Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
File:                     0eAT7IpcVt8kGpslY9ER-OVDv5E.mft (raw, json)
Hash identifier:          dUOzDBHj4XpNkn9VBCGykhdzIhqYxhrljomAcZ8efQE=
Subject key identifier:   9B:1C:69:26:38:3C:57:57:37:5B:02:E0:EC:09:D7:EA:BD:45:EF:EF
Authority key identifier: D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
Certificate issuer:       /CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Certificate serial:       01964444B850B25609DEA3C655901A689303
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
Manifest number:          150D
Signing time:             Thu 17 Apr 2025 15:01:16 +0000
Manifest this update:     Thu 17 Apr 2025 15:01:16 +0000
Manifest next update:     Fri 18 Apr 2025 15:01:16 +0000
Files and hashes:         1: 0eAT7IpcVt8kGpslY9ER-OVDv5E.crl (hash: YLgJx7gfkDmVwJxhdR7kq+o192Cq4WMPD/WOfb30YRM=)
                          2: 5OwJ7Nx9zd66LR5phaxL178se74.roa (hash: M1DO1OvN9ivfay+ywMfPxNgMiiNX3g+6vZbPpBB/BE8=)
                          3: PE9TZdJ8-Lln6kf9d9axXJAbp-c.roa (hash: L+Px9nqboU0pthFP3MQiGwoS0A274PGNuMWfIopTQcU=)
                          4: PFeWbSIp2oj_TqrDumfnTLH73EM.roa (hash: UcYYjAHi4KJALU4CMr3iLInfrvyna7odLqJtuWtrvBI=)
                          5: oD6-_ySxwIZNHRBLdh1EsHHsRV4.roa (hash: sAQHwkiD2lZDCVsriC16YxE+OETBeSCkVF8S8rYbgnE=)
                          6: ot1seKuPr0VWOzaiRtogA4gk2L4.roa (hash: qGNUCx3dvdHGEqP5qtWndFudBrst3InkEgLzxymjhhY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 15:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:44:b8:50:b2:56:09:de:a3:c6:55:90:1a:68:93:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
        Validity
            Not Before: Apr 17 15:01:16 2025 GMT
            Not After : Apr 18 15:01:16 2025 GMT
        Subject: CN=9b1c6926383c5757375b02e0ec09d7eabd45efef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:73:fa:ce:ea:ee:fb:90:bc:4b:f4:f5:b2:4e:
                    c9:04:7f:91:32:a9:ea:2d:a6:9a:5e:c4:64:6f:b1:
                    5d:66:79:68:45:48:d8:66:bb:b0:99:eb:eb:fa:28:
                    8d:72:e9:c1:f7:a2:b0:9f:35:e4:58:84:a9:7a:f4:
                    ab:55:de:bc:1a:5b:55:71:6c:b1:eb:e5:ca:75:d0:
                    02:d7:50:9d:8c:df:76:2b:23:33:3f:cd:6f:a2:bb:
                    08:8c:c4:59:5c:55:93:27:e8:d2:ef:23:a9:d0:bb:
                    bf:c7:04:99:7a:da:ac:7e:6c:7e:d2:4d:bb:5d:2a:
                    1f:a6:99:1f:35:11:9c:d9:b4:4e:e3:f5:e4:a5:98:
                    03:b3:2f:34:08:ec:89:86:e4:cb:2f:e5:0c:23:b6:
                    ec:af:4b:f7:fd:97:73:03:62:c4:53:10:a3:b6:eb:
                    29:f9:8b:bc:f2:e0:45:1d:88:5e:3a:f3:78:0f:5e:
                    02:98:1a:62:f9:47:4c:25:be:e6:1a:50:ee:46:dd:
                    6a:07:de:ee:6f:3e:47:1e:6a:e9:0f:3c:67:ee:af:
                    0d:8b:c5:40:75:a2:88:52:b3:a2:0b:be:dc:54:db:
                    2b:82:f4:a8:ce:c5:4f:e3:40:c7:f9:d9:5b:d7:4f:
                    28:54:95:4a:5b:f0:31:8e:e7:8e:78:12:86:1e:53:
                    d6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:1C:69:26:38:3C:57:57:37:5B:02:E0:EC:09:D7:EA:BD:45:EF:EF
            X509v3 Authority Key Identifier:
                keyid:D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:60:92:05:c6:5c:eb:e2:00:35:4b:98:f2:ff:e8:0c:2d:fb:
         09:74:3c:d6:c8:af:8b:7e:f9:a1:6c:67:9f:b9:c2:00:c3:80:
         52:18:66:34:ad:94:c6:13:14:51:97:f1:63:29:3c:1b:88:a5:
         f4:2f:89:c9:62:e6:16:0e:a8:c2:c9:ac:f4:72:4c:3b:98:bc:
         4b:2c:6e:e0:b1:3a:16:9e:68:28:b2:ef:d3:ec:eb:7b:f2:c2:
         51:61:e1:76:84:38:7e:13:b1:ec:46:59:9f:4f:5f:39:60:e5:
         7c:1d:5d:e0:29:c4:42:e3:83:1a:bc:75:c2:16:b7:db:d1:27:
         79:22:07:01:14:63:45:2d:9a:96:0c:75:d7:09:d6:96:1a:a2:
         c5:73:31:2e:4d:08:ad:bc:2b:21:c5:6b:4d:6c:d8:07:ee:27:
         5c:fd:40:4d:53:f8:8b:8a:c4:ca:8b:6c:9b:2f:2f:84:43:a3:
         c7:ac:3e:55:6f:18:1d:9a:1e:6b:8d:1a:75:f8:2d:58:0c:7d:
         64:4f:fb:8b:b4:88:fd:ab:31:65:35:31:c7:2b:71:4c:07:5c:
         e1:25:4f:c4:5c:2e:87:f3:0b:f6:ee:50:83:db:0a:db:4d:0a:
         48:43:37:42:f4:06:84:30:89:95:f5:76:d1:fc:d4:be:8d:6b:
         64:76:a7:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZERLhQslYJ3qPGVZAaaJMDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZTAxM2VjOGE1YzU2ZGYyNDFhOWIyNTYzZDExMWY4ZTU0
M2JmOTEwHhcNMjUwNDE3MTUwMTE2WhcNMjUwNDE4MTUwMTE2WjAzMTEwLwYDVQQD
Eyg5YjFjNjkyNjM4M2M1NzU3Mzc1YjAyZTBlYzA5ZDdlYWJkNDVlZmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHP6zuru+5C8S/T1sk7JBH+RMqnq
LaaaXsRkb7FdZnloRUjYZruwmevr+iiNcunB96KwnzXkWISpevSrVd68GltVcWyx
6+XKddAC11CdjN92KyMzP81vorsIjMRZXFWTJ+jS7yOp0Lu/xwSZetqsfmx+0k27
XSofppkfNRGc2bRO4/XkpZgDsy80COyJhuTLL+UMI7bsr0v3/ZdzA2LEUxCjtusp
+Yu88uBFHYheOvN4D14CmBpi+UdMJb7mGlDuRt1qB97ubz5HHmrpDzxn7q8Ni8VA
daKIUrOiC77cVNsrgvSozsVP40DH+dlb108oVJVKW/AxjueOeBKGHlPWGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJscaSY4PFdXN1sC4OwJ1+q9Re/vMB8GA1UdIwQY
MBaAFNHgE+yKXFbfJBqbJWPREfjlQ7+RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGVBVDdJcGNWdDhrR3BzbFk5RVItT1ZEdjVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9lNDFlZjQtZGMxZS00NDY5LWJkMmQt
NDQwNTI4YzFlNDllLzEvMGVBVDdJcGNWdDhrR3BzbFk5RVItT1ZEdjVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9lNDFlZjQtZGMxZS00NDY5LWJkMmQtNDQwNTI4YzFlNDll
LzEvMGVBVDdJcGNWdDhrR3BzbFk5RVItT1ZEdjVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2CSBcZc
6+IANUuY8v/oDC37CXQ81sivi375oWxnn7nCAMOAUhhmNK2UxhMUUZfxYyk8G4il
9C+JyWLmFg6owsms9HJMO5i8Syxu4LE6Fp5oKLLv0+zre/LCUWHhdoQ4fhOx7EZZ
n09fOWDlfB1d4CnEQuODGrx1wha329EneSIHARRjRS2algx11wnWlhqixXMxLk0I
rbwrIcVrTWzYB+4nXP1ATVP4i4rEyotsmy8vhEOjx6w+VW8YHZoea40adfgtWAx9
ZE/7i7SI/asxZTUxxytxTAdc4SVPxFwuh/ML9u5Qg9sK200KSEM3QvQGhDCJlfV2
0fzUvo1rZHan+g==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:30:49 2025 by rpki-client