Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/937b76-8915-40e1-a134-f2d6352b5e96/1/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.mft
File:                     J8b7UHD0ODlQPGvd9Rbeh8f7iQc.mft (raw, json)
Hash identifier:          tikc7uNUzVPSZWAGvxEKwOdor6wRVOzsrsoeQ7n0YGU=
Subject key identifier:   84:68:E2:48:9E:9E:00:ED:7A:64:0E:19:D6:EC:A2:CC:77:0A:57:A4
Authority key identifier: 27:C6:FB:50:70:F4:38:39:50:3C:6B:DD:F5:16:DE:87:C7:FB:89:07
Certificate issuer:       /CN=27c6fb5070f43839503c6bddf516de87c7fb8907
Certificate serial:       0196A0888AF72136D598767E6201068FE7F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/937b76-8915-40e1-a134-f2d6352b5e96/1/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.mft
Manifest number:          1520
Signing time:             Mon 05 May 2025 13:00:25 +0000
Manifest this update:     Mon 05 May 2025 13:00:25 +0000
Manifest next update:     Tue 06 May 2025 13:00:25 +0000
Files and hashes:         1: J8b7UHD0ODlQPGvd9Rbeh8f7iQc.crl (hash: iuK0HCL3bhqkuCJN0/fQUJzC9mF/J0Sso64HTQe3N1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/937b76-8915-40e1-a134-f2d6352b5e96/1/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/937b76-8915-40e1-a134-f2d6352b5e96/1/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a0:88:8a:f7:21:36:d5:98:76:7e:62:01:06:8f:e7:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27c6fb5070f43839503c6bddf516de87c7fb8907
        Validity
            Not Before: May  5 13:00:25 2025 GMT
            Not After : May  6 13:00:25 2025 GMT
        Subject: CN=8468e2489e9e00ed7a640e19d6eca2cc770a57a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bd:a8:13:3a:bc:4d:28:33:b8:b2:61:f2:23:
                    9c:ad:e5:8a:1a:36:2c:45:9d:31:cd:d0:f1:60:be:
                    12:fc:5a:a2:a1:69:82:4c:e0:be:bd:84:18:1d:24:
                    6e:2a:5e:54:14:a5:c8:aa:53:06:a8:04:78:68:d9:
                    1f:04:b7:96:63:67:b8:eb:87:8a:4c:0c:25:39:d3:
                    06:10:16:eb:eb:2a:ea:e3:b3:e5:b3:30:a2:dc:93:
                    8b:f1:05:5e:3d:b7:b7:91:d5:fe:ef:a1:44:53:fc:
                    bd:2e:03:be:64:7a:35:8b:81:92:6c:cf:e7:83:57:
                    38:c6:ce:7d:a7:f8:2a:43:1f:e3:b7:c7:c0:a2:50:
                    b6:a1:4d:06:34:c3:0f:17:75:1e:38:6e:0f:4a:e7:
                    a8:25:0f:99:cf:c5:52:76:cc:d7:a9:25:16:d1:59:
                    08:5d:84:09:2f:ab:40:45:22:b0:31:0f:3e:4c:81:
                    d0:5e:f6:ab:49:04:4d:34:85:8b:73:29:db:75:46:
                    be:3d:3b:88:c7:a0:59:8e:81:1f:cf:ee:41:87:55:
                    74:be:ec:ea:6f:1f:f0:76:18:17:4b:fb:eb:79:dc:
                    d4:e1:70:5a:1c:c4:0d:7c:3a:2d:ad:e0:55:1d:e1:
                    e2:b6:3c:53:17:3a:58:0d:b3:4c:5b:bc:48:9f:39:
                    69:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:68:E2:48:9E:9E:00:ED:7A:64:0E:19:D6:EC:A2:CC:77:0A:57:A4
            X509v3 Authority Key Identifier:
                keyid:27:C6:FB:50:70:F4:38:39:50:3C:6B:DD:F5:16:DE:87:C7:FB:89:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/937b76-8915-40e1-a134-f2d6352b5e96/1/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/937b76-8915-40e1-a134-f2d6352b5e96/1/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:2f:df:6d:e0:99:5f:3a:c5:3c:99:cb:ad:6c:1e:ab:88:5f:
         c7:32:3c:82:49:7a:6a:0a:b3:f1:08:01:2c:47:91:8b:c5:23:
         af:98:29:81:11:37:c8:f1:90:94:b7:8c:87:9f:91:a8:a2:af:
         a4:f8:7a:d3:40:0b:69:20:55:7c:04:96:2c:97:a2:74:b1:71:
         23:3c:f2:61:25:8a:6a:05:c5:28:0c:75:ac:84:b7:a8:24:8b:
         59:80:a4:36:43:86:a9:32:f1:22:6c:a2:75:16:8f:fe:e5:78:
         93:2c:55:ee:f0:c8:54:df:8c:10:c6:10:62:ee:92:c2:59:8a:
         ef:ff:f7:3d:74:a2:b9:fd:c6:a4:60:28:4d:62:96:01:df:79:
         6b:6c:28:e5:71:e1:63:a7:e5:ac:3e:bc:99:59:8f:f9:30:2a:
         aa:6e:5e:f4:e5:0f:4e:cb:10:ba:d0:36:6e:64:b0:f6:39:b4:
         c6:6a:23:69:07:10:a5:9f:4c:c0:b9:4d:b6:9e:8c:03:67:91:
         d9:13:f7:d9:06:9c:e9:97:40:94:7b:17:19:7d:93:58:89:b2:
         c0:d8:42:d9:30:ea:4c:9c:fe:18:25:45:70:96:f2:97:13:30:
         a6:c3:80:7c:b6:24:0a:e3:26:39:ae:3b:1b:1f:99:1e:1f:e0:
         e5:1a:b5:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZagiIr3ITbVmHZ+YgEGj+f0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YzZmYjUwNzBmNDM4Mzk1MDNjNmJkZGY1MTZkZTg3Yzdm
Yjg5MDcwHhcNMjUwNTA1MTMwMDI1WhcNMjUwNTA2MTMwMDI1WjAzMTEwLwYDVQQD
Eyg4NDY4ZTI0ODllOWUwMGVkN2E2NDBlMTlkNmVjYTJjYzc3MGE1N2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL2oEzq8TSgzuLJh8iOcreWKGjYs
RZ0xzdDxYL4S/FqioWmCTOC+vYQYHSRuKl5UFKXIqlMGqAR4aNkfBLeWY2e464eK
TAwlOdMGEBbr6yrq47PlszCi3JOL8QVePbe3kdX+76FEU/y9LgO+ZHo1i4GSbM/n
g1c4xs59p/gqQx/jt8fAolC2oU0GNMMPF3UeOG4PSueoJQ+Zz8VSdszXqSUW0VkI
XYQJL6tARSKwMQ8+TIHQXvarSQRNNIWLcynbdUa+PTuIx6BZjoEfz+5Bh1V0vuzq
bx/wdhgXS/vredzU4XBaHMQNfDotreBVHeHitjxTFzpYDbNMW7xInzlpAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRo4kiengDtemQOGdbsosx3ClekMB8GA1UdIwQY
MBaAFCfG+1Bw9Dg5UDxr3fUW3ofH+4kHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjhiN1VIRDBPRGxRUEd2ZDlSYmVoOGY3aVFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi85MzdiNzYtODkxNS00MGUxLWExMzQt
ZjJkNjM1MmI1ZTk2LzEvSjhiN1VIRDBPRGxRUEd2ZDlSYmVoOGY3aVFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi85MzdiNzYtODkxNS00MGUxLWExMzQtZjJkNjM1MmI1ZTk2
LzEvSjhiN1VIRDBPRGxRUEd2ZDlSYmVoOGY3aVFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQS/fbeCZ
XzrFPJnLrWweq4hfxzI8gkl6agqz8QgBLEeRi8Ujr5gpgRE3yPGQlLeMh5+RqKKv
pPh600ALaSBVfASWLJeidLFxIzzyYSWKagXFKAx1rIS3qCSLWYCkNkOGqTLxImyi
dRaP/uV4kyxV7vDIVN+MEMYQYu6SwlmK7//3PXSiuf3GpGAoTWKWAd95a2wo5XHh
Y6flrD68mVmP+TAqqm5e9OUPTssQutA2bmSw9jm0xmojaQcQpZ9MwLlNtp6MA2eR
2RP32Qac6ZdAlHsXGX2TWImywNhC2TDqTJz+GCVFcJbylxMwpsOAfLYkCuMmOa47
Gx+ZHh/g5Rq1sg==
-----END CERTIFICATE-----
Generated at Mon May 5 20:49:05 2025 by rpki-client