Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft
File:                     eX87nykJe6W_ddRkbgJZ9RxCGlg.mft (raw, json)
Hash identifier:          yx7bhzkWDxufgi1iavJQXp/vX3CbmEjR0LZ2W3/IYaw=
Subject key identifier:   DA:FD:31:A4:C2:7C:10:1D:C4:BE:DE:59:6B:88:DF:41:E2:9D:36:F8
Authority key identifier: 79:7F:3B:9F:29:09:7B:A5:BF:75:D4:64:6E:02:59:F5:1C:42:1A:58
Certificate issuer:       /CN=797f3b9f29097ba5bf75d4646e0259f51c421a58
Certificate serial:       0196C6F13DE637AF37FE80F5F43950EA678F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eX87nykJe6W_ddRkbgJZ9RxCGlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft
Manifest number:          0C0A
Signing time:             Tue 13 May 2025 00:00:20 +0000
Manifest this update:     Tue 13 May 2025 00:00:20 +0000
Manifest next update:     Wed 14 May 2025 00:00:20 +0000
Files and hashes:         1: eX87nykJe6W_ddRkbgJZ9RxCGlg.crl (hash: xUd8vUfjPrOrwMsq0+pJLHTHjlt7/Vt6O9eH9TF7mo8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eX87nykJe6W_ddRkbgJZ9RxCGlg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 00:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c6:f1:3d:e6:37:af:37:fe:80:f5:f4:39:50:ea:67:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797f3b9f29097ba5bf75d4646e0259f51c421a58
        Validity
            Not Before: May 13 00:00:20 2025 GMT
            Not After : May 14 00:00:20 2025 GMT
        Subject: CN=dafd31a4c27c101dc4bede596b88df41e29d36f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c9:3d:ba:27:54:3a:34:b1:ac:9f:0f:2c:99:
                    2d:ba:81:0a:b4:6a:8a:b5:41:b2:11:15:7b:f7:f7:
                    95:9c:a1:ae:bc:bf:5f:12:5f:57:b1:86:c2:a0:a3:
                    a9:3e:3d:7d:75:58:f9:dc:9c:f3:4d:ef:58:c9:24:
                    10:42:3c:41:6c:81:04:73:58:0d:ad:1a:b4:30:72:
                    0d:7f:71:0c:73:60:57:81:2d:ec:d6:cc:8a:a1:b3:
                    22:5d:49:1a:d6:e7:35:3c:77:6c:a3:cb:04:9a:bc:
                    ed:57:39:c4:bb:8d:9d:32:23:34:63:f2:64:d8:bf:
                    cb:64:a4:a0:7e:c9:c1:ae:0a:05:be:da:e3:69:6c:
                    46:19:e8:d8:a7:91:12:a6:ab:ee:00:d4:a6:d9:0f:
                    9f:46:f4:84:3b:a0:fd:6c:fe:6c:91:55:10:7c:1a:
                    e1:68:ff:8a:f1:cb:d9:e6:af:3f:15:68:a3:5c:47:
                    34:ec:f2:88:9f:ef:d1:41:5d:75:af:27:bf:65:e6:
                    35:ba:8d:c8:e6:e6:8b:17:f2:03:e6:7e:a6:d0:11:
                    0d:b5:49:e6:ed:d4:bf:5f:1c:6f:75:d2:a1:2a:53:
                    f7:65:03:fb:99:fc:d5:f6:49:4a:d8:fd:f9:3b:20:
                    41:76:32:f3:5a:8e:f3:6e:c3:e1:a3:79:ed:82:da:
                    69:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:FD:31:A4:C2:7C:10:1D:C4:BE:DE:59:6B:88:DF:41:E2:9D:36:F8
            X509v3 Authority Key Identifier:
                keyid:79:7F:3B:9F:29:09:7B:A5:BF:75:D4:64:6E:02:59:F5:1C:42:1A:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eX87nykJe6W_ddRkbgJZ9RxCGlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:9f:cd:d5:92:cd:7b:9c:f1:62:7a:3a:c3:8b:07:b2:6f:de:
         07:aa:f0:46:11:25:b7:b1:78:e3:92:34:fd:6d:59:dc:dd:43:
         14:7e:00:5f:fb:7f:42:a6:73:a6:c7:59:5a:ca:3d:c7:9a:89:
         20:37:59:1c:d1:73:b9:b5:86:15:bd:42:a9:ff:a1:a6:97:97:
         9b:4e:6c:2c:f8:58:75:fa:27:9e:23:61:e2:03:cb:52:fa:fe:
         9b:d1:31:a8:13:e9:a0:8c:23:d6:75:e5:db:26:8a:ed:10:04:
         7a:b3:b1:22:bd:5e:72:5e:a4:f3:c8:e5:75:bd:9a:00:33:93:
         3d:97:40:4e:4c:47:6f:75:ae:2e:fd:56:32:b8:39:b7:01:d5:
         06:9f:5a:aa:2f:76:0c:a9:11:a6:c5:ac:02:27:da:9d:cd:e8:
         20:40:6e:62:07:a2:bf:f9:12:6f:99:23:97:57:f8:8e:96:d8:
         84:30:07:55:ab:11:ac:a5:b3:b4:08:5a:c7:31:9d:8b:b9:bc:
         5a:32:86:dc:48:75:00:92:53:91:a7:63:85:22:c8:b3:7e:18:
         e6:e4:23:61:d0:97:e3:04:9b:9a:b7:03:b3:b0:ba:47:da:be:
         3e:4e:38:42:e2:a0:8f:01:ce:11:83:85:de:b9:fd:c7:2a:94:
         14:02:06:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbG8T3mN683/oD19DlQ6mePMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5N2YzYjlmMjkwOTdiYTViZjc1ZDQ2NDZlMDI1OWY1MWM0
MjFhNTgwHhcNMjUwNTEzMDAwMDIwWhcNMjUwNTE0MDAwMDIwWjAzMTEwLwYDVQQD
EyhkYWZkMzFhNGMyN2MxMDFkYzRiZWRlNTk2Yjg4ZGY0MWUyOWQzNmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8k9uidUOjSxrJ8PLJktuoEKtGqK
tUGyERV79/eVnKGuvL9fEl9XsYbCoKOpPj19dVj53JzzTe9YySQQQjxBbIEEc1gN
rRq0MHINf3EMc2BXgS3s1syKobMiXUka1uc1PHdso8sEmrztVznEu42dMiM0Y/Jk
2L/LZKSgfsnBrgoFvtrjaWxGGejYp5ESpqvuANSm2Q+fRvSEO6D9bP5skVUQfBrh
aP+K8cvZ5q8/FWijXEc07PKIn+/RQV11rye/ZeY1uo3I5uaLF/ID5n6m0BENtUnm
7dS/XxxvddKhKlP3ZQP7mfzV9klK2P35OyBBdjLzWo7zbsPho3ntgtppMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNr9MaTCfBAdxL7eWWuI30HinTb4MB8GA1UdIwQY
MBaAFHl/O58pCXulv3XUZG4CWfUcQhpYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVg4N255a0plNldfZGRSa2JnSlo5UnhDR2xnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9lNjMzMjgtNDVhNS00Nzk4LWJjZjQt
YzFhY2YwMTJiOWJjLzEvZVg4N255a0plNldfZGRSa2JnSlo5UnhDR2xnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9lNjMzMjgtNDVhNS00Nzk4LWJjZjQtYzFhY2YwMTJiOWJj
LzEvZVg4N255a0plNldfZGRSa2JnSlo5UnhDR2xnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb5/N1ZLN
e5zxYno6w4sHsm/eB6rwRhElt7F445I0/W1Z3N1DFH4AX/t/QqZzpsdZWso9x5qJ
IDdZHNFzubWGFb1Cqf+hppeXm05sLPhYdfonniNh4gPLUvr+m9ExqBPpoIwj1nXl
2yaK7RAEerOxIr1ecl6k88jldb2aADOTPZdATkxHb3WuLv1WMrg5twHVBp9aqi92
DKkRpsWsAifanc3oIEBuYgeiv/kSb5kjl1f4jpbYhDAHVasRrKWztAhaxzGdi7m8
WjKG3Eh1AJJTkadjhSLIs34Y5uQjYdCX4wSbmrcDs7C6R9q+Pk44QuKgjwHOEYOF
3rn9xyqUFAIGcQ==
-----END CERTIFICATE-----
Generated at Tue May 13 10:01:24 2025 by rpki-client