Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft
File:                     PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft (raw, json)
Hash identifier:          rNGrBt/Ts7PxpuVPrA1Yqe3hBW4M5GPmYrVKmj92beU=
Subject key identifier:   E2:15:98:8E:6B:FE:D9:DE:AD:B6:4E:C9:2E:BC:11:84:C1:8C:F1:D3
Authority key identifier: 3F:23:AB:73:05:30:47:92:DC:2C:E8:17:80:B5:DB:88:9D:8F:7F:3A
Certificate issuer:       /CN=3f23ab7305304792dc2ce81780b5db889d8f7f3a
Certificate serial:       0196B66BB8E79EEE20580A5AFF154B58F62A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft
Manifest number:          152D
Signing time:             Fri 09 May 2025 19:00:34 +0000
Manifest this update:     Fri 09 May 2025 19:00:34 +0000
Manifest next update:     Sat 10 May 2025 19:00:34 +0000
Files and hashes:         1: PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.crl (hash: iuckgEEP9zmmekKHe1R9KGGNTVEU66CHSQ+BOOE5lgA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b6:6b:b8:e7:9e:ee:20:58:0a:5a:ff:15:4b:58:f6:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f23ab7305304792dc2ce81780b5db889d8f7f3a
        Validity
            Not Before: May  9 19:00:34 2025 GMT
            Not After : May 10 19:00:34 2025 GMT
        Subject: CN=e215988e6bfed9deadb64ec92ebc1184c18cf1d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c8:11:f7:fd:80:0e:3f:4e:2a:d2:11:91:38:
                    7b:b9:31:61:a5:93:73:6d:3e:f3:51:66:74:d1:34:
                    c2:2b:06:69:fa:29:b4:92:c2:2b:39:c3:1b:ba:b2:
                    5f:f9:59:62:9d:3d:d5:49:d7:94:75:1d:49:75:88:
                    01:87:91:27:41:cd:e6:e6:ca:67:9c:d1:eb:3b:8f:
                    44:23:0d:3b:7e:01:19:bc:7e:fb:68:43:08:85:f9:
                    79:15:be:3b:2b:63:8f:77:99:51:19:cb:ab:12:d8:
                    ce:a9:d5:9d:ce:bb:a0:b5:63:df:55:0d:f8:ba:3f:
                    eb:82:72:0f:88:44:c0:11:b1:78:0f:4f:2e:36:57:
                    5c:48:83:07:db:df:06:50:05:ba:14:e7:46:b3:d8:
                    6a:7e:53:4b:67:7d:76:24:19:58:f9:cd:b5:b3:6d:
                    8c:9f:a6:68:82:a3:d0:5b:92:01:39:bb:d2:54:36:
                    8c:38:44:8d:c4:af:1b:b7:3f:93:a5:12:80:58:83:
                    ae:b4:b8:cf:60:f9:08:2f:93:72:c9:28:11:32:8f:
                    6a:0d:ec:46:90:a3:22:45:e5:34:16:b6:ff:9a:9f:
                    c1:eb:9d:d4:a8:25:02:c4:35:70:43:48:87:98:15:
                    a7:88:e7:1f:7c:09:7a:08:09:38:42:c7:1e:70:21:
                    6f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:15:98:8E:6B:FE:D9:DE:AD:B6:4E:C9:2E:BC:11:84:C1:8C:F1:D3
            X509v3 Authority Key Identifier:
                keyid:3F:23:AB:73:05:30:47:92:DC:2C:E8:17:80:B5:DB:88:9D:8F:7F:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:56:f7:9a:c9:ee:6e:b5:df:7a:86:87:95:94:7f:05:92:80:
         ab:07:61:aa:00:7e:03:3b:dc:e7:81:54:c3:ad:25:0b:d5:74:
         36:fb:30:ec:78:9f:de:19:d4:0b:40:37:04:31:15:2f:42:83:
         c8:bd:73:7c:4d:2e:ae:ae:99:c6:f2:1c:4b:44:dd:00:ee:a9:
         80:ca:11:79:b2:a7:51:a6:f1:83:aa:a3:4e:13:b0:4b:05:3c:
         af:f4:a2:cd:1e:0d:57:cd:65:66:35:f7:e8:58:c3:81:e2:37:
         aa:0e:43:a7:79:80:0b:cd:2a:b5:f7:27:26:1d:10:e4:f7:c5:
         0d:d5:a3:47:4c:bf:b8:2f:06:8b:14:02:d3:f9:cd:ac:29:ec:
         c7:ce:07:b9:9b:63:fe:b3:a2:d2:50:cb:52:0b:b1:e3:d8:5f:
         5d:e5:51:25:6c:a3:aa:55:a2:8f:7d:05:43:22:e8:1d:cf:83:
         75:f3:98:b2:2b:cb:ba:06:50:19:6b:67:7a:1a:b1:ce:ca:39:
         69:2b:fb:dd:5b:ed:5d:f2:b5:3a:61:40:2e:5b:86:e5:f9:9c:
         ae:78:ee:11:42:6d:da:d9:06:98:ac:bd:53:0b:b4:60:91:b9:
         7c:24:53:c6:f3:57:c9:a1:c9:d8:4b:bf:2d:23:73:49:a1:e1:
         de:47:91:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa2a7jnnu4gWApa/xVLWPYqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMjNhYjczMDUzMDQ3OTJkYzJjZTgxNzgwYjVkYjg4OWQ4
ZjdmM2EwHhcNMjUwNTA5MTkwMDM0WhcNMjUwNTEwMTkwMDM0WjAzMTEwLwYDVQQD
EyhlMjE1OTg4ZTZiZmVkOWRlYWRiNjRlYzkyZWJjMTE4NGMxOGNmMWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8gR9/2ADj9OKtIRkTh7uTFhpZNz
bT7zUWZ00TTCKwZp+im0ksIrOcMburJf+VlinT3VSdeUdR1JdYgBh5EnQc3m5spn
nNHrO49EIw07fgEZvH77aEMIhfl5Fb47K2OPd5lRGcurEtjOqdWdzrugtWPfVQ34
uj/rgnIPiETAEbF4D08uNldcSIMH298GUAW6FOdGs9hqflNLZ312JBlY+c21s22M
n6ZogqPQW5IBObvSVDaMOESNxK8btz+TpRKAWIOutLjPYPkIL5NyySgRMo9qDexG
kKMiReU0Frb/mp/B653UqCUCxDVwQ0iHmBWniOcffAl6CAk4QscecCFvpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOIVmI5r/tnerbZOyS68EYTBjPHTMB8GA1UdIwQY
MBaAFD8jq3MFMEeS3CzoF4C124idj386MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHlPcmN3VXdSNUxjTE9nWGdMWGJpSjJQZnpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mN2RiOWQtZmNkOS00ZjIxLTkxYzIt
NjAwMzNkNWIwM2JiLzEvUHlPcmN3VXdSNUxjTE9nWGdMWGJpSjJQZnpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9mN2RiOWQtZmNkOS00ZjIxLTkxYzItNjAwMzNkNWIwM2Ji
LzEvUHlPcmN3VXdSNUxjTE9nWGdMWGJpSjJQZnpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVVb3msnu
brXfeoaHlZR/BZKAqwdhqgB+Azvc54FUw60lC9V0Nvsw7Hif3hnUC0A3BDEVL0KD
yL1zfE0urq6ZxvIcS0TdAO6pgMoRebKnUabxg6qjThOwSwU8r/SizR4NV81lZjX3
6FjDgeI3qg5Dp3mAC80qtfcnJh0Q5PfFDdWjR0y/uC8GixQC0/nNrCnsx84HuZtj
/rOi0lDLUgux49hfXeVRJWyjqlWij30FQyLoHc+DdfOYsivLugZQGWtnehqxzso5
aSv73VvtXfK1OmFALluG5fmcrnjuEUJt2tkGmKy9Uwu0YJG5fCRTxvNXyaHJ2Eu/
LSNzSaHh3keRgQ==
-----END CERTIFICATE-----
Generated at Sat May 10 04:42:14 2025 by rpki-client