Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft
File:                     54ul2Y1Izr1a0EwIvwkIKxKn46s.mft (raw, json)
Hash identifier:          sj+khEuGGHCxXtv3+A3gKhLrMcsjSYHEwkQf9WRBJRs=
Subject key identifier:   7B:E9:54:48:6F:85:4D:F2:D1:B5:39:8F:3B:B7:D8:25:7D:7F:07:7C
Authority key identifier: E7:8B:A5:D9:8D:48:CE:BD:5A:D0:4C:08:BF:09:08:2B:12:A7:E3:AB
Certificate issuer:       /CN=e78ba5d98d48cebd5ad04c08bf09082b12a7e3ab
Certificate serial:       0196C3F066094C52435EA1E92776DAAB0BE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/54ul2Y1Izr1a0EwIvwkIKxKn46s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft
Manifest number:          0894
Signing time:             Mon 12 May 2025 10:00:33 +0000
Manifest this update:     Mon 12 May 2025 10:00:33 +0000
Manifest next update:     Tue 13 May 2025 10:00:33 +0000
Files and hashes:         1: 54ul2Y1Izr1a0EwIvwkIKxKn46s.crl (hash: SvqKBEiIwkpPoUT/tetaLAwFxuRpHsIjPPRXpYynEZE=)
                          2: EZYeVV1sSE-2JpbNlwV7wPbYnOo.roa (hash: ikr2sxni9DwwzkUepDYlmJ4xAXRqZ6YMknDRjY0uwRw=)
                          3: zFb9es3uXkPMd-ugsb3acKq2kWs.roa (hash: CpgoliFvyxru2zXx6gfrBhmQolzdlTSAa5FPVi8Uo/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/54ul2Y1Izr1a0EwIvwkIKxKn46s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 10:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:f0:66:09:4c:52:43:5e:a1:e9:27:76:da:ab:0b:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e78ba5d98d48cebd5ad04c08bf09082b12a7e3ab
        Validity
            Not Before: May 12 10:00:33 2025 GMT
            Not After : May 13 10:00:33 2025 GMT
        Subject: CN=7be954486f854df2d1b5398f3bb7d8257d7f077c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:18:6d:04:db:1b:ea:a6:e2:e4:ad:bb:64:98:
                    81:f8:f5:fb:98:df:1a:27:4d:75:41:93:37:37:9a:
                    a2:97:bc:0c:b7:ba:ea:a4:60:7f:fd:ec:51:75:77:
                    c7:b7:5c:41:eb:64:5e:19:fa:37:4d:3b:cb:f5:1b:
                    7a:6f:df:05:cb:31:23:8c:68:6a:a5:95:1f:a4:8a:
                    12:8c:2c:c6:89:dd:03:2a:c1:5d:a9:7b:22:84:32:
                    5f:21:ca:91:17:c2:b0:39:fa:e1:45:db:3a:f1:e6:
                    06:ba:ec:d9:aa:3b:f3:7b:e3:5a:37:af:ca:64:43:
                    98:e9:fb:f0:3a:4c:1e:4d:65:cb:d0:cf:f1:1c:b9:
                    d0:33:b0:db:68:8a:c2:8d:48:99:f1:a7:56:b7:b8:
                    fd:66:45:ff:5f:1c:42:45:52:85:ed:e8:a8:06:d4:
                    ab:c0:88:43:08:17:ee:3d:d3:cc:cd:1e:b6:3e:3a:
                    1e:4b:6c:61:4d:1c:c8:7a:7a:f4:d4:48:2a:9d:de:
                    a6:30:11:51:d1:68:4e:4a:33:32:f5:76:f7:cd:80:
                    40:3b:22:d1:28:eb:b3:65:d9:d6:ec:52:b5:72:d1:
                    d5:f9:c1:87:5f:e9:ba:b1:1b:3e:b1:72:30:1a:36:
                    40:35:c9:8c:12:de:4f:d1:b1:82:54:f8:e5:47:b2:
                    fb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E9:54:48:6F:85:4D:F2:D1:B5:39:8F:3B:B7:D8:25:7D:7F:07:7C
            X509v3 Authority Key Identifier:
                keyid:E7:8B:A5:D9:8D:48:CE:BD:5A:D0:4C:08:BF:09:08:2B:12:A7:E3:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54ul2Y1Izr1a0EwIvwkIKxKn46s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:77:c0:7a:dc:0a:69:7f:e6:0e:46:af:2d:52:a0:d7:3b:0e:
         be:5a:8d:8e:e8:d0:73:ad:b2:a2:3c:ec:29:ed:2e:67:18:ad:
         11:bc:ca:ab:78:ba:13:4f:36:ea:50:53:ef:d3:53:ec:00:6d:
         7d:0e:90:fb:b9:15:be:2e:a3:86:c9:01:6a:44:e9:a4:5f:64:
         53:fc:96:f1:ff:57:52:e6:b4:22:10:02:a7:19:4f:ab:33:94:
         59:70:83:f2:8c:c4:74:de:c2:9a:6c:6e:61:53:ad:0c:45:fb:
         67:e6:40:51:83:7b:96:35:26:20:65:7b:ca:fe:d8:62:2d:14:
         f8:12:f8:0a:5e:d7:e8:09:7a:6a:b3:4b:7a:31:02:5c:bc:ed:
         02:c5:82:ca:fb:ef:f8:ca:3f:40:e0:e8:9a:34:81:0d:a0:71:
         45:36:2a:22:57:3b:fc:ca:b6:2a:cb:33:24:d9:23:62:40:f0:
         3b:f9:88:e5:3e:00:0a:93:08:85:be:e1:53:de:0a:ef:c0:84:
         b1:c3:d1:fa:65:cc:f2:65:7c:05:13:2b:e7:2e:7e:5d:07:73:
         9e:31:7a:a9:7e:1d:24:fe:7a:99:97:4a:6b:94:28:6f:69:f6:
         14:89:fd:2d:85:d8:19:0d:cb:7e:db:8e:cf:b8:97:6b:3d:66:
         28:e2:9d:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbD8GYJTFJDXqHpJ3baqwvoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3OGJhNWQ5OGQ0OGNlYmQ1YWQwNGMwOGJmMDkwODJiMTJh
N2UzYWIwHhcNMjUwNTEyMTAwMDMzWhcNMjUwNTEzMTAwMDMzWjAzMTEwLwYDVQQD
Eyg3YmU5NTQ0ODZmODU0ZGYyZDFiNTM5OGYzYmI3ZDgyNTdkN2YwNzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xhtBNsb6qbi5K27ZJiB+PX7mN8a
J011QZM3N5qil7wMt7rqpGB//exRdXfHt1xB62ReGfo3TTvL9Rt6b98FyzEjjGhq
pZUfpIoSjCzGid0DKsFdqXsihDJfIcqRF8KwOfrhRds68eYGuuzZqjvze+NaN6/K
ZEOY6fvwOkweTWXL0M/xHLnQM7DbaIrCjUiZ8adWt7j9ZkX/XxxCRVKF7eioBtSr
wIhDCBfuPdPMzR62PjoeS2xhTRzIenr01Egqnd6mMBFR0WhOSjMy9Xb3zYBAOyLR
KOuzZdnW7FK1ctHV+cGHX+m6sRs+sXIwGjZANcmMEt5P0bGCVPjlR7L7IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvpVEhvhU3y0bU5jzu32CV9fwd8MB8GA1UdIwQY
MBaAFOeLpdmNSM69WtBMCL8JCCsSp+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTR1bDJZMUl6cjFhMEV3SXZ3a0lLeEtuNDZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jNTIyOTMtMDY3OC00YjQyLThhZTAt
NDg5MTY1M2VlYjY3LzEvNTR1bDJZMUl6cjFhMEV3SXZ3a0lLeEtuNDZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9jNTIyOTMtMDY3OC00YjQyLThhZTAtNDg5MTY1M2VlYjY3
LzEvNTR1bDJZMUl6cjFhMEV3SXZ3a0lLeEtuNDZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGXfAetwK
aX/mDkavLVKg1zsOvlqNjujQc62yojzsKe0uZxitEbzKq3i6E0826lBT79NT7ABt
fQ6Q+7kVvi6jhskBakTppF9kU/yW8f9XUua0IhACpxlPqzOUWXCD8ozEdN7Cmmxu
YVOtDEX7Z+ZAUYN7ljUmIGV7yv7YYi0U+BL4Cl7X6Al6arNLejECXLztAsWCyvvv
+Mo/QODomjSBDaBxRTYqIlc7/Mq2KsszJNkjYkDwO/mI5T4ACpMIhb7hU94K78CE
scPR+mXM8mV8BRMr5y5+XQdznjF6qX4dJP56mZdKa5Qob2n2FIn9LYXYGQ3LftuO
z7iXaz1mKOKdwA==
-----END CERTIFICATE-----
Generated at Mon May 12 19:48:38 2025 by rpki-client