Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.mft
File:                     jWLdvflYu0uYPali7PA76u441Ek.mft (raw, json)
Hash identifier:          4S88W8F8Xo6d6Vm/bZNts4RaWqw7Szhg92pOiiWEgGo=
Subject key identifier:   E8:52:74:F3:5A:D8:DF:EC:F6:98:57:E5:0E:3D:CF:B3:DC:38:6E:A8
Authority key identifier: 8D:62:DD:BD:F9:58:BB:4B:98:3D:A9:62:EC:F0:3B:EA:EE:38:D4:49
Certificate issuer:       /CN=8d62ddbdf958bb4b983da962ecf03beaee38d449
Certificate serial:       0196B0A0ED8BB44B43D087255B7CC5C21466
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jWLdvflYu0uYPali7PA76u441Ek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.mft
Manifest number:          152F
Signing time:             Thu 08 May 2025 16:00:58 +0000
Manifest this update:     Thu 08 May 2025 16:00:58 +0000
Manifest next update:     Fri 09 May 2025 16:00:58 +0000
Files and hashes:         1: jWLdvflYu0uYPali7PA76u441Ek.crl (hash: 7l4KPoJI7TcQb/N+UpGPBUESHBh7d/fWpdaLCzVxfe0=)
                          2: s34MRUBBXAv4etz_rjf1ivNvKl8.roa (hash: 0Raiu10MwJUtSZKphwMI3EWBFXIoAne26av2cOWMQx4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jWLdvflYu0uYPali7PA76u441Ek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 15:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b0:a0:ed:8b:b4:4b:43:d0:87:25:5b:7c:c5:c2:14:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d62ddbdf958bb4b983da962ecf03beaee38d449
        Validity
            Not Before: May  8 16:00:58 2025 GMT
            Not After : May  9 16:00:58 2025 GMT
        Subject: CN=e85274f35ad8dfecf69857e50e3dcfb3dc386ea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:04:d3:6b:b8:fa:c3:32:02:e0:65:0b:68:59:
                    6a:db:f7:ca:10:23:57:c1:ab:e7:56:36:1c:ad:ed:
                    1c:b7:17:7b:b8:88:dd:45:60:06:35:c1:3d:08:48:
                    53:66:63:d4:d1:6f:c5:0c:1d:b9:0a:c4:c8:db:cc:
                    13:09:74:2d:76:f6:fc:6a:d0:9d:f1:ee:df:b0:d6:
                    be:2e:d1:cf:83:83:4b:31:ac:e9:e7:38:22:48:4c:
                    af:60:29:69:d0:fb:30:c4:a1:8b:bd:77:b1:19:43:
                    a0:44:ca:db:2b:53:a8:ff:50:b3:0d:c2:a4:21:3e:
                    64:a2:75:c2:45:53:7d:da:ff:c8:8b:d9:2b:d6:d5:
                    2d:b8:20:7b:7f:16:cc:54:cb:6e:9e:d3:28:3c:ff:
                    1b:09:9c:9f:d7:0f:43:b2:d6:68:11:92:00:2d:8d:
                    32:ce:c7:17:7c:81:aa:bb:ad:41:f8:43:55:fb:d5:
                    f6:9b:cb:35:a7:ed:76:67:12:0d:34:a1:cf:78:a9:
                    b8:a3:92:ba:51:d7:2a:f0:b5:be:79:87:a7:71:b5:
                    a1:95:ba:a1:35:00:40:01:67:0d:0b:80:c8:19:9a:
                    02:a9:7a:b5:fa:bc:a4:e9:0a:83:cb:7c:bf:2d:af:
                    e6:0c:fc:78:d6:9d:3a:5f:c7:76:0b:9b:7b:fe:af:
                    64:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:52:74:F3:5A:D8:DF:EC:F6:98:57:E5:0E:3D:CF:B3:DC:38:6E:A8
            X509v3 Authority Key Identifier:
                keyid:8D:62:DD:BD:F9:58:BB:4B:98:3D:A9:62:EC:F0:3B:EA:EE:38:D4:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWLdvflYu0uYPali7PA76u441Ek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:53:98:06:bc:09:db:cc:4f:ae:3a:e7:33:eb:cf:75:00:c1:
         c3:64:ad:df:64:8d:87:99:a8:94:22:5e:86:01:7f:29:6f:21:
         ad:80:54:2b:14:93:16:88:44:7d:15:02:24:a2:f2:15:00:7d:
         1a:66:45:94:f8:df:bc:06:5b:1c:9b:7d:4d:f7:cb:68:6f:24:
         90:28:5c:7b:08:d4:6f:1e:79:ef:7d:06:9a:fa:b0:0c:2e:d6:
         e6:7f:52:de:d8:07:8c:d8:0a:0c:7b:9a:ea:46:19:77:d7:09:
         a8:7e:c0:58:f8:e3:f4:86:7f:3a:29:24:65:e1:57:af:a3:6d:
         f1:65:81:e3:a1:42:36:49:7f:a1:46:34:5d:0a:de:18:59:fa:
         70:a0:2c:f3:d2:97:cd:b3:38:68:ee:2e:d9:47:f9:f9:fe:28:
         cc:e1:29:e4:b0:8d:88:cb:57:f3:b6:62:14:60:55:20:84:ca:
         a5:81:4e:d1:65:44:22:48:2c:79:30:72:93:01:5f:8f:f6:c9:
         01:42:72:9f:86:36:bc:61:5c:9a:53:6b:a3:ee:9f:98:32:bc:
         c1:19:46:c3:60:16:93:10:2c:5b:4e:60:e8:a7:91:c2:a4:6a:
         42:ea:bf:6b:13:34:d0:5b:6f:35:1a:c3:90:19:85:9d:40:fd:
         a4:7e:ab:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZawoO2LtEtD0IclW3zFwhRmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNjJkZGJkZjk1OGJiNGI5ODNkYTk2MmVjZjAzYmVhZWUz
OGQ0NDkwHhcNMjUwNTA4MTYwMDU4WhcNMjUwNTA5MTYwMDU4WjAzMTEwLwYDVQQD
EyhlODUyNzRmMzVhZDhkZmVjZjY5ODU3ZTUwZTNkY2ZiM2RjMzg2ZWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApATTa7j6wzIC4GULaFlq2/fKECNX
wavnVjYcre0ctxd7uIjdRWAGNcE9CEhTZmPU0W/FDB25CsTI28wTCXQtdvb8atCd
8e7fsNa+LtHPg4NLMazp5zgiSEyvYClp0PswxKGLvXexGUOgRMrbK1Oo/1CzDcKk
IT5konXCRVN92v/Ii9kr1tUtuCB7fxbMVMtuntMoPP8bCZyf1w9DstZoEZIALY0y
zscXfIGqu61B+ENV+9X2m8s1p+12ZxINNKHPeKm4o5K6Udcq8LW+eYencbWhlbqh
NQBAAWcNC4DIGZoCqXq1+ryk6QqDy3y/La/mDPx41p06X8d2C5t7/q9kGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOhSdPNa2N/s9phX5Q49z7PcOG6oMB8GA1UdIwQY
MBaAFI1i3b35WLtLmD2pYuzwO+ruONRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaldMZHZmbFl1MHVZUGFsaTdQQTc2dTQ0MUVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9iMjBiZWMtMzg0Ni00YmQxLTgxMmYt
MDZlMDBhM2VhMDYyLzEvaldMZHZmbFl1MHVZUGFsaTdQQTc2dTQ0MUVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9iMjBiZWMtMzg0Ni00YmQxLTgxMmYtMDZlMDBhM2VhMDYy
LzEvaldMZHZmbFl1MHVZUGFsaTdQQTc2dTQ0MUVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIVOYBrwJ
28xPrjrnM+vPdQDBw2St32SNh5molCJehgF/KW8hrYBUKxSTFohEfRUCJKLyFQB9
GmZFlPjfvAZbHJt9TffLaG8kkChcewjUbx55730GmvqwDC7W5n9S3tgHjNgKDHua
6kYZd9cJqH7AWPjj9IZ/OikkZeFXr6Nt8WWB46FCNkl/oUY0XQreGFn6cKAs89KX
zbM4aO4u2Uf5+f4ozOEp5LCNiMtX87ZiFGBVIITKpYFO0WVEIkgseTBykwFfj/bJ
AUJyn4Y2vGFcmlNro+6fmDK8wRlGw2AWkxAsW05g6KeRwqRqQuq/axM00FtvNRrD
kBmFnUD9pH6r6A==
-----END CERTIFICATE-----
Generated at Thu May 8 21:36:48 2025 by rpki-client