Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft
File:                     7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft (raw, json)
Hash identifier:          lqXk4tnknEyCa7nuCXuf1grmqTBBXJC1+bMD0Sa/iOs=
Subject key identifier:   94:E8:47:09:39:55:40:85:EF:4D:0A:45:2A:98:38:6B:9A:0D:F5:5C
Authority key identifier: EE:D7:55:C5:12:75:AB:23:42:D8:F6:FC:A5:B5:66:06:AB:9C:3B:4F
Certificate issuer:       /CN=eed755c51275ab2342d8f6fca5b56606ab9c3b4f
Certificate serial:       0196BA7F2EC0098784C7A71692CAB619DC86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft
Manifest number:          1530
Signing time:             Sat 10 May 2025 14:00:19 +0000
Manifest this update:     Sat 10 May 2025 14:00:19 +0000
Manifest next update:     Sun 11 May 2025 14:00:19 +0000
Files and hashes:         1: 7tdVxRJ1qyNC2Pb8pbVmBqucO08.crl (hash: UYihDv3+a7cbsgrtni4vj9JbiCzzGGu1CKGur7a2Kag=)
                          2: 8MaVf5sp5CsTyAhAGLZcOfsaJXw.roa (hash: 1dw+M1Du1swLbJQllbUZmU++FExETkfzODZl6r8vVPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:7f:2e:c0:09:87:84:c7:a7:16:92:ca:b6:19:dc:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eed755c51275ab2342d8f6fca5b56606ab9c3b4f
        Validity
            Not Before: May 10 14:00:19 2025 GMT
            Not After : May 11 14:00:19 2025 GMT
        Subject: CN=94e8470939554085ef4d0a452a98386b9a0df55c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d3:db:fa:9b:da:7d:c9:35:96:0b:b9:e1:93:
                    2f:92:44:12:ff:b9:18:50:06:0a:b3:08:57:91:8a:
                    b1:81:b2:3f:2f:9a:fb:9d:25:8f:8f:70:96:71:cf:
                    66:0f:cd:d8:bf:1a:99:18:65:68:87:2f:be:29:55:
                    0a:18:5e:43:69:09:b0:97:3b:7a:43:48:0c:bc:ec:
                    14:75:f1:eb:46:6b:0f:9e:38:7e:80:cd:15:21:b9:
                    4d:45:a6:01:76:d3:bd:30:6a:d3:2e:17:1f:52:cc:
                    21:64:3d:41:3a:54:89:ef:3c:b8:4e:68:00:0e:ff:
                    d0:ce:11:81:b9:47:5a:79:3b:83:b3:fc:91:fe:35:
                    54:66:07:30:f8:da:e0:68:a6:6b:50:3d:18:6d:c6:
                    9e:17:cd:ca:b2:ec:b3:67:93:cf:73:0b:26:24:5f:
                    7c:78:ca:8a:b0:89:e5:ce:f3:06:bb:09:d6:ef:31:
                    6e:8f:5b:a8:5e:12:99:c8:d3:83:0e:8e:db:ad:15:
                    78:72:2b:f0:70:ab:3c:eb:42:2d:bb:44:f5:37:11:
                    90:c2:c3:cc:45:76:31:ad:ff:a0:d6:bb:60:3e:7b:
                    b9:db:18:5b:0e:1e:70:27:b4:65:8b:24:43:2b:4a:
                    60:9f:3c:96:e0:82:d2:93:0d:66:6f:f1:94:9d:f6:
                    f4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E8:47:09:39:55:40:85:EF:4D:0A:45:2A:98:38:6B:9A:0D:F5:5C
            X509v3 Authority Key Identifier:
                keyid:EE:D7:55:C5:12:75:AB:23:42:D8:F6:FC:A5:B5:66:06:AB:9C:3B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:4a:91:de:44:2b:da:d2:c8:0e:ad:83:83:ee:74:b6:a1:1d:
         44:ea:9b:b6:00:84:5d:cb:ab:f8:c9:79:4d:7b:a8:a7:bc:db:
         73:23:a1:b0:99:dd:9b:28:fa:ae:3c:c0:fa:b3:1a:0a:8e:f1:
         90:4e:2c:37:03:58:21:61:dd:a6:33:00:35:30:ed:04:79:59:
         45:5a:0f:56:87:a7:90:61:8c:fe:08:a3:60:78:84:bd:45:25:
         ed:c3:03:cd:ba:cc:d1:93:83:07:94:fb:1e:3b:b1:c4:df:5c:
         f7:57:8b:67:3b:5a:86:f0:ef:a5:6e:0d:d4:67:d2:a0:85:31:
         6d:d4:ed:72:0c:79:9a:09:d2:41:42:46:c8:93:42:55:71:11:
         15:26:c4:63:7c:04:57:0c:bd:15:82:bb:c4:60:8e:e4:03:61:
         ed:a1:71:bf:23:f1:d9:45:23:81:dd:f8:32:e0:e1:c2:4a:06:
         29:1a:cb:85:35:a6:23:64:06:43:44:ba:ee:08:7c:41:c8:b6:
         96:db:46:a1:d3:f1:7f:f9:15:52:24:bb:ee:df:51:58:62:10:
         a6:f5:43:1a:9a:bb:39:d5:26:e2:1a:2d:e7:0a:b4:6b:66:63:
         39:fb:08:ea:ba:f4:5f:ad:b3:d4:73:a5:d4:57:fc:da:96:2d:
         f3:f1:fc:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa6fy7ACYeEx6cWksq2GdyGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZDc1NWM1MTI3NWFiMjM0MmQ4ZjZmY2E1YjU2NjA2YWI5
YzNiNGYwHhcNMjUwNTEwMTQwMDE5WhcNMjUwNTExMTQwMDE5WjAzMTEwLwYDVQQD
Eyg5NGU4NDcwOTM5NTU0MDg1ZWY0ZDBhNDUyYTk4Mzg2YjlhMGRmNTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNPb+pvafck1lgu54ZMvkkQS/7kY
UAYKswhXkYqxgbI/L5r7nSWPj3CWcc9mD83YvxqZGGVohy++KVUKGF5DaQmwlzt6
Q0gMvOwUdfHrRmsPnjh+gM0VIblNRaYBdtO9MGrTLhcfUswhZD1BOlSJ7zy4TmgA
Dv/QzhGBuUdaeTuDs/yR/jVUZgcw+NrgaKZrUD0YbcaeF83KsuyzZ5PPcwsmJF98
eMqKsInlzvMGuwnW7zFuj1uoXhKZyNODDo7brRV4civwcKs860Itu0T1NxGQwsPM
RXYxrf+g1rtgPnu52xhbDh5wJ7RliyRDK0pgnzyW4ILSkw1mb/GUnfb0swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJToRwk5VUCF700KRSqYOGuaDfVcMB8GA1UdIwQY
MBaAFO7XVcUSdasjQtj2/KW1ZgarnDtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3RkVnhSSjFxeU5DMlBiOHBiVm1CcXVjTzA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC85YTY4MzQtZTc2OC00MDliLWI4Y2Ut
ZWM5YjY5YjQ2Y2MwLzEvN3RkVnhSSjFxeU5DMlBiOHBiVm1CcXVjTzA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC85YTY4MzQtZTc2OC00MDliLWI4Y2UtZWM5YjY5YjQ2Y2Mw
LzEvN3RkVnhSSjFxeU5DMlBiOHBiVm1CcXVjTzA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAckqR3kQr
2tLIDq2Dg+50tqEdROqbtgCEXcur+Ml5TXuop7zbcyOhsJndmyj6rjzA+rMaCo7x
kE4sNwNYIWHdpjMANTDtBHlZRVoPVoenkGGM/gijYHiEvUUl7cMDzbrM0ZODB5T7
HjuxxN9c91eLZztahvDvpW4N1GfSoIUxbdTtcgx5mgnSQUJGyJNCVXERFSbEY3wE
Vwy9FYK7xGCO5ANh7aFxvyPx2UUjgd34MuDhwkoGKRrLhTWmI2QGQ0S67gh8Qci2
lttGodPxf/kVUiS77t9RWGIQpvVDGpq7OdUm4hot5wq0a2ZjOfsI6rr0X62z1HOl
1Ff82pYt8/H81g==
-----END CERTIFICATE-----
Generated at Sat May 10 18:51:28 2025 by rpki-client