Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
File:                     zheeiaqi1Z7uS9aFj65bs_2nSWE.mft (raw, json)
Hash identifier:          X6f69mqKlBC3szQaDA7CEX3UU+8dKrxSLOsmhTeKkv8=
Subject key identifier:   6E:45:E9:68:B1:92:4C:51:58:1C:A8:9D:4A:B6:A2:BD:34:FD:BF:C1
Authority key identifier: CE:17:9E:89:AA:A2:D5:9E:EE:4B:D6:85:8F:AE:5B:B3:FD:A7:49:61
Certificate issuer:       /CN=ce179e89aaa2d59eee4bd6858fae5bb3fda74961
Certificate serial:       01958B4DAE644C23F7F66097749F8F65837D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
Manifest number:          043B
Signing time:             Wed 12 Mar 2025 17:01:18 +0000
Manifest this update:     Wed 12 Mar 2025 17:01:18 +0000
Manifest next update:     Thu 13 Mar 2025 17:01:18 +0000
Files and hashes:         1: DAyoRGxiyUSOri-3K-BVUpwpyYY.roa (hash: +KqrZCct6zjyTbHGPjBd2ldOfCdTDJvohDZemG1iB18=)
                          2: zheeiaqi1Z7uS9aFj65bs_2nSWE.crl (hash: oOoztGI3Wso1yWmK/TxQlWscNBHdCKpG8DhCBE+APKQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 17:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:4d:ae:64:4c:23:f7:f6:60:97:74:9f:8f:65:83:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce179e89aaa2d59eee4bd6858fae5bb3fda74961
        Validity
            Not Before: Mar 12 17:01:18 2025 GMT
            Not After : Mar 13 17:01:18 2025 GMT
        Subject: CN=6e45e968b1924c51581ca89d4ab6a2bd34fdbfc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7c:82:3e:7c:29:24:a2:e4:85:46:a0:cc:0f:
                    cb:26:a1:0f:d3:a0:fe:be:1a:77:d5:dc:b2:b8:25:
                    63:c5:a5:d9:7e:c4:29:e2:84:ae:f3:cc:e0:7d:3f:
                    0b:54:f3:12:78:5f:14:76:ed:6e:84:30:7b:7b:03:
                    c0:ee:c5:57:ad:cf:61:64:a2:5a:df:2e:77:1c:f9:
                    06:df:72:30:ff:fe:97:54:a7:78:5a:76:4a:50:c6:
                    89:b1:d7:c8:20:28:6b:30:64:e6:f5:dc:d3:ef:59:
                    42:b8:4f:b7:25:cf:1f:c9:bf:bd:cc:b4:bd:68:65:
                    29:fb:3b:02:27:33:6a:d9:8d:04:57:43:a1:23:a5:
                    a7:58:a6:b6:74:7a:91:fe:e9:d8:d2:21:00:ae:49:
                    a3:11:77:f8:ca:5a:59:69:fc:a2:de:b1:8e:0c:56:
                    87:81:01:83:74:b2:75:f2:a8:aa:7c:6d:44:6b:97:
                    1a:af:49:b0:45:a2:15:db:be:a0:af:d5:17:2f:47:
                    24:56:f2:5a:8b:0e:d2:a2:a9:50:e0:78:99:60:90:
                    43:13:60:d6:90:1e:b6:ad:79:24:f3:72:d5:3c:d3:
                    78:f1:63:95:33:a3:fe:36:16:1c:0d:c8:e1:f7:eb:
                    54:84:59:96:10:a5:9c:8f:8d:87:4f:f5:a0:c8:84:
                    bc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:45:E9:68:B1:92:4C:51:58:1C:A8:9D:4A:B6:A2:BD:34:FD:BF:C1
            X509v3 Authority Key Identifier:
                keyid:CE:17:9E:89:AA:A2:D5:9E:EE:4B:D6:85:8F:AE:5B:B3:FD:A7:49:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:1f:bb:ce:33:c0:6a:62:3c:37:57:2e:d0:c1:6c:ff:f7:f2:
         f5:87:22:4a:59:5b:47:69:ae:77:94:b1:9b:43:bd:a7:4f:d5:
         40:8e:97:a0:a0:f0:ff:31:d0:49:9d:c0:30:12:ad:08:69:11:
         6c:58:c0:a9:e7:50:ec:fa:49:8f:b7:f3:34:a7:e0:3f:1e:37:
         31:73:35:94:16:67:ff:1f:54:5a:b1:21:54:00:78:16:d1:a2:
         61:44:cc:32:de:e2:22:fc:9c:cc:58:b9:7f:32:20:2c:17:75:
         55:03:cb:82:04:67:ed:eb:d8:81:62:fb:53:ca:e9:af:87:80:
         8f:f2:fe:4e:10:65:71:e3:68:57:a5:ca:59:fa:1a:dd:b6:26:
         bc:14:a4:34:72:3c:a1:9c:a4:46:01:8b:c2:5e:3f:2d:e1:b0:
         36:d7:60:fc:34:e2:ba:e1:af:69:29:91:10:1c:3f:e3:79:5f:
         e4:bc:60:b8:81:c8:cf:94:37:e8:46:e2:0a:c6:04:e5:5e:bb:
         5e:7a:cd:12:fd:ac:1f:c2:ca:2e:66:a6:f8:ef:16:84:a3:29:
         56:9a:f1:e0:85:e2:f9:47:8d:1f:42:ab:91:55:6f:02:7d:08:
         1d:3a:68:02:de:9b:11:e8:15:1d:c0:a8:ee:15:0c:2c:ee:fb:
         dd:23:c4:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWLTa5kTCP39mCXdJ+PZYN9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMTc5ZTg5YWFhMmQ1OWVlZTRiZDY4NThmYWU1YmIzZmRh
NzQ5NjEwHhcNMjUwMzEyMTcwMTE4WhcNMjUwMzEzMTcwMTE4WjAzMTEwLwYDVQQD
Eyg2ZTQ1ZTk2OGIxOTI0YzUxNTgxY2E4OWQ0YWI2YTJiZDM0ZmRiZmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHyCPnwpJKLkhUagzA/LJqEP06D+
vhp31dyyuCVjxaXZfsQp4oSu88zgfT8LVPMSeF8Udu1uhDB7ewPA7sVXrc9hZKJa
3y53HPkG33Iw//6XVKd4WnZKUMaJsdfIIChrMGTm9dzT71lCuE+3Jc8fyb+9zLS9
aGUp+zsCJzNq2Y0EV0OhI6WnWKa2dHqR/unY0iEArkmjEXf4ylpZafyi3rGODFaH
gQGDdLJ18qiqfG1Ea5car0mwRaIV276gr9UXL0ckVvJaiw7SoqlQ4HiZYJBDE2DW
kB62rXkk83LVPNN48WOVM6P+NhYcDcjh9+tUhFmWEKWcj42HT/WgyIS8xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG5F6WixkkxRWByonUq2or00/b/BMB8GA1UdIwQY
MBaAFM4XnomqotWe7kvWhY+uW7P9p0lhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemhlZWlhcWkxWjd1UzlhRmo2NWJzXzJuU1dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy81OWU5ZGEtOWMyYy00MGNiLTlhNjUt
M2Q3OTY1NTM5YmM3LzEvemhlZWlhcWkxWjd1UzlhRmo2NWJzXzJuU1dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy81OWU5ZGEtOWMyYy00MGNiLTlhNjUtM2Q3OTY1NTM5YmM3
LzEvemhlZWlhcWkxWjd1UzlhRmo2NWJzXzJuU1dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIx+7zjPA
amI8N1cu0MFs//fy9YciSllbR2mud5Sxm0O9p0/VQI6XoKDw/zHQSZ3AMBKtCGkR
bFjAqedQ7PpJj7fzNKfgPx43MXM1lBZn/x9UWrEhVAB4FtGiYUTMMt7iIvyczFi5
fzIgLBd1VQPLggRn7evYgWL7U8rpr4eAj/L+ThBlceNoV6XKWfoa3bYmvBSkNHI8
oZykRgGLwl4/LeGwNtdg/DTiuuGvaSmREBw/43lf5LxguIHIz5Q36EbiCsYE5V67
XnrNEv2sH8LKLmam+O8WhKMpVprx4IXi+UeNH0KrkVVvAn0IHTpoAt6bEegVHcCo
7hUMLO773SPEjA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:23:50 2025 by rpki-client