ec:2a:6d:0a:ee:2b:
                    b4:ed:a3:ce:3a:26:4d:c8:12:cb:4d:fe:6e:75:14:
                    6f:e3:f7:a7:60:63:05:e5:39:d9:82:1d:58:69:16:
                    46:1f:c0:24:56:6e:3f:e9:81:94:c9:c1:19:2d:4d:
                    fc:8c:94:fc:7c:42:d6:4d:67:c9:7b:01:af:ad:7d:
                    f9:cd:50:64:b7:7c:9a:03:22:81:1c:4b:e9:68:81:
                    ac:ad:da:09:dd:d6:4c:a1:ea:08:b0:c3:9b:da:45:
                    10:3a:fd:7a:25:ca:69:a5:bd:a7:0a:15:0b:a4:05:
                    3a:73:e1:95:d3:d4:b5:20:18:64:d8:f3:93:85:aa:
                    fc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8E:8E:76:A5:34:96:A2:EE:C5:ED:D4:98:AD:37:E4:37:60:6D:96
            X509v3 Authority Key Identifier:
                keyid:12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:c6:85:79:c7:ca:0e:81:71:7c:27:c8:b1:15:b9:5f:4a:af:
         4d:c6:f3:62:10:c8:28:b4:db:49:d0:1d:fe:8e:21:d9:80:db:
         78:a2:1e:4e:a1:cc:4d:b8:55:46:9a:bd:0f:58:2a:57:94:a5:
         91:cb:f7:62:4d:e4:db:d4:38:11:1d:ed:2d:5d:49:12:ca:76:
         73:23:ca:92:4d:ec:cd:40:71:a6:0e:03:17:a4:7b:74:46:32:
         eb:4c:ca:b5:63:8c:6b:90:cc:84:06:35:a8:ee:b2:63:29:a1:
         5e:20:ae:4d:d0:ab:b8:06:39:cd:13:52:6c:66:8a:00:e7:a0:
         ad:13:cf:ea:63:15:b9:97:a8:08:ea:3f:8a:58:4c:eb:76:1f:
         f9:23:3c:bf:5a:54:ff:6e:97:44:74:c1:e3:c5:83:13:82:d1:
         c5:b7:f6:b4:9d:1e:a4:9d:27:d5:e6:fd:57:53:1a:4c:96:ae:
         c1:d6:c7:a3:6b:6d:47:19:90:34:aa:2e:42:d0:f4:1f:69:72:
         b0:dd:d5:ef:42:b8:16:5c:64:b5:c6:91:6c:ea:e7:b2:32:d4:
         01:7f:5c:e4:38:23:50:14:1e:76:76:a8:c2:72:7c:e1:e5:b2:
         d4:2a:eb:c2:c0:6f:25:b9:5f:5b:18:b3:13:76:4b:74:f9:8d:
         cc:98:c9:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSEIFmrc0BJh3GfWTr43brMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYzg4OTk2NGIzNWI1MWJhOGU1ZTY3OWExNWIxOWEzMWYx
MzM1NzgwHhcNMjUwMjE3MDQwMDI2WhcNMjUwMjE4MDQwMDI2WjAzMTEwLwYDVQQD
EygyYzhlOGU3NmE1MzQ5NmEyZWVjNWVkZDQ5OGFkMzdlNDM3NjA2ZDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wHtKq64JLyRI2fkqbiKQGJfVyJB
jU3usIA3AxfHei/Qv+3xjHRdR0LsnNEjw9VMIANT2BqTZqptRbsaqx8aa+yL5Uh3
Xd8Ve2ZlOsqNt/5968SNIUOga2oih34Lfb4bo3iiTwyPWcnjegRsxAJHIa3FELLw
xXeyT0H+uYt9dG7sKm0K7iu07aPOOiZNyBLLTf5udRRv4/enYGMF5TnZgh1YaRZG
H8AkVm4/6YGUycEZLU38jJT8fELWTWfJewGvrX35zVBkt3yaAyKBHEvpaIGsrdoJ
3dZMoeoIsMOb2kUQOv16Jcpppb2nChULpAU6c+GV09S1IBhk2POThar8HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCyOjnalNJai7sXt1JitN+Q3YG2WMB8GA1UdIwQY
MBaAFBLIiZZLNbUbqOXmeaFbGaMfEzV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXNpSmxrczF0UnVvNWVaNW9Wc1pveDhUTlhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xNmIwMmMtODMzYS00OGYwLWJhNTYt
YWQ2ZjBiZjg4NDM4LzEvRXNpSmxrczF0UnVvNWVaNW9Wc1pveDhUTlhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8xNmIwMmMtODMzYS00OGYwLWJhNTYtYWQ2ZjBiZjg4NDM4
LzEvRXNpSmxrczF0UnVvNWVaNW9Wc1pveDhUTlhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuMaFecfK
DoFxfCfIsRW5X0qvTcbzYhDIKLTbSdAd/o4h2YDbeKIeTqHMTbhVRpq9D1gqV5Sl
kcv3Yk3k29Q4ER3tLV1JEsp2cyPKkk3szUBxpg4DF6R7dEYy60zKtWOMa5DMhAY1
qO6yYymhXiCuTdCruAY5zRNSbGaKAOegrRPP6mMVuZeoCOo/ilhM63Yf+SM8v1pU
/26XRHTB48WDE4LRxbf2tJ0epJ0n1eb9V1MaTJauwdbHo2ttRxmQNKouQtD0H2ly
sN3V70K4FlxktcaRbOrnsjLUAX9c5DgjUBQednaownJ84eWy1CrrwsBvJblfWxiz
E3ZLdPmNzJjJ+Q==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:33 2025 by rpki-client