Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.mft
File:                     e9g2worwknoDVYYlrt9v14ekkFw.mft (raw, json)
Hash identifier:          jgjZ+ZwTPJ6pbPlU8Ljn/JGWrWAhdsxNenG5XScCqMc=
Subject key identifier:   D2:0F:D0:51:62:8F:A5:F2:F8:4E:81:04:5C:B1:86:22:DA:91:B0:AF
Authority key identifier: 7B:D8:36:C2:8A:F0:92:7A:03:55:86:25:AE:DF:6F:D7:87:A4:90:5C
Certificate issuer:       /CN=7bd836c28af0927a03558625aedf6fd787a4905c
Certificate serial:       0196CB056DAA77EF24F0640D0F648A9823B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e9g2worwknoDVYYlrt9v14ekkFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.mft
Manifest number:          1475
Signing time:             Tue 13 May 2025 19:00:52 +0000
Manifest this update:     Tue 13 May 2025 19:00:52 +0000
Manifest next update:     Wed 14 May 2025 19:00:52 +0000
Files and hashes:         1: e9g2worwknoDVYYlrt9v14ekkFw.crl (hash: mPWTPjKlACHxG3BpFjl5r+lR/rPPmLj2sVWQDypq1Rw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e9g2worwknoDVYYlrt9v14ekkFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cb:05:6d:aa:77:ef:24:f0:64:0d:0f:64:8a:98:23:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bd836c28af0927a03558625aedf6fd787a4905c
        Validity
            Not Before: May 13 19:00:52 2025 GMT
            Not After : May 14 19:00:52 2025 GMT
        Subject: CN=d20fd051628fa5f2f84e81045cb18622da91b0af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:40:b5:d8:14:3e:8e:38:9f:83:e4:01:b8:60:
                    04:ca:5b:7b:c5:44:96:06:db:82:c2:c0:ff:90:cb:
                    94:2f:24:35:ac:68:69:75:47:ff:67:91:07:1d:f4:
                    07:bd:45:c9:bc:e7:b6:ed:07:f7:8d:ed:22:83:d9:
                    7c:7e:5b:5e:73:af:cc:4a:45:ad:c8:13:1d:cb:98:
                    4f:96:27:29:49:3c:16:9c:91:56:0f:80:a5:33:72:
                    b0:fc:e5:d2:b4:c0:81:d3:61:65:6f:e3:a2:ec:a4:
                    70:85:14:0c:e2:84:24:31:5e:47:3d:e6:04:8b:f7:
                    2b:aa:d6:d8:24:bb:f0:f5:61:c0:50:11:e0:e1:7f:
                    de:98:7f:75:fd:db:84:5c:32:30:ea:f4:b1:5b:72:
                    12:28:9f:bf:69:5e:50:7a:a8:b8:91:3b:35:ab:f2:
                    d6:97:da:08:12:40:9b:c7:1b:67:75:3e:34:1e:75:
                    4e:11:56:14:22:39:db:da:c3:40:a4:cd:46:69:ca:
                    16:8f:fe:33:b6:a5:fd:89:3d:09:7b:95:4b:1c:dd:
                    b9:6d:58:9f:22:c8:62:23:f3:a8:6f:70:87:cd:3d:
                    02:3c:c2:46:c6:8d:6b:73:a0:8e:27:ed:e1:de:c3:
                    00:80:ad:bd:0e:2e:94:4c:b4:2c:be:c1:91:97:d7:
                    e7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:0F:D0:51:62:8F:A5:F2:F8:4E:81:04:5C:B1:86:22:DA:91:B0:AF
            X509v3 Authority Key Identifier:
                keyid:7B:D8:36:C2:8A:F0:92:7A:03:55:86:25:AE:DF:6F:D7:87:A4:90:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9g2worwknoDVYYlrt9v14ekkFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:c5:d2:08:86:10:97:bf:21:69:1f:52:50:2f:f7:6c:67:0c:
         6c:bf:d8:ad:89:08:76:4b:40:29:5a:d4:6d:ef:fd:fd:a7:41:
         d4:85:c0:aa:31:dd:d9:f0:39:07:e1:2f:71:17:f4:d4:cd:95:
         82:3c:9e:6a:3e:a9:62:a2:b7:76:2f:31:e9:b1:30:34:9b:a2:
         40:c4:00:30:e1:07:78:15:15:e0:19:c4:73:e6:63:c8:9b:ce:
         d4:54:2c:78:ed:57:40:df:d4:ce:57:3a:3c:72:ba:4f:b0:ac:
         d1:9a:e0:76:54:7c:e3:53:de:89:26:2a:e9:ce:83:2d:be:89:
         e6:12:fe:7c:b0:89:53:04:24:aa:0f:e4:cf:68:8f:4e:fa:b9:
         55:b6:eb:32:44:09:7f:db:bf:5d:e4:0a:c9:21:46:c7:19:e9:
         71:b5:34:a6:1f:16:5a:14:3a:37:17:5c:74:4d:be:17:4a:59:
         22:b0:dd:90:74:6c:56:5e:49:74:e2:b4:65:e6:d3:70:1e:be:
         eb:76:ab:64:6c:24:ad:87:55:35:1a:de:b2:ba:db:c9:c1:15:
         15:81:c6:67:86:27:06:ae:ea:5b:28:f4:24:a9:ec:e5:cc:09:
         8d:0e:1c:59:d1:62:b3:56:64:a5:e1:7e:02:9a:c5:59:3e:2c:
         5b:e9:63:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbLBW2qd+8k8GQND2SKmCO3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiZDgzNmMyOGFmMDkyN2EwMzU1ODYyNWFlZGY2ZmQ3ODdh
NDkwNWMwHhcNMjUwNTEzMTkwMDUyWhcNMjUwNTE0MTkwMDUyWjAzMTEwLwYDVQQD
EyhkMjBmZDA1MTYyOGZhNWYyZjg0ZTgxMDQ1Y2IxODYyMmRhOTFiMGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUC12BQ+jjifg+QBuGAEylt7xUSW
BtuCwsD/kMuULyQ1rGhpdUf/Z5EHHfQHvUXJvOe27Qf3je0ig9l8fltec6/MSkWt
yBMdy5hPlicpSTwWnJFWD4ClM3Kw/OXStMCB02Flb+Oi7KRwhRQM4oQkMV5HPeYE
i/crqtbYJLvw9WHAUBHg4X/emH91/duEXDIw6vSxW3ISKJ+/aV5Qeqi4kTs1q/LW
l9oIEkCbxxtndT40HnVOEVYUIjnb2sNApM1GacoWj/4ztqX9iT0Je5VLHN25bVif
IshiI/Oob3CHzT0CPMJGxo1rc6COJ+3h3sMAgK29Di6UTLQsvsGRl9fnswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNIP0FFij6Xy+E6BBFyxhiLakbCvMB8GA1UdIwQY
MBaAFHvYNsKK8JJ6A1WGJa7fb9eHpJBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTlnMndvcndrbm9EVllZbHJ0OXYxNGVra0Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kZjcxNWItNzlhNi00NGE5LWFjOTct
YWRiMzE0YTU3NTNjLzEvZTlnMndvcndrbm9EVllZbHJ0OXYxNGVra0Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9kZjcxNWItNzlhNi00NGE5LWFjOTctYWRiMzE0YTU3NTNj
LzEvZTlnMndvcndrbm9EVllZbHJ0OXYxNGVra0Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxsXSCIYQ
l78haR9SUC/3bGcMbL/YrYkIdktAKVrUbe/9/adB1IXAqjHd2fA5B+EvcRf01M2V
gjyeaj6pYqK3di8x6bEwNJuiQMQAMOEHeBUV4BnEc+ZjyJvO1FQseO1XQN/Uzlc6
PHK6T7Cs0ZrgdlR841PeiSYq6c6DLb6J5hL+fLCJUwQkqg/kz2iPTvq5VbbrMkQJ
f9u/XeQKySFGxxnpcbU0ph8WWhQ6NxdcdE2+F0pZIrDdkHRsVl5JdOK0ZebTcB6+
63arZGwkrYdVNRresrrbycEVFYHGZ4YnBq7qWyj0JKns5cwJjQ4cWdFis1ZkpeF+
AprFWT4sW+ljjA==
-----END CERTIFICATE-----