Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.mft
File:                     1eglbE9iHYxMFwZl6HjqiOy7P1E.mft (raw, json)
Hash identifier:          3hA2XmjAPLb98N5Is1Hpf7t0yJr+tHCILh2OyEHkfns=
Subject key identifier:   05:94:71:0D:8C:15:99:6B:8A:98:86:5F:7E:28:8B:8B:C6:B0:C1:94
Authority key identifier: D5:E8:25:6C:4F:62:1D:8C:4C:17:06:65:E8:78:EA:88:EC:BB:3F:51
Certificate issuer:       /CN=d5e8256c4f621d8c4c170665e878ea88ecbb3f51
Certificate serial:       0196D062290A3FB28A6E85CA46FC501330EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1eglbE9iHYxMFwZl6HjqiOy7P1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.mft
Manifest number:          153B
Signing time:             Wed 14 May 2025 20:00:16 +0000
Manifest this update:     Wed 14 May 2025 20:00:16 +0000
Manifest next update:     Thu 15 May 2025 20:00:16 +0000
Files and hashes:         1: 1eglbE9iHYxMFwZl6HjqiOy7P1E.crl (hash: U+kb4lDGbjx9uzR1mew1zAc9FhovKjWEVmIPONyJQow=)
                          2: s19cTegZPcgfvMn79U7vcydThPE.roa (hash: V3xH7pf/IllOyz6AG2kCqa1+TkH2gfpLo44RkSGpMGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1eglbE9iHYxMFwZl6HjqiOy7P1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 17:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d0:62:29:0a:3f:b2:8a:6e:85:ca:46:fc:50:13:30:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5e8256c4f621d8c4c170665e878ea88ecbb3f51
        Validity
            Not Before: May 14 20:00:16 2025 GMT
            Not After : May 15 20:00:16 2025 GMT
        Subject: CN=0594710d8c15996b8a98865f7e288b8bc6b0c194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8d:86:f0:a2:cc:e9:94:43:62:ea:b1:67:5d:
                    4c:eb:85:9b:3c:e3:22:21:66:d7:84:9d:ee:43:9c:
                    bb:cf:c4:05:76:db:f5:f3:c9:fe:d4:13:7e:7b:cd:
                    e3:f5:ea:af:68:61:b5:2b:df:82:ff:b6:86:f5:8d:
                    b8:90:f2:b7:d8:a5:91:f3:a4:fe:72:04:52:1d:cd:
                    71:5a:5b:5e:f6:29:30:ef:ea:90:bc:af:4f:9c:6c:
                    63:24:dc:57:b2:4d:f1:9d:43:d7:82:41:76:31:6d:
                    14:e3:36:43:11:7d:cf:c3:ff:93:cc:7e:0e:aa:ab:
                    47:75:c5:12:2e:da:b2:d9:10:57:0a:fa:a8:b5:f5:
                    b0:cd:b7:ff:9c:66:cd:9b:01:37:ec:64:7d:65:8a:
                    98:41:25:49:12:16:07:12:8c:f7:86:99:9c:40:49:
                    38:0b:c6:3f:80:29:9e:3d:6c:fa:12:6b:c0:21:73:
                    42:76:d6:c3:15:41:e9:e2:70:8f:54:cc:69:86:03:
                    6e:4b:f1:e4:6b:5e:4a:83:1d:ef:6b:e2:48:28:93:
                    78:c8:9e:69:a2:09:45:1e:32:f2:36:2c:1d:32:02:
                    6f:bd:1e:e0:5d:3c:02:e4:17:b6:fa:f2:c0:f2:8d:
                    e6:33:6e:48:53:6c:07:5b:37:67:1a:44:c8:68:ee:
                    4f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:94:71:0D:8C:15:99:6B:8A:98:86:5F:7E:28:8B:8B:C6:B0:C1:94
            X509v3 Authority Key Identifier:
                keyid:D5:E8:25:6C:4F:62:1D:8C:4C:17:06:65:E8:78:EA:88:EC:BB:3F:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eglbE9iHYxMFwZl6HjqiOy7P1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:e6:48:ec:a8:66:21:c9:c1:57:c0:3c:f7:68:8c:23:81:43:
         bf:45:1e:dc:c3:59:c7:00:1f:87:28:37:53:9a:4d:3b:d4:13:
         6b:e4:7a:1a:e5:29:be:8f:3d:b5:bc:e8:53:e8:73:0d:2c:d1:
         67:8d:6b:7f:b0:cf:8b:bf:df:59:6c:2b:24:ac:a3:ca:df:35:
         b8:73:90:85:c3:fa:91:1d:ab:b4:91:8a:06:47:9c:e5:3c:ff:
         bd:d9:2f:33:35:ca:e4:64:55:01:df:4d:67:3b:75:15:e7:31:
         16:0b:8f:3a:54:aa:7b:61:95:af:c5:e8:85:6a:67:7b:f5:ac:
         59:c2:26:62:34:b4:87:05:9d:bf:00:e4:5f:1f:6d:67:83:82:
         c1:a5:bb:d3:42:f1:c1:15:7e:83:1d:0c:85:d2:3e:40:2d:12:
         83:03:2e:6a:ca:ee:28:00:06:fd:52:3c:e9:76:7d:3c:6a:58:
         26:5d:06:89:77:17:f6:78:4c:9a:e8:d3:dc:c1:db:66:11:73:
         e0:8e:2e:c2:5e:b2:4e:70:67:7e:e1:f3:e4:b5:b7:09:99:69:
         ec:bb:9c:d3:15:af:44:80:8c:8e:79:6a:75:0b:49:2d:04:83:
         c2:3a:1b:7c:fa:8f:c0:67:56:4d:50:a6:97:6f:9f:cf:2d:70:
         36:93:c6:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbQYikKP7KKboXKRvxQEzDsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZTgyNTZjNGY2MjFkOGM0YzE3MDY2NWU4NzhlYTg4ZWNi
YjNmNTEwHhcNMjUwNTE0MjAwMDE2WhcNMjUwNTE1MjAwMDE2WjAzMTEwLwYDVQQD
EygwNTk0NzEwZDhjMTU5OTZiOGE5ODg2NWY3ZTI4OGI4YmM2YjBjMTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApI2G8KLM6ZRDYuqxZ11M64WbPOMi
IWbXhJ3uQ5y7z8QFdtv188n+1BN+e83j9eqvaGG1K9+C/7aG9Y24kPK32KWR86T+
cgRSHc1xWlte9ikw7+qQvK9PnGxjJNxXsk3xnUPXgkF2MW0U4zZDEX3Pw/+TzH4O
qqtHdcUSLtqy2RBXCvqotfWwzbf/nGbNmwE37GR9ZYqYQSVJEhYHEoz3hpmcQEk4
C8Y/gCmePWz6EmvAIXNCdtbDFUHp4nCPVMxphgNuS/Hka15Kgx3va+JIKJN4yJ5p
oglFHjLyNiwdMgJvvR7gXTwC5Be2+vLA8o3mM25IU2wHWzdnGkTIaO5P4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWUcQ2MFZlripiGX34oi4vGsMGUMB8GA1UdIwQY
MBaAFNXoJWxPYh2MTBcGZeh46ojsuz9RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWVnbGJFOWlIWXhNRndabDZIanFpT3k3UDFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9lYWYyYjQtZGQxMi00Yjk0LWJlM2It
ZGNiM2Y4YWM3NTVlLzEvMWVnbGJFOWlIWXhNRndabDZIanFpT3k3UDFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9lYWYyYjQtZGQxMi00Yjk0LWJlM2ItZGNiM2Y4YWM3NTVl
LzEvMWVnbGJFOWlIWXhNRndabDZIanFpT3k3UDFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATeZI7Khm
IcnBV8A892iMI4FDv0Ue3MNZxwAfhyg3U5pNO9QTa+R6GuUpvo89tbzoU+hzDSzR
Z41rf7DPi7/fWWwrJKyjyt81uHOQhcP6kR2rtJGKBkec5Tz/vdkvMzXK5GRVAd9N
Zzt1FecxFguPOlSqe2GVr8XohWpne/WsWcImYjS0hwWdvwDkXx9tZ4OCwaW700Lx
wRV+gx0MhdI+QC0SgwMuasruKAAG/VI86XZ9PGpYJl0GiXcX9nhMmujT3MHbZhFz
4I4uwl6yTnBnfuHz5LW3CZlp7Luc0xWvRICMjnlqdQtJLQSDwjobfPqPwGdWTVCm
l2+fzy1wNpPGqg==
-----END CERTIFICATE-----
Generated at Thu May 15 02:16:48 2025 by rpki-client