Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
File:                     f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft (raw, json)
Hash identifier:          XGaiaJ5VWGZAdQn17xol2FUbEy/5SVsQMG2gPnkH3Og=
Subject key identifier:   78:9A:9D:EC:1A:8E:20:B2:93:6A:91:0F:58:CB:C9:C7:EA:9B:D3:21
Authority key identifier: 7F:EE:3F:38:20:73:F2:C3:E4:FC:CF:FC:A3:84:C5:B0:CD:82:6C:26
Certificate issuer:       /CN=7fee3f382073f2c3e4fccffca384c5b0cd826c26
Certificate serial:       019746300FE22B9F42E0186FE72F62787232
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
Manifest number:          014B
Signing time:             Fri 06 Jun 2025 17:00:44 +0000
Manifest this update:     Fri 06 Jun 2025 17:00:44 +0000
Manifest next update:     Sat 07 Jun 2025 17:00:44 +0000
Files and hashes:         1: bp5x62Zyl7JWmy23aQgvM10ld6k.roa (hash: WQfC7fNdtGvy/wZ5eChzXDiN7gOvNpvcGnI7lpvTUh0=)
                          2: f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl (hash: pET92qmvZbi4KeXxUcU2oQbNEUuBRofM8R4zbCyBJpU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:30:0f:e2:2b:9f:42:e0:18:6f:e7:2f:62:78:72:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fee3f382073f2c3e4fccffca384c5b0cd826c26
        Validity
            Not Before: Jun  6 17:00:44 2025 GMT
            Not After : Jun  7 17:00:44 2025 GMT
        Subject: CN=789a9dec1a8e20b2936a910f58cbc9c7ea9bd321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7d:bc:88:5d:ea:80:0f:a8:83:8f:08:39:aa:
                    b3:c6:01:fd:a9:2e:49:65:3a:b2:e3:77:e7:d2:69:
                    ca:4d:f1:81:3c:26:1d:f8:bc:b3:dc:06:fc:83:79:
                    74:6e:57:c9:7a:26:b0:23:9f:f1:48:5f:ae:72:0c:
                    52:ba:7b:72:5c:5b:d8:54:6f:3f:af:5d:fb:c4:88:
                    80:6c:ee:a0:6f:06:17:fc:e7:70:ea:1f:cb:51:b0:
                    e2:a3:12:04:33:83:80:a8:24:01:87:b3:f5:b6:ba:
                    52:af:cb:04:ed:1c:c2:db:d0:be:0f:fe:d0:b9:8e:
                    98:77:47:c8:2b:6d:f5:6d:a9:70:d4:49:43:1c:a3:
                    c2:3a:3f:95:06:5e:7d:74:6e:d4:51:d5:e4:a8:26:
                    e2:f7:d7:3f:87:30:b9:97:d5:83:82:ef:2c:48:54:
                    74:0c:f6:c8:a0:98:7a:43:1b:d8:2d:23:d0:62:bc:
                    fb:0d:fa:87:8c:89:27:72:3e:8a:4e:d3:2d:d7:52:
                    d3:cd:2e:eb:bd:b0:4d:69:d3:51:ea:67:b2:76:fc:
                    18:db:97:2f:99:9a:5a:ae:e3:ec:97:f5:79:77:e5:
                    d5:99:d7:90:7c:65:bb:99:11:e5:cf:53:2e:03:19:
                    b2:a8:50:d5:72:1e:32:ef:c5:c6:21:73:bb:0d:5f:
                    3e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:9A:9D:EC:1A:8E:20:B2:93:6A:91:0F:58:CB:C9:C7:EA:9B:D3:21
            X509v3 Authority Key Identifier:
                keyid:7F:EE:3F:38:20:73:F2:C3:E4:FC:CF:FC:A3:84:C5:B0:CD:82:6C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:3e:17:c9:18:b6:a3:28:10:dc:45:70:de:8c:74:06:91:27:
         c1:21:0d:b7:c1:e6:fb:ba:1b:6a:81:74:54:e5:59:35:4a:bd:
         6e:b1:fe:c9:ad:8d:83:92:8e:10:cf:00:7f:a9:ee:7c:5a:83:
         e6:24:fd:d1:8d:04:08:9c:9e:48:e9:bd:45:1d:72:7c:e1:b3:
         25:f4:4c:fd:31:0f:46:3a:85:22:2f:47:ab:23:79:70:2a:e2:
         4e:ac:da:fa:da:2d:8e:7e:fe:28:3e:01:df:8b:59:03:d9:00:
         cd:ce:c6:39:7c:f1:56:1b:5b:96:50:da:6e:22:dc:e8:44:60:
         98:19:c3:b4:ad:6c:24:fa:08:4a:99:d7:ac:9a:39:14:4d:9d:
         38:9c:e8:2f:c6:d2:c6:01:ac:26:ac:38:a8:0b:42:04:f8:6e:
         83:be:11:47:a1:c6:2e:a4:f5:76:75:cf:f7:f9:fa:9b:3b:3c:
         34:76:0c:29:34:09:27:45:1e:cb:80:e3:00:6d:8e:64:99:8e:
         82:0b:19:cd:05:7b:e1:15:28:95:f9:d5:13:5e:9f:eb:f7:53:
         13:99:07:30:b1:b2:1f:41:94:10:8b:7e:ed:08:b4:55:5b:c8:
         80:97:06:40:87:97:2d:fd:c9:5e:16:85:e2:15:6e:26:f5:d4:
         c3:2d:0a:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGMA/iK59C4Bhv5y9ieHIyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmZWUzZjM4MjA3M2YyYzNlNGZjY2ZmY2EzODRjNWIwY2Q4
MjZjMjYwHhcNMjUwNjA2MTcwMDQ0WhcNMjUwNjA3MTcwMDQ0WjAzMTEwLwYDVQQD
Eyg3ODlhOWRlYzFhOGUyMGIyOTM2YTkxMGY1OGNiYzljN2VhOWJkMzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX28iF3qgA+og48IOaqzxgH9qS5J
ZTqy43fn0mnKTfGBPCYd+Lyz3Ab8g3l0blfJeiawI5/xSF+ucgxSuntyXFvYVG8/
r137xIiAbO6gbwYX/Odw6h/LUbDioxIEM4OAqCQBh7P1trpSr8sE7RzC29C+D/7Q
uY6Yd0fIK231balw1ElDHKPCOj+VBl59dG7UUdXkqCbi99c/hzC5l9WDgu8sSFR0
DPbIoJh6QxvYLSPQYrz7DfqHjIkncj6KTtMt11LTzS7rvbBNadNR6meydvwY25cv
mZparuPsl/V5d+XVmdeQfGW7mRHlz1MuAxmyqFDVch4y78XGIXO7DV8+SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHianewajiCyk2qRD1jLycfqm9MhMB8GA1UdIwQY
MBaAFH/uPzggc/LD5PzP/KOExbDNgmwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZi00X09DQno4c1BrX01fOG80VEZzTTJDYkNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84Y2NlYmYtZjlmYS00YzQ2LWFlZTgt
Y2NiZmE3MzQyNGE3LzEvZi00X09DQno4c1BrX01fOG80VEZzTTJDYkNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84Y2NlYmYtZjlmYS00YzQ2LWFlZTgtY2NiZmE3MzQyNGE3
LzEvZi00X09DQno4c1BrX01fOG80VEZzTTJDYkNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiD4XyRi2
oygQ3EVw3ox0BpEnwSENt8Hm+7obaoF0VOVZNUq9brH+ya2Ng5KOEM8Af6nufFqD
5iT90Y0ECJyeSOm9RR1yfOGzJfRM/TEPRjqFIi9HqyN5cCriTqza+totjn7+KD4B
34tZA9kAzc7GOXzxVhtbllDabiLc6ERgmBnDtK1sJPoISpnXrJo5FE2dOJzoL8bS
xgGsJqw4qAtCBPhug74RR6HGLqT1dnXP9/n6mzs8NHYMKTQJJ0Uey4DjAG2OZJmO
ggsZzQV74RUolfnVE16f6/dTE5kHMLGyH0GUEIt+7Qi0VVvIgJcGQIeXLf3JXhaF
4hVuJvXUwy0KzA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 00:55:42 2025 by rpki-client