Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.mft
File:                     evOlFiiU19GsKvgy16vPHb4RCuE.mft (raw, json)
Hash identifier:          FKusqW6uBm4Qq+cdUXHI0FUur64FfW6SRgTsAocXLE4=
Subject key identifier:   1E:59:E0:A1:E8:42:87:B5:DF:28:DA:5E:B0:38:C5:E7:55:2C:E6:4C
Authority key identifier: 7A:F3:A5:16:28:94:D7:D1:AC:2A:F8:32:D7:AB:CF:1D:BE:11:0A:E1
Certificate issuer:       /CN=7af3a5162894d7d1ac2af832d7abcf1dbe110ae1
Certificate serial:       0196C8047E63B3A0248F1815DDC63FF3970E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/evOlFiiU19GsKvgy16vPHb4RCuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.mft
Manifest number:          039D
Signing time:             Tue 13 May 2025 05:00:59 +0000
Manifest this update:     Tue 13 May 2025 05:00:59 +0000
Manifest next update:     Wed 14 May 2025 05:00:59 +0000
Files and hashes:         1: evOlFiiU19GsKvgy16vPHb4RCuE.crl (hash: /i41aJmEfLN9cfPHSG4PLSgrLO5rTsM3y1SN0hsYNM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/evOlFiiU19GsKvgy16vPHb4RCuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c8:04:7e:63:b3:a0:24:8f:18:15:dd:c6:3f:f3:97:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7af3a5162894d7d1ac2af832d7abcf1dbe110ae1
        Validity
            Not Before: May 13 05:00:59 2025 GMT
            Not After : May 14 05:00:59 2025 GMT
        Subject: CN=1e59e0a1e84287b5df28da5eb038c5e7552ce64c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:df:41:1d:94:22:a1:e1:a8:f6:25:0a:22:cd:
                    13:d7:e1:b5:7a:c1:58:57:ca:ba:76:ab:0f:e8:5f:
                    94:23:a7:28:ad:5a:33:17:b1:7b:23:87:09:d3:79:
                    00:40:93:8a:62:5d:96:38:10:7e:e7:6b:7d:64:57:
                    c4:f9:8a:6f:3e:1d:4c:09:67:eb:79:8b:0c:9b:94:
                    3c:ba:c6:7f:81:55:8b:20:a0:2c:2e:27:83:72:dc:
                    7b:8d:ac:61:e8:e4:e3:ca:90:af:ce:bc:e2:75:a4:
                    15:28:ed:03:2f:d2:1f:21:6d:9b:cb:1b:2d:e7:1d:
                    2e:e8:42:eb:77:45:9a:c7:ea:62:d2:09:5a:a9:f4:
                    8d:43:da:2e:5d:1b:f8:df:96:cc:fc:aa:59:8a:fe:
                    08:c2:f4:02:12:9a:d0:04:eb:cf:d9:7a:f2:53:97:
                    f9:01:dc:ec:93:0d:5d:a0:7c:5d:3d:da:42:58:4c:
                    3b:01:42:53:0b:19:89:d7:b3:7f:a7:f4:f6:20:f4:
                    e4:f2:0e:8d:17:35:6f:fa:3a:e1:73:15:c0:a8:5a:
                    8b:fe:5f:8f:c8:e9:07:c8:f1:16:0d:f7:28:92:f4:
                    45:60:6c:f5:e9:db:6d:60:49:31:0d:da:6d:e7:db:
                    36:94:62:d2:cd:ff:da:3d:3b:f0:c9:c7:3f:25:92:
                    aa:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:59:E0:A1:E8:42:87:B5:DF:28:DA:5E:B0:38:C5:E7:55:2C:E6:4C
            X509v3 Authority Key Identifier:
                keyid:7A:F3:A5:16:28:94:D7:D1:AC:2A:F8:32:D7:AB:CF:1D:BE:11:0A:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evOlFiiU19GsKvgy16vPHb4RCuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:c4:d6:09:a1:ff:20:92:7c:87:4f:72:e2:7f:0b:74:59:bc:
         39:6e:d7:4d:00:8a:62:1a:96:c4:ae:f2:42:05:7e:f9:67:04:
         be:91:f3:a4:05:88:14:9c:30:c1:97:15:06:6a:39:cc:49:a0:
         71:bf:4a:9e:e3:93:c2:5f:a3:6b:5e:f7:c4:af:39:6c:ad:c6:
         d1:07:20:5d:bd:ea:ee:c6:ad:f2:0f:03:d4:7e:5e:7e:11:37:
         38:a0:83:1c:3d:e8:50:fd:06:28:78:3c:bc:5d:b3:55:73:bb:
         7e:8e:38:13:29:a7:ce:f3:56:d9:45:50:17:82:90:97:65:2c:
         18:8b:49:78:e0:ac:96:e0:5a:96:78:2e:f2:a4:75:51:8b:b0:
         60:e9:43:1e:dd:0c:86:e5:35:10:7d:c5:1b:ab:58:28:bd:b9:
         ad:9f:83:7a:8c:b2:2c:83:2f:5f:52:b2:9e:7a:cf:b8:14:a7:
         de:41:60:fd:ac:db:1f:11:c0:aa:5e:bd:46:f7:dc:9e:2a:22:
         0d:f0:2b:6b:de:08:d2:16:5b:87:89:fa:37:21:85:92:b6:46:
         3f:62:b4:68:d5:aa:68:21:a3:24:1d:7a:1b:21:07:5d:7a:ca:
         74:e7:43:df:12:84:43:fd:82:be:d8:03:12:6a:ab:a8:c4:12:
         92:01:bc:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbIBH5js6AkjxgV3cY/85cOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhZjNhNTE2Mjg5NGQ3ZDFhYzJhZjgzMmQ3YWJjZjFkYmUx
MTBhZTEwHhcNMjUwNTEzMDUwMDU5WhcNMjUwNTE0MDUwMDU5WjAzMTEwLwYDVQQD
EygxZTU5ZTBhMWU4NDI4N2I1ZGYyOGRhNWViMDM4YzVlNzU1MmNlNjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu99BHZQioeGo9iUKIs0T1+G1esFY
V8q6dqsP6F+UI6corVozF7F7I4cJ03kAQJOKYl2WOBB+52t9ZFfE+YpvPh1MCWfr
eYsMm5Q8usZ/gVWLIKAsLieDctx7jaxh6OTjypCvzrzidaQVKO0DL9IfIW2byxst
5x0u6ELrd0Wax+pi0glaqfSNQ9ouXRv435bM/KpZiv4IwvQCEprQBOvP2XryU5f5
Adzskw1doHxdPdpCWEw7AUJTCxmJ17N/p/T2IPTk8g6NFzVv+jrhcxXAqFqL/l+P
yOkHyPEWDfcokvRFYGz16dttYEkxDdpt59s2lGLSzf/aPTvwycc/JZKqZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5Z4KHoQoe13yjaXrA4xedVLOZMMB8GA1UdIwQY
MBaAFHrzpRYolNfRrCr4Mterzx2+EQrhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXZPbEZpaVUxOUdzS3ZneTE2dlBIYjRSQ3VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS81Y2Y1N2QtNTdmYS00ZjcxLWJmOTIt
NzVkNTRiMTAzMDljLzEvZXZPbEZpaVUxOUdzS3ZneTE2dlBIYjRSQ3VFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS81Y2Y1N2QtNTdmYS00ZjcxLWJmOTItNzVkNTRiMTAzMDlj
LzEvZXZPbEZpaVUxOUdzS3ZneTE2dlBIYjRSQ3VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs8TWCaH/
IJJ8h09y4n8LdFm8OW7XTQCKYhqWxK7yQgV++WcEvpHzpAWIFJwwwZcVBmo5zEmg
cb9KnuOTwl+ja173xK85bK3G0QcgXb3q7sat8g8D1H5efhE3OKCDHD3oUP0GKHg8
vF2zVXO7fo44EymnzvNW2UVQF4KQl2UsGItJeOCsluBalngu8qR1UYuwYOlDHt0M
huU1EH3FG6tYKL25rZ+DeoyyLIMvX1KynnrPuBSn3kFg/azbHxHAql69Rvfcnioi
DfAra94I0hZbh4n6NyGFkrZGP2K0aNWqaCGjJB16GyEHXXrKdOdD3xKEQ/2CvtgD
EmqrqMQSkgG84g==
-----END CERTIFICATE-----
Generated at Tue May 13 06:55:09 2025 by rpki-client