Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
File:                     i992xUueaTXDCptMm6kwmsRw7AI.mft (raw, json)
Hash identifier:          R5Kz2u5ci87DzX02k06PqGcNgYN+I9LouOzUCEdFyI8=
Subject key identifier:   43:21:DA:49:69:94:6E:82:D8:42:4D:B9:21:3F:26:0D:D9:E6:48:A9
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Certificate issuer:       /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial:       019742F7E944BC24F8E89BADC5CAD7FE1A28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
Manifest number:          129F
Signing time:             Fri 06 Jun 2025 02:00:32 +0000
Manifest this update:     Fri 06 Jun 2025 02:00:32 +0000
Manifest next update:     Sat 07 Jun 2025 02:00:32 +0000
Files and hashes:         1: LJ7hoCqQnwfHChqeU9U8SkKdeqI.roa (hash: 8CqH09siYzyZJ5O1vmsPNnnOW14dzrYfcCdsDYcxu10=)
                          2: VmLWF2kLf7eTv8bwMXbk9b_Me2E.roa (hash: 1ItZnIffXoYbRBfY7mSWO6cvW2p6OOPwlCKSIhvogDA=)
                          3: Zrtik5m7bnw4gbxdEJLGgHXAz9o.roa (hash: ztZ7RR7wyKUwf1RAErkEUuWfC4cJblHm2hjCh/OBgRU=)
                          4: hWi--eNkI9TK8tV0GdIuvuJQyDc.roa (hash: h6dcszo7jHVlG8sKlZpn1qh++xSjCv//ZGRVVxrrlrM=)
                          5: i992xUueaTXDCptMm6kwmsRw7AI.crl (hash: hTk6FvwNp/5GS8UgiAVXzXENiN52KJO5FV1lAKN895o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 02:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:42:f7:e9:44:bc:24:f8:e8:9b:ad:c5:ca:d7:fe:1a:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
        Validity
            Not Before: Jun  6 02:00:32 2025 GMT
            Not After : Jun  7 02:00:32 2025 GMT
        Subject: CN=4321da4969946e82d8424db9213f260dd9e648a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:29:c5:3c:02:34:3b:14:8a:7b:49:e8:41:c8:
                    97:2b:23:8e:b7:d0:e1:b2:42:a1:20:46:6e:f9:e5:
                    0f:16:92:54:a1:27:62:0d:30:0b:ed:0a:bb:e9:58:
                    1a:82:d1:09:5c:6c:69:44:37:ac:2d:7c:02:5c:7f:
                    0e:7d:cb:b2:93:3f:70:78:12:71:21:50:3c:1a:56:
                    fd:ae:bd:7a:76:70:d7:42:05:9d:40:ba:66:18:48:
                    27:df:0d:87:5c:cc:3c:94:f6:52:86:e4:28:3c:71:
                    48:08:1b:37:56:44:36:36:5a:3a:ce:28:0b:1d:37:
                    42:e2:5c:99:47:53:54:7b:35:11:b0:c1:c9:40:96:
                    3c:c2:14:aa:3a:5a:33:e2:39:ce:6a:fd:c4:b1:ab:
                    c9:1f:c6:22:32:81:6e:32:a9:85:ad:c3:56:a0:65:
                    11:0e:9c:5e:29:b8:c3:3a:84:4b:7c:61:53:76:4e:
                    54:a1:d1:3d:b6:2b:ce:72:15:bb:94:7d:bb:15:78:
                    e8:66:66:d5:88:48:6a:91:57:69:30:c8:cb:07:91:
                    b5:23:11:03:5f:ef:36:aa:9c:63:79:4a:6f:16:a2:
                    35:f1:62:88:11:cf:c7:28:c3:6e:07:90:52:b5:74:
                    9f:a4:0c:0e:b9:e5:dc:3d:60:6e:28:73:47:90:09:
                    2a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:21:DA:49:69:94:6E:82:D8:42:4D:B9:21:3F:26:0D:D9:E6:48:A9
            X509v3 Authority Key Identifier:
                keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:db:f3:c8:d7:2e:99:18:79:c6:38:a9:66:27:4f:dc:9d:3e:
         0b:04:89:55:59:ce:2d:72:13:12:79:4f:57:7d:6e:ef:21:ec:
         98:fa:ed:50:ba:c0:e0:0e:cc:20:21:6e:ee:d5:6c:21:f9:b4:
         19:88:ac:44:4a:96:59:98:eb:a4:8c:05:11:8a:07:a9:a8:0e:
         59:7a:fe:5d:28:75:5a:b0:4c:1c:72:07:3f:4b:1e:06:54:94:
         96:dc:aa:ba:79:db:f6:7e:25:42:7e:b9:45:76:73:3f:d4:e7:
         2c:2d:ab:9e:52:41:53:77:3c:f1:2a:4a:6a:f9:9f:4e:b8:7b:
         21:63:28:37:fa:aa:ad:b7:87:c9:85:6d:93:03:2b:f2:26:80:
         74:5b:c1:3c:21:93:45:6c:0e:44:f4:89:d1:ff:57:fe:be:95:
         89:e8:b0:e5:7a:e0:11:d8:10:00:bd:69:a1:84:87:cb:d9:7b:
         2f:eb:49:05:da:3f:fa:76:d4:a2:bd:f3:ea:4b:36:96:a7:19:
         f7:17:a9:fd:50:8a:6a:29:ca:35:3f:f6:5b:cb:c1:77:ac:08:
         c7:5c:43:74:20:dd:0e:df:22:17:f2:a4:2c:b3:5d:af:c1:a6:
         70:5b:bc:6e:5f:11:80:04:b2:45:7d:6d:f5:a2:6d:d3:bd:e6:
         29:fc:04:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdC9+lEvCT46JutxcrX/hooMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZGY3NmM1NGI5ZTY5MzVjMzBhOWI0YzliYTkzMDlhYzQ3
MGVjMDIwHhcNMjUwNjA2MDIwMDMyWhcNMjUwNjA3MDIwMDMyWjAzMTEwLwYDVQQD
Eyg0MzIxZGE0OTY5OTQ2ZTgyZDg0MjRkYjkyMTNmMjYwZGQ5ZTY0OGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ynFPAI0OxSKe0noQciXKyOOt9Dh
skKhIEZu+eUPFpJUoSdiDTAL7Qq76VgagtEJXGxpRDesLXwCXH8Ofcuykz9weBJx
IVA8Glb9rr16dnDXQgWdQLpmGEgn3w2HXMw8lPZShuQoPHFICBs3VkQ2Nlo6zigL
HTdC4lyZR1NUezURsMHJQJY8whSqOloz4jnOav3EsavJH8YiMoFuMqmFrcNWoGUR
DpxeKbjDOoRLfGFTdk5UodE9tivOchW7lH27FXjoZmbViEhqkVdpMMjLB5G1IxED
X+82qpxjeUpvFqI18WKIEc/HKMNuB5BStXSfpAwOueXcPWBuKHNHkAkqrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMh2klplG6C2EJNuSE/Jg3Z5kipMB8GA1UdIwQY
MBaAFIvfdsVLnmk1wwqbTJupMJrEcOwCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTk5MnhVdWVhVFhEQ3B0TW02a3dtc1J3N0FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8yMTUxOWUtYjhkYy00MjQwLWFhNzgt
OGQyMTg2NjUwMjdkLzEvaTk5MnhVdWVhVFhEQ3B0TW02a3dtc1J3N0FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8yMTUxOWUtYjhkYy00MjQwLWFhNzgtOGQyMTg2NjUwMjdk
LzEvaTk5MnhVdWVhVFhEQ3B0TW02a3dtc1J3N0FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEtvzyNcu
mRh5xjipZidP3J0+CwSJVVnOLXITEnlPV31u7yHsmPrtULrA4A7MICFu7tVsIfm0
GYisREqWWZjrpIwFEYoHqagOWXr+XSh1WrBMHHIHP0seBlSUltyqunnb9n4lQn65
RXZzP9TnLC2rnlJBU3c88SpKavmfTrh7IWMoN/qqrbeHyYVtkwMr8iaAdFvBPCGT
RWwORPSJ0f9X/r6Vieiw5XrgEdgQAL1poYSHy9l7L+tJBdo/+nbUor3z6ks2lqcZ
9xep/VCKainKNT/2W8vBd6wIx1xDdCDdDt8iF/KkLLNdr8GmcFu8bl8RgASyRX1t
9aJt073mKfwEJA==
-----END CERTIFICATE-----
Generated at Fri Jun 6 12:04:42 2025 by rpki-client