Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
File:                     2C4TD2tr3205KA43XfNE5uCjSzw.mft (raw, json)
Hash identifier:          6mE5BS+CyKQkGHy0OP0wblds2k4OkIfGkWb6/K/eR+g=
Subject key identifier:   5E:E4:D7:B8:3F:7E:7B:1A:6F:67:EE:75:31:BE:9C:7B:A0:07:B9:3F
Authority key identifier: D8:2E:13:0F:6B:6B:DF:6D:39:28:0E:37:5D:F3:44:E6:E0:A3:4B:3C
Certificate issuer:       /CN=d82e130f6b6bdf6d39280e375df344e6e0a34b3c
Certificate serial:       0196CB053AA8CC7891C343DAE8CBD49067BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
Manifest number:          153D
Signing time:             Tue 13 May 2025 19:00:39 +0000
Manifest this update:     Tue 13 May 2025 19:00:39 +0000
Manifest next update:     Wed 14 May 2025 19:00:39 +0000
Files and hashes:         1: 2C4TD2tr3205KA43XfNE5uCjSzw.crl (hash: ytg4w2ZikXtHgXsrGsuUVhca3c85SWbA/BG9Zs4ZRv0=)
                          2: _y5CZTQPUqUUQngHW900Y82Ke5c.roa (hash: NWkl1e7xKV8FX9A552bXtm6FLbLssbeZQgoWd/8O4Xs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 19:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cb:05:3a:a8:cc:78:91:c3:43:da:e8:cb:d4:90:67:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d82e130f6b6bdf6d39280e375df344e6e0a34b3c
        Validity
            Not Before: May 13 19:00:39 2025 GMT
            Not After : May 14 19:00:39 2025 GMT
        Subject: CN=5ee4d7b83f7e7b1a6f67ee7531be9c7ba007b93f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6f:32:12:98:83:cf:dc:4e:61:63:e0:2e:3d:
                    df:a3:8f:0e:e7:16:79:7a:28:e1:67:4d:8d:20:f8:
                    c8:6c:6f:f9:11:ce:3a:59:67:e0:83:4c:c6:d2:d2:
                    58:aa:ea:b3:f7:5b:26:10:f7:ed:11:73:78:b9:3b:
                    3e:49:1b:ec:73:f4:bb:dd:df:97:77:ae:da:b7:5d:
                    fa:2b:65:4b:97:7d:ac:93:0e:37:c4:4c:7f:f8:4f:
                    41:53:ba:e6:82:a1:22:18:12:26:e6:ac:00:6b:5c:
                    27:25:b8:da:a1:11:e4:17:11:ae:bf:b2:a6:b8:e3:
                    54:1f:14:69:d8:3d:f5:58:7c:f9:76:24:a4:4d:62:
                    cc:71:41:a4:cb:e1:4d:85:ca:ee:cb:47:00:75:7e:
                    ba:0a:25:00:57:dc:4b:6e:fa:70:6b:58:47:fb:48:
                    c9:fc:7b:11:c4:97:bd:d7:99:c7:c9:c7:cd:17:62:
                    eb:8d:7a:60:2e:64:b4:eb:e8:60:7a:37:07:48:60:
                    8a:ee:8a:f5:d8:0b:39:34:16:a8:23:55:c0:22:04:
                    d8:a6:98:21:ea:0b:52:5c:82:9a:ab:35:fa:90:d0:
                    ad:10:15:2b:b1:69:c1:03:42:e8:39:56:56:80:97:
                    a2:ab:10:cf:0d:74:dc:bf:95:4b:35:3f:6c:93:26:
                    6b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E4:D7:B8:3F:7E:7B:1A:6F:67:EE:75:31:BE:9C:7B:A0:07:B9:3F
            X509v3 Authority Key Identifier:
                keyid:D8:2E:13:0F:6B:6B:DF:6D:39:28:0E:37:5D:F3:44:E6:E0:A3:4B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:6b:5d:19:b7:0e:47:4e:51:7d:43:9c:3e:11:6c:7a:94:80:
         10:76:88:74:cb:b3:4c:52:b3:c8:07:0e:68:ac:03:53:f2:17:
         f0:bf:15:0d:56:c0:3f:cc:32:5c:5a:19:7d:c2:ef:40:c1:99:
         4c:f9:14:24:11:13:e0:d8:7d:32:22:01:5c:3d:2a:08:ef:e9:
         54:a7:08:2b:48:10:bc:57:dc:9e:0f:63:4f:8c:f0:b2:0e:d0:
         cb:e7:9f:a3:8c:96:80:ed:d5:09:e8:7b:e1:d1:2c:76:3e:3b:
         d0:90:f6:19:f0:d8:0f:0d:2d:9c:86:5b:f2:b5:4e:ec:d7:df:
         1e:fd:fc:f3:f6:b5:25:f2:71:8a:29:50:03:c3:26:43:21:4c:
         b8:8a:d1:23:9f:a4:7f:87:82:0c:06:35:f9:b9:79:e0:8d:0c:
         66:00:64:c7:a5:8e:9f:2e:33:fb:ad:c2:e0:70:08:f9:a4:81:
         f4:83:7d:1a:e0:56:e0:f5:1e:37:23:9f:2d:21:16:84:ae:97:
         74:28:bd:d3:60:41:e2:22:70:ab:7f:37:03:da:ae:72:aa:6f:
         32:53:7f:d0:7b:0a:ae:78:37:c3:fb:05:16:7e:bc:2a:f2:e7:
         a5:27:0c:09:fe:f4:55:34:76:d8:50:06:63:fd:e2:38:e9:12:
         5c:b4:d6:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbLBTqozHiRw0Pa6MvUkGe9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MmUxMzBmNmI2YmRmNmQzOTI4MGUzNzVkZjM0NGU2ZTBh
MzRiM2MwHhcNMjUwNTEzMTkwMDM5WhcNMjUwNTE0MTkwMDM5WjAzMTEwLwYDVQQD
Eyg1ZWU0ZDdiODNmN2U3YjFhNmY2N2VlNzUzMWJlOWM3YmEwMDdiOTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqm8yEpiDz9xOYWPgLj3fo48O5xZ5
eijhZ02NIPjIbG/5Ec46WWfgg0zG0tJYquqz91smEPftEXN4uTs+SRvsc/S73d+X
d67at136K2VLl32skw43xEx/+E9BU7rmgqEiGBIm5qwAa1wnJbjaoRHkFxGuv7Km
uONUHxRp2D31WHz5diSkTWLMcUGky+FNhcruy0cAdX66CiUAV9xLbvpwa1hH+0jJ
/HsRxJe915nHycfNF2LrjXpgLmS06+hgejcHSGCK7or12As5NBaoI1XAIgTYppgh
6gtSXIKaqzX6kNCtEBUrsWnBA0LoOVZWgJeiqxDPDXTcv5VLNT9skyZrdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF7k17g/fnsab2fudTG+nHugB7k/MB8GA1UdIwQY
MBaAFNguEw9ra99tOSgON13zRObgo0s8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkM0VEQydHIzMjA1S0E0M1hmTkU1dUNqU3p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8yZGFmMDQtNGY3Ni00MzMzLWFiZjAt
MjM4ZTBiN2FlMjg0LzEvMkM0VEQydHIzMjA1S0E0M1hmTkU1dUNqU3p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8yZGFmMDQtNGY3Ni00MzMzLWFiZjAtMjM4ZTBiN2FlMjg0
LzEvMkM0VEQydHIzMjA1S0E0M1hmTkU1dUNqU3p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALmtdGbcO
R05RfUOcPhFsepSAEHaIdMuzTFKzyAcOaKwDU/IX8L8VDVbAP8wyXFoZfcLvQMGZ
TPkUJBET4Nh9MiIBXD0qCO/pVKcIK0gQvFfcng9jT4zwsg7Qy+efo4yWgO3VCeh7
4dEsdj470JD2GfDYDw0tnIZb8rVO7NffHv388/a1JfJxiilQA8MmQyFMuIrRI5+k
f4eCDAY1+bl54I0MZgBkx6WOny4z+63C4HAI+aSB9IN9GuBW4PUeNyOfLSEWhK6X
dCi902BB4iJwq383A9qucqpvMlN/0HsKrng3w/sFFn68KvLnpScMCf70VTR22FAG
Y/3iOOkSXLTWTQ==
-----END CERTIFICATE-----
Generated at Wed May 14 06:08:10 2025 by rpki-client