Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft
File:                     Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft (raw, json)
Hash identifier:          tznCRo9VfnaCAOqQAqRkHnx4hCPktBLCBjfDqRmM2gM=
Subject key identifier:   54:99:C8:8B:7C:C0:56:DF:FE:C4:C5:7F:69:86:FD:FB:8A:EB:61:BB
Authority key identifier: 62:9D:13:5A:15:C7:4C:A9:7C:DE:CF:D2:FF:39:A9:F9:97:69:49:72
Certificate issuer:       /CN=629d135a15c74ca97cdecfd2ff39a9f997694972
Certificate serial:       0196C34B7CE08E792BA71A1E709A9AC5183C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft
Manifest number:          037B
Signing time:             Mon 12 May 2025 07:00:26 +0000
Manifest this update:     Mon 12 May 2025 07:00:26 +0000
Manifest next update:     Tue 13 May 2025 07:00:26 +0000
Files and hashes:         1: Yp0TWhXHTKl83s_S_zmp-ZdpSXI.crl (hash: 70oqeh1W2kjNrxvKzdp8OuYFXCgRmU1kr++RmzzdKrA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 07:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:4b:7c:e0:8e:79:2b:a7:1a:1e:70:9a:9a:c5:18:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=629d135a15c74ca97cdecfd2ff39a9f997694972
        Validity
            Not Before: May 12 07:00:26 2025 GMT
            Not After : May 13 07:00:26 2025 GMT
        Subject: CN=5499c88b7cc056dffec4c57f6986fdfb8aeb61bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:32:e2:a7:77:45:c4:4d:30:96:a1:3d:59:9f:
                    8a:17:00:a2:f8:e2:b6:50:84:9c:80:e9:e3:f8:61:
                    e9:c1:b5:2c:74:5b:ac:12:41:82:ce:9b:84:ae:ae:
                    6a:2d:07:ca:63:39:27:e2:f4:2c:56:54:fb:3c:b9:
                    b9:8a:2f:59:66:6e:d0:20:f3:4c:49:c2:49:22:08:
                    24:ca:f6:71:f9:f6:c8:c2:70:22:0f:74:6e:20:61:
                    b5:8c:19:5c:01:a8:bd:29:51:12:23:df:ef:9f:1d:
                    1a:df:4f:74:b6:ed:47:b6:2d:ee:3d:c9:b3:f6:aa:
                    7f:7d:93:23:b0:c0:7f:c6:8b:95:ec:4b:43:44:62:
                    b5:a7:8d:e1:f6:05:44:d6:8c:bb:4d:59:df:b8:a8:
                    02:a3:01:0c:fe:a9:96:b5:f5:d6:34:57:26:93:e0:
                    d5:2a:1c:3a:f1:23:7a:49:ba:5f:d5:f6:11:19:1b:
                    b6:ae:59:1b:fe:60:0d:6d:ab:1f:ff:ab:02:7f:98:
                    89:56:cf:bb:69:9a:92:57:83:e6:72:fa:c8:3f:4d:
                    31:98:6b:75:0f:ec:c0:8f:1f:d7:ee:d9:73:d9:68:
                    8b:4e:39:a5:b6:a4:56:ae:a2:c3:c0:7a:7b:b8:71:
                    1b:53:39:54:39:d9:83:c6:81:1e:65:35:1e:98:32:
                    e6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:99:C8:8B:7C:C0:56:DF:FE:C4:C5:7F:69:86:FD:FB:8A:EB:61:BB
            X509v3 Authority Key Identifier:
                keyid:62:9D:13:5A:15:C7:4C:A9:7C:DE:CF:D2:FF:39:A9:F9:97:69:49:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:3a:f4:49:4f:b0:b7:69:98:fc:be:2e:ac:82:97:8b:4d:b7:
         0d:7e:b5:23:c5:42:1b:d6:5e:8b:3d:ec:0a:e4:cd:46:b0:6e:
         34:3b:80:99:eb:52:41:d4:30:64:86:10:79:f8:ba:d2:25:5a:
         50:f5:bb:3f:78:5f:8b:de:3f:d9:0d:94:8c:a9:5d:5a:3b:ec:
         ff:19:2f:8b:7d:4c:e6:b7:f4:c3:54:dd:43:04:a1:5d:8a:60:
         72:dd:1c:6a:88:43:2b:69:23:88:61:08:df:21:22:13:22:97:
         a9:a1:18:ab:f5:5b:db:dc:f5:26:0d:55:45:e3:56:30:b7:79:
         64:9b:96:3b:be:fe:e1:49:63:24:ae:5e:16:19:97:32:87:ef:
         30:88:3c:45:9b:49:1f:01:28:43:33:62:3a:9e:22:78:c8:ba:
         4e:d6:81:54:30:96:5f:2a:a8:3e:f8:02:b1:cc:1c:05:c3:09:
         e9:04:ee:25:fe:ef:11:ef:6b:28:a5:59:1d:00:61:0a:3b:21:
         8a:0b:fb:61:8e:bd:b8:38:9e:97:de:f4:41:77:ed:c7:48:bb:
         5e:36:32:c6:35:ec:ce:5d:57:f6:81:1d:a6:0e:88:f6:c8:2f:
         af:53:ef:3f:cb:44:ed:ef:d1:e6:66:7d:4f:e6:16:83:ab:39:
         6f:80:0a:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDS3zgjnkrpxoecJqaxRg8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyOWQxMzVhMTVjNzRjYTk3Y2RlY2ZkMmZmMzlhOWY5OTc2
OTQ5NzIwHhcNMjUwNTEyMDcwMDI2WhcNMjUwNTEzMDcwMDI2WjAzMTEwLwYDVQQD
Eyg1NDk5Yzg4YjdjYzA1NmRmZmVjNGM1N2Y2OTg2ZmRmYjhhZWI2MWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjLip3dFxE0wlqE9WZ+KFwCi+OK2
UIScgOnj+GHpwbUsdFusEkGCzpuErq5qLQfKYzkn4vQsVlT7PLm5ii9ZZm7QIPNM
ScJJIggkyvZx+fbIwnAiD3RuIGG1jBlcAai9KVESI9/vnx0a3090tu1Hti3uPcmz
9qp/fZMjsMB/xouV7EtDRGK1p43h9gVE1oy7TVnfuKgCowEM/qmWtfXWNFcmk+DV
Khw68SN6Sbpf1fYRGRu2rlkb/mANbasf/6sCf5iJVs+7aZqSV4PmcvrIP00xmGt1
D+zAjx/X7tlz2WiLTjmltqRWrqLDwHp7uHEbUzlUOdmDxoEeZTUemDLmzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFSZyIt8wFbf/sTFf2mG/fuK62G7MB8GA1UdIwQY
MBaAFGKdE1oVx0ypfN7P0v85qfmXaUlyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXAwVFdoWEhUS2w4M3NfU196bXAtWmRwU1hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9lODJmMjgtNzE4My00ZTM4LTk4YjEt
NTA1YzZjYjNkNjgyLzEvWXAwVFdoWEhUS2w4M3NfU196bXAtWmRwU1hJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9lODJmMjgtNzE4My00ZTM4LTk4YjEtNTA1YzZjYjNkNjgy
LzEvWXAwVFdoWEhUS2w4M3NfU196bXAtWmRwU1hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGTr0SU+w
t2mY/L4urIKXi023DX61I8VCG9Zeiz3sCuTNRrBuNDuAmetSQdQwZIYQefi60iVa
UPW7P3hfi94/2Q2UjKldWjvs/xkvi31M5rf0w1TdQwShXYpgct0caohDK2kjiGEI
3yEiEyKXqaEYq/Vb29z1Jg1VReNWMLd5ZJuWO77+4UljJK5eFhmXMofvMIg8RZtJ
HwEoQzNiOp4ieMi6TtaBVDCWXyqoPvgCscwcBcMJ6QTuJf7vEe9rKKVZHQBhCjsh
igv7YY69uDiel970QXftx0i7XjYyxjXszl1X9oEdpg6I9sgvr1PvP8tE7e/R5mZ9
T+YWg6s5b4AKbw==
-----END CERTIFICATE-----
Generated at Mon May 12 16:11:00 2025 by rpki-client