Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
File:                     JEXvDPLil0idGXNw-IXVn4npWqs.mft (raw, json)
Hash identifier:          V3Hf1KqqvCRkCKsiqIAyrOqh4Xpxx9SHNVlw/+W4Xrk=
Subject key identifier:   5C:84:5E:4C:1B:6C:9A:69:88:07:00:E8:88:2E:1A:09:57:89:9F:81
Authority key identifier: 24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB
Certificate issuer:       /CN=2445ef0cf2e297489d197370f885d59f89e95aab
Certificate serial:       01964CA2A4CE925A401D1C109026E6274941
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
Manifest number:          11D0
Signing time:             Sat 19 Apr 2025 06:00:49 +0000
Manifest this update:     Sat 19 Apr 2025 06:00:49 +0000
Manifest next update:     Sun 20 Apr 2025 06:00:49 +0000
Files and hashes:         1: 7BGirnEkwzmDaMHYb7_OyeObZ-o.roa (hash: Mqe4eHaFftNeUPq4ztkhypVdBvRsFekv3LwUY3g3YP4=)
                          2: JEXvDPLil0idGXNw-IXVn4npWqs.crl (hash: Dtb4O79xMZW/o293zQzeebjfb9CgBAncwqlmxrS9PAU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 06:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4c:a2:a4:ce:92:5a:40:1d:1c:10:90:26:e6:27:49:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2445ef0cf2e297489d197370f885d59f89e95aab
        Validity
            Not Before: Apr 19 06:00:49 2025 GMT
            Not After : Apr 20 06:00:49 2025 GMT
        Subject: CN=5c845e4c1b6c9a69880700e8882e1a0957899f81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fb:f2:8f:ba:fd:b0:c9:44:4d:37:12:83:e2:
                    bc:59:f3:79:dd:c6:62:e2:4d:c6:e4:ff:06:d5:8b:
                    5a:a9:14:f9:2f:b3:f3:75:a6:5a:1c:64:51:e6:e8:
                    37:b6:8c:3d:40:ec:1a:e9:49:85:d4:5f:4e:1b:13:
                    fb:2e:91:ee:a2:ec:5d:35:2f:5b:53:3d:83:72:ad:
                    b0:87:bc:53:e1:f4:35:88:25:0d:79:e1:3d:01:6a:
                    fb:b3:b0:a1:b1:84:b7:54:74:34:66:c1:53:f3:42:
                    60:2e:6e:1f:55:b8:5d:7b:05:c0:b0:d5:1e:9f:6b:
                    9d:f8:53:27:c0:20:80:10:48:16:14:da:bc:82:61:
                    b4:90:0e:f9:82:b8:c5:37:7d:5e:cd:dd:48:2c:10:
                    91:bd:77:9d:5b:7f:fd:6e:a8:50:5d:b9:c1:89:2b:
                    d6:b1:85:99:6e:59:e5:ed:cb:f3:55:73:3c:0d:cf:
                    8a:28:1d:cb:ed:2d:1b:78:36:25:a3:ac:77:4b:2d:
                    06:59:da:37:4d:db:1b:5e:f7:dd:c3:de:1b:ab:50:
                    ac:0b:9d:78:6c:58:eb:16:8d:2d:c8:7e:25:9c:87:
                    e9:cf:c5:28:25:ed:05:3e:f0:c0:eb:4d:1e:51:95:
                    8e:73:13:b0:6b:90:44:e4:b1:84:8c:fa:a3:47:db:
                    1b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:84:5E:4C:1B:6C:9A:69:88:07:00:E8:88:2E:1A:09:57:89:9F:81
            X509v3 Authority Key Identifier:
                keyid:24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:79:f3:e8:65:74:d7:df:4e:78:9b:cf:58:1a:9c:a2:69:67:
         2f:2c:2c:a9:ac:cd:da:90:bd:07:6f:25:ae:49:7e:d6:9d:bc:
         ad:88:04:83:d2:b8:a8:2f:74:95:90:dc:f0:0f:cd:f3:08:51:
         a1:82:a4:b5:40:25:96:fd:08:00:d7:6f:36:88:b2:06:57:69:
         3c:ae:fc:7a:32:3b:aa:87:36:3c:9b:8f:a8:45:06:d3:e1:12:
         5d:8c:2a:28:0a:24:f8:4b:d0:06:a7:9b:bf:6f:82:7a:c5:c8:
         1b:11:04:4d:c1:c0:3a:00:37:be:4d:64:cb:bd:db:33:ff:1d:
         25:31:52:1f:50:d5:03:aa:36:f4:e3:56:10:bb:3e:95:9d:36:
         26:fe:29:88:5f:09:de:e1:78:75:64:f5:97:1d:96:f4:04:d7:
         6d:c1:b2:14:48:a6:76:39:8d:e2:29:80:f7:53:7a:53:dc:80:
         27:bc:c7:39:db:65:a4:aa:72:dc:29:37:97:9b:25:0f:cc:7a:
         cd:f6:92:02:cc:4f:56:82:f4:b0:7a:f6:3b:ab:e9:92:23:30:
         1e:2a:77:1a:3a:14:3d:b3:e0:5e:80:f0:9c:c6:ef:ab:09:56:
         84:0d:d4:54:4c:60:a3:5f:60:80:c9:e9:72:7a:3a:e5:95:7b:
         42:1c:a9:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZMoqTOklpAHRwQkCbmJ0lBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NDVlZjBjZjJlMjk3NDg5ZDE5NzM3MGY4ODVkNTlmODll
OTVhYWIwHhcNMjUwNDE5MDYwMDQ5WhcNMjUwNDIwMDYwMDQ5WjAzMTEwLwYDVQQD
Eyg1Yzg0NWU0YzFiNmM5YTY5ODgwNzAwZTg4ODJlMWEwOTU3ODk5ZjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfvyj7r9sMlETTcSg+K8WfN53cZi
4k3G5P8G1YtaqRT5L7PzdaZaHGRR5ug3tow9QOwa6UmF1F9OGxP7LpHuouxdNS9b
Uz2Dcq2wh7xT4fQ1iCUNeeE9AWr7s7ChsYS3VHQ0ZsFT80JgLm4fVbhdewXAsNUe
n2ud+FMnwCCAEEgWFNq8gmG0kA75grjFN31ezd1ILBCRvXedW3/9bqhQXbnBiSvW
sYWZblnl7cvzVXM8Dc+KKB3L7S0beDYlo6x3Sy0GWdo3TdsbXvfdw94bq1CsC514
bFjrFo0tyH4lnIfpz8UoJe0FPvDA600eUZWOcxOwa5BE5LGEjPqjR9sbHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyEXkwbbJppiAcA6IguGglXiZ+BMB8GA1UdIwQY
MBaAFCRF7wzy4pdInRlzcPiF1Z+J6VqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkVYdkRQTGlsMGlkR1hOdy1JWFZuNG5wV3FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jMjczMDAtZmI5NS00OWQ0LTg2NTct
MDk5YmY3MzQzZTJjLzEvSkVYdkRQTGlsMGlkR1hOdy1JWFZuNG5wV3FzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9jMjczMDAtZmI5NS00OWQ0LTg2NTctMDk5YmY3MzQzZTJj
LzEvSkVYdkRQTGlsMGlkR1hOdy1JWFZuNG5wV3FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMHnz6GV0
199OeJvPWBqcomlnLywsqazN2pC9B28lrkl+1p28rYgEg9K4qC90lZDc8A/N8whR
oYKktUAllv0IANdvNoiyBldpPK78ejI7qoc2PJuPqEUG0+ESXYwqKAok+EvQBqeb
v2+CesXIGxEETcHAOgA3vk1ky73bM/8dJTFSH1DVA6o29ONWELs+lZ02Jv4piF8J
3uF4dWT1lx2W9ATXbcGyFEimdjmN4imA91N6U9yAJ7zHOdtlpKpy3Ck3l5slD8x6
zfaSAsxPVoL0sHr2O6vpkiMwHip3GjoUPbPgXoDwnMbvqwlWhA3UVExgo19ggMnp
cno65ZV7QhypMw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:17:12 2025 by rpki-client