Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.mft
File:                     IszPoSLTuug6vlRBwKGcm-E_VIs.mft (raw, json)
Hash identifier:          VOmUnAinKrM8feb80qvICRO02vmOlkbyvlNhO5KAPKk=
Subject key identifier:   49:D4:31:80:33:33:D2:65:59:03:3A:E4:8E:9E:B6:26:8B:DE:F8:A6
Authority key identifier: 22:CC:CF:A1:22:D3:BA:E8:3A:BE:54:41:C0:A1:9C:9B:E1:3F:54:8B
Certificate issuer:       /CN=22cccfa122d3bae83abe5441c0a19c9be13f548b
Certificate serial:       0196BC36D6B29C17F1E2BCFC25C7682E0564
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IszPoSLTuug6vlRBwKGcm-E_VIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.mft
Manifest number:          0BDA
Signing time:             Sat 10 May 2025 22:00:32 +0000
Manifest this update:     Sat 10 May 2025 22:00:32 +0000
Manifest next update:     Sun 11 May 2025 22:00:32 +0000
Files and hashes:         1: IszPoSLTuug6vlRBwKGcm-E_VIs.crl (hash: FrnXV2R8yF+i8l7GfuuIcTaQryDOfGdFLkTErlJJ5Pg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IszPoSLTuug6vlRBwKGcm-E_VIs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:36:d6:b2:9c:17:f1:e2:bc:fc:25:c7:68:2e:05:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22cccfa122d3bae83abe5441c0a19c9be13f548b
        Validity
            Not Before: May 10 22:00:32 2025 GMT
            Not After : May 11 22:00:32 2025 GMT
        Subject: CN=49d431803333d26559033ae48e9eb6268bdef8a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:25:98:f3:1b:04:16:6e:64:02:0f:61:99:1c:
                    f0:a3:9b:c0:72:ef:54:1e:52:43:f5:d8:de:97:eb:
                    39:64:bd:67:bc:7c:2f:82:0d:b9:f2:6d:51:f6:7d:
                    91:88:2b:b6:16:b6:02:62:93:00:b2:74:37:ad:77:
                    c3:5c:1b:f0:1e:4f:3a:f5:54:29:7f:97:22:a4:d8:
                    5a:f6:ca:95:cf:4f:9e:c6:66:5c:3a:44:e7:5e:b3:
                    d4:c9:3a:f0:2b:29:e5:d6:bf:ac:0d:fc:24:f9:45:
                    78:76:47:21:b0:d8:37:72:50:2c:e0:76:9d:a6:76:
                    06:6e:e1:28:d6:9a:24:46:2c:a4:96:f3:ee:be:02:
                    f4:ef:15:c5:06:7c:60:5b:36:84:4a:72:36:f4:0f:
                    69:3e:73:f1:3e:f3:d5:03:66:54:43:bb:42:c7:5a:
                    28:3a:93:3e:26:6b:64:fe:6e:8a:69:07:25:7d:da:
                    2b:9a:7f:5b:7b:bc:fc:78:75:02:b3:50:b6:29:89:
                    16:da:8e:c7:bf:07:da:06:92:d3:d9:b8:f9:7a:a2:
                    21:f5:08:12:f4:55:02:c8:8e:76:b9:0b:2d:8d:46:
                    d0:7a:48:4d:13:63:2d:34:ea:9e:69:b5:9b:2d:e6:
                    87:b2:13:d4:b1:e8:69:16:ea:d2:36:29:32:5c:b9:
                    dd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D4:31:80:33:33:D2:65:59:03:3A:E4:8E:9E:B6:26:8B:DE:F8:A6
            X509v3 Authority Key Identifier:
                keyid:22:CC:CF:A1:22:D3:BA:E8:3A:BE:54:41:C0:A1:9C:9B:E1:3F:54:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IszPoSLTuug6vlRBwKGcm-E_VIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:77:62:3a:5f:a0:9c:28:d9:49:01:33:45:0c:c0:9a:04:66:
         39:14:b0:ee:97:2b:e1:57:88:a0:b7:c2:a5:48:f7:cd:78:6d:
         c1:9f:39:86:88:ee:b0:08:d5:c4:ac:57:3a:76:85:ab:4e:c9:
         4f:fc:8f:ba:26:c7:ce:68:4f:11:ef:f3:8e:80:d6:0b:58:4b:
         a4:39:da:50:77:0c:99:78:33:b0:ed:60:37:a2:dd:3e:f1:45:
         00:0f:4c:5b:60:bc:a5:f4:02:62:f3:9d:f6:59:d2:83:bb:38:
         28:44:1c:4d:1f:ee:4d:63:dc:82:e7:21:2b:be:33:13:b3:3a:
         bc:79:a7:93:2f:19:29:ca:67:53:34:29:7e:06:3b:ca:99:08:
         fd:56:4d:5a:00:18:26:d8:88:9b:91:c9:cd:7a:3f:77:98:6b:
         ef:92:36:5c:29:b5:3f:86:04:4c:e3:7d:58:e0:99:43:cd:90:
         f2:e1:70:a9:e1:86:6e:5e:5b:f7:ff:12:21:18:73:76:83:6e:
         b2:48:88:11:44:41:7f:ea:95:03:9b:fe:a7:c5:3a:89:88:e1:
         88:4a:0a:9f:35:30:ac:f6:f8:93:d7:55:ed:6a:41:5a:55:4a:
         db:a3:39:d5:a1:14:a1:de:8b:4b:13:cf:d8:e7:da:16:00:71:
         a4:79:e2:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa8NtaynBfx4rz8JcdoLgVkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyY2NjZmExMjJkM2JhZTgzYWJlNTQ0MWMwYTE5YzliZTEz
ZjU0OGIwHhcNMjUwNTEwMjIwMDMyWhcNMjUwNTExMjIwMDMyWjAzMTEwLwYDVQQD
Eyg0OWQ0MzE4MDMzMzNkMjY1NTkwMzNhZTQ4ZTllYjYyNjhiZGVmOGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SWY8xsEFm5kAg9hmRzwo5vAcu9U
HlJD9djel+s5ZL1nvHwvgg258m1R9n2RiCu2FrYCYpMAsnQ3rXfDXBvwHk869VQp
f5cipNha9sqVz0+exmZcOkTnXrPUyTrwKynl1r+sDfwk+UV4dkchsNg3clAs4Had
pnYGbuEo1pokRiyklvPuvgL07xXFBnxgWzaESnI29A9pPnPxPvPVA2ZUQ7tCx1oo
OpM+Jmtk/m6KaQclfdormn9be7z8eHUCs1C2KYkW2o7HvwfaBpLT2bj5eqIh9QgS
9FUCyI52uQstjUbQekhNE2MtNOqeabWbLeaHshPUsehpFurSNikyXLndnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnUMYAzM9JlWQM65I6etiaL3vimMB8GA1UdIwQY
MBaAFCLMz6Ei07roOr5UQcChnJvhP1SLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXN6UG9TTFR1dWc2dmxSQndLR2NtLUVfVklzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS82OTYxNzMtZGRkMy00ZGUyLWFiNjct
YzE1YWZlNTc5NDQ4LzEvSXN6UG9TTFR1dWc2dmxSQndLR2NtLUVfVklzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS82OTYxNzMtZGRkMy00ZGUyLWFiNjctYzE1YWZlNTc5NDQ4
LzEvSXN6UG9TTFR1dWc2dmxSQndLR2NtLUVfVklzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQXdiOl+g
nCjZSQEzRQzAmgRmORSw7pcr4VeIoLfCpUj3zXhtwZ85hojusAjVxKxXOnaFq07J
T/yPuibHzmhPEe/zjoDWC1hLpDnaUHcMmXgzsO1gN6LdPvFFAA9MW2C8pfQCYvOd
9lnSg7s4KEQcTR/uTWPcguchK74zE7M6vHmnky8ZKcpnUzQpfgY7ypkI/VZNWgAY
JtiIm5HJzXo/d5hr75I2XCm1P4YETON9WOCZQ82Q8uFwqeGGbl5b9/8SIRhzdoNu
skiIEURBf+qVA5v+p8U6iYjhiEoKnzUwrPb4k9dV7WpBWlVK26M51aEUod6LSxPP
2OfaFgBxpHnikA==
-----END CERTIFICATE-----
Generated at Sun May 11 01:11:08 2025 by rpki-client