Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft
File:                     uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft (raw, json)
Hash identifier:          fmt+k4yFYC8QxGcM6Ig0X5BXHEEaBQ9cKNnR3YUOvrk=
Subject key identifier:   2B:FB:2B:36:E6:EE:C3:6D:A5:70:E0:06:2F:95:DA:18:1A:94:B1:5F
Authority key identifier: B9:1F:8D:B0:2E:2E:97:1D:54:F9:0E:EF:10:70:90:39:8F:CC:3D:92
Certificate issuer:       /CN=b91f8db02e2e971d54f90eef107090398fcc3d92
Certificate serial:       0196B9A39C4353F2A29E0D2969372B329D7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft
Manifest number:          0774
Signing time:             Sat 10 May 2025 10:00:29 +0000
Manifest this update:     Sat 10 May 2025 10:00:29 +0000
Manifest next update:     Sun 11 May 2025 10:00:29 +0000
Files and hashes:         1: uR-NsC4ulx1U-Q7vEHCQOY_MPZI.crl (hash: uHK5iMZwTqpLUrnEx93CkJbU6I4ToLqT+chMWaWP0VE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 10:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b9:a3:9c:43:53:f2:a2:9e:0d:29:69:37:2b:32:9d:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b91f8db02e2e971d54f90eef107090398fcc3d92
        Validity
            Not Before: May 10 10:00:29 2025 GMT
            Not After : May 11 10:00:29 2025 GMT
        Subject: CN=2bfb2b36e6eec36da570e0062f95da181a94b15f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b0:9b:40:12:e4:b6:bb:d0:4e:78:c3:9c:2f:
                    b3:74:d2:da:1d:1c:36:57:b9:93:90:a8:d1:4b:12:
                    5f:93:69:2a:97:bc:f2:aa:08:88:e4:ff:e7:96:ae:
                    e8:09:73:26:64:e0:0f:f2:16:60:de:6e:c6:1b:19:
                    3b:63:c3:f1:dc:d7:7f:af:20:dc:5b:7f:a7:85:1c:
                    3b:34:c1:56:5b:04:ef:80:58:b8:0d:bc:e5:6f:5d:
                    35:50:05:49:54:cd:b7:6d:f5:63:82:c3:03:59:32:
                    af:e0:cd:ee:46:b0:52:4f:61:9a:49:75:0a:a5:55:
                    23:20:e5:7e:07:34:33:37:84:d7:08:b3:ac:36:14:
                    94:45:f0:a2:91:69:a3:fc:7c:24:ac:2a:b0:42:58:
                    7f:f2:ea:f4:95:d5:fd:88:7b:60:ea:3e:78:77:27:
                    5c:f1:b3:6e:64:c0:2a:ae:95:1b:02:8c:8a:5a:0c:
                    77:b4:2e:c2:64:a8:80:40:1a:d9:f4:be:4f:f5:75:
                    03:1f:a6:7a:7e:d8:ba:b6:c7:1e:87:cb:7d:a4:14:
                    d6:02:e5:35:cd:4f:06:d6:5b:2a:e8:51:85:68:a2:
                    f2:5c:46:d6:9e:ee:93:f3:3b:0c:35:3c:bf:b7:b5:
                    08:b1:90:e3:88:ff:d4:b4:6c:c1:20:45:92:9c:83:
                    21:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:FB:2B:36:E6:EE:C3:6D:A5:70:E0:06:2F:95:DA:18:1A:94:B1:5F
            X509v3 Authority Key Identifier:
                keyid:B9:1F:8D:B0:2E:2E:97:1D:54:F9:0E:EF:10:70:90:39:8F:CC:3D:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:1f:f0:2b:14:cb:f2:66:ab:3f:eb:16:c9:26:84:d2:f6:89:
         bf:2d:07:0b:fd:32:4d:de:e4:5c:45:96:3e:37:be:65:7b:03:
         57:49:34:d0:0f:94:6d:6e:a2:bf:38:94:f5:41:bb:b9:72:7c:
         1f:40:78:87:0f:06:77:d7:19:1d:84:6b:a6:3d:f4:56:08:fd:
         e0:d3:f0:88:f8:ba:d1:14:84:6a:8f:f9:93:f1:e9:4d:5e:ef:
         51:00:f8:53:ab:ab:8a:bf:8f:5c:a0:ad:8e:38:c5:3a:42:17:
         2c:03:f2:fc:9e:50:88:48:3c:0c:42:c1:3d:21:cf:24:05:1f:
         53:30:56:47:1f:1f:cb:8f:9c:44:cf:5f:a4:42:55:a6:0d:ec:
         9a:46:93:44:6d:02:cf:94:5f:fc:db:49:d2:a0:e6:e5:ab:e7:
         30:6b:31:29:41:e8:68:33:26:a8:62:b9:bf:4d:0c:25:77:e5:
         73:70:18:ab:ec:f8:bb:78:91:c9:7d:5d:48:ea:c0:e5:5e:78:
         fe:2e:32:36:73:49:3f:c7:a5:dd:41:ee:b2:d0:85:f1:20:c4:
         34:e9:bb:3b:9f:59:4b:db:28:e8:09:97:8e:30:8a:49:14:d2:
         66:68:94:f7:a3:0e:11:87:e4:bb:81:c0:66:8c:d2:01:4f:e1:
         95:97:c4:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa5o5xDU/King0paTcrMp16MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MWY4ZGIwMmUyZTk3MWQ1NGY5MGVlZjEwNzA5MDM5OGZj
YzNkOTIwHhcNMjUwNTEwMTAwMDI5WhcNMjUwNTExMTAwMDI5WjAzMTEwLwYDVQQD
EygyYmZiMmIzNmU2ZWVjMzZkYTU3MGUwMDYyZjk1ZGExODFhOTRiMTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLCbQBLktrvQTnjDnC+zdNLaHRw2
V7mTkKjRSxJfk2kql7zyqgiI5P/nlq7oCXMmZOAP8hZg3m7GGxk7Y8Px3Nd/ryDc
W3+nhRw7NMFWWwTvgFi4Dbzlb101UAVJVM23bfVjgsMDWTKv4M3uRrBST2GaSXUK
pVUjIOV+BzQzN4TXCLOsNhSURfCikWmj/HwkrCqwQlh/8ur0ldX9iHtg6j54dydc
8bNuZMAqrpUbAoyKWgx3tC7CZKiAQBrZ9L5P9XUDH6Z6fti6tsceh8t9pBTWAuU1
zU8G1lsq6FGFaKLyXEbWnu6T8zsMNTy/t7UIsZDjiP/UtGzBIEWSnIMhMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCv7Kzbm7sNtpXDgBi+V2hgalLFfMB8GA1UdIwQY
MBaAFLkfjbAuLpcdVPkO7xBwkDmPzD2SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVItTnNDNHVseDFVLVE3dkVIQ1FPWV9NUFpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9lZTY4YWMtMzZiYS00OWExLTlkZjkt
NjJlMTllZjk2MGE0LzEvdVItTnNDNHVseDFVLVE3dkVIQ1FPWV9NUFpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9lZTY4YWMtMzZiYS00OWExLTlkZjktNjJlMTllZjk2MGE0
LzEvdVItTnNDNHVseDFVLVE3dkVIQ1FPWV9NUFpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABh/wKxTL
8marP+sWySaE0vaJvy0HC/0yTd7kXEWWPje+ZXsDV0k00A+UbW6ivziU9UG7uXJ8
H0B4hw8Gd9cZHYRrpj30Vgj94NPwiPi60RSEao/5k/HpTV7vUQD4U6urir+PXKCt
jjjFOkIXLAPy/J5QiEg8DELBPSHPJAUfUzBWRx8fy4+cRM9fpEJVpg3smkaTRG0C
z5Rf/NtJ0qDm5avnMGsxKUHoaDMmqGK5v00MJXflc3AYq+z4u3iRyX1dSOrA5V54
/i4yNnNJP8el3UHustCF8SDENOm7O59ZS9so6AmXjjCKSRTSZmiU96MOEYfku4HA
ZozSAU/hlZfEaw==
-----END CERTIFICATE-----
Generated at Sat May 10 18:52:49 2025 by rpki-client