Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
File:                     OEypWHqC_DdH9GngCUXZ1VhaNbI.mft (raw, json)
Hash identifier:          Y8poIYkoVZJoZj9AgTdx85vbn6rPQdbLdPflUk6CKio=
Subject key identifier:   45:59:E2:E6:B6:65:87:C7:31:DC:F9:99:F0:5D:BD:4E:B8:C4:91:56
Authority key identifier: 38:4C:A9:58:7A:82:FC:37:47:F4:69:E0:09:45:D9:D5:58:5A:35:B2
Certificate issuer:       /CN=384ca9587a82fc3747f469e00945d9d5585a35b2
Certificate serial:       0196B8230A4A8C4F76C7900018358C496C8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
Manifest number:          016E
Signing time:             Sat 10 May 2025 03:00:26 +0000
Manifest this update:     Sat 10 May 2025 03:00:26 +0000
Manifest next update:     Sun 11 May 2025 03:00:26 +0000
Files and hashes:         1: OEypWHqC_DdH9GngCUXZ1VhaNbI.crl (hash: ExGSFNDWP61Yi0fpZlbhC370lp8uvoU4SWwIhwFYRP0=)
                          2: jI7_nEj5zlq6z4OVYNSKuGo62t4.roa (hash: i7/oTU3XFkI0q3JhGCgkgLONW91UlNaDNMBJ9HMnxlo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 03:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:23:0a:4a:8c:4f:76:c7:90:00:18:35:8c:49:6c:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=384ca9587a82fc3747f469e00945d9d5585a35b2
        Validity
            Not Before: May 10 03:00:26 2025 GMT
            Not After : May 11 03:00:26 2025 GMT
        Subject: CN=4559e2e6b66587c731dcf999f05dbd4eb8c49156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:00:99:6b:13:45:16:d7:76:b8:a1:71:e6:e8:
                    95:54:7e:0d:c0:08:98:88:60:5f:87:a3:50:39:f4:
                    31:42:8d:77:e1:5c:a5:95:4a:fa:e8:bb:09:9f:07:
                    6f:33:87:fe:42:67:da:d6:b7:45:92:46:2b:c1:3a:
                    a5:24:80:22:4b:a2:10:ca:bc:f0:96:97:d8:b6:48:
                    bb:40:d9:e7:3f:62:d3:61:17:30:8a:3a:db:cb:f1:
                    3f:b7:51:0c:23:d7:4b:7d:26:b8:ed:f9:39:87:1a:
                    cb:1a:60:fe:11:e8:4a:68:ce:8c:43:c3:5b:15:fb:
                    f5:75:af:27:ce:61:45:3e:d8:1a:b9:e7:c1:1a:e5:
                    7e:70:e6:54:90:19:84:ff:56:ab:fb:89:c1:9b:e4:
                    f1:06:5c:c7:bd:06:44:fa:58:e3:21:9f:c9:85:a0:
                    e3:d6:3f:a1:cd:af:aa:ab:3f:5b:90:6b:21:f0:f6:
                    fc:63:5c:24:80:cd:59:61:c5:88:38:6f:c9:7b:8d:
                    43:72:c3:f2:bd:61:95:c1:7c:6c:f1:4a:ed:72:06:
                    55:70:a5:2c:2a:dc:6f:84:9d:d5:b8:2b:1b:6a:30:
                    d5:5c:22:28:f1:b2:97:96:7a:ee:4c:bf:e9:93:4d:
                    78:b9:89:5e:4a:08:9a:98:b8:a0:52:c8:13:b0:07:
                    28:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:59:E2:E6:B6:65:87:C7:31:DC:F9:99:F0:5D:BD:4E:B8:C4:91:56
            X509v3 Authority Key Identifier:
                keyid:38:4C:A9:58:7A:82:FC:37:47:F4:69:E0:09:45:D9:D5:58:5A:35:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:5c:ef:f9:ab:07:1f:94:54:83:d9:47:fb:3d:90:b0:6f:37:
         21:ad:9d:3f:ac:ee:29:2f:24:24:08:34:a9:c5:2c:f6:e8:a1:
         3a:e8:0d:76:50:60:09:b1:ea:9a:94:90:07:1f:70:9a:be:9b:
         84:d5:39:34:7c:8a:57:1a:4c:21:96:8f:d6:fd:1f:f1:ad:7f:
         93:4c:0b:97:98:5b:e4:d6:c7:37:a9:e3:c9:f7:7a:7d:49:60:
         7a:fa:f2:59:af:e0:48:be:06:de:07:a6:10:0f:5d:dd:a2:66:
         f5:18:42:29:45:4d:a6:04:fd:5f:b2:b7:e7:6c:8f:9d:f8:94:
         89:c1:c4:6d:5f:12:a0:c8:9c:a2:87:06:d3:a2:ee:bf:a8:a8:
         7d:9f:e5:5c:5e:61:36:fa:60:d4:12:f7:aa:6f:87:80:f3:12:
         47:24:34:95:e7:ce:47:ee:4e:15:31:1a:a9:f0:1b:79:5d:dc:
         a4:90:64:fd:f2:4a:b2:eb:99:18:88:72:c1:41:8a:14:1d:56:
         ec:59:3e:9c:20:64:74:52:11:e0:dc:9b:44:02:bb:3e:d5:64:
         53:f4:c0:92:3e:ba:38:69:5f:9d:24:8b:5f:2b:e2:c8:ca:1c:
         70:b8:4b:d7:f6:0a:5d:1b:b5:3b:7f:5f:a3:0e:7b:76:73:4c:
         79:3f:7f:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4IwpKjE92x5AAGDWMSWyPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NGNhOTU4N2E4MmZjMzc0N2Y0NjllMDA5NDVkOWQ1NTg1
YTM1YjIwHhcNMjUwNTEwMDMwMDI2WhcNMjUwNTExMDMwMDI2WjAzMTEwLwYDVQQD
Eyg0NTU5ZTJlNmI2NjU4N2M3MzFkY2Y5OTlmMDVkYmQ0ZWI4YzQ5MTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwCZaxNFFtd2uKFx5uiVVH4NwAiY
iGBfh6NQOfQxQo134VyllUr66LsJnwdvM4f+Qmfa1rdFkkYrwTqlJIAiS6IQyrzw
lpfYtki7QNnnP2LTYRcwijrby/E/t1EMI9dLfSa47fk5hxrLGmD+EehKaM6MQ8Nb
Ffv1da8nzmFFPtgauefBGuV+cOZUkBmE/1ar+4nBm+TxBlzHvQZE+ljjIZ/JhaDj
1j+hza+qqz9bkGsh8Pb8Y1wkgM1ZYcWIOG/Je41DcsPyvWGVwXxs8UrtcgZVcKUs
KtxvhJ3VuCsbajDVXCIo8bKXlnruTL/pk014uYleSgiamLigUsgTsAcocQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEVZ4ua2ZYfHMdz5mfBdvU64xJFWMB8GA1UdIwQY
MBaAFDhMqVh6gvw3R/Rp4AlF2dVYWjWyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0V5cFdIcUNfRGRIOUduZ0NVWFoxVmhhTmJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9hMTk2NTQtYWRlYy00Mzk3LThlYjAt
MTdhZDJmMDFjMDA5LzEvT0V5cFdIcUNfRGRIOUduZ0NVWFoxVmhhTmJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9hMTk2NTQtYWRlYy00Mzk3LThlYjAtMTdhZDJmMDFjMDA5
LzEvT0V5cFdIcUNfRGRIOUduZ0NVWFoxVmhhTmJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJVzv+asH
H5RUg9lH+z2QsG83Ia2dP6zuKS8kJAg0qcUs9uihOugNdlBgCbHqmpSQBx9wmr6b
hNU5NHyKVxpMIZaP1v0f8a1/k0wLl5hb5NbHN6njyfd6fUlgevryWa/gSL4G3gem
EA9d3aJm9RhCKUVNpgT9X7K352yPnfiUicHEbV8SoMicoocG06Luv6iofZ/lXF5h
Nvpg1BL3qm+HgPMSRyQ0lefOR+5OFTEaqfAbeV3cpJBk/fJKsuuZGIhywUGKFB1W
7Fk+nCBkdFIR4NybRAK7PtVkU/TAkj66OGlfnSSLXyviyMoccLhL1/YKXRu1O39f
ow57dnNMeT9/Gg==
-----END CERTIFICATE-----
Generated at Sat May 10 09:51:02 2025 by rpki-client