Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
File:                     pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft (raw, json)
Hash identifier:          +6m8khrrY307oB7kMZSxUqJsymqBHIIn168a4UVHZ/4=
Subject key identifier:   3F:67:BE:C7:47:78:89:8F:A4:C7:04:65:42:A0:CF:27:66:CF:C5:4F
Authority key identifier: A4:91:7D:88:5B:67:56:72:FC:8E:FB:89:D6:E1:4E:23:67:50:52:D9
Certificate issuer:       /CN=a4917d885b675672fc8efb89d6e14e23675052d9
Certificate serial:       01964F6CADF2109DD9D0C729234B2A67FA74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
Manifest number:          0778
Signing time:             Sat 19 Apr 2025 19:00:44 +0000
Manifest this update:     Sat 19 Apr 2025 19:00:44 +0000
Manifest next update:     Sun 20 Apr 2025 19:00:44 +0000
Files and hashes:         1: pJF9iFtnVnL8jvuJ1uFOI2dQUtk.crl (hash: okmCOUAMOJp73t6m1gk1wQ3AbT+dKnRAhcvO6y8srOE=)
                          2: prQrRYa7iRxtGVoZ-fOmbS6yQ1I.roa (hash: tnsyAKD0R4WdSHhtE37JrhpYKkCqh9rly9GAA3vquY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 19:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:6c:ad:f2:10:9d:d9:d0:c7:29:23:4b:2a:67:fa:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4917d885b675672fc8efb89d6e14e23675052d9
        Validity
            Not Before: Apr 19 19:00:44 2025 GMT
            Not After : Apr 20 19:00:44 2025 GMT
        Subject: CN=3f67bec74778898fa4c7046542a0cf2766cfc54f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:16:e1:c3:86:6a:48:fb:c6:81:be:4f:5b:33:
                    f9:16:26:fc:80:90:21:7a:7e:7a:15:eb:17:c5:18:
                    3b:1a:a2:e7:46:b2:17:57:95:ba:1a:bf:b6:2f:66:
                    2f:db:41:7b:35:ab:82:ce:bd:b9:5f:fa:c5:2a:da:
                    3e:4e:f2:ab:72:19:67:c8:8b:93:6e:9a:f6:53:78:
                    7e:e6:69:0c:10:2b:70:1f:41:19:fc:d8:ef:48:3a:
                    78:d2:fd:fe:de:31:03:ae:ab:3c:86:16:00:19:8e:
                    dd:16:93:e6:9d:89:c8:cc:1f:75:a0:31:af:99:9d:
                    e9:ca:ab:51:48:d3:75:5c:2d:c3:b2:75:c7:01:c5:
                    22:33:31:31:c0:30:14:76:46:63:49:73:e8:56:59:
                    f5:53:d4:98:53:98:ec:7a:d7:ba:cb:de:9d:71:6a:
                    13:38:21:6f:76:dc:04:90:3f:f3:04:14:9a:dc:1c:
                    ca:64:3f:b6:90:13:b0:0e:5e:cf:c9:34:51:12:73:
                    24:3f:35:a0:83:17:ed:25:57:ca:18:3f:22:19:de:
                    e4:bc:f2:2a:3f:63:bf:2b:0c:dc:8d:8a:07:40:8b:
                    66:dd:bc:13:29:ff:0e:f0:79:6e:a7:17:99:bd:ba:
                    5f:27:c4:c4:23:25:3f:7e:2b:e8:85:97:03:8e:d3:
                    2d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:67:BE:C7:47:78:89:8F:A4:C7:04:65:42:A0:CF:27:66:CF:C5:4F
            X509v3 Authority Key Identifier:
                keyid:A4:91:7D:88:5B:67:56:72:FC:8E:FB:89:D6:E1:4E:23:67:50:52:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:b5:c5:27:8d:86:1e:3e:ef:38:b9:5f:c0:ea:4c:7f:ed:68:
         0b:be:17:94:2f:bd:af:36:b2:3d:85:37:6f:d7:7a:4d:00:3c:
         05:7a:b4:3d:cb:cf:36:dc:b6:26:50:2a:8f:76:c1:a5:93:b5:
         c6:bc:8b:22:ac:0e:fe:a3:3c:b0:cb:99:9b:fe:09:90:63:9c:
         9b:f7:c6:19:ab:3b:d4:60:1c:f9:e2:03:04:a7:c9:cc:70:f9:
         9f:f0:80:c2:ee:2b:dc:c4:67:9b:e3:f5:0a:f3:6c:40:c8:7c:
         9d:ec:e4:28:98:ff:87:3a:22:f2:fe:fe:bd:73:1e:52:db:37:
         4f:36:d2:e1:c2:04:4d:d1:d2:53:65:6b:1b:70:b6:90:65:2d:
         8d:31:ab:ea:f9:5c:c2:32:c9:34:e7:38:c5:51:58:a2:7a:6b:
         cc:9f:d2:23:73:1d:27:46:d1:ba:c7:6b:42:a9:a9:99:ec:0a:
         23:3e:e1:fb:19:ca:82:af:ac:05:9a:40:f5:6e:db:6d:23:ce:
         00:97:62:af:72:ba:1f:aa:99:f9:10:28:af:d2:e7:d7:4e:16:
         de:b0:05:51:06:6d:28:b7:06:dc:87:23:d1:b6:f0:ea:c2:f7:
         76:86:7c:14:94:d9:17:d5:d9:c1:be:60:d5:03:00:fd:ca:55:
         64:5f:ae:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPbK3yEJ3Z0McpI0sqZ/p0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OTE3ZDg4NWI2NzU2NzJmYzhlZmI4OWQ2ZTE0ZTIzNjc1
MDUyZDkwHhcNMjUwNDE5MTkwMDQ0WhcNMjUwNDIwMTkwMDQ0WjAzMTEwLwYDVQQD
EygzZjY3YmVjNzQ3Nzg4OThmYTRjNzA0NjU0MmEwY2YyNzY2Y2ZjNTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBbhw4ZqSPvGgb5PWzP5Fib8gJAh
en56FesXxRg7GqLnRrIXV5W6Gr+2L2Yv20F7NauCzr25X/rFKto+TvKrchlnyIuT
bpr2U3h+5mkMECtwH0EZ/NjvSDp40v3+3jEDrqs8hhYAGY7dFpPmnYnIzB91oDGv
mZ3pyqtRSNN1XC3DsnXHAcUiMzExwDAUdkZjSXPoVln1U9SYU5jsete6y96dcWoT
OCFvdtwEkD/zBBSa3BzKZD+2kBOwDl7PyTRREnMkPzWggxftJVfKGD8iGd7kvPIq
P2O/KwzcjYoHQItm3bwTKf8O8HlupxeZvbpfJ8TEIyU/fivohZcDjtMt+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9nvsdHeImPpMcEZUKgzydmz8VPMB8GA1UdIwQY
MBaAFKSRfYhbZ1Zy/I77idbhTiNnUFLZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEpGOWlGdG5Wbkw4anZ1SjF1Rk9JMmRRVXRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8xM2JjMjktNGVmMy00MjFiLWEzMGYt
MTM0NGQwMmNmZGE4LzEvcEpGOWlGdG5Wbkw4anZ1SjF1Rk9JMmRRVXRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8xM2JjMjktNGVmMy00MjFiLWEzMGYtMTM0NGQwMmNmZGE4
LzEvcEpGOWlGdG5Wbkw4anZ1SjF1Rk9JMmRRVXRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANLXFJ42G
Hj7vOLlfwOpMf+1oC74XlC+9rzayPYU3b9d6TQA8BXq0PcvPNty2JlAqj3bBpZO1
xryLIqwO/qM8sMuZm/4JkGOcm/fGGas71GAc+eIDBKfJzHD5n/CAwu4r3MRnm+P1
CvNsQMh8nezkKJj/hzoi8v7+vXMeUts3TzbS4cIETdHSU2VrG3C2kGUtjTGr6vlc
wjLJNOc4xVFYonprzJ/SI3MdJ0bRusdrQqmpmewKIz7h+xnKgq+sBZpA9W7bbSPO
AJdir3K6H6qZ+RAor9Ln104W3rAFUQZtKLcG3Icj0bbw6sL3doZ8FJTZF9XZwb5g
1QMA/cpVZF+uTw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:25:32 2025 by rpki-client