Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
File:                     eZNZZNoXA44j06SJCaE6JfsOWOs.mft (raw, json)
Hash identifier:          VYHSzARi7LcUHGbTvW8AOAm6mjdBtqWPSGFmlBCyigs=
Subject key identifier:   AC:0C:D1:42:BE:68:B3:49:09:9A:07:5D:B9:C2:57:A8:A9:FA:78:AE
Authority key identifier: 79:93:59:64:DA:17:03:8E:23:D3:A4:89:09:A1:3A:25:FB:0E:58:EB
Certificate issuer:       /CN=79935964da17038e23d3a48909a13a25fb0e58eb
Certificate serial:       0196C34BB7ED107B86C6B8DABEC79EA423F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
Manifest number:          1533
Signing time:             Mon 12 May 2025 07:00:41 +0000
Manifest this update:     Mon 12 May 2025 07:00:41 +0000
Manifest next update:     Tue 13 May 2025 07:00:41 +0000
Files and hashes:         1: eZNZZNoXA44j06SJCaE6JfsOWOs.crl (hash: ZRSyQ53oRUE6oI/NjlLfd9N0uvBjeTyqXPG/GfwG4lw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:4b:b7:ed:10:7b:86:c6:b8:da:be:c7:9e:a4:23:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79935964da17038e23d3a48909a13a25fb0e58eb
        Validity
            Not Before: May 12 07:00:41 2025 GMT
            Not After : May 13 07:00:41 2025 GMT
        Subject: CN=ac0cd142be68b349099a075db9c257a8a9fa78ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:26:7a:88:65:61:5a:7f:04:79:28:dd:ff:31:
                    22:14:ab:92:4b:c4:7e:94:49:1b:d4:82:e6:9a:ce:
                    73:49:83:76:40:6f:dc:c5:98:a8:bd:3f:97:7e:39:
                    ea:cf:dd:57:89:a2:51:bd:b0:2a:05:cc:ad:6c:5d:
                    f6:59:70:5c:64:c3:78:f4:87:9f:f2:47:46:5a:fa:
                    eb:d0:12:82:b9:6c:a5:8d:83:e4:0a:40:ce:7d:e7:
                    72:30:a0:50:a0:bd:6f:ae:37:94:42:60:53:8a:6d:
                    ae:13:48:e3:9d:84:bd:f5:9a:a7:10:f6:ef:1c:03:
                    fe:71:fa:51:6d:69:80:8d:88:99:e2:03:be:47:7c:
                    a2:79:d5:2f:85:f8:85:ca:bc:51:fb:ad:24:3f:b9:
                    41:29:3e:fc:c0:75:e4:73:ef:fb:7b:1d:41:a5:06:
                    d4:55:fb:0e:53:b5:19:70:29:97:ff:e3:0e:53:55:
                    c3:2a:05:a1:a7:da:b5:67:57:50:54:a2:0b:48:e6:
                    3a:03:1f:64:57:89:98:40:fa:b8:7d:d2:9d:05:57:
                    1a:4e:6f:3b:59:43:cf:a0:e2:28:9f:82:6d:94:c8:
                    26:ce:af:39:b4:f2:0d:2b:f9:46:de:71:6f:8e:2e:
                    55:1a:44:13:1a:f4:ba:24:e9:c6:38:4e:7e:41:04:
                    c1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:0C:D1:42:BE:68:B3:49:09:9A:07:5D:B9:C2:57:A8:A9:FA:78:AE
            X509v3 Authority Key Identifier:
                keyid:79:93:59:64:DA:17:03:8E:23:D3:A4:89:09:A1:3A:25:FB:0E:58:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:ec:7c:74:0b:27:09:44:4a:60:54:98:4b:81:b8:4f:d8:23:
         d1:aa:5e:7e:8f:ac:54:e8:90:4a:e4:0c:3c:3d:0f:2f:dd:aa:
         98:47:58:4f:bb:63:36:36:70:52:0c:8d:0d:74:4c:45:0b:87:
         12:47:57:95:73:e3:f0:c6:bb:9c:28:d7:25:80:2b:15:9f:11:
         f4:49:20:8e:36:29:b7:b8:d2:bc:0a:53:b8:1b:5a:46:c3:ee:
         7d:1d:75:40:7f:c4:2f:33:a1:c0:f0:2b:6e:a7:70:ab:cc:07:
         e2:d0:45:f3:af:1f:41:2c:b7:d0:d6:eb:e1:e8:cd:7a:af:6e:
         a1:98:74:8a:fc:42:25:4a:b3:43:a5:97:62:39:0a:9e:f7:fb:
         fd:7f:c0:6a:ea:92:c7:3b:d7:21:84:4e:3f:49:52:98:26:b7:
         3d:c1:7f:a1:d9:7e:55:f7:d7:0f:2b:4b:a9:7f:e8:89:33:68:
         77:4d:9a:25:6a:fd:86:f0:e1:70:34:9a:7c:cc:ec:dd:19:e4:
         55:01:f6:6e:b8:1a:0f:3d:1e:24:8b:32:78:48:81:b1:e4:93:
         66:f1:0d:2c:9e:5f:9e:43:4e:e9:e5:ec:24:84:e2:a5:0b:a9:
         93:ce:ef:60:89:16:b3:83:3f:c1:a6:4f:89:82:ca:8a:30:2c:
         63:ab:44:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDS7ftEHuGxrjavseepCP5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5OTM1OTY0ZGExNzAzOGUyM2QzYTQ4OTA5YTEzYTI1ZmIw
ZTU4ZWIwHhcNMjUwNTEyMDcwMDQxWhcNMjUwNTEzMDcwMDQxWjAzMTEwLwYDVQQD
EyhhYzBjZDE0MmJlNjhiMzQ5MDk5YTA3NWRiOWMyNTdhOGE5ZmE3OGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCZ6iGVhWn8EeSjd/zEiFKuSS8R+
lEkb1ILmms5zSYN2QG/cxZiovT+Xfjnqz91XiaJRvbAqBcytbF32WXBcZMN49Ief
8kdGWvrr0BKCuWyljYPkCkDOfedyMKBQoL1vrjeUQmBTim2uE0jjnYS99ZqnEPbv
HAP+cfpRbWmAjYiZ4gO+R3yiedUvhfiFyrxR+60kP7lBKT78wHXkc+/7ex1BpQbU
VfsOU7UZcCmX/+MOU1XDKgWhp9q1Z1dQVKILSOY6Ax9kV4mYQPq4fdKdBVcaTm87
WUPPoOIon4JtlMgmzq85tPINK/lG3nFvji5VGkQTGvS6JOnGOE5+QQTBMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKwM0UK+aLNJCZoHXbnCV6ip+niuMB8GA1UdIwQY
MBaAFHmTWWTaFwOOI9OkiQmhOiX7DljrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVpOWlpOb1hBNDRqMDZTSkNhRTZKZnNPV09zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9lODFkMDEtMTY3Yi00NTI4LWIzYWEt
OWZlNDljYzRkZjJhLzEvZVpOWlpOb1hBNDRqMDZTSkNhRTZKZnNPV09zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9lODFkMDEtMTY3Yi00NTI4LWIzYWEtOWZlNDljYzRkZjJh
LzEvZVpOWlpOb1hBNDRqMDZTSkNhRTZKZnNPV09zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYOx8dAsn
CURKYFSYS4G4T9gj0apefo+sVOiQSuQMPD0PL92qmEdYT7tjNjZwUgyNDXRMRQuH
EkdXlXPj8Ma7nCjXJYArFZ8R9EkgjjYpt7jSvApTuBtaRsPufR11QH/ELzOhwPAr
bqdwq8wH4tBF868fQSy30Nbr4ejNeq9uoZh0ivxCJUqzQ6WXYjkKnvf7/X/AauqS
xzvXIYROP0lSmCa3PcF/odl+VffXDytLqX/oiTNod02aJWr9hvDhcDSafMzs3Rnk
VQH2brgaDz0eJIsyeEiBseSTZvENLJ5fnkNO6eXsJITipQupk87vYIkWs4M/waZP
iYLKijAsY6tELQ==
-----END CERTIFICATE-----
Generated at Mon May 12 11:10:57 2025 by rpki-client