Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft
File:                     RUDapMJFpHJfOAQUAra__e0V6ng.mft (raw, json)
Hash identifier:          RJ6c9cm26Ro/V77pSBKXQ4u9o26rTrgBWewzrssVZX0=
Subject key identifier:   12:EB:86:16:80:AC:A3:4F:56:68:34:C4:C9:91:DD:33:16:FA:C2:65
Authority key identifier: 45:40:DA:A4:C2:45:A4:72:5F:38:04:14:02:B6:BF:FD:ED:15:EA:78
Certificate issuer:       /CN=4540daa4c245a4725f38041402b6bffded15ea78
Certificate serial:       01964AB3FC2EBFB9E124E182A2A178D7554F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RUDapMJFpHJfOAQUAra__e0V6ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft
Manifest number:          1500
Signing time:             Fri 18 Apr 2025 21:00:31 +0000
Manifest this update:     Fri 18 Apr 2025 21:00:31 +0000
Manifest next update:     Sat 19 Apr 2025 21:00:31 +0000
Files and hashes:         1: IzvcnFv9kw0TqyCe74ubve86Q-E.roa (hash: 78DgscXfEbwSYX7qdA0JtGlNdmCzdWY7H1HTizuXeoc=)
                          2: RUDapMJFpHJfOAQUAra__e0V6ng.crl (hash: xOmMMhlUn+FYCycBerh6Mm16GxtSnNdwm7SuIhskWFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RUDapMJFpHJfOAQUAra__e0V6ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 14:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:b3:fc:2e:bf:b9:e1:24:e1:82:a2:a1:78:d7:55:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4540daa4c245a4725f38041402b6bffded15ea78
        Validity
            Not Before: Apr 18 21:00:31 2025 GMT
            Not After : Apr 19 21:00:31 2025 GMT
        Subject: CN=12eb861680aca34f566834c4c991dd3316fac265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:9d:2e:87:50:06:ee:89:e0:d8:d5:a0:ad:20:
                    88:56:3b:ba:67:50:8a:d3:59:87:14:0c:e6:13:88:
                    33:52:13:a9:7b:ff:5e:25:4e:74:db:00:98:e1:81:
                    35:05:36:d3:47:9d:29:29:84:6b:df:7b:f7:0c:e7:
                    a5:b5:67:a0:7a:9a:1e:e9:9b:6c:c2:a2:33:00:10:
                    3a:b4:1d:5f:d6:5e:cc:07:e0:80:8e:6c:f7:6b:c9:
                    bf:60:bd:46:55:ce:92:3b:81:c2:5b:42:6b:e1:59:
                    c8:c3:ea:c5:67:68:52:de:b5:29:57:5a:62:ae:ae:
                    28:8b:7d:83:de:fb:08:e4:59:32:56:2c:fa:5c:f8:
                    1f:b2:2d:2c:7d:ad:2d:15:fc:07:45:97:e5:90:b0:
                    0e:cf:34:fc:ab:da:f5:4a:8b:ed:2e:a3:3b:66:48:
                    83:04:f2:53:a3:52:29:3a:ad:8d:4c:d7:69:4d:b8:
                    f1:c1:26:95:e6:db:d5:c0:e1:84:aa:b7:1d:b8:8e:
                    8f:5f:76:10:99:3c:07:6e:93:cc:fe:16:f7:36:e8:
                    ed:d3:e9:02:56:3f:c0:32:71:3d:e6:55:5e:74:73:
                    5a:7a:67:ef:3b:2b:71:9a:b6:2e:eb:d4:af:85:72:
                    7d:24:c9:31:35:31:4d:1e:3c:52:ff:c0:50:31:80:
                    e4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:EB:86:16:80:AC:A3:4F:56:68:34:C4:C9:91:DD:33:16:FA:C2:65
            X509v3 Authority Key Identifier:
                keyid:45:40:DA:A4:C2:45:A4:72:5F:38:04:14:02:B6:BF:FD:ED:15:EA:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUDapMJFpHJfOAQUAra__e0V6ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:3a:50:c3:d3:ab:1b:2b:08:43:c0:4d:aa:8f:5e:f6:db:97:
         5e:c0:23:49:2a:65:be:e1:11:62:ae:c8:0a:27:18:08:92:3c:
         38:50:e5:63:e0:54:a2:6e:bc:04:7a:93:ac:dd:52:dc:55:a4:
         40:04:3f:53:26:4e:36:d8:67:1c:2b:87:2c:75:83:10:df:10:
         1e:2d:77:cc:6e:51:05:0c:2a:4e:27:6f:a2:40:1c:ab:86:05:
         82:b8:4b:49:97:db:dd:3b:6c:0a:f5:0f:48:83:4e:26:76:47:
         7f:55:27:2f:f5:96:11:2f:14:bb:f6:ce:a5:b8:d6:7c:7c:34:
         04:49:60:e8:ef:77:2a:16:c5:37:25:99:a6:f0:8d:23:86:09:
         0b:03:1b:ae:be:90:64:5e:0b:0f:33:f4:95:d8:48:94:73:c1:
         31:99:16:c5:85:5b:d8:6a:c3:59:bd:f2:40:54:c8:be:11:09:
         f5:0d:0c:c2:f3:9c:47:4b:d0:76:da:a6:e8:a5:a0:bc:a4:3a:
         33:ff:fe:0d:8d:3c:cd:02:95:40:23:38:17:21:0c:6b:10:ac:
         6e:6c:1e:d1:1b:f6:63:4a:39:1e:fd:2f:ca:11:93:30:a6:db:
         a8:01:66:1e:5a:5e:54:73:0f:3f:de:6d:9f:06:02:b4:49:18:
         9f:d3:49:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZKs/wuv7nhJOGCoqF411VPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1NDBkYWE0YzI0NWE0NzI1ZjM4MDQxNDAyYjZiZmZkZWQx
NWVhNzgwHhcNMjUwNDE4MjEwMDMxWhcNMjUwNDE5MjEwMDMxWjAzMTEwLwYDVQQD
EygxMmViODYxNjgwYWNhMzRmNTY2ODM0YzRjOTkxZGQzMzE2ZmFjMjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA650uh1AG7ong2NWgrSCIVju6Z1CK
01mHFAzmE4gzUhOpe/9eJU502wCY4YE1BTbTR50pKYRr33v3DOeltWegepoe6Zts
wqIzABA6tB1f1l7MB+CAjmz3a8m/YL1GVc6SO4HCW0Jr4VnIw+rFZ2hS3rUpV1pi
rq4oi32D3vsI5FkyViz6XPgfsi0sfa0tFfwHRZflkLAOzzT8q9r1SovtLqM7ZkiD
BPJTo1IpOq2NTNdpTbjxwSaV5tvVwOGEqrcduI6PX3YQmTwHbpPM/hb3Nujt0+kC
Vj/AMnE95lVedHNaemfvOytxmrYu69SvhXJ9JMkxNTFNHjxS/8BQMYDkIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLrhhaArKNPVmg0xMmR3TMW+sJlMB8GA1UdIwQY
MBaAFEVA2qTCRaRyXzgEFAK2v/3tFep4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlVEYXBNSkZwSEpmT0FRVUFyYV9fZTBWNm5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9jMGJhNmYtZGY2Zi00MTQ4LThmY2Et
ZDI1YWFhODA0MTQ1LzEvUlVEYXBNSkZwSEpmT0FRVUFyYV9fZTBWNm5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9jMGJhNmYtZGY2Zi00MTQ4LThmY2EtZDI1YWFhODA0MTQ1
LzEvUlVEYXBNSkZwSEpmT0FRVUFyYV9fZTBWNm5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVzpQw9Or
GysIQ8BNqo9e9tuXXsAjSSplvuERYq7ICicYCJI8OFDlY+BUom68BHqTrN1S3FWk
QAQ/UyZONthnHCuHLHWDEN8QHi13zG5RBQwqTidvokAcq4YFgrhLSZfb3TtsCvUP
SINOJnZHf1UnL/WWES8Uu/bOpbjWfHw0BElg6O93KhbFNyWZpvCNI4YJCwMbrr6Q
ZF4LDzP0ldhIlHPBMZkWxYVb2GrDWb3yQFTIvhEJ9Q0MwvOcR0vQdtqm6KWgvKQ6
M//+DY08zQKVQCM4FyEMaxCsbmwe0Rv2Y0o5Hv0vyhGTMKbbqAFmHlpeVHMPP95t
nwYCtEkYn9NJUg==
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:59:29 2025 by rpki-client