Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
File:                     tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft (raw, json)
Hash identifier:          eiRrn0kWj9+NQZw9dSl6Q/I2hVtDe+2pFAAcbsf0R7M=
Subject key identifier:   44:77:2E:9C:4A:13:5F:4E:1A:3B:5D:0A:6F:F7:63:06:A3:96:6C:3B
Authority key identifier: B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
Certificate issuer:       /CN=b478410224904494e9c0f7d35650a260e5fb6193
Certificate serial:       01974742FBE1F0324C9E1726C4C79DDC8BA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
Manifest number:          157C
Signing time:             Fri 06 Jun 2025 22:01:01 +0000
Manifest this update:     Fri 06 Jun 2025 22:01:01 +0000
Manifest next update:     Sat 07 Jun 2025 22:01:01 +0000
Files and hashes:         1: tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl (hash: AnBYB/8i58xz4ELPQFNabKf+A+2CFfobtzD+hGsA1UQ=)
                          2: uhCkTjed1Otbl84zKJAXa3t70aA.roa (hash: cZYpuZx9ZnpX3epsbIvoPloPaPVgbUbl6mh5Fr2F3pw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:42:fb:e1:f0:32:4c:9e:17:26:c4:c7:9d:dc:8b:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b478410224904494e9c0f7d35650a260e5fb6193
        Validity
            Not Before: Jun  6 22:01:01 2025 GMT
            Not After : Jun  7 22:01:01 2025 GMT
        Subject: CN=44772e9c4a135f4e1a3b5d0a6ff76306a3966c3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:39:df:ce:d5:01:a5:72:66:98:f3:7d:ef:5b:
                    52:af:64:dd:28:a2:0f:9b:a5:6c:3e:da:2f:e7:c6:
                    73:1c:22:4f:10:79:b2:50:72:64:31:9d:df:11:72:
                    cb:e1:72:d9:4b:aa:30:c1:c4:2a:55:05:a4:33:09:
                    5c:6d:e4:f4:91:8f:19:c9:83:99:5e:34:39:11:fa:
                    5a:99:ef:89:ee:f2:fc:db:23:03:8c:f0:cf:fb:00:
                    cd:35:85:79:18:5f:ed:cc:86:d0:ac:aa:54:bf:99:
                    26:22:36:33:0b:8c:3b:e0:57:04:67:1c:2f:8f:f2:
                    ec:4a:34:ad:d1:a5:c4:52:de:41:60:69:39:86:67:
                    2b:dc:f1:ca:7d:33:3b:77:67:b4:07:27:34:2b:b6:
                    f7:f8:17:05:b3:33:89:31:7a:76:c4:eb:e5:67:91:
                    03:ac:c2:47:f1:c0:49:71:c4:b4:44:29:d9:b9:6d:
                    9b:ee:61:f9:24:3d:da:ba:64:82:7a:89:2d:6e:40:
                    f9:4b:aa:73:c0:97:25:5e:c9:5e:df:e5:41:c4:03:
                    ec:7c:3d:3d:6b:b6:43:42:11:12:c8:23:4d:62:1c:
                    c5:53:fb:47:60:18:d2:78:2e:2b:f8:6c:31:ef:4b:
                    e2:38:90:ff:65:80:26:73:20:79:2b:00:7a:e9:59:
                    01:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:77:2E:9C:4A:13:5F:4E:1A:3B:5D:0A:6F:F7:63:06:A3:96:6C:3B
            X509v3 Authority Key Identifier:
                keyid:B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:79:61:9d:fa:ad:6a:8f:84:d1:53:06:47:30:b8:0b:d8:60:
         e6:e9:81:74:12:06:49:59:1b:db:30:b5:3e:a0:bc:dc:92:22:
         fd:b2:1d:c4:17:dc:4a:5d:2f:19:0f:66:d0:74:ec:6e:ef:33:
         c4:a1:9d:cc:5a:fd:d9:35:22:c6:99:15:33:4e:97:1d:b3:61:
         ab:9d:41:3d:dd:56:25:db:0c:0f:9d:77:6f:6e:67:2b:65:ba:
         5a:a1:16:9e:9d:c9:e3:c6:ab:d5:23:bf:aa:b6:ec:f8:be:66:
         be:7e:0b:e2:6e:45:22:75:7e:63:12:44:9f:30:be:2d:af:52:
         2b:6d:da:6a:d6:a6:c1:c5:e5:9a:3b:33:c0:9d:d6:09:2c:1f:
         ae:f2:8a:d0:35:cd:05:82:ec:d3:79:71:36:f6:b8:4b:a4:09:
         5f:a5:17:bf:0b:35:2c:55:48:97:3f:0e:d6:9d:cb:34:8b:b9:
         0b:f1:c4:08:e8:1a:cb:99:37:14:78:27:ee:94:41:ba:ab:d4:
         a1:f6:89:56:63:45:c4:03:76:e5:3e:28:aa:c5:9d:75:38:54:
         9f:33:8a:78:5e:5e:17:b6:8b:57:f1:86:bf:04:e1:02:a6:7c:
         b2:fb:7e:a1:40:2d:c7:89:3e:d7:47:0f:5e:50:ee:b6:69:11:
         7e:5d:7a:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHQvvh8DJMnhcmxMed3IupMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Nzg0MTAyMjQ5MDQ0OTRlOWMwZjdkMzU2NTBhMjYwZTVm
YjYxOTMwHhcNMjUwNjA2MjIwMTAxWhcNMjUwNjA3MjIwMTAxWjAzMTEwLwYDVQQD
Eyg0NDc3MmU5YzRhMTM1ZjRlMWEzYjVkMGE2ZmY3NjMwNmEzOTY2YzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jnfztUBpXJmmPN971tSr2TdKKIP
m6VsPtov58ZzHCJPEHmyUHJkMZ3fEXLL4XLZS6owwcQqVQWkMwlcbeT0kY8ZyYOZ
XjQ5Efpame+J7vL82yMDjPDP+wDNNYV5GF/tzIbQrKpUv5kmIjYzC4w74FcEZxwv
j/LsSjSt0aXEUt5BYGk5hmcr3PHKfTM7d2e0Byc0K7b3+BcFszOJMXp2xOvlZ5ED
rMJH8cBJccS0RCnZuW2b7mH5JD3aumSCeoktbkD5S6pzwJclXsle3+VBxAPsfD09
a7ZDQhESyCNNYhzFU/tHYBjSeC4r+Gwx70viOJD/ZYAmcyB5KwB66VkByQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFER3LpxKE19OGjtdCm/3Ywajlmw7MB8GA1UdIwQY
MBaAFLR4QQIkkESU6cD301ZQomDl+2GTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEhoQkFpU1FSSlRwd1BmVFZsQ2lZT1g3WVpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81Y2ZiZjMtZTc4Mi00MDEzLThlZWUt
ZGU3ZDNiYmZlZTg4LzEvdEhoQkFpU1FSSlRwd1BmVFZsQ2lZT1g3WVpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81Y2ZiZjMtZTc4Mi00MDEzLThlZWUtZGU3ZDNiYmZlZTg4
LzEvdEhoQkFpU1FSSlRwd1BmVFZsQ2lZT1g3WVpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF3lhnfqt
ao+E0VMGRzC4C9hg5umBdBIGSVkb2zC1PqC83JIi/bIdxBfcSl0vGQ9m0HTsbu8z
xKGdzFr92TUixpkVM06XHbNhq51BPd1WJdsMD513b25nK2W6WqEWnp3J48ar1SO/
qrbs+L5mvn4L4m5FInV+YxJEnzC+La9SK23aatamwcXlmjszwJ3WCSwfrvKK0DXN
BYLs03lxNva4S6QJX6UXvws1LFVIlz8O1p3LNIu5C/HECOgay5k3FHgn7pRBuqvU
ofaJVmNFxAN25T4oqsWddThUnzOKeF5eF7aLV/GGvwThAqZ8svt+oUAtx4k+10cP
XlDutmkRfl16VA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:23:42 2025 by rpki-client