Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
File:                     1DdYFDRN8L9tAXczrNxIjwAmMbI.mft (raw, json)
Hash identifier:          08vNStu6ojwzXnLzsIF22r6mziWj+dF4H5BiC2962Vc=
Subject key identifier:   ED:8B:AE:CF:67:A7:E0:18:07:3E:62:44:C5:58:16:35:3E:4F:B5:A7
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Certificate issuer:       /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial:       019643D71B6B216CEED3E692193079981688
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
Manifest number:          150F
Signing time:             Thu 17 Apr 2025 13:01:32 +0000
Manifest this update:     Thu 17 Apr 2025 13:01:32 +0000
Manifest next update:     Fri 18 Apr 2025 13:01:32 +0000
Files and hashes:         1: 1DdYFDRN8L9tAXczrNxIjwAmMbI.crl (hash: Ahb8OH5P3TJJcCRlybrUYzDO6MyJKD9bQwwUy3nsLPs=)
                          2: 7WUe1OIDFV5kxBPo0HKHzpAJGIo.roa (hash: WsZzNwmqMFC0S07uwjPiOGdW6xFAM6P2UDYRF9bqkfM=)
                          3: Dx5FhBrZZELGzOEoOYjOQgEtqO0.roa (hash: KCgCEgctUS7Rpr5Y2lyKXbnXeeBrDbnuOsvXdWPfJZo=)
                          4: GIkjsAXUOqBrfR8icMDdstxYHT8.roa (hash: A3W3v0v+GEkuTCUXdEtyG/Iegv8/6YkqWT1oUSnMlYY=)
                          5: GZYeFwr_EjxFupfkHCuHE44i-Z8.roa (hash: /pJZmmG3eMN+VmdP7ZhmWeO1LyfYh7Z1IZDpJE0dX54=)
                          6: H7JO-gIl0Bj6nh86Gb0TRMhGuHE.roa (hash: u0r0yHY4gAZVAdL4EDi0zIhNAGCD50ehh395WT6RxT0=)
                          7: KQPVZjd8uXoJ_0dV4AjDeWiqQQI.roa (hash: 9hWXYGll9zn/YFmZU7mBxZ+s82nTPV++un3qIDJzhn0=)
                          8: KiHM655f38tlRDuTKUKhZarH3cQ.roa (hash: DesJG/l9Po0CCy0ULE0mL9VGWvENzCQXp94ltpb8KIE=)
                          9: TU-pNgBZBmjZJy6cvCLq3hsqXqo.roa (hash: IurjiHHpmFVL5GOkWmRoizqX2Oq069GXNpmvPbK0lRE=)
                          10: TdwQSdeGQg2ugcxpO1AP2GfXn0U.roa (hash: f0mEQiS5i+mR/Gnog4CsEhetaN/Ho/U9O1363juyGeM=)
                          11: Ud14hab_xfWtv2WkBDXSH2-QoMU.roa (hash: 0ea62yGnePCW0r+KNb+hoNpVhcyuwn9Yu4ztOYep1SU=)
                          12: Xd8H7uVNDL51ed4Oq_HvJ22OpPQ.roa (hash: 4NgEnnhnf136EJjCMsSbZEgbQK+ojDJtfBKT9bYHAcE=)
                          13: ZxN8lhLxsa-NEEjNRgSh0RzU_EI.roa (hash: fEuA0PwrOwgLw9P6gOyOKfV/2HxY/omynBjOr24eKBM=)
                          14: atn5vU-LUDLVuG9_jCJwAEGbEYc.roa (hash: Se1mBbI1MkbJDFobm6H8aQSyPPadkVuTf7O6JGFke8o=)
                          15: brY4nnZyBTnIJY3z6C6ymKubOY0.roa (hash: pc5OYc6oXnHxBvDdnE06MSd2CPJ6fIkq22aelBFfNl8=)
                          16: eG6lGs3HW3538S6xf6efhbiNBwU.roa (hash: EljzBa62R9WVgp11mW3s0fULx5478xnOUnHVwm+wE7Y=)
                          17: ejfO3AZKzBlwPba6xQO59n7NRLo.roa (hash: Q1Bfu/BU+a9BBUsFm1fFIAH1wgLPZBcZZuq0YCOjgew=)
                          18: mj62OgAoVLcXYhLujPeU1dz3p5E.roa (hash: yfaMi4yebTiRiJOBekXgnPGZjuzMXzxDPEzEgjH0cEM=)
                          19: oE_1AgPCtnaFaMCLevKrq6JA6ow.roa (hash: qBy55DjJrOCIYzSWpauOd8y7YqJPRSHESdiDPcLUS5A=)
                          20: p9KEvv1SRqyOhb5R1ZKX1AGCgRE.roa (hash: bVQz/2xz2S32nVIu+lGPNjoEvazAi2xi/WmxffFGB5U=)
                          21: v4_YG88zposklrRNZ6jmi0HNy0E.roa (hash: GKK/DbNbzy+sBCdZidvrcVXsJtwZe198c3YPcA5R1vU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 13:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:43:d7:1b:6b:21:6c:ee:d3:e6:92:19:30:79:98:16:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
        Validity
            Not Before: Apr 17 13:01:32 2025 GMT
            Not After : Apr 18 13:01:32 2025 GMT
        Subject: CN=ed8baecf67a7e018073e6244c55816353e4fb5a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c3:8e:6a:20:f3:95:16:be:fe:7f:f7:ad:b9:
                    f4:c0:a9:f9:c5:0d:b9:8f:ea:15:39:e5:3f:cc:d6:
                    d3:2e:e1:d5:92:e6:9f:a3:12:1d:b6:88:1f:48:93:
                    30:ed:e4:49:95:1f:16:92:83:bb:4d:59:3e:77:78:
                    6d:7c:cc:f8:b5:db:a6:88:2e:51:53:a7:cd:93:a2:
                    d4:cb:fe:a1:8b:51:94:fe:b8:2d:42:14:50:f1:25:
                    23:8b:71:a9:6f:3f:86:b2:b7:4b:21:35:48:69:4a:
                    51:04:3b:94:d4:9b:bb:29:56:df:d7:51:f1:00:43:
                    fa:c0:a0:ba:53:b9:45:4c:76:da:86:f4:55:f7:01:
                    cc:e6:a4:a5:94:54:bb:7d:ad:17:a9:b7:e2:47:3d:
                    f9:62:71:9c:20:55:12:fa:93:7a:b3:5e:c0:80:91:
                    d6:fe:04:41:b5:a2:2c:b7:0b:9b:51:18:98:03:ce:
                    23:50:05:da:e2:fc:9b:bf:d2:61:fb:4c:87:32:00:
                    93:b9:91:f1:76:b8:94:c2:3f:52:5f:af:09:f0:b9:
                    6c:f4:1a:89:53:ff:41:93:ef:ed:63:b0:f0:d4:11:
                    6f:90:4f:5c:b1:f1:43:14:b1:bf:fa:fa:7b:cb:8d:
                    e6:bb:00:3b:ba:56:3e:16:3c:31:5f:68:a8:83:d2:
                    b8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:8B:AE:CF:67:A7:E0:18:07:3E:62:44:C5:58:16:35:3E:4F:B5:A7
            X509v3 Authority Key Identifier:
                keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:89:a8:57:6f:32:b1:c6:c5:85:a2:5b:64:56:5e:3e:33:4e:
         58:64:e5:67:eb:03:12:2f:19:6e:5d:43:cd:4c:cf:f8:f8:61:
         57:25:7e:3e:69:bd:8b:e5:b0:f6:78:d8:44:fa:0b:22:7e:b7:
         c4:1a:f2:2b:2e:08:0f:97:c5:cb:e0:2d:44:0d:55:e4:70:c9:
         44:f7:ac:9d:2d:9f:ef:eb:cd:00:e3:1d:b7:a5:b6:f6:a8:d4:
         86:cf:47:55:dd:ea:c2:9d:53:81:24:0d:9f:ee:bb:64:bc:ca:
         c5:5b:c0:85:6e:cb:21:8e:fe:b2:d7:a7:76:1d:b3:78:cd:e1:
         79:19:dd:08:78:6d:0e:d1:93:e6:86:e3:5c:92:6d:4b:8f:9d:
         20:5a:d3:84:d1:d1:06:a9:7f:9c:2a:a5:7d:75:31:cd:4a:2a:
         24:47:91:bd:81:9e:cf:3c:7d:29:ea:3e:d4:bb:3a:1f:de:69:
         7d:60:79:70:10:13:28:a5:55:d6:41:12:cc:b7:e8:b4:bd:96:
         d7:84:1f:fb:16:e9:02:f4:ac:ef:43:00:cd:58:22:b9:23:3d:
         aa:93:63:02:b4:e6:81:34:71:48:53:93:cc:c9:9a:e2:f1:cc:
         88:f6:81:dd:d0:dc:0d:82:0d:84:a8:01:06:97:ad:70:3d:79:
         34:d7:e5:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZD1xtrIWzu0+aSGTB5mBaIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Mzc1ODE0MzQ0ZGYwYmY2ZDAxNzczM2FjZGM0ODhmMDAy
NjMxYjIwHhcNMjUwNDE3MTMwMTMyWhcNMjUwNDE4MTMwMTMyWjAzMTEwLwYDVQQD
EyhlZDhiYWVjZjY3YTdlMDE4MDczZTYyNDRjNTU4MTYzNTNlNGZiNWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosOOaiDzlRa+/n/3rbn0wKn5xQ25
j+oVOeU/zNbTLuHVkuafoxIdtogfSJMw7eRJlR8WkoO7TVk+d3htfMz4tdumiC5R
U6fNk6LUy/6hi1GU/rgtQhRQ8SUji3Gpbz+GsrdLITVIaUpRBDuU1Ju7KVbf11Hx
AEP6wKC6U7lFTHbahvRV9wHM5qSllFS7fa0XqbfiRz35YnGcIFUS+pN6s17AgJHW
/gRBtaIstwubURiYA84jUAXa4vybv9Jh+0yHMgCTuZHxdriUwj9SX68J8Lls9BqJ
U/9Bk+/tY7Dw1BFvkE9csfFDFLG/+vp7y43muwA7ulY+FjwxX2iog9K4wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2Lrs9np+AYBz5iRMVYFjU+T7WnMB8GA1UdIwQY
MBaAFNQ3WBQ0TfC/bQF3M6zcSI8AJjGyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMURkWUZEUk44TDl0QVhjenJOeElqd0FtTWJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iMjRiMmQtMzUyMy00MjJlLTliY2Yt
MzY3MWQ2N2ViOWY4LzEvMURkWUZEUk44TDl0QVhjenJOeElqd0FtTWJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9iMjRiMmQtMzUyMy00MjJlLTliY2YtMzY3MWQ2N2ViOWY4
LzEvMURkWUZEUk44TDl0QVhjenJOeElqd0FtTWJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl4moV28y
scbFhaJbZFZePjNOWGTlZ+sDEi8Zbl1DzUzP+PhhVyV+Pmm9i+Ww9njYRPoLIn63
xBryKy4ID5fFy+AtRA1V5HDJRPesnS2f7+vNAOMdt6W29qjUhs9HVd3qwp1TgSQN
n+67ZLzKxVvAhW7LIY7+stendh2zeM3heRndCHhtDtGT5objXJJtS4+dIFrThNHR
Bql/nCqlfXUxzUoqJEeRvYGezzx9Keo+1Ls6H95pfWB5cBATKKVV1kESzLfotL2W
14Qf+xbpAvSs70MAzVgiuSM9qpNjArTmgTRxSFOTzMma4vHMiPaB3dDcDYINhKgB
BpetcD15NNfl6w==
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:54:39 2025 by rpki-client