Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft
File:                     1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft (raw, json)
Hash identifier:          XK7RIft7bVb7tPM4S/5BZqP1r0dxJ3cS9Cz6nlQ3FbU=
Subject key identifier:   1C:D2:23:96:71:C4:A9:0C:72:66:D0:38:E3:E2:F8:CE:CE:2D:44:DD
Authority key identifier: F9:95:1B:A5:63:29:32:3B:4C:60:F6:20:D6:A7:39:1E:70:7B:55:56
Certificate issuer:       /CN=f9951ba56329323b4c60f620d6a7391e707b5556
Certificate serial:       01964EFEC4B1BF9A2A7DD46E93C58FBFA077
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft
Manifest number:          0D1B
Signing time:             Sat 19 Apr 2025 17:00:41 +0000
Manifest this update:     Sat 19 Apr 2025 17:00:41 +0000
Manifest next update:     Sun 20 Apr 2025 17:00:41 +0000
Files and hashes:         1: 1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl (hash: DSbgttmDNBiI5amUasxnxCevLFzAzwq+EmDCBTexYDU=)
                          2: 4gz_E19lt_WQtnrzaUTS2wLE9kU.roa (hash: EPYfgGTHeJ3gz/LYRQ9uBlJ8BFrAwAfRiJVJRAOGoZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4e:fe:c4:b1:bf:9a:2a:7d:d4:6e:93:c5:8f:bf:a0:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9951ba56329323b4c60f620d6a7391e707b5556
        Validity
            Not Before: Apr 19 17:00:41 2025 GMT
            Not After : Apr 20 17:00:41 2025 GMT
        Subject: CN=1cd2239671c4a90c7266d038e3e2f8cece2d44dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e3:bf:54:6a:3b:cd:ee:a8:c0:c6:33:24:02:
                    36:52:6e:cb:94:4d:dc:f0:4d:4f:b6:ca:31:44:bb:
                    c9:e8:0f:8a:20:b9:9b:c1:f8:23:08:29:34:09:a7:
                    a3:a5:ad:40:13:e5:50:b5:7d:16:12:42:c2:96:7c:
                    30:35:23:1d:2d:42:ce:6f:ae:d6:08:30:1b:00:26:
                    29:d5:8f:09:d8:71:97:08:2c:27:66:bd:17:d1:5a:
                    bb:62:25:d9:3b:55:88:6c:b2:b8:ff:05:dc:7e:32:
                    28:f4:14:92:e5:e4:63:b8:9e:04:ff:c4:a2:1e:91:
                    de:9b:3a:66:fd:2a:42:ab:11:64:a9:65:55:2e:98:
                    a6:bd:34:07:0d:62:33:eb:8d:6a:55:aa:9d:63:99:
                    ae:99:6b:d5:c4:8a:b3:90:cd:bd:4e:78:a8:d9:3e:
                    78:9f:69:9c:6f:df:43:83:35:6c:bf:96:53:d9:ce:
                    7d:de:a7:e3:61:72:9c:31:8d:f7:55:04:14:d2:bf:
                    ba:7e:6c:13:98:2d:95:1e:38:4c:52:8e:55:4b:4a:
                    ad:76:8f:9f:ee:86:78:d5:bb:55:e8:93:f4:43:a9:
                    08:b0:b4:b3:26:ab:9b:f9:62:5f:e9:27:9a:fd:92:
                    f5:5b:50:9e:ad:ef:d0:d0:87:87:9b:1e:ab:1b:83:
                    67:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D2:23:96:71:C4:A9:0C:72:66:D0:38:E3:E2:F8:CE:CE:2D:44:DD
            X509v3 Authority Key Identifier:
                keyid:F9:95:1B:A5:63:29:32:3B:4C:60:F6:20:D6:A7:39:1E:70:7B:55:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:2a:1c:8b:44:66:90:26:04:d7:cc:4f:49:7e:72:98:84:28:
         24:d0:38:8c:bd:14:6b:c0:8a:a3:c1:79:27:74:5c:7a:2f:f9:
         bd:58:59:5f:a8:da:f2:3c:e6:d5:fe:4e:14:56:d4:1b:0a:b4:
         8f:bf:a6:cb:3f:b0:60:af:bb:1d:57:a1:36:b1:b4:05:7d:0d:
         30:a8:5c:ae:ff:15:9e:ce:6a:e2:1d:95:d3:69:a1:fd:dd:a0:
         36:e5:bf:08:93:09:1e:29:b2:8c:0b:8f:ce:d1:3d:ed:2e:a6:
         2c:37:95:58:0a:51:d0:59:10:1b:bd:81:ec:93:de:a8:a2:93:
         c7:d5:14:0c:18:ca:73:81:ea:98:4f:aa:9a:d9:04:9b:3a:39:
         88:b3:bd:a0:15:b8:cc:b6:2b:d1:58:45:7f:df:44:f1:d7:c2:
         6e:3e:26:82:bb:c9:b4:db:9c:bc:5f:eb:b6:fb:60:4b:9b:b2:
         24:14:7b:0a:de:42:4f:33:d6:e3:d3:98:26:0e:32:10:ab:d2:
         13:3f:e4:75:27:7e:6f:b0:b3:a3:83:82:f4:00:16:ab:c1:30:
         35:98:33:8e:96:ea:5c:67:62:3f:e9:a7:66:7b:7f:c2:70:56:
         49:81:27:34:86:00:0e:7b:0f:bd:0c:55:c1:d0:0f:d3:0b:58:
         e1:39:30:55
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZZO/sSxv5oqfdRuk8WPv6B3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5OTUxYmE1NjMyOTMyM2I0YzYwZjYyMGQ2YTczOTFlNzA3
YjU1NTYwHhcNMjUwNDE5MTcwMDQxWhcNMjUwNDIwMTcwMDQxWjAzMTEwLwYDVQQD
EygxY2QyMjM5NjcxYzRhOTBjNzI2NmQwMzhlM2UyZjhjZWNlMmQ0NGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+O/VGo7ze6owMYzJAI2Um7LlE3c
8E1PtsoxRLvJ6A+KILmbwfgjCCk0Caejpa1AE+VQtX0WEkLClnwwNSMdLULOb67W
CDAbACYp1Y8J2HGXCCwnZr0X0Vq7YiXZO1WIbLK4/wXcfjIo9BSS5eRjuJ4E/8Si
HpHemzpm/SpCqxFkqWVVLpimvTQHDWIz641qVaqdY5mumWvVxIqzkM29Tnio2T54
n2mcb99DgzVsv5ZT2c593qfjYXKcMY33VQQU0r+6fmwTmC2VHjhMUo5VS0qtdo+f
7oZ41btV6JP0Q6kIsLSzJqub+WJf6Sea/ZL1W1Cere/Q0IeHmx6rG4NnxwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBzSI5ZxxKkMcmbQOOPi+M7OLUTdMB8GA1UdIwQY
MBaAFPmVG6VjKTI7TGD2INanOR5we1VWMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1aVWJwV01wTWp0TVlQWWcxcWM1SG5CN1ZWWS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvOGY1Y2JkLWY1MzktNGZmZi1iNDJm
LTQ3NDVkN2NkOTNmMS8xLzEtWlVicFdNcE1qdE1ZUFlnMXFjNUhuQjdWVlkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2VkLzhmNWNiZC1mNTM5LTRmZmYtYjQyZi00NzQ1ZDdjZDkz
ZjEvMS8xLVpVYnBXTXBNanRNWVBZZzFxYzVIbkI3VlZZLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfyoc
i0RmkCYE18xPSX5ymIQoJNA4jL0Ua8CKo8F5J3Rcei/5vVhZX6ja8jzm1f5OFFbU
Gwq0j7+myz+wYK+7HVehNrG0BX0NMKhcrv8Vns5q4h2V02mh/d2gNuW/CJMJHimy
jAuPztE97S6mLDeVWApR0FkQG72B7JPeqKKTx9UUDBjKc4HqmE+qmtkEmzo5iLO9
oBW4zLYr0VhFf99E8dfCbj4mgrvJtNucvF/rtvtgS5uyJBR7Ct5CTzPW49OYJg4y
EKvSEz/kdSd+b7Czo4OC9AAWq8EwNZgzjpbqXGdiP+mnZnt/wnBWSYEnNIYADnsP
vQxVwdAP0wtY4TkwVQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:13:44 2025 by rpki-client