Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
File:                     8YCPGr745rWc1DWaa0SB_HyWMdE.mft (raw, json)
Hash identifier:          eqFwX1W6m72QDNTIm+GuHe5YG1CLLLkCq2+S9VrdlqY=
Subject key identifier:   FA:06:CB:7E:CA:35:6E:8A:CF:18:26:C0:DF:D6:59:C9:B0:C2:6F:F1
Authority key identifier: F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1
Certificate issuer:       /CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
Certificate serial:       01974B8D449C4969FBFE032DDBEDA402550B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
Manifest number:          157F
Signing time:             Sat 07 Jun 2025 18:00:38 +0000
Manifest this update:     Sat 07 Jun 2025 18:00:38 +0000
Manifest next update:     Sun 08 Jun 2025 18:00:38 +0000
Files and hashes:         1: 1-pC8r9w9eHPboI6UQ9SPxm6C-JI.roa (hash: 4/hN4BZtPakrI9kWgmVlEfI4CA36mWdfywhv2fUv0zc=)
                          2: 8YCPGr745rWc1DWaa0SB_HyWMdE.crl (hash: qw0Uiwy6K3iLI2ru59oFQ+d+b94IaDMlrSBfDnA9MYk=)
                          3: ewa-i1ZX3x5sx5ypquiCHGcdBZY.roa (hash: oyaoG9o+HMw8UbuIoU2MjdUmgeJrqz7dNC1WMoDWkeM=)
                          4: f3N3ZaRV0bOdlX13-KIGTXiHS-c.roa (hash: G7D6BUoaKLhAlCeuz2Rq/Eb+8hPzua6dwGFSHRCAqy0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:8d:44:9c:49:69:fb:fe:03:2d:db:ed:a4:02:55:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
        Validity
            Not Before: Jun  7 18:00:38 2025 GMT
            Not After : Jun  8 18:00:38 2025 GMT
        Subject: CN=fa06cb7eca356e8acf1826c0dfd659c9b0c26ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:dc:63:bf:32:81:86:93:bc:86:cb:21:b7:7b:
                    29:29:22:98:f3:d0:15:db:eb:ce:40:46:ef:fe:a2:
                    07:6b:40:96:89:28:80:28:61:c2:31:6e:32:8a:1e:
                    d8:c7:e3:bf:56:0d:5b:46:8b:d7:74:45:31:09:19:
                    db:ba:ac:77:1f:2a:8b:8b:35:72:19:9f:ce:f5:6f:
                    07:2d:d4:f3:f6:b8:f5:ca:6a:ff:e2:e4:b3:3b:0e:
                    6b:d0:35:8e:32:35:a1:8b:06:6e:44:98:00:d7:fd:
                    ca:67:ec:82:f4:c0:e4:27:e1:49:e4:dd:1e:fe:14:
                    0f:df:db:58:6f:7a:7a:98:c4:24:4a:f7:d2:75:26:
                    dc:c8:66:b8:ef:5a:20:bf:f3:7f:ab:fb:d8:03:db:
                    10:b8:00:22:b8:98:d8:cb:d0:5b:e3:6c:ab:b3:73:
                    3c:ab:83:c2:bb:c3:2e:7d:36:e8:50:5e:3b:ba:d3:
                    43:29:e9:20:f0:60:08:be:29:52:aa:e3:7c:67:fa:
                    27:de:83:ad:a0:f5:1e:f0:2e:0b:54:56:88:04:3a:
                    4d:34:8e:4e:8c:8e:b8:1f:51:af:93:4c:0d:d7:21:
                    f6:57:71:65:04:84:d3:44:29:f5:60:69:1a:2e:f0:
                    9e:e3:f1:8f:f6:7e:7e:c0:62:61:af:31:9f:a1:a1:
                    df:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:06:CB:7E:CA:35:6E:8A:CF:18:26:C0:DF:D6:59:C9:B0:C2:6F:F1
            X509v3 Authority Key Identifier:
                keyid:F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:b5:b2:f4:15:d9:ff:fc:57:10:63:96:da:ba:e6:08:03:5a:
         f3:65:df:ac:74:a9:11:9f:d4:af:30:23:cc:2a:2e:02:99:58:
         cf:40:94:60:7e:2f:96:a8:a0:99:fd:72:01:80:05:ff:06:a0:
         f6:5e:a1:08:34:80:fe:40:75:a7:e7:f3:db:df:94:45:04:d5:
         76:a4:bc:4d:2e:d0:39:dc:11:70:62:4c:dd:37:f7:4c:f7:69:
         a6:bb:e1:8f:6f:d6:1e:3f:29:3f:6f:2d:47:6a:3b:ff:15:17:
         79:c9:f7:62:ed:7b:fa:cb:f5:b8:76:5f:07:6a:51:3f:65:8a:
         54:5b:19:2f:ae:e6:e0:8b:56:e1:2a:4d:8a:96:2a:b4:13:4b:
         4d:d2:11:d2:b9:ca:bb:d2:f5:26:03:c0:24:55:33:f7:2c:aa:
         f8:03:d2:38:59:05:6f:bd:e3:6d:96:14:ca:56:2f:1b:82:9c:
         0a:83:c7:95:10:33:a1:bd:ed:de:68:f4:40:49:6e:34:ae:d8:
         fa:19:e9:fb:ad:64:6f:ef:48:9d:58:38:a7:22:cb:c3:65:6f:
         bc:f7:04:b7:21:0f:d9:39:e8:5e:80:29:43:51:54:11:79:f1:
         bb:e7:fa:94:14:2a:72:33:99:f1:29:66:de:eb:31:f2:6a:14:
         00:4a:25:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLjUScSWn7/gMt2+2kAlULMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxODA4ZjFhYmVmOGU2YjU5Y2Q0MzU5YTZiNDQ4MWZjN2M5
NjMxZDEwHhcNMjUwNjA3MTgwMDM4WhcNMjUwNjA4MTgwMDM4WjAzMTEwLwYDVQQD
EyhmYTA2Y2I3ZWNhMzU2ZThhY2YxODI2YzBkZmQ2NTljOWIwYzI2ZmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dxjvzKBhpO8hssht3spKSKY89AV
2+vOQEbv/qIHa0CWiSiAKGHCMW4yih7Yx+O/Vg1bRovXdEUxCRnbuqx3HyqLizVy
GZ/O9W8HLdTz9rj1ymr/4uSzOw5r0DWOMjWhiwZuRJgA1/3KZ+yC9MDkJ+FJ5N0e
/hQP39tYb3p6mMQkSvfSdSbcyGa471ogv/N/q/vYA9sQuAAiuJjYy9Bb42yrs3M8
q4PCu8MufTboUF47utNDKekg8GAIvilSquN8Z/on3oOtoPUe8C4LVFaIBDpNNI5O
jI64H1Gvk0wN1yH2V3FlBITTRCn1YGkaLvCe4/GP9n5+wGJhrzGfoaHffwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPoGy37KNW6KzxgmwN/WWcmwwm/xMB8GA1UdIwQY
MBaAFPGAjxq++Oa1nNQ1mmtEgfx8ljHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFlDUEdyNzQ1cldjMURXYWEwU0JfSHlXTWRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9hZTMyNGYtNTRmNS00MWRhLWJlYmYt
MDMwNzdlMzdjNjFhLzEvOFlDUEdyNzQ1cldjMURXYWEwU0JfSHlXTWRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9hZTMyNGYtNTRmNS00MWRhLWJlYmYtMDMwNzdlMzdjNjFh
LzEvOFlDUEdyNzQ1cldjMURXYWEwU0JfSHlXTWRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGbWy9BXZ
//xXEGOW2rrmCANa82XfrHSpEZ/UrzAjzCouAplYz0CUYH4vlqigmf1yAYAF/wag
9l6hCDSA/kB1p+fz29+URQTVdqS8TS7QOdwRcGJM3Tf3TPdpprvhj2/WHj8pP28t
R2o7/xUXecn3Yu17+sv1uHZfB2pRP2WKVFsZL67m4ItW4SpNipYqtBNLTdIR0rnK
u9L1JgPAJFUz9yyq+APSOFkFb73jbZYUylYvG4KcCoPHlRAzob3t3mj0QEluNK7Y
+hnp+61kb+9InVg4pyLLw2VvvPcEtyEP2TnoXoApQ1FUEXnxu+f6lBQqcjOZ8Slm
3usx8moUAEolhA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:43:45 2025 by rpki-client