Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft
File:                     P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft (raw, json)
Hash identifier:          pbXoxzECrjIOVyfZPIP0ULsJhrY7kv/JrmLbQEbeUuk=
Subject key identifier:   2C:09:A5:88:F3:A7:D2:EC:5F:7F:01:A4:4D:4B:FA:D1:75:E5:CA:36
Authority key identifier: 3F:81:38:FE:A0:66:D6:F5:04:43:60:01:CC:9D:7F:33:9D:B7:34:C8
Certificate issuer:       /CN=3f8138fea066d6f504436001cc9d7f339db734c8
Certificate serial:       0196D8531E8B609293BEFEA7099166D69068
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P4E4_qBm1vUEQ2ABzJ1_M523NMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft
Manifest number:          01C4
Signing time:             Fri 16 May 2025 09:00:48 +0000
Manifest this update:     Fri 16 May 2025 09:00:48 +0000
Manifest next update:     Sat 17 May 2025 09:00:48 +0000
Files and hashes:         1: P4E4_qBm1vUEQ2ABzJ1_M523NMg.crl (hash: +iswXDauMsDBPRKFwGfr9zfZVyw3CRyQ6VjURwCuoI0=)
                          2: a7YNlS63NsZTTW2uGzFrnfKok9w.roa (hash: A6Vj/t1HktktvRKs1GT2mBgPnzQ8ZrkihcAERAUHOMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P4E4_qBm1vUEQ2ABzJ1_M523NMg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 May 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d8:53:1e:8b:60:92:93:be:fe:a7:09:91:66:d6:90:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8138fea066d6f504436001cc9d7f339db734c8
        Validity
            Not Before: May 16 09:00:48 2025 GMT
            Not After : May 17 09:00:48 2025 GMT
        Subject: CN=2c09a588f3a7d2ec5f7f01a44d4bfad175e5ca36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ac:42:83:61:f8:53:40:be:32:19:56:04:74:
                    e7:a6:15:a9:61:39:c6:fa:2d:39:6f:2f:96:d7:ca:
                    5e:4b:96:52:95:58:b8:a5:51:a3:56:73:e7:a2:81:
                    39:32:8a:66:49:70:4c:77:a8:55:34:dd:78:ef:fc:
                    40:bc:a9:9f:dd:5c:c3:26:92:3d:94:a7:27:d7:a2:
                    0f:de:3d:37:b8:4e:1c:3c:fd:28:8d:df:74:87:6d:
                    62:bb:04:99:8c:7b:43:5a:23:d3:65:43:46:1b:49:
                    be:70:ef:04:df:06:3d:dd:92:03:71:06:71:99:dc:
                    99:92:60:24:1f:07:e1:f5:2e:af:eb:51:3f:9f:77:
                    b5:b0:88:33:2d:fc:bc:3f:48:f9:2a:90:49:91:5e:
                    a5:d9:70:da:b9:0c:2a:b9:b6:c4:1b:be:ae:80:62:
                    ca:5c:79:51:d2:11:3b:50:51:06:60:c7:32:0c:e0:
                    af:41:cc:2b:af:29:84:a9:2e:7a:cd:ba:b8:41:07:
                    5a:95:e8:44:f6:ae:ba:55:fb:5a:bc:8c:22:7a:30:
                    b8:c1:4f:8a:11:c3:2e:c2:79:03:ad:8d:8e:f1:f4:
                    70:25:63:4b:ec:e2:06:21:40:6b:a5:62:8d:86:2e:
                    d9:1a:a7:06:ca:d1:ef:56:09:7b:ea:b5:64:cf:54:
                    61:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:09:A5:88:F3:A7:D2:EC:5F:7F:01:A4:4D:4B:FA:D1:75:E5:CA:36
            X509v3 Authority Key Identifier:
                keyid:3F:81:38:FE:A0:66:D6:F5:04:43:60:01:CC:9D:7F:33:9D:B7:34:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4E4_qBm1vUEQ2ABzJ1_M523NMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:43:a1:3c:f2:31:b4:e0:db:f8:88:c1:46:b6:35:5d:bf:10:
         d1:be:d2:15:fb:ec:8d:13:7d:32:49:0c:d0:46:56:7d:5b:e0:
         35:bd:9e:a9:d2:1b:49:6e:36:54:40:80:8b:a0:2e:e0:c1:82:
         61:0e:fc:d6:4c:9c:db:23:57:99:96:c2:f4:67:55:7e:e5:79:
         c5:f5:08:7e:7e:d8:8f:3b:aa:87:5d:0a:3e:42:6c:0f:df:a2:
         a7:0a:f0:22:7c:52:2a:c2:58:f2:59:9e:0c:d4:ae:2d:46:30:
         6b:42:29:87:26:b1:69:22:c5:8b:53:61:4e:3a:c6:06:4f:aa:
         fa:8d:a8:12:68:d4:e3:a7:4b:e4:d3:2e:ff:6c:fa:1e:ca:54:
         32:23:87:fe:bf:a6:51:dd:ae:45:a4:84:b5:95:4b:9b:81:56:
         f4:24:96:39:28:a9:df:88:54:96:fc:e9:cb:40:a6:9e:1d:37:
         fd:81:b0:05:86:da:e0:82:fd:9b:8b:fa:be:ee:a3:d2:e1:30:
         15:27:cc:e0:b2:05:79:a7:0d:65:4e:9e:2c:31:1e:1f:6c:1b:
         c3:cf:da:ba:6e:0f:0b:ca:13:ac:09:98:c8:c8:c2:0a:6c:c8:
         b3:d3:25:6d:9d:10:da:5e:60:ef:dc:52:0b:fb:bc:7b:e3:df:
         f2:8a:e1:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbYUx6LYJKTvv6nCZFm1pBoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmODEzOGZlYTA2NmQ2ZjUwNDQzNjAwMWNjOWQ3ZjMzOWRi
NzM0YzgwHhcNMjUwNTE2MDkwMDQ4WhcNMjUwNTE3MDkwMDQ4WjAzMTEwLwYDVQQD
EygyYzA5YTU4OGYzYTdkMmVjNWY3ZjAxYTQ0ZDRiZmFkMTc1ZTVjYTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaxCg2H4U0C+MhlWBHTnphWpYTnG
+i05by+W18peS5ZSlVi4pVGjVnPnooE5MopmSXBMd6hVNN147/xAvKmf3VzDJpI9
lKcn16IP3j03uE4cPP0ojd90h21iuwSZjHtDWiPTZUNGG0m+cO8E3wY93ZIDcQZx
mdyZkmAkHwfh9S6v61E/n3e1sIgzLfy8P0j5KpBJkV6l2XDauQwqubbEG76ugGLK
XHlR0hE7UFEGYMcyDOCvQcwrrymEqS56zbq4QQdalehE9q66VftavIwiejC4wU+K
EcMuwnkDrY2O8fRwJWNL7OIGIUBrpWKNhi7ZGqcGytHvVgl76rVkz1RhMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwJpYjzp9LsX38BpE1L+tF15co2MB8GA1UdIwQY
MBaAFD+BOP6gZtb1BENgAcydfzOdtzTIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDRFNF9xQm0xdlVFUTJBQnpKMV9NNTIzTk1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8yNjE4ZjgtMTI2NC00MDExLTliODgt
ZTMyN2U1MjI3MDY2LzEvUDRFNF9xQm0xdlVFUTJBQnpKMV9NNTIzTk1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8yNjE4ZjgtMTI2NC00MDExLTliODgtZTMyN2U1MjI3MDY2
LzEvUDRFNF9xQm0xdlVFUTJBQnpKMV9NNTIzTk1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd0OhPPIx
tODb+IjBRrY1Xb8Q0b7SFfvsjRN9MkkM0EZWfVvgNb2eqdIbSW42VECAi6Au4MGC
YQ781kyc2yNXmZbC9GdVfuV5xfUIfn7Yjzuqh10KPkJsD9+ipwrwInxSKsJY8lme
DNSuLUYwa0IphyaxaSLFi1NhTjrGBk+q+o2oEmjU46dL5NMu/2z6HspUMiOH/r+m
Ud2uRaSEtZVLm4FW9CSWOSip34hUlvzpy0Cmnh03/YGwBYba4IL9m4v6vu6j0uEw
FSfM4LIFeacNZU6eLDEeH2wbw8/aum4PC8oTrAmYyMjCCmzIs9MlbZ0Q2l5g79xS
C/u8e+Pf8orhBw==
-----END CERTIFICATE-----
Generated at Fri May 16 12:14:26 2025 by rpki-client