Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
File:                     34CJqp4dXBKrrUOnAVEdocZfn6Y.mft (raw, json)
Hash identifier:          FdiHEE65D+R/l+bmDd79KYF7WGqW9laNuYpl3onlguA=
Subject key identifier:   5B:49:BD:20:86:7A:01:6F:B2:93:8C:11:05:46:77:4A:B6:EC:05:B8
Authority key identifier: DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6
Certificate issuer:       /CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6
Certificate serial:       0196B85A6698D11ECC639585E765E4F2264D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
Manifest number:          0E3F
Signing time:             Sat 10 May 2025 04:00:54 +0000
Manifest this update:     Sat 10 May 2025 04:00:54 +0000
Manifest next update:     Sun 11 May 2025 04:00:54 +0000
Files and hashes:         1: 34CJqp4dXBKrrUOnAVEdocZfn6Y.crl (hash: w9Yuf1U7xbe98z7fdCGdwGZwhCazhZMQKE7l49TfB68=)
                          2: b-VOh1iyKHVcDysv8XYced0xnLo.roa (hash: 0b/hMsK4rsISxKd+Kzt0DOFihl9RrwFHAkmEpylmN4I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:5a:66:98:d1:1e:cc:63:95:85:e7:65:e4:f2:26:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6
        Validity
            Not Before: May 10 04:00:54 2025 GMT
            Not After : May 11 04:00:54 2025 GMT
        Subject: CN=5b49bd20867a016fb2938c110546774ab6ec05b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c9:8e:c5:88:1d:53:0a:da:cd:0a:1b:b5:64:
                    1c:04:ee:5f:5c:a7:6f:37:88:43:1f:c7:d9:cf:f4:
                    47:2e:1f:7b:f1:f3:40:6e:98:df:cb:7e:23:ef:5a:
                    42:ee:28:d9:8d:19:e7:fd:bf:48:67:d4:73:42:4d:
                    ee:76:7d:59:52:43:27:be:cd:d9:d8:31:b2:59:6a:
                    8e:eb:eb:2b:d3:b6:d0:87:27:10:93:cd:8d:0f:80:
                    d8:f4:24:78:95:9e:7c:84:c9:9c:dc:f7:2e:50:d4:
                    b7:9b:b0:69:43:7d:26:67:64:f9:78:36:72:ea:f6:
                    9e:73:41:1f:ac:df:fc:b7:3e:7b:bc:f0:89:93:95:
                    7a:32:ef:3c:c7:7e:93:29:53:44:59:2a:88:b3:39:
                    05:9a:69:a0:c2:d7:91:82:b4:e7:4d:f4:88:47:c3:
                    b9:d6:e8:03:67:9b:9b:22:07:50:12:80:8f:87:ed:
                    9a:8c:ef:d4:63:b5:27:84:d7:0a:fc:90:84:f5:c5:
                    59:d0:ca:ac:0a:80:eb:27:95:1a:df:91:02:46:d2:
                    13:d0:40:73:c5:bf:9e:58:53:f9:32:44:0e:49:18:
                    dd:38:93:fc:e8:b6:85:10:d1:a9:84:20:f7:78:94:
                    95:93:e0:c1:e5:9b:73:dd:60:a4:61:05:f9:df:55:
                    a1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:49:BD:20:86:7A:01:6F:B2:93:8C:11:05:46:77:4A:B6:EC:05:B8
            X509v3 Authority Key Identifier:
                keyid:DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:6f:e1:40:3c:75:aa:fa:0d:6c:4d:8a:54:29:32:8a:e0:80:
         9e:5b:fa:61:0c:87:2e:e4:3d:2c:87:31:e1:e1:93:41:45:21:
         a9:7c:2b:30:83:ed:44:ef:86:ee:83:75:fd:a1:33:ac:b3:03:
         bf:b8:d8:3a:ae:9d:12:9b:6f:4e:76:90:10:10:77:11:e6:1e:
         b2:0f:19:16:39:ed:94:1a:41:3e:3d:41:ad:42:36:1c:55:35:
         15:56:38:eb:58:e3:bf:be:f2:4a:e7:e5:50:69:77:bc:df:08:
         7a:66:0c:f0:81:ad:f6:a2:72:70:40:37:5a:81:17:ef:0d:cc:
         be:ba:db:d8:4b:6a:a8:14:e9:b4:7a:05:0f:fd:1f:65:9d:a1:
         c0:69:a8:9b:14:bd:3e:25:04:35:9b:b5:31:4e:9c:18:c9:26:
         b9:59:db:ff:8b:7e:98:8a:17:f3:1a:fb:34:17:cf:82:26:50:
         8a:99:2f:b2:19:41:24:74:d7:a1:a0:7e:49:ce:7c:7c:5c:c1:
         8f:1a:bd:73:a1:f1:1a:97:90:bf:da:2d:93:52:70:e0:12:3d:
         5d:fe:ad:67:00:73:fd:72:4a:5e:3c:5e:40:a4:ce:e4:f3:89:
         55:42:8e:6e:50:2e:68:dd:63:5f:d3:53:c2:27:ae:32:8d:60:
         fb:1c:ab:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4WmaY0R7MY5WF52Xk8iZNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmODA4OWFhOWUxZDVjMTJhYmFkNDNhNzAxNTExZGExYzY1
ZjlmYTYwHhcNMjUwNTEwMDQwMDU0WhcNMjUwNTExMDQwMDU0WjAzMTEwLwYDVQQD
Eyg1YjQ5YmQyMDg2N2EwMTZmYjI5MzhjMTEwNTQ2Nzc0YWI2ZWMwNWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8mOxYgdUwrazQobtWQcBO5fXKdv
N4hDH8fZz/RHLh978fNAbpjfy34j71pC7ijZjRnn/b9IZ9RzQk3udn1ZUkMnvs3Z
2DGyWWqO6+sr07bQhycQk82ND4DY9CR4lZ58hMmc3PcuUNS3m7BpQ30mZ2T5eDZy
6vaec0EfrN/8tz57vPCJk5V6Mu88x36TKVNEWSqIszkFmmmgwteRgrTnTfSIR8O5
1ugDZ5ubIgdQEoCPh+2ajO/UY7UnhNcK/JCE9cVZ0MqsCoDrJ5Ua35ECRtIT0EBz
xb+eWFP5MkQOSRjdOJP86LaFENGphCD3eJSVk+DB5Ztz3WCkYQX531Wh6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtJvSCGegFvspOMEQVGd0q27AW4MB8GA1UdIwQY
MBaAFN+AiaqeHVwSq61DpwFRHaHGX5+mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzRDSnFwNGRYQktyclVPbkFWRWRvY1pmbjZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mNTQ3NWItYTZmOS00Y2M3LWI3MGYt
ZmQ2NDQ2NTdjYTJiLzEvMzRDSnFwNGRYQktyclVPbkFWRWRvY1pmbjZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9mNTQ3NWItYTZmOS00Y2M3LWI3MGYtZmQ2NDQ2NTdjYTJi
LzEvMzRDSnFwNGRYQktyclVPbkFWRWRvY1pmbjZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ2/hQDx1
qvoNbE2KVCkyiuCAnlv6YQyHLuQ9LIcx4eGTQUUhqXwrMIPtRO+G7oN1/aEzrLMD
v7jYOq6dEptvTnaQEBB3EeYesg8ZFjntlBpBPj1BrUI2HFU1FVY461jjv77ySufl
UGl3vN8IemYM8IGt9qJycEA3WoEX7w3Mvrrb2EtqqBTptHoFD/0fZZ2hwGmomxS9
PiUENZu1MU6cGMkmuVnb/4t+mIoX8xr7NBfPgiZQipkvshlBJHTXoaB+Sc58fFzB
jxq9c6HxGpeQv9otk1Jw4BI9Xf6tZwBz/XJKXjxeQKTO5POJVUKOblAuaN1jX9NT
wieuMo1g+xyrOQ==
-----END CERTIFICATE-----
Generated at Sat May 10 08:32:50 2025 by rpki-client