Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
File:                     0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft (raw, json)
Hash identifier:          TLl9qDL0M30a+wxTUSxSQaHu9Udn85dT3ic2mX7qSd0=
Subject key identifier:   2C:52:C4:E8:93:3C:D8:53:43:A5:A7:87:14:E9:53:68:65:A5:5D:C6
Authority key identifier: D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE
Certificate issuer:       /CN=d04265fb11c2a220bc350718673e0704d1edadde
Certificate serial:       0196ABB13896D7C0818010F925014DCF85A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
Manifest number:          1052
Signing time:             Wed 07 May 2025 17:00:40 +0000
Manifest this update:     Wed 07 May 2025 17:00:40 +0000
Manifest next update:     Thu 08 May 2025 17:00:40 +0000
Files and hashes:         1: 0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl (hash: uMzY+A30tQ1THdPXHeJ4Kk1Ou2hdCJPhAd3N5fGTG5c=)
                          2: ickIIpxDa66Zw5SNhJ159yjnJm4.roa (hash: Ip9TbNQZyJFwTGktaixn0vXs7mVP4NezsqJqAycz9sc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 13:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ab:b1:38:96:d7:c0:81:80:10:f9:25:01:4d:cf:85:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d04265fb11c2a220bc350718673e0704d1edadde
        Validity
            Not Before: May  7 17:00:40 2025 GMT
            Not After : May  8 17:00:40 2025 GMT
        Subject: CN=2c52c4e8933cd85343a5a78714e9536865a55dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ec:26:a9:a2:db:14:ff:51:97:c4:22:9c:9b:
                    1b:8d:64:6e:12:7f:00:c1:78:bd:22:16:0e:b1:1e:
                    33:fc:cc:53:d6:b5:43:f6:13:a0:27:f6:da:60:b3:
                    ab:b2:0b:b2:b2:cb:20:d1:8f:dc:30:11:19:ca:b3:
                    bf:cc:5a:d0:cd:ca:45:2d:6f:c9:13:4d:8d:23:4e:
                    43:89:6b:e5:77:02:40:a3:f1:46:f8:1f:63:6f:43:
                    d8:be:ee:cf:27:20:86:14:aa:b7:17:89:c0:ba:22:
                    18:15:b7:ae:f3:26:22:f5:a8:20:d9:76:18:d0:0a:
                    31:f0:0c:84:52:3a:77:07:15:05:3c:85:72:d1:2c:
                    71:02:3b:4c:0f:43:35:3d:ba:4b:96:43:05:a2:04:
                    24:ae:51:ae:44:cf:c4:6f:17:1e:7d:e9:7d:79:8c:
                    0b:a7:6f:70:05:f2:24:2c:03:09:ad:ea:c0:dd:88:
                    54:3f:d0:2b:bc:33:18:23:7f:05:53:5b:79:c0:e3:
                    30:39:2f:51:63:36:f3:3a:95:e4:2c:28:f0:52:6e:
                    a4:eb:7f:d1:5a:08:33:21:79:42:e4:ef:08:8a:77:
                    83:88:9f:65:ff:c9:90:12:47:83:6e:b4:3c:7a:38:
                    16:4c:87:30:08:af:a1:3d:56:ad:2d:50:9f:ab:bc:
                    a9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:52:C4:E8:93:3C:D8:53:43:A5:A7:87:14:E9:53:68:65:A5:5D:C6
            X509v3 Authority Key Identifier:
                keyid:D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:d3:7a:b1:ca:ca:b1:dc:21:0e:61:6b:3a:da:d6:c0:32:6c:
         35:be:2c:ca:74:fa:ca:d1:34:82:87:c0:4c:6b:d9:72:a5:08:
         dd:c9:0c:fe:00:1a:96:29:da:00:b4:00:84:49:1e:22:13:44:
         e1:75:32:85:6a:1a:05:07:e4:b9:40:62:80:17:44:04:d5:bc:
         48:c7:b1:d1:5b:47:94:4c:cf:95:55:1b:71:bc:b8:ce:48:a6:
         91:9f:db:34:c2:6e:5b:66:4d:c4:be:2c:e8:ee:5a:f4:6d:ba:
         01:d0:e4:39:06:06:ce:39:18:69:e6:98:a5:a3:c7:83:e5:90:
         70:09:6e:6c:30:b0:d7:f5:55:7d:35:05:a2:5f:c1:5c:0f:9f:
         a6:c2:73:2b:4e:0f:2b:9e:09:3f:25:0b:1a:1b:dd:fc:65:fe:
         c5:df:69:d0:c6:35:c9:80:9c:71:04:32:2f:6a:0a:83:82:d5:
         d6:4f:65:03:50:f0:84:1d:84:a4:be:1d:72:02:f0:c8:d2:e2:
         82:05:b0:b4:80:ed:c6:dd:ad:33:fe:09:fc:dc:fc:25:58:bf:
         f7:8a:12:3d:1a:b5:19:e8:00:e0:64:69:ca:90:0b:90:d7:ff:
         f0:2f:59:ee:b2:ea:0b:c1:17:ac:ed:2d:17:0b:57:60:9a:cd:
         8c:77:19:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZarsTiW18CBgBD5JQFNz4WjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNDI2NWZiMTFjMmEyMjBiYzM1MDcxODY3M2UwNzA0ZDFl
ZGFkZGUwHhcNMjUwNTA3MTcwMDQwWhcNMjUwNTA4MTcwMDQwWjAzMTEwLwYDVQQD
EygyYzUyYzRlODkzM2NkODUzNDNhNWE3ODcxNGU5NTM2ODY1YTU1ZGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uwmqaLbFP9Rl8QinJsbjWRuEn8A
wXi9IhYOsR4z/MxT1rVD9hOgJ/baYLOrsguysssg0Y/cMBEZyrO/zFrQzcpFLW/J
E02NI05DiWvldwJAo/FG+B9jb0PYvu7PJyCGFKq3F4nAuiIYFbeu8yYi9agg2XYY
0Aox8AyEUjp3BxUFPIVy0SxxAjtMD0M1PbpLlkMFogQkrlGuRM/Ebxcefel9eYwL
p29wBfIkLAMJrerA3YhUP9ArvDMYI38FU1t5wOMwOS9RYzbzOpXkLCjwUm6k63/R
WggzIXlC5O8IineDiJ9l/8mQEkeDbrQ8ejgWTIcwCK+hPVatLVCfq7ypSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxSxOiTPNhTQ6WnhxTpU2hlpV3GMB8GA1UdIwQY
MBaAFNBCZfsRwqIgvDUHGGc+BwTR7a3eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEVKbC14SENvaUM4TlFjWVp6NEhCTkh0cmQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mYTczZjgtMzNlMC00MDMyLTg0ZWMt
YTk2ZWY2ZjY0MzVjLzEvMEVKbC14SENvaUM4TlFjWVp6NEhCTkh0cmQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9mYTczZjgtMzNlMC00MDMyLTg0ZWMtYTk2ZWY2ZjY0MzVj
LzEvMEVKbC14SENvaUM4TlFjWVp6NEhCTkh0cmQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKtN6scrK
sdwhDmFrOtrWwDJsNb4synT6ytE0gofATGvZcqUI3ckM/gAalinaALQAhEkeIhNE
4XUyhWoaBQfkuUBigBdEBNW8SMex0VtHlEzPlVUbcby4zkimkZ/bNMJuW2ZNxL4s
6O5a9G26AdDkOQYGzjkYaeaYpaPHg+WQcAlubDCw1/VVfTUFol/BXA+fpsJzK04P
K54JPyULGhvd/GX+xd9p0MY1yYCccQQyL2oKg4LV1k9lA1DwhB2EpL4dcgLwyNLi
ggWwtIDtxt2tM/4J/Nz8JVi/94oSPRq1GegA4GRpypALkNf/8C9Z7rLqC8EXrO0t
FwtXYJrNjHcZ1A==
-----END CERTIFICATE-----
Generated at Wed May 7 22:10:17 2025 by rpki-client