Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
File:                     5n17NXAHcGQBPaGOKeaQzUyb1xA.mft (raw, json)
Hash identifier:          TFTRS/tgTrQVol6spa/uBkhUGvIwGev+WGQspcjvthk=
Subject key identifier:   D8:7B:A2:6C:25:45:E1:69:3E:0E:7C:A4:FB:D0:54:20:ED:28:0B:03
Authority key identifier: E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10
Certificate issuer:       /CN=e67d7b3570077064013da18e29e690cd4c9bd710
Certificate serial:       019614A1B669FA15CFA38F67A9FF8C6BFB9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
Manifest number:          01C0
Signing time:             Tue 08 Apr 2025 09:01:04 +0000
Manifest this update:     Tue 08 Apr 2025 09:01:04 +0000
Manifest next update:     Wed 09 Apr 2025 09:01:04 +0000
Files and hashes:         1: 5n17NXAHcGQBPaGOKeaQzUyb1xA.crl (hash: Es0Z0/p4cqUiqJIFRBmqXeg7t1fxg3VWZvJC6JsEMHQ=)
                          2: UXfwFJz04X4XmU1ABHkr-Q0ovq0.roa (hash: vTofq9wYPlysSoUgx6HvDr7C9PTa+inohQrNa6Pfbqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 09 Apr 2025 08:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:14:a1:b6:69:fa:15:cf:a3:8f:67:a9:ff:8c:6b:fb:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e67d7b3570077064013da18e29e690cd4c9bd710
        Validity
            Not Before: Apr  8 09:01:04 2025 GMT
            Not After : Apr  9 09:01:04 2025 GMT
        Subject: CN=d87ba26c2545e1693e0e7ca4fbd05420ed280b03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e7:e0:1f:91:19:fa:e5:a2:2a:6f:1b:54:a0:
                    01:cd:ba:a1:fc:a0:60:4d:96:19:fc:ba:61:99:ed:
                    9e:90:bf:73:b4:b8:5a:89:13:00:1a:da:8d:f1:c0:
                    23:d0:0b:03:8e:f2:60:77:d6:15:80:fa:85:81:6c:
                    3a:e6:4e:b7:bb:13:fe:ed:a3:75:0f:33:b3:98:b4:
                    e3:3b:39:09:ee:38:54:e3:2b:39:a9:a0:60:b5:f6:
                    50:31:15:cf:18:46:7b:1f:68:9e:fc:11:5b:e6:38:
                    e7:f1:72:dd:e8:2f:fb:3e:7a:a1:e6:fa:a8:ec:ac:
                    53:7f:7b:b0:b6:1e:36:fc:f5:82:11:48:10:de:14:
                    82:52:02:49:d4:87:34:28:a3:79:05:83:18:ce:37:
                    6f:c5:26:68:e9:34:c6:48:dd:78:08:7f:73:1b:95:
                    90:7d:f8:d8:a3:f3:95:c9:35:bf:d5:ca:89:ed:07:
                    e7:12:a9:03:02:da:e1:1d:9a:d5:80:b2:72:96:bc:
                    f9:b5:44:a3:b1:61:fc:2b:9a:a9:75:93:50:19:37:
                    84:dd:16:fd:c9:d6:67:9a:a4:54:f0:c1:fd:0a:81:
                    65:2d:9b:95:b9:b7:47:ad:a3:73:58:59:b4:71:2c:
                    26:b2:5d:51:08:51:bb:23:af:82:26:83:83:6d:e4:
                    c7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:7B:A2:6C:25:45:E1:69:3E:0E:7C:A4:FB:D0:54:20:ED:28:0B:03
            X509v3 Authority Key Identifier:
                keyid:E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:b5:3a:a7:c5:2c:2d:07:84:53:43:d8:bc:5d:9b:5a:39:75:
         8b:ea:d4:e3:f5:8e:9d:17:25:ca:0c:e7:16:d6:dd:7c:3e:1a:
         25:12:26:b8:73:ad:0a:6b:1e:2f:86:87:58:25:d1:8a:c0:38:
         62:fd:df:b3:7d:10:ec:93:55:4a:9b:d3:08:95:26:5a:c4:1e:
         2a:65:33:e2:2a:33:6c:73:73:d1:a0:04:cf:a7:0c:f3:24:c2:
         85:29:ed:2b:73:a9:e1:19:c9:27:b7:9b:5a:ac:f9:be:b1:ab:
         8c:a6:9c:2e:58:04:b0:54:cf:18:cf:cb:74:eb:54:b0:7c:ce:
         07:b2:c6:53:2a:b8:c1:62:69:9e:6b:45:32:84:7d:86:c3:32:
         70:b9:7e:cb:e4:56:3f:3f:a3:de:fa:fe:01:4f:b4:68:23:9e:
         53:2e:ba:f2:57:c2:89:6b:ec:be:dd:e6:e6:4a:1b:e9:4d:09:
         4e:02:77:e3:71:46:43:cc:1f:43:15:29:71:9c:52:98:a4:af:
         e2:bd:58:58:63:21:1c:92:5c:d4:5e:0f:4e:71:ab:16:95:d6:
         02:cd:05:cb:5f:1b:d9:27:c7:c7:84:fd:cb:6e:f2:e5:91:7d:
         ee:50:0e:01:91:1f:a2:d5:2f:b4:cb:cf:1e:2c:2c:f7:71:bc:
         d2:97:4f:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYUobZp+hXPo49nqf+Ma/ucMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2N2Q3YjM1NzAwNzcwNjQwMTNkYTE4ZTI5ZTY5MGNkNGM5
YmQ3MTAwHhcNMjUwNDA4MDkwMTA0WhcNMjUwNDA5MDkwMTA0WjAzMTEwLwYDVQQD
EyhkODdiYTI2YzI1NDVlMTY5M2UwZTdjYTRmYmQwNTQyMGVkMjgwYjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOfgH5EZ+uWiKm8bVKABzbqh/KBg
TZYZ/Lphme2ekL9ztLhaiRMAGtqN8cAj0AsDjvJgd9YVgPqFgWw65k63uxP+7aN1
DzOzmLTjOzkJ7jhU4ys5qaBgtfZQMRXPGEZ7H2ie/BFb5jjn8XLd6C/7Pnqh5vqo
7KxTf3uwth42/PWCEUgQ3hSCUgJJ1Ic0KKN5BYMYzjdvxSZo6TTGSN14CH9zG5WQ
ffjYo/OVyTW/1cqJ7QfnEqkDAtrhHZrVgLJylrz5tUSjsWH8K5qpdZNQGTeE3Rb9
ydZnmqRU8MH9CoFlLZuVubdHraNzWFm0cSwmsl1RCFG7I6+CJoODbeTHtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNh7omwlReFpPg58pPvQVCDtKAsDMB8GA1UdIwQY
MBaAFOZ9ezVwB3BkAT2hjinmkM1Mm9cQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW4xN05YQUhjR1FCUGFHT0tlYVF6VXliMXhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lYjdlMGMtNTlhMS00ZjkzLThiMjct
YWM0ODgzZTQ3NjY1LzEvNW4xN05YQUhjR1FCUGFHT0tlYVF6VXliMXhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9lYjdlMGMtNTlhMS00ZjkzLThiMjctYWM0ODgzZTQ3NjY1
LzEvNW4xN05YQUhjR1FCUGFHT0tlYVF6VXliMXhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfLU6p8Us
LQeEU0PYvF2bWjl1i+rU4/WOnRclygznFtbdfD4aJRImuHOtCmseL4aHWCXRisA4
Yv3fs30Q7JNVSpvTCJUmWsQeKmUz4iozbHNz0aAEz6cM8yTChSntK3Op4RnJJ7eb
Wqz5vrGrjKacLlgEsFTPGM/LdOtUsHzOB7LGUyq4wWJpnmtFMoR9hsMycLl+y+RW
Pz+j3vr+AU+0aCOeUy668lfCiWvsvt3m5kob6U0JTgJ343FGQ8wfQxUpcZxSmKSv
4r1YWGMhHJJc1F4PTnGrFpXWAs0Fy18b2SfHx4T9y27y5ZF97lAOAZEfotUvtMvP
Hiws93G80pdPig==
-----END CERTIFICATE-----
Generated at Tue Apr 8 11:03:54 2025 by rpki-client