Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
File:                     thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft (raw, json)
Hash identifier:          alo7RvLzJZ0DVx+NFODAmMf+olgLxpLkJjzdZ0vkH2g=
Subject key identifier:   9A:6F:C1:36:0E:62:CE:49:AE:C7:BA:72:64:A1:43:EC:1E:F1:1E:11
Authority key identifier: B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8
Certificate issuer:       /CN=b61046dcb185b0bfd9976628d69a189d3c3987d8
Certificate serial:       019629E07884677807B203E4BC659B247A82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
Manifest number:          092C
Signing time:             Sat 12 Apr 2025 12:01:38 +0000
Manifest this update:     Sat 12 Apr 2025 12:01:38 +0000
Manifest next update:     Sun 13 Apr 2025 12:01:38 +0000
Files and hashes:         1: B1zjeI12z7rKzJjEV2xk7Kx6YeQ.roa (hash: r2WGLNl7mqhMqh1kFVBikeJbCxyFFZKze+pH0m8/Lxw=)
                          2: J0SmJvo_DblXKy-6WzDl514uI_0.roa (hash: q/+Q30dvsgavMpRf9kHRcZOPpYacKoQhzHpVoqSh0+Q=)
                          3: oE2klgKXcU6ZFBaxD5Ye5dFs4b0.roa (hash: xVrVcQ4eqe5NnaROnCloWgSzhvwXlAPv4n0sYt9CbFA=)
                          4: thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl (hash: ljYHzrXkT5KfwQ7MyqTTu7qN2l53g0NCAaQS2W+Gs3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:29:e0:78:84:67:78:07:b2:03:e4:bc:65:9b:24:7a:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b61046dcb185b0bfd9976628d69a189d3c3987d8
        Validity
            Not Before: Apr 12 12:01:38 2025 GMT
            Not After : Apr 13 12:01:38 2025 GMT
        Subject: CN=9a6fc1360e62ce49aec7ba7264a143ec1ef11e11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c3:e8:a0:64:03:e0:29:89:51:9e:96:91:73:
                    a8:9c:70:86:f3:cc:0d:8e:ab:70:31:23:32:38:a8:
                    05:16:aa:f3:a2:e4:66:f2:06:74:58:9f:0d:67:5c:
                    02:68:08:20:0d:0b:3e:c3:36:f1:ed:5d:e6:93:5e:
                    41:62:7b:9a:8c:fe:64:81:46:4c:f9:56:c5:12:8e:
                    f3:8b:98:05:64:c3:bf:03:32:a5:0e:d8:c1:7f:db:
                    ab:b9:01:a7:cd:84:9b:35:d9:9e:b8:ee:8c:a1:76:
                    ea:c8:9d:85:6d:ef:77:28:ab:ac:86:b9:3d:15:22:
                    ae:ce:1c:c7:92:b6:45:9b:ad:c4:42:18:66:28:b4:
                    70:90:68:d0:d1:12:82:0b:3c:b4:39:93:83:3e:cd:
                    dc:be:f2:67:f7:f6:51:e6:6c:dc:a5:d4:45:61:33:
                    9e:33:58:78:59:a8:30:50:ee:fc:bf:9e:40:a8:bb:
                    95:bb:54:95:0b:e2:e6:ef:90:09:ae:81:24:88:18:
                    82:ee:d6:30:22:9a:7a:82:43:55:f2:9c:e8:1b:40:
                    7c:bc:3b:d7:a3:03:8e:6c:cc:55:36:66:9f:e2:26:
                    d6:57:cd:d4:a3:7f:b5:24:c0:bc:90:0b:85:96:57:
                    e8:80:f4:8a:52:99:c7:5c:91:af:4e:cc:3a:8c:eb:
                    cd:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:6F:C1:36:0E:62:CE:49:AE:C7:BA:72:64:A1:43:EC:1E:F1:1E:11
            X509v3 Authority Key Identifier:
                keyid:B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:37:4a:1d:59:be:9b:4d:47:d1:31:d0:42:71:45:d5:b5:3c:
         e8:57:cf:92:f4:f0:a7:f5:24:9a:49:cb:2b:13:7b:0f:c6:0c:
         1e:02:01:f0:b2:62:8c:d6:56:94:8d:3b:6c:88:77:5f:e7:e4:
         98:6c:e9:a4:7d:b9:2f:b3:f6:3d:61:0b:35:e1:fd:32:0f:d3:
         46:c8:e3:00:a4:8b:5c:aa:87:87:4b:91:74:6b:49:9e:cc:33:
         20:dc:e2:3a:08:a0:8b:bc:0f:36:86:c7:10:f1:d0:cc:a5:e1:
         ad:b2:b4:82:e4:a0:54:ef:ae:01:36:e3:75:55:c3:71:57:24:
         b2:85:53:b0:3a:a5:3f:bd:8b:9d:d1:b0:da:16:1f:ba:5a:30:
         59:79:74:6f:05:39:10:24:e7:0f:f3:0d:66:f3:a5:d4:09:73:
         78:87:d7:74:24:db:f2:f4:60:4b:2d:86:72:54:34:d8:0c:fc:
         56:05:23:9c:2c:6c:31:b9:76:54:45:e1:43:a9:00:b5:59:d9:
         fb:06:a4:a5:6c:ff:da:15:0a:23:ec:87:6b:17:bd:f9:ea:40:
         ac:52:8b:2a:47:bb:58:ec:e7:c0:7a:89:e0:60:a3:0a:6a:2a:
         c0:e2:6f:12:bf:cf:96:4f:ba:c2:41:05:1a:99:f5:68:82:6d:
         02:d5:d8:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYp4HiEZ3gHsgPkvGWbJHqCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MTA0NmRjYjE4NWIwYmZkOTk3NjYyOGQ2OWExODlkM2Mz
OTg3ZDgwHhcNMjUwNDEyMTIwMTM4WhcNMjUwNDEzMTIwMTM4WjAzMTEwLwYDVQQD
Eyg5YTZmYzEzNjBlNjJjZTQ5YWVjN2JhNzI2NGExNDNlYzFlZjExZTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsPooGQD4CmJUZ6WkXOonHCG88wN
jqtwMSMyOKgFFqrzouRm8gZ0WJ8NZ1wCaAggDQs+wzbx7V3mk15BYnuajP5kgUZM
+VbFEo7zi5gFZMO/AzKlDtjBf9uruQGnzYSbNdmeuO6MoXbqyJ2Fbe93KKushrk9
FSKuzhzHkrZFm63EQhhmKLRwkGjQ0RKCCzy0OZODPs3cvvJn9/ZR5mzcpdRFYTOe
M1h4WagwUO78v55AqLuVu1SVC+Lm75AJroEkiBiC7tYwIpp6gkNV8pzoG0B8vDvX
owOObMxVNmaf4ibWV83Uo3+1JMC8kAuFllfogPSKUpnHXJGvTsw6jOvNmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpvwTYOYs5Jrse6cmShQ+we8R4RMB8GA1UdIwQY
MBaAFLYQRtyxhbC/2ZdmKNaaGJ08OYfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGhCRzNMR0ZzTF9abDJZbzFwb1luVHc1aDlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC83MDc1N2ItYzc1OC00MjkyLThiNWMt
Y2YxZjJmYThlNWYyLzEvdGhCRzNMR0ZzTF9abDJZbzFwb1luVHc1aDlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC83MDc1N2ItYzc1OC00MjkyLThiNWMtY2YxZjJmYThlNWYy
LzEvdGhCRzNMR0ZzTF9abDJZbzFwb1luVHc1aDlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXDdKHVm+
m01H0THQQnFF1bU86FfPkvTwp/UkmknLKxN7D8YMHgIB8LJijNZWlI07bIh3X+fk
mGzppH25L7P2PWELNeH9Mg/TRsjjAKSLXKqHh0uRdGtJnswzINziOgigi7wPNobH
EPHQzKXhrbK0guSgVO+uATbjdVXDcVcksoVTsDqlP72LndGw2hYfulowWXl0bwU5
ECTnD/MNZvOl1AlzeIfXdCTb8vRgSy2GclQ02Az8VgUjnCxsMbl2VEXhQ6kAtVnZ
+wakpWz/2hUKI+yHaxe9+epArFKLKke7WOznwHqJ4GCjCmoqwOJvEr/Plk+6wkEF
Gpn1aIJtAtXYfg==
-----END CERTIFICATE-----
Generated at Sat Apr 12 18:39:26 2025 by rpki-client