Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
File:                     ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft (raw, json)
Hash identifier:          lSIQFjd/gHvEamp9EXTNx+Vh9Cb4Lkb5CPsibBwlmIU=
Subject key identifier:   FB:50:4B:2C:EE:B8:41:0A:67:65:52:BC:75:09:3E:D0:96:97:AF:5D
Authority key identifier: CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
Certificate issuer:       /CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
Certificate serial:       0197469EDBCEA69F0944D6B457E768AC6053
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
Manifest number:          0EE4
Signing time:             Fri 06 Jun 2025 19:01:45 +0000
Manifest this update:     Fri 06 Jun 2025 19:01:45 +0000
Manifest next update:     Sat 07 Jun 2025 19:01:45 +0000
Files and hashes:         1: 1bT_z3QhDrRtR0bAMfMHm2giTF4.roa (hash: UdAyHLTajp0O5fgzTOphNRIpwXVUSlhxrrLMkoKDUAw=)
                          2: C1FyQJSK2-uv7URyciZXxMvVb6c.roa (hash: CAmInxyQhyb9MZHRVwkcOEX1WeCGUI9sXRoPqIH4UiI=)
                          3: IELJH6M7c-qGa_xF_N_rVAXGjYc.roa (hash: QPFfU1BkEUCanKp/XJb5ENTQ74R8UjYATL4PwXWDHyg=)
                          4: ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl (hash: mlRay6QzEVnz4GNSz+oxr1IQ8EW8reapVM9cc89uLg0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 19:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9e:db:ce:a6:9f:09:44:d6:b4:57:e7:68:ac:60:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
        Validity
            Not Before: Jun  6 19:01:45 2025 GMT
            Not After : Jun  7 19:01:45 2025 GMT
        Subject: CN=fb504b2ceeb8410a676552bc75093ed09697af5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:14:bf:cf:27:3e:64:04:16:2b:80:d0:df:80:
                    c4:e4:bc:78:f3:df:4c:aa:d5:3e:ad:b0:d1:2c:8f:
                    d4:6c:64:0d:a9:a7:41:9f:96:2c:10:db:14:d0:b6:
                    37:a1:e5:e5:13:ed:88:81:5b:90:57:bd:f3:02:dd:
                    ef:8c:41:b8:f3:3d:41:cf:1c:2d:b0:56:af:14:69:
                    93:0d:11:0f:48:25:b4:9e:60:a0:22:0f:d9:39:e2:
                    5b:60:e9:01:f7:4a:fa:15:f3:f5:3b:7d:6c:d0:7a:
                    99:09:58:59:e8:b3:c6:8b:87:9b:ed:62:8d:81:f9:
                    c0:05:b3:39:c4:26:c1:b5:44:de:4c:a4:dc:f7:0d:
                    b2:52:8f:0f:27:fb:33:07:03:1b:0c:6c:e5:ab:33:
                    75:e7:39:97:e9:f5:5d:b2:c6:de:2d:0a:9f:2b:d1:
                    89:2c:32:b9:b4:3c:f6:b2:9e:26:22:49:31:d7:a7:
                    57:d6:0a:f8:bb:c3:a8:f6:93:ad:47:c0:71:75:73:
                    8d:1d:c4:a2:2c:bb:9b:c2:2e:7c:5c:8f:26:c0:2e:
                    81:4e:63:a1:5a:26:6b:36:1f:f7:a1:be:a2:70:78:
                    6d:8f:d3:02:30:37:bd:93:80:50:51:ab:1b:13:d2:
                    59:6e:82:ab:0c:05:dc:2d:0c:23:6c:1b:c7:83:37:
                    69:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:50:4B:2C:EE:B8:41:0A:67:65:52:BC:75:09:3E:D0:96:97:AF:5D
            X509v3 Authority Key Identifier:
                keyid:CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:52:91:f1:b9:46:24:1d:27:17:3c:02:4d:48:27:ac:38:d4:
         aa:9c:0a:04:f1:6d:7f:34:84:38:c5:c7:5d:21:13:c5:1d:f7:
         35:51:2a:b7:d1:c4:b2:eb:2a:91:9a:14:46:14:d3:d1:7b:e9:
         8a:73:42:a0:86:bd:2d:3f:a7:be:57:66:8e:1c:9a:8a:79:8a:
         88:36:3d:49:61:38:00:8e:57:ca:98:03:1c:cf:f5:c0:e8:07:
         70:c2:36:22:01:04:98:00:f2:7b:e3:3c:a5:2f:57:ed:62:d0:
         21:f9:69:50:5c:0b:b3:94:02:b9:c6:6c:71:09:af:34:13:1f:
         b8:0c:2d:41:a9:7c:a4:f6:10:66:10:60:30:ad:85:c0:e5:48:
         ed:f2:41:cc:80:6d:7c:f7:c4:be:f3:1c:6c:71:66:51:18:78:
         6e:65:cb:d4:9f:29:06:eb:1a:3c:43:43:6b:e5:63:af:b2:b7:
         15:b6:99:92:a1:b7:5f:61:87:b0:7a:74:99:11:0b:3d:14:48:
         d8:6b:6d:18:c2:7d:ef:90:38:48:55:d5:b7:bc:ee:e7:8a:1d:
         49:f1:d3:61:75:87:8f:bb:c0:95:be:d2:ac:3f:31:7f:22:e8:
         bc:48:27:2e:dc:de:f7:b2:50:3d:1c:95:b7:7e:c9:52:c0:be:
         a5:11:5e:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGntvOpp8JRNa0V+dorGBTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYzk4MDRlMjI3ZWFhYzlhYzA5YjA4MjFmYzA3ZWUyODE3
Nzc3YjUwHhcNMjUwNjA2MTkwMTQ1WhcNMjUwNjA3MTkwMTQ1WjAzMTEwLwYDVQQD
EyhmYjUwNGIyY2VlYjg0MTBhNjc2NTUyYmM3NTA5M2VkMDk2OTdhZjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBS/zyc+ZAQWK4DQ34DE5Lx4899M
qtU+rbDRLI/UbGQNqadBn5YsENsU0LY3oeXlE+2IgVuQV73zAt3vjEG48z1Bzxwt
sFavFGmTDREPSCW0nmCgIg/ZOeJbYOkB90r6FfP1O31s0HqZCVhZ6LPGi4eb7WKN
gfnABbM5xCbBtUTeTKTc9w2yUo8PJ/szBwMbDGzlqzN15zmX6fVdssbeLQqfK9GJ
LDK5tDz2sp4mIkkx16dX1gr4u8Oo9pOtR8BxdXONHcSiLLubwi58XI8mwC6BTmOh
WiZrNh/3ob6icHhtj9MCMDe9k4BQUasbE9JZboKrDAXcLQwjbBvHgzdp4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtQSyzuuEEKZ2VSvHUJPtCWl69dMB8GA1UdIwQY
MBaAFMrJgE4ifqrJrAmwgh/AfuKBd3e1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXNtQVRpSi1xc21zQ2JDQ0g4Qi00b0YzZDdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9iY2VhNWQtNTE0ZS00ZjUyLWI0OWEt
OTBmYjU3ZDQwY2E3LzEveXNtQVRpSi1xc21zQ2JDQ0g4Qi00b0YzZDdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9iY2VhNWQtNTE0ZS00ZjUyLWI0OWEtOTBmYjU3ZDQwY2E3
LzEveXNtQVRpSi1xc21zQ2JDQ0g4Qi00b0YzZDdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0VKR8blG
JB0nFzwCTUgnrDjUqpwKBPFtfzSEOMXHXSETxR33NVEqt9HEsusqkZoURhTT0Xvp
inNCoIa9LT+nvldmjhyainmKiDY9SWE4AI5XypgDHM/1wOgHcMI2IgEEmADye+M8
pS9X7WLQIflpUFwLs5QCucZscQmvNBMfuAwtQal8pPYQZhBgMK2FwOVI7fJBzIBt
fPfEvvMcbHFmURh4bmXL1J8pBusaPENDa+Vjr7K3FbaZkqG3X2GHsHp0mRELPRRI
2GttGMJ975A4SFXVt7zu54odSfHTYXWHj7vAlb7SrD8xfyLovEgnLtze97JQPRyV
t37JUsC+pRFeCw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:11:46 2025 by rpki-client