Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft
File:                     vC92jP44T5-M2QPGh9hlKsVOdJU.mft (raw, json)
Hash identifier:          oAcm7KktfvZppvskg9xCgiLRkVb65qAZ3DABQV6cwNA=
Subject key identifier:   4A:FB:BC:7E:C9:D1:F8:92:50:03:35:F0:28:B2:44:CA:FA:C0:C9:7A
Authority key identifier: BC:2F:76:8C:FE:38:4F:9F:8C:D9:03:C6:87:D8:65:2A:C5:4E:74:95
Certificate issuer:       /CN=bc2f768cfe384f9f8cd903c687d8652ac54e7495
Certificate serial:       0196A277C8640B89558A856604F90C9C683B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vC92jP44T5-M2QPGh9hlKsVOdJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft
Manifest number:          04A5
Signing time:             Mon 05 May 2025 22:01:21 +0000
Manifest this update:     Mon 05 May 2025 22:01:21 +0000
Manifest next update:     Tue 06 May 2025 22:01:21 +0000
Files and hashes:         1: vC92jP44T5-M2QPGh9hlKsVOdJU.crl (hash: 4GtUkYXQM3VBSY8C/SxNGLTHvoWvQZAy8N27LOUwWV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vC92jP44T5-M2QPGh9hlKsVOdJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 18:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a2:77:c8:64:0b:89:55:8a:85:66:04:f9:0c:9c:68:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc2f768cfe384f9f8cd903c687d8652ac54e7495
        Validity
            Not Before: May  5 22:01:21 2025 GMT
            Not After : May  6 22:01:21 2025 GMT
        Subject: CN=4afbbc7ec9d1f892500335f028b244cafac0c97a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:59:f1:a8:fb:ee:da:04:fc:3f:c6:2b:1e:38:
                    3d:bb:c7:de:ca:fa:f5:88:29:d7:d6:2f:e4:25:4e:
                    a8:d1:9c:93:f1:cc:30:3f:d5:d7:05:e0:77:8b:4b:
                    9e:ac:cf:a9:fb:c0:0d:fd:f0:96:26:b0:9e:9f:78:
                    5e:7e:03:d2:f2:4a:e4:80:18:b3:b4:1a:18:33:91:
                    df:04:69:52:db:ed:51:5e:b4:93:79:22:fc:9c:62:
                    99:8f:d3:71:b8:09:71:13:80:a9:0a:99:e4:cb:02:
                    15:cd:17:7a:10:7a:9d:01:af:ef:33:28:33:f1:57:
                    d4:0b:a5:4e:eb:06:d5:0d:f7:42:15:97:7c:22:c8:
                    4f:8a:61:95:80:b7:f7:da:71:43:89:7c:57:c7:5a:
                    92:f6:bb:d3:f4:2f:b3:d9:0c:cf:01:c0:18:0c:3a:
                    80:c9:84:db:0d:67:f9:51:e4:78:6a:56:82:05:90:
                    b5:7b:2e:99:64:ed:93:59:12:f8:b8:45:50:76:27:
                    02:a7:5f:51:f8:b1:34:6c:96:f8:b5:9f:b1:4e:bc:
                    8d:ac:b7:30:fb:72:98:42:10:6d:3c:9a:af:2e:c4:
                    90:4b:c3:7e:74:eb:41:f4:5a:8a:e5:f8:83:d2:2f:
                    e7:0d:b1:8d:e7:62:f4:ba:f6:f5:a8:9e:50:24:53:
                    b9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:FB:BC:7E:C9:D1:F8:92:50:03:35:F0:28:B2:44:CA:FA:C0:C9:7A
            X509v3 Authority Key Identifier:
                keyid:BC:2F:76:8C:FE:38:4F:9F:8C:D9:03:C6:87:D8:65:2A:C5:4E:74:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vC92jP44T5-M2QPGh9hlKsVOdJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:ee:3c:e8:c9:ec:0b:af:aa:0f:55:07:74:c4:52:aa:99:45:
         3d:c7:18:0c:6e:44:b5:75:9d:f5:5f:fa:07:83:c8:67:b2:14:
         94:dd:4c:35:2d:41:43:67:1c:62:26:67:9f:8d:34:f7:3a:ad:
         01:65:e7:73:a7:28:13:14:b4:71:71:66:c8:d9:c7:a5:54:5b:
         0d:01:e9:82:51:de:7b:3d:2b:9b:40:a1:8f:b9:5e:be:41:1a:
         e3:3f:3f:82:53:a7:d5:11:22:fa:bb:cb:53:21:f2:0a:0c:b1:
         27:35:99:42:28:23:0e:b1:b6:65:5c:76:5b:12:88:d7:b2:10:
         b9:26:ea:46:ae:cf:c4:78:b3:ea:93:16:0e:e6:21:e4:37:dd:
         b1:00:4e:6e:b2:44:76:f2:4c:a1:97:61:2d:70:a5:70:80:15:
         e8:60:a9:82:03:62:48:d1:0c:f6:43:ff:88:c2:87:45:17:46:
         1c:38:7b:60:7e:8e:86:51:d3:e6:41:a0:c0:4a:6e:91:2c:03:
         61:33:68:44:ea:f2:6e:77:c3:1f:76:ff:f0:d2:15:a2:84:81:
         db:68:f6:c7:4d:89:00:b6:83:42:6a:ee:d8:06:4a:f5:ef:f0:
         9b:30:c1:12:77:12:c7:bd:8f:7b:05:5d:6d:74:40:d0:08:80:
         7b:35:bf:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaid8hkC4lVioVmBPkMnGg7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMmY3NjhjZmUzODRmOWY4Y2Q5MDNjNjg3ZDg2NTJhYzU0
ZTc0OTUwHhcNMjUwNTA1MjIwMTIxWhcNMjUwNTA2MjIwMTIxWjAzMTEwLwYDVQQD
Eyg0YWZiYmM3ZWM5ZDFmODkyNTAwMzM1ZjAyOGIyNDRjYWZhYzBjOTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01nxqPvu2gT8P8YrHjg9u8feyvr1
iCnX1i/kJU6o0ZyT8cwwP9XXBeB3i0uerM+p+8AN/fCWJrCen3hefgPS8krkgBiz
tBoYM5HfBGlS2+1RXrSTeSL8nGKZj9NxuAlxE4CpCpnkywIVzRd6EHqdAa/vMygz
8VfUC6VO6wbVDfdCFZd8IshPimGVgLf32nFDiXxXx1qS9rvT9C+z2QzPAcAYDDqA
yYTbDWf5UeR4alaCBZC1ey6ZZO2TWRL4uEVQdicCp19R+LE0bJb4tZ+xTryNrLcw
+3KYQhBtPJqvLsSQS8N+dOtB9FqK5fiD0i/nDbGN52L0uvb1qJ5QJFO5wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEr7vH7J0fiSUAM18CiyRMr6wMl6MB8GA1UdIwQY
MBaAFLwvdoz+OE+fjNkDxofYZSrFTnSVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkM5MmpQNDRUNS1NMlFQR2g5aGxLc1ZPZEpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy82NGM5OWQtODE4OC00MWNmLTlmNDkt
ZWNlYjZkNzIyYTE0LzEvdkM5MmpQNDRUNS1NMlFQR2g5aGxLc1ZPZEpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy82NGM5OWQtODE4OC00MWNmLTlmNDktZWNlYjZkNzIyYTE0
LzEvdkM5MmpQNDRUNS1NMlFQR2g5aGxLc1ZPZEpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcu486Mns
C6+qD1UHdMRSqplFPccYDG5EtXWd9V/6B4PIZ7IUlN1MNS1BQ2ccYiZnn4009zqt
AWXnc6coExS0cXFmyNnHpVRbDQHpglHeez0rm0Chj7levkEa4z8/glOn1REi+rvL
UyHyCgyxJzWZQigjDrG2ZVx2WxKI17IQuSbqRq7PxHiz6pMWDuYh5DfdsQBObrJE
dvJMoZdhLXClcIAV6GCpggNiSNEM9kP/iMKHRRdGHDh7YH6OhlHT5kGgwEpukSwD
YTNoROrybnfDH3b/8NIVooSB22j2x02JALaDQmru2AZK9e/wmzDBEncSx72PewVd
bXRA0AiAezW/ZA==
-----END CERTIFICATE-----
Generated at Mon May 5 23:55:40 2025 by rpki-client