Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft
File:                     4tDEmg6X4NXzztO3trn3LKDLU9Y.mft (raw, json)
Hash identifier:          HzX5i57q6v2dcls899GCbdymRXIKlF3PUr3cMRCX2sY=
Subject key identifier:   B9:F9:DC:70:8C:0D:89:5E:51:F8:A5:C3:B8:F9:8E:EB:18:DE:B1:20
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Certificate issuer:       /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial:       019747E784A2774C65F9C507995DAA30A01C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft
Manifest number:          1272
Signing time:             Sat 07 Jun 2025 01:00:44 +0000
Manifest this update:     Sat 07 Jun 2025 01:00:44 +0000
Manifest next update:     Sun 08 Jun 2025 01:00:44 +0000
Files and hashes:         1: 1-xvBLiVIr5eO0ojnuxuHIDpGNj0.roa (hash: aK7ZmDyAzamzfU5scYPlW3gVBsMwISXT9xd5u5skngQ=)
                          2: 2BXalnRCdxlKBucFyUnY3v8NXIE.roa (hash: qbascniAVekJiZabGEHd3VuxY6P4azJ4yMUjYrzFjJo=)
                          3: 4gUeII5uNOSsk7ig0e6KHlG6BHA.roa (hash: xRGa4dvp0FYk/JLyi3pQEJ/XtveeLwqm3x3hfczzGhM=)
                          4: 4oFgbvjivonc75j6oWwkurpCHuo.roa (hash: wfNIhptalUUsPvpgzrp9sVZFBDTSEW8d7lJfHh/ba4k=)
                          5: 4tDEmg6X4NXzztO3trn3LKDLU9Y.crl (hash: CtiuRjpSLQ9ZfbPYuVuInqagnA0AARvE/DiuWLyA8os=)
                          6: 5pnldwPETCzwQT8iJkyiSoWD3_k.roa (hash: oJntOrxxRhN9f3IdHJXmdQbwUKQGLcIDOqq/1tPI4PI=)
                          7: 6uM9geMN5E_JocXQTslv41Eocx8.roa (hash: Dlfx02PXvOyh1z3EkOuN2tEacNYqoH0GaOFD4WRWv7M=)
                          8: FBdxjOu8SX4p5g9e-XxmzyShdHQ.roa (hash: mngc3R66oJgb9rQ/5d73AA7n7b16oOQZDw1SHYqnhTA=)
                          9: HglCnD55qDv-Q0rgVR2_h-nRZkY.roa (hash: Qc4gkZG+SuNlsvP0f5FqX4UkqgAGysqsANOz/SQ42AI=)
                          10: HtZ57OBsmdXhe-F5g-lmzijNxck.roa (hash: P0xwVuTg9ir4CIbwZxsA+9nWaNItfve6TrNuKY2zqxM=)
                          11: PeZtOK6XcrYqlf82Nopp1BFWAXQ.roa (hash: y6xfqENV86+DxwWiv0cIANxmFCLNJHi4fntVAOoYQLI=)
                          12: RlHI2VPMUxz4vWMxsz_aSP7Y58A.roa (hash: o2Eco/oz0OjYhDyp8QR2quUuINLwT9HDpRtnEqaVUfg=)
                          13: SMigdfBEZBCpmCAUQemz1HzXzsY.roa (hash: rYoGdgZTMvC2OSoASCQvWU0g5tSPQxjtZ99HNktE1UI=)
                          14: _DswbRpVkPXQzJnopc-2rpO7ck0.roa (hash: sOdG0gaxCyeQh9EtJRGptli2IEmCGrHJQ/h1DmBq1IQ=)
                          15: dkbWTo4bq_yPPRqYmeLtAion_fk.roa (hash: DMCPEeMn/42xBYmE/TT+llc8dW4AkHYEj+Bu1a5chCg=)
                          16: f8wMF_0nYOjBC4T-3T9maTV9XOg.roa (hash: HH9Xx2RMXttctrpMSPb7lv2kW9EcD2NdHUms9yLQH2E=)
                          17: p_QYv0L6aYK512B3fR5CFvOoznk.roa (hash: aDfS/bDbCsW3S/qJ7SubMpjp1TuE7mqqhF55UFptL5k=)
                          18: sP_P89Gjqv0cRXNUr9_pv6JCftE.roa (hash: V9LKomJ1OLCr/vLBTnJjw6UPEUZRVYDPDN8HoyzesJg=)
                          19: slG7etJhHMxEF_RaKXpH3iT7Jqo.roa (hash: Jw4LSw8veeGAScSQy+xbjepFLappzSdTU9yGBS4At04=)
                          20: wMpCtJuJnMKH9PZbiphThxb5p3I.roa (hash: ho1eRYtOPimdRyr4aEbAZG/GlZlHUFROWz250IKu38c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:e7:84:a2:77:4c:65:f9:c5:07:99:5d:aa:30:a0:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
        Validity
            Not Before: Jun  7 01:00:44 2025 GMT
            Not After : Jun  8 01:00:44 2025 GMT
        Subject: CN=b9f9dc708c0d895e51f8a5c3b8f98eeb18deb120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:34:6c:67:46:d0:9b:cf:18:d3:08:de:3d:1b:
                    25:ae:2b:2c:75:6a:43:7c:33:e8:c9:2a:f6:1d:89:
                    6c:22:13:e1:32:5d:be:90:6f:01:78:58:2b:89:c6:
                    a3:4c:fc:af:b1:3d:7d:b3:0c:29:79:33:fb:64:20:
                    b5:6e:1a:bc:1a:4c:ee:ec:a9:d9:9a:53:18:9e:13:
                    3c:b5:93:73:e7:1b:9a:1a:09:17:1f:82:16:f4:46:
                    a4:5b:d4:e1:36:69:c9:4b:f4:fb:15:d2:1a:e4:40:
                    9e:38:a4:5c:71:98:70:e5:f1:60:91:44:23:ab:8a:
                    35:d7:0f:b8:a3:45:ac:85:60:df:68:ec:e6:b8:2c:
                    c9:50:33:e5:32:de:10:be:da:51:df:2a:45:cc:24:
                    ab:ad:37:07:5f:2f:96:b2:f5:59:b4:80:9c:8a:d0:
                    72:19:6e:33:94:a7:e9:c1:42:c9:d5:dd:c2:47:f8:
                    fa:b4:17:e6:6c:c7:59:62:fd:25:db:46:5b:2c:43:
                    b2:2b:32:91:23:50:1f:66:6e:10:2f:73:c8:4f:ba:
                    bb:f2:ca:b2:26:22:36:ee:42:77:65:09:7b:88:6a:
                    58:f1:d8:cd:11:71:0f:a5:d8:1a:d2:d9:35:a7:11:
                    e8:43:51:c5:38:a0:7d:18:9c:c8:0f:0a:5f:22:f7:
                    eb:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F9:DC:70:8C:0D:89:5E:51:F8:A5:C3:B8:F9:8E:EB:18:DE:B1:20
            X509v3 Authority Key Identifier:
                keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:34:ff:f5:3a:76:23:43:ed:11:c0:39:da:3c:35:06:18:97:
         e0:ab:54:b6:9e:ec:69:84:43:ac:6e:77:e5:c7:1d:b8:a2:b0:
         7f:6c:bc:d8:4d:34:76:d0:ee:b0:8e:69:03:80:f4:a4:02:73:
         bd:d1:fc:8e:1d:9c:11:a5:54:89:1c:75:07:c7:d9:bf:f5:7c:
         a2:f7:92:ef:c0:fb:06:ac:35:80:b0:2a:bf:50:5c:a9:54:70:
         3f:9b:70:a6:62:12:8f:ab:33:8c:49:50:f5:1a:e0:b6:29:e2:
         44:8b:90:9e:02:0a:f9:56:6f:03:ac:4e:86:19:8f:32:aa:70:
         89:ea:ff:ed:19:46:ee:64:e8:29:52:8c:90:e3:f3:a4:c3:03:
         b0:a0:0c:f3:59:a1:76:db:95:02:14:a0:21:2f:0b:78:a6:07:
         91:ff:2c:d8:d2:56:e5:3d:f4:ea:5b:45:e5:fa:87:75:bd:30:
         b7:16:38:58:7d:d4:99:5b:ca:68:98:72:5e:92:81:27:a7:fb:
         86:21:ca:08:d5:50:c3:e9:00:ff:a8:63:d2:f8:00:8a:ef:f4:
         1b:56:e2:35:ff:3c:37:5f:86:d0:fb:50:8f:47:a1:82:b7:b7:
         63:c1:8f:7b:4a:e7:7f:f6:d4:b8:bb:0a:c2:0a:5d:ac:92:3e:
         51:46:9f:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdH54Sid0xl+cUHmV2qMKAcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj
YjUzZDYwHhcNMjUwNjA3MDEwMDQ0WhcNMjUwNjA4MDEwMDQ0WjAzMTEwLwYDVQQD
EyhiOWY5ZGM3MDhjMGQ4OTVlNTFmOGE1YzNiOGY5OGVlYjE4ZGViMTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDRsZ0bQm88Y0wjePRslrissdWpD
fDPoySr2HYlsIhPhMl2+kG8BeFgricajTPyvsT19swwpeTP7ZCC1bhq8Gkzu7KnZ
mlMYnhM8tZNz5xuaGgkXH4IW9EakW9ThNmnJS/T7FdIa5ECeOKRccZhw5fFgkUQj
q4o11w+4o0WshWDfaOzmuCzJUDPlMt4QvtpR3ypFzCSrrTcHXy+WsvVZtICcitBy
GW4zlKfpwULJ1d3CR/j6tBfmbMdZYv0l20ZbLEOyKzKRI1AfZm4QL3PIT7q78sqy
JiI27kJ3ZQl7iGpY8djNEXEPpdga0tk1pxHoQ1HFOKB9GJzIDwpfIvfrPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLn53HCMDYleUfilw7j5jusY3rEgMB8GA1UdIwQY
MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt
NDY5MGEwMDcxNDFmLzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm
LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcDT/9Tp2
I0PtEcA52jw1BhiX4KtUtp7saYRDrG535ccduKKwf2y82E00dtDusI5pA4D0pAJz
vdH8jh2cEaVUiRx1B8fZv/V8oveS78D7Bqw1gLAqv1BcqVRwP5twpmISj6szjElQ
9RrgtiniRIuQngIK+VZvA6xOhhmPMqpwier/7RlG7mToKVKMkOPzpMMDsKAM81mh
dtuVAhSgIS8LeKYHkf8s2NJW5T306ltF5fqHdb0wtxY4WH3UmVvKaJhyXpKBJ6f7
hiHKCNVQw+kA/6hj0vgAiu/0G1biNf88N1+G0PtQj0ehgre3Y8GPe0rnf/bUuLsK
wgpdrJI+UUafgQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 06:06:50 2025 by rpki-client