Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
File:                     2lLDjwx_664TXV3d2UjPJr7O87w.mft (raw, json)
Hash identifier:          PngcEnmHeL4sg3oX/RzyTpSke6wK6ct3tcOii7bAtEo=
Subject key identifier:   57:D5:F5:BC:D6:F9:36:C2:7D:04:E1:71:F5:0F:85:2D:66:AA:3A:57
Authority key identifier: DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC
Certificate issuer:       /CN=da52c38f0c7febae135d5dddd948cf26becef3bc
Certificate serial:       0196A4666D3509A6690920FC39A5A20D7039
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
Manifest number:          0DA4
Signing time:             Tue 06 May 2025 07:01:38 +0000
Manifest this update:     Tue 06 May 2025 07:01:38 +0000
Manifest next update:     Wed 07 May 2025 07:01:38 +0000
Files and hashes:         1: 2lLDjwx_664TXV3d2UjPJr7O87w.crl (hash: CUzmDmYhjJMqhsjI2eHCRL4auzBV5UcvyyCbpV26VIM=)
                          2: ESp2P2qg1tcbnP0x2cOMAxJ9cfY.roa (hash: NXfX71EbjUbs5qPqJFV7lpPUd0bJOBkN6qOg1PkmUtM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a4:66:6d:35:09:a6:69:09:20:fc:39:a5:a2:0d:70:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da52c38f0c7febae135d5dddd948cf26becef3bc
        Validity
            Not Before: May  6 07:01:38 2025 GMT
            Not After : May  7 07:01:38 2025 GMT
        Subject: CN=57d5f5bcd6f936c27d04e171f50f852d66aa3a57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0d:fa:aa:49:97:2b:87:02:43:b1:d4:b4:1c:
                    a4:8d:7a:ea:be:1e:eb:cb:dc:b5:52:d3:cc:d3:e6:
                    36:57:76:2d:d1:33:83:11:c7:0d:63:4a:57:f6:06:
                    b9:94:3d:aa:49:88:d4:d4:56:72:87:55:ab:e6:62:
                    40:90:13:df:d3:31:e5:54:96:e6:99:d7:fa:9a:70:
                    10:d3:a9:19:41:10:61:8f:e9:3b:4e:41:0d:e3:3e:
                    26:c5:3e:f9:3a:c1:a5:0a:42:2b:6d:cd:3d:ad:39:
                    64:24:2d:71:49:86:96:b0:34:ce:77:c1:c0:31:d1:
                    41:82:98:35:b8:d8:bf:92:ef:c5:94:2b:01:a9:7f:
                    f5:62:17:9d:64:6f:20:5b:21:24:61:61:24:b1:16:
                    a8:d0:33:3b:f2:6a:14:79:02:a2:41:50:c5:ca:6d:
                    e1:5a:c0:47:40:df:4d:e4:98:7f:d4:1f:61:0f:d5:
                    e8:bf:81:a9:f2:26:9f:07:56:4c:da:c8:af:93:5a:
                    bd:ab:9b:19:6a:ef:ec:ed:92:36:11:9a:02:ce:83:
                    a7:8d:72:0f:9f:35:79:d7:a6:3a:c4:22:4e:19:e0:
                    6a:cb:30:9a:4f:b4:cc:0d:07:8e:5d:15:27:59:3e:
                    d5:58:69:c1:98:47:38:c5:5a:36:ba:5c:90:7d:86:
                    8a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D5:F5:BC:D6:F9:36:C2:7D:04:E1:71:F5:0F:85:2D:66:AA:3A:57
            X509v3 Authority Key Identifier:
                keyid:DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:09:05:a4:fd:1e:22:95:a5:9e:dc:ab:6a:68:f4:13:c9:f3:
         53:7b:a0:fa:6b:be:b8:c4:7b:0d:ad:d2:d3:6f:af:0d:1a:bf:
         bd:d6:fd:f9:17:50:3a:7e:6c:16:fb:81:b2:6a:58:08:da:fa:
         31:23:a0:78:d2:99:ff:6d:0d:27:d7:b9:17:33:5f:29:10:db:
         ab:26:42:a7:ed:0d:fc:a2:44:83:e1:d8:e9:87:b9:fc:8f:bc:
         c7:69:cc:9b:a2:15:e9:8d:1b:6d:da:8a:87:6e:56:b6:6a:c2:
         a2:ef:23:c7:54:91:7a:c0:a9:e6:16:c4:8e:42:d7:5c:44:37:
         e6:d8:e6:97:bc:cb:cf:4e:1c:96:65:e3:fc:38:c1:84:8a:3c:
         da:13:e4:56:4e:ac:8f:9f:6c:c9:ce:24:5b:32:31:b5:8f:99:
         de:c1:26:48:1b:5a:ab:a7:16:e6:95:a8:50:e2:b1:64:29:31:
         d1:5d:1f:f2:6f:19:24:7d:e7:fc:c9:95:14:51:25:52:c3:97:
         6d:e9:d3:90:1c:4c:20:eb:2f:78:01:38:55:d2:25:84:65:3a:
         4a:c4:48:82:7f:3b:5a:27:a5:67:29:4c:c1:e5:64:41:07:fe:
         be:52:77:85:9d:75:d1:e0:3e:19:f8:e9:ae:56:6e:dc:35:54:
         37:0b:32:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZakZm01CaZpCSD8OaWiDXA5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNTJjMzhmMGM3ZmViYWUxMzVkNWRkZGQ5NDhjZjI2YmVj
ZWYzYmMwHhcNMjUwNTA2MDcwMTM4WhcNMjUwNTA3MDcwMTM4WjAzMTEwLwYDVQQD
Eyg1N2Q1ZjViY2Q2ZjkzNmMyN2QwNGUxNzFmNTBmODUyZDY2YWEzYTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ36qkmXK4cCQ7HUtBykjXrqvh7r
y9y1UtPM0+Y2V3Yt0TODEccNY0pX9ga5lD2qSYjU1FZyh1Wr5mJAkBPf0zHlVJbm
mdf6mnAQ06kZQRBhj+k7TkEN4z4mxT75OsGlCkIrbc09rTlkJC1xSYaWsDTOd8HA
MdFBgpg1uNi/ku/FlCsBqX/1YhedZG8gWyEkYWEksRao0DM78moUeQKiQVDFym3h
WsBHQN9N5Jh/1B9hD9Xov4Gp8iafB1ZM2sivk1q9q5sZau/s7ZI2EZoCzoOnjXIP
nzV516Y6xCJOGeBqyzCaT7TMDQeOXRUnWT7VWGnBmEc4xVo2ulyQfYaKkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfV9bzW+TbCfQThcfUPhS1mqjpXMB8GA1UdIwQY
MBaAFNpSw48Mf+uuE11d3dlIzya+zvO8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmxMRGp3eF82NjRUWFYzZDJValBKcjdPODd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mMzFiZTAtMTBlMC00MGVkLWE2ZDct
NDFlY2RjN2EzNmY0LzEvMmxMRGp3eF82NjRUWFYzZDJValBKcjdPODd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9mMzFiZTAtMTBlMC00MGVkLWE2ZDctNDFlY2RjN2EzNmY0
LzEvMmxMRGp3eF82NjRUWFYzZDJValBKcjdPODd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuQkFpP0e
IpWlntyramj0E8nzU3ug+mu+uMR7Da3S02+vDRq/vdb9+RdQOn5sFvuBsmpYCNr6
MSOgeNKZ/20NJ9e5FzNfKRDbqyZCp+0N/KJEg+HY6Ye5/I+8x2nMm6IV6Y0bbdqK
h25WtmrCou8jx1SResCp5hbEjkLXXEQ35tjml7zLz04clmXj/DjBhIo82hPkVk6s
j59syc4kWzIxtY+Z3sEmSBtaq6cW5pWoUOKxZCkx0V0f8m8ZJH3n/MmVFFElUsOX
benTkBxMIOsveAE4VdIlhGU6SsRIgn87WielZylMweVkQQf+vlJ3hZ110eA+Gfjp
rlZu3DVUNwsyqg==
-----END CERTIFICATE-----
Generated at Tue May 6 13:30:45 2025 by rpki-client