Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
File:                     lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft (raw, json)
Hash identifier:          rJNv3Dujrj5gPL4aSLzUY4DKs8Rvun7MW7GxV1Shruc=
Subject key identifier:   8E:67:83:2B:A4:B4:90:64:88:97:03:E9:FA:4C:1C:1C:C2:40:CA:4C
Authority key identifier: 94:FC:DE:45:30:5B:D0:CC:8D:25:D7:C6:ED:CA:71:91:36:F5:60:6D
Certificate issuer:       /CN=94fcde45305bd0cc8d25d7c6edca719136f5606d
Certificate serial:       0196A35317C387E25E338AB1305C910B3452
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
Manifest number:          12D4
Signing time:             Tue 06 May 2025 02:00:53 +0000
Manifest this update:     Tue 06 May 2025 02:00:53 +0000
Manifest next update:     Wed 07 May 2025 02:00:53 +0000
Files and hashes:         1: lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl (hash: blbsdM+lbMaK0X8a/cCJZJdTz6dTZ/0+sPtmXM/X1Jw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 02:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a3:53:17:c3:87:e2:5e:33:8a:b1:30:5c:91:0b:34:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94fcde45305bd0cc8d25d7c6edca719136f5606d
        Validity
            Not Before: May  6 02:00:53 2025 GMT
            Not After : May  7 02:00:53 2025 GMT
        Subject: CN=8e67832ba4b49064889703e9fa4c1c1cc240ca4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c0:8c:62:f9:5c:01:a2:72:38:10:0f:8f:aa:
                    d7:01:63:5e:5b:90:32:5b:41:43:87:8b:28:90:d8:
                    f8:d9:62:74:87:9e:03:11:70:2e:74:39:79:7f:6f:
                    28:3d:8a:22:06:75:b2:76:9a:6f:66:37:eb:14:9b:
                    2b:f5:ae:5b:1c:e9:c2:e8:66:df:d2:c6:4e:27:9a:
                    53:7f:46:a9:64:fc:d4:7b:eb:02:8f:3a:ff:cc:91:
                    2d:a8:9e:d2:8d:57:2a:b3:2d:ee:ad:d4:d5:3d:e8:
                    0e:4d:31:ed:66:40:8c:dd:a5:1a:0e:c8:9b:e3:b0:
                    a1:ff:71:b8:74:3a:80:54:c7:8d:5b:74:f8:48:00:
                    a5:da:10:e2:cf:94:bb:11:56:9d:0b:d8:77:63:24:
                    28:f7:d1:80:6a:b9:a0:17:e6:84:ff:1d:62:e4:f0:
                    d6:6c:b5:8f:4b:1c:93:ef:a1:c5:54:53:05:95:5c:
                    c8:3b:f1:23:4e:76:2e:a5:88:79:18:7b:42:b8:1a:
                    3d:3d:c3:ba:de:0f:77:8d:72:47:35:23:39:0d:79:
                    db:6d:6d:1b:cc:2f:82:eb:50:1d:be:93:8d:79:17:
                    ca:93:33:7e:14:59:91:23:ea:37:44:fc:2f:5f:43:
                    41:85:91:3f:e8:56:dd:e2:e2:9f:46:e0:27:be:6d:
                    11:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:67:83:2B:A4:B4:90:64:88:97:03:E9:FA:4C:1C:1C:C2:40:CA:4C
            X509v3 Authority Key Identifier:
                keyid:94:FC:DE:45:30:5B:D0:CC:8D:25:D7:C6:ED:CA:71:91:36:F5:60:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:78:9d:e8:76:bb:ec:c3:be:81:28:bd:4c:c7:c4:ec:6a:86:
         0f:66:9c:d3:98:c5:e9:bc:d2:37:a9:31:f1:8d:f2:18:53:d3:
         9d:89:33:63:cd:13:5a:2d:61:1d:cf:a1:32:2e:7d:c1:a1:0a:
         c8:18:0d:b3:98:39:af:94:a2:ed:5e:ed:33:39:72:88:d3:09:
         19:b6:e4:bd:3a:f5:27:17:54:e0:dc:33:bc:8d:90:31:95:25:
         3a:1b:30:a7:a8:ed:6d:82:3b:ea:d6:33:d2:03:90:0d:44:7f:
         17:84:b0:08:77:2a:41:d9:67:95:2a:18:94:6f:84:56:0a:a5:
         eb:4d:cd:2f:e9:d1:43:79:2d:6a:3d:22:64:1f:6f:cb:b9:ff:
         62:e3:a0:cb:67:d0:ce:ae:d0:08:d4:9e:29:7d:9c:1a:c1:8e:
         26:95:e9:f9:91:f3:f3:a5:29:8e:f0:af:b6:e6:dc:42:43:1d:
         00:15:13:56:50:d8:15:59:5b:d4:8a:5b:d3:b4:91:58:01:46:
         c6:ac:ce:64:f8:1d:24:f7:8c:b3:80:e1:8a:1a:6a:66:07:28:
         4a:40:f3:cf:ef:3a:f1:6e:0a:63:b3:78:8e:d1:52:b6:3f:c2:
         a7:b3:79:0b:fc:e8:4b:69:a0:31:5c:be:92:3a:fb:2b:68:fd:
         eb:79:ca:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZajUxfDh+JeM4qxMFyRCzRSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZmNkZTQ1MzA1YmQwY2M4ZDI1ZDdjNmVkY2E3MTkxMzZm
NTYwNmQwHhcNMjUwNTA2MDIwMDUzWhcNMjUwNTA3MDIwMDUzWjAzMTEwLwYDVQQD
Eyg4ZTY3ODMyYmE0YjQ5MDY0ODg5NzAzZTlmYTRjMWMxY2MyNDBjYTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8CMYvlcAaJyOBAPj6rXAWNeW5Ay
W0FDh4sokNj42WJ0h54DEXAudDl5f28oPYoiBnWydppvZjfrFJsr9a5bHOnC6Gbf
0sZOJ5pTf0apZPzUe+sCjzr/zJEtqJ7SjVcqsy3urdTVPegOTTHtZkCM3aUaDsib
47Ch/3G4dDqAVMeNW3T4SACl2hDiz5S7EVadC9h3YyQo99GAarmgF+aE/x1i5PDW
bLWPSxyT76HFVFMFlVzIO/EjTnYupYh5GHtCuBo9PcO63g93jXJHNSM5DXnbbW0b
zC+C61AdvpONeRfKkzN+FFmRI+o3RPwvX0NBhZE/6Fbd4uKfRuAnvm0RGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5ngyuktJBkiJcD6fpMHBzCQMpMMB8GA1UdIwQY
MBaAFJT83kUwW9DMjSXXxu3KcZE29WBtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFB6ZVJUQmIwTXlOSmRmRzdjcHhrVGIxWUcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8xYjFiZTQtYmNjMC00YjIxLTgwZGYt
MjAzZGNiZjdkM2ZjLzEvbFB6ZVJUQmIwTXlOSmRmRzdjcHhrVGIxWUcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8xYjFiZTQtYmNjMC00YjIxLTgwZGYtMjAzZGNiZjdkM2Zj
LzEvbFB6ZVJUQmIwTXlOSmRmRzdjcHhrVGIxWUcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgnid6Ha7
7MO+gSi9TMfE7GqGD2ac05jF6bzSN6kx8Y3yGFPTnYkzY80TWi1hHc+hMi59waEK
yBgNs5g5r5Si7V7tMzlyiNMJGbbkvTr1JxdU4NwzvI2QMZUlOhswp6jtbYI76tYz
0gOQDUR/F4SwCHcqQdlnlSoYlG+EVgql603NL+nRQ3ktaj0iZB9vy7n/YuOgy2fQ
zq7QCNSeKX2cGsGOJpXp+ZHz86UpjvCvtubcQkMdABUTVlDYFVlb1Ipb07SRWAFG
xqzOZPgdJPeMs4DhihpqZgcoSkDzz+868W4KY7N4jtFStj/Cp7N5C/zoS2mgMVy+
kjr7K2j963nKVg==
-----END CERTIFICATE-----
Generated at Tue May 6 05:11:09 2025 by rpki-client