Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft
File:                     pcEGAjxJWQSwQKy5l49Po7DF4tw.mft (raw, json)
Hash identifier:          v/rDBDnRD1ge2EWH2qQN5GZsqar0ouVcrDXt7rMi4/g=
Subject key identifier:   0B:8C:99:7B:D8:26:AF:F9:88:26:2F:9A:E0:88:D5:07:14:5B:B5:A3
Authority key identifier: A5:C1:06:02:3C:49:59:04:B0:40:AC:B9:97:8F:4F:A3:B0:C5:E2:DC
Certificate issuer:       /CN=a5c106023c495904b040acb9978f4fa3b0c5e2dc
Certificate serial:       0196C728A2778B06CF6015E3FD8811B9EC24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pcEGAjxJWQSwQKy5l49Po7DF4tw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft
Manifest number:          0367
Signing time:             Tue 13 May 2025 01:00:51 +0000
Manifest this update:     Tue 13 May 2025 01:00:51 +0000
Manifest next update:     Wed 14 May 2025 01:00:51 +0000
Files and hashes:         1: pcEGAjxJWQSwQKy5l49Po7DF4tw.crl (hash: SKWzMOQJSPiGWJUJEGZBr1q6BID6PCCF0OXg6hnDGHA=)
                          2: yTZlHlMAE_3YBA7oQmF4fIZqHOM.roa (hash: lfCvg73z+0fvdagtNm9IPM2kVoIfwTGx2gcIBEuq7Qk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pcEGAjxJWQSwQKy5l49Po7DF4tw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c7:28:a2:77:8b:06:cf:60:15:e3:fd:88:11:b9:ec:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c106023c495904b040acb9978f4fa3b0c5e2dc
        Validity
            Not Before: May 13 01:00:51 2025 GMT
            Not After : May 14 01:00:51 2025 GMT
        Subject: CN=0b8c997bd826aff988262f9ae088d507145bb5a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c3:b6:7d:4a:99:c7:0e:ca:0a:d2:45:83:2c:
                    ab:2a:f2:1c:47:1c:04:c8:af:ec:66:34:86:7f:f9:
                    28:9e:6a:2d:21:60:8b:f1:12:30:18:7d:68:0d:f9:
                    79:1f:31:63:d4:21:19:3d:bc:bf:88:a3:af:67:2d:
                    70:2b:46:47:d9:f0:bc:c5:83:58:65:8c:06:cb:1c:
                    85:2d:a2:bf:37:75:db:7e:20:14:dc:3c:8b:85:b3:
                    10:b4:1c:89:9a:41:f9:6f:4d:ff:b4:3f:73:52:f3:
                    56:b0:26:42:df:89:8a:10:9e:9e:8b:68:9a:04:0e:
                    1b:45:a1:91:16:85:9b:a9:6f:6c:84:a3:72:54:17:
                    5f:15:d1:e3:4c:db:1e:23:47:64:10:88:8b:db:0a:
                    dc:d7:28:46:df:a1:84:ba:f7:ec:f9:24:64:20:d3:
                    8d:5f:de:43:bf:ea:fe:d1:d7:3e:c1:f6:88:62:6b:
                    6f:e0:25:4d:9e:cb:0c:26:23:fb:60:6e:7a:c9:0d:
                    5e:60:ad:86:87:39:91:e0:e1:13:fa:8b:9f:2e:18:
                    e2:ff:e3:70:ad:b7:af:a4:fc:4e:7e:60:c2:be:0f:
                    c4:45:48:55:b8:aa:6a:4d:89:93:2e:ad:48:bd:e7:
                    7e:09:f5:d6:5c:56:7a:c5:07:d2:78:c9:f3:71:35:
                    77:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8C:99:7B:D8:26:AF:F9:88:26:2F:9A:E0:88:D5:07:14:5B:B5:A3
            X509v3 Authority Key Identifier:
                keyid:A5:C1:06:02:3C:49:59:04:B0:40:AC:B9:97:8F:4F:A3:B0:C5:E2:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcEGAjxJWQSwQKy5l49Po7DF4tw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:1b:7c:14:6b:8d:3d:fa:f5:4d:c8:d1:46:84:e7:09:f0:9d:
         54:44:01:03:db:58:28:48:aa:6c:46:a9:e4:18:95:7b:fb:b3:
         69:f9:e0:b5:1d:8e:ca:35:30:04:95:ec:74:22:6a:2d:35:e4:
         0f:ff:a7:5e:e8:35:38:65:e9:12:51:65:0b:72:af:d5:2d:c7:
         63:00:d4:c3:32:4e:27:71:af:11:be:98:6c:a3:f5:9d:bd:f3:
         5d:a8:3b:0d:18:40:1f:d7:71:21:00:70:b8:a1:81:26:60:f0:
         0b:ff:79:e0:35:b3:a1:42:49:2a:c9:54:0a:4d:b1:14:97:54:
         96:d9:2e:b6:22:aa:21:f1:5e:3b:8c:02:fb:0c:0d:2b:88:52:
         14:c6:e8:00:32:27:3f:af:ab:e0:65:20:1e:8e:f1:f1:78:91:
         0f:2c:a1:40:57:ef:4d:ab:c1:d5:74:d7:5f:5e:50:f9:d2:e3:
         fa:34:63:10:ab:96:49:0b:4f:28:89:4d:d4:b5:0a:b0:7c:93:
         89:06:77:be:df:78:84:f4:3e:25:3a:f8:7d:bb:6f:31:bf:d6:
         fb:b1:0c:76:37:fe:23:d1:1c:5d:b0:35:ee:7d:a6:19:e9:04:
         c2:1e:02:5b:47:18:4a:55:36:e9:75:32:47:99:04:6e:13:6c:
         29:a0:a5:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbHKKJ3iwbPYBXj/YgRuewkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YzEwNjAyM2M0OTU5MDRiMDQwYWNiOTk3OGY0ZmEzYjBj
NWUyZGMwHhcNMjUwNTEzMDEwMDUxWhcNMjUwNTE0MDEwMDUxWjAzMTEwLwYDVQQD
EygwYjhjOTk3YmQ4MjZhZmY5ODgyNjJmOWFlMDg4ZDUwNzE0NWJiNWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cO2fUqZxw7KCtJFgyyrKvIcRxwE
yK/sZjSGf/konmotIWCL8RIwGH1oDfl5HzFj1CEZPby/iKOvZy1wK0ZH2fC8xYNY
ZYwGyxyFLaK/N3XbfiAU3DyLhbMQtByJmkH5b03/tD9zUvNWsCZC34mKEJ6ei2ia
BA4bRaGRFoWbqW9shKNyVBdfFdHjTNseI0dkEIiL2wrc1yhG36GEuvfs+SRkINON
X95Dv+r+0dc+wfaIYmtv4CVNnssMJiP7YG56yQ1eYK2GhzmR4OET+oufLhji/+Nw
rbevpPxOfmDCvg/ERUhVuKpqTYmTLq1Ived+CfXWXFZ6xQfSeMnzcTV3yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAuMmXvYJq/5iCYvmuCI1QcUW7WjMB8GA1UdIwQY
MBaAFKXBBgI8SVkEsECsuZePT6OwxeLcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGNFR0FqeEpXUVN3UUt5NWw0OVBvN0RGNHR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8wNzAwMzItMGJiMy00MzUyLTg5ZWIt
NDkxM2EwY2E3NDA5LzEvcGNFR0FqeEpXUVN3UUt5NWw0OVBvN0RGNHR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8wNzAwMzItMGJiMy00MzUyLTg5ZWItNDkxM2EwY2E3NDA5
LzEvcGNFR0FqeEpXUVN3UUt5NWw0OVBvN0RGNHR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaBt8FGuN
Pfr1TcjRRoTnCfCdVEQBA9tYKEiqbEap5BiVe/uzafngtR2OyjUwBJXsdCJqLTXk
D/+nXug1OGXpElFlC3Kv1S3HYwDUwzJOJ3GvEb6YbKP1nb3zXag7DRhAH9dxIQBw
uKGBJmDwC/954DWzoUJJKslUCk2xFJdUltkutiKqIfFeO4wC+wwNK4hSFMboADIn
P6+r4GUgHo7x8XiRDyyhQFfvTavB1XTXX15Q+dLj+jRjEKuWSQtPKIlN1LUKsHyT
iQZ3vt94hPQ+JTr4fbtvMb/W+7EMdjf+I9EcXbA17n2mGekEwh4CW0cYSlU26XUy
R5kEbhNsKaCliQ==
-----END CERTIFICATE-----
Generated at Tue May 13 06:49:07 2025 by rpki-client