Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
File:                     Eht9Dci8pP9OdTa9OANAJCLo4mw.mft (raw, json)
Hash identifier:          7Fnwmy+a13oaKayUwYf7XgfjQki0cHI4duXQIVEvqL8=
Subject key identifier:   05:1C:68:B5:31:F1:01:37:5F:AB:B6:1B:D3:22:BC:7E:B8:CA:74:71
Authority key identifier: 12:1B:7D:0D:C8:BC:A4:FF:4E:75:36:BD:38:03:40:24:22:E8:E2:6C
Certificate issuer:       /CN=121b7d0dc8bca4ff4e7536bd3803402422e8e26c
Certificate serial:       0196AEB2B389CB594C5F3A5486E9877EEE27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
Manifest number:          08AB
Signing time:             Thu 08 May 2025 07:01:08 +0000
Manifest this update:     Thu 08 May 2025 07:01:08 +0000
Manifest next update:     Fri 09 May 2025 07:01:08 +0000
Files and hashes:         1: Eht9Dci8pP9OdTa9OANAJCLo4mw.crl (hash: CSpTZudnUceuADz57ixKFsV/6BNtjKneEtarHMMphV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ae:b2:b3:89:cb:59:4c:5f:3a:54:86:e9:87:7e:ee:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=121b7d0dc8bca4ff4e7536bd3803402422e8e26c
        Validity
            Not Before: May  8 07:01:08 2025 GMT
            Not After : May  9 07:01:08 2025 GMT
        Subject: CN=051c68b531f101375fabb61bd322bc7eb8ca7471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1b:22:52:f7:eb:b7:47:31:ff:25:3a:9c:ea:
                    b4:67:76:39:80:e7:89:9e:e3:f2:0f:a7:2d:2f:a9:
                    f4:07:e8:ca:52:2e:3b:51:9b:4b:18:d9:7b:1f:77:
                    98:7d:e2:7b:6d:f9:9b:a4:e8:cd:e2:0a:6a:ef:03:
                    00:d4:7b:5f:ef:49:aa:cd:43:49:e4:63:a9:b8:04:
                    af:01:02:2a:cf:c0:07:ee:2e:0c:83:37:f1:61:83:
                    a3:33:b7:79:40:ca:02:7d:16:82:e4:df:c5:06:8a:
                    46:29:68:29:33:74:75:85:30:d8:81:66:bf:8c:91:
                    84:c5:5e:32:8c:0c:40:23:5c:33:5a:60:e2:da:fa:
                    1a:ef:ec:d8:7a:bb:ab:8a:8b:cb:c3:93:38:8a:0a:
                    e0:6e:ef:48:f5:73:01:a1:f9:bf:29:ea:3c:bc:03:
                    03:b6:06:21:60:79:24:ab:d9:d5:ac:49:b6:81:d7:
                    78:6a:e2:33:53:22:b0:b9:5d:5a:2c:46:ca:98:b3:
                    3c:d3:1b:0e:6d:5f:79:e2:cd:5e:36:3a:30:87:36:
                    39:1d:ed:d5:d3:3a:d0:6f:b1:10:a4:ee:2b:77:f2:
                    ba:bd:1d:f8:ef:57:a6:75:06:55:ba:08:ba:cf:20:
                    a6:5c:04:59:4b:a1:05:73:11:e8:1c:fb:91:97:ff:
                    5c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1C:68:B5:31:F1:01:37:5F:AB:B6:1B:D3:22:BC:7E:B8:CA:74:71
            X509v3 Authority Key Identifier:
                keyid:12:1B:7D:0D:C8:BC:A4:FF:4E:75:36:BD:38:03:40:24:22:E8:E2:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:86:2e:20:99:98:78:3a:00:9c:c9:89:64:cf:35:af:f5:0c:
         8d:e5:fd:43:f1:28:0a:84:5e:45:86:16:66:63:cb:ec:5b:09:
         96:77:19:15:b3:81:18:26:a2:a2:53:58:de:94:d6:80:a8:49:
         ee:b3:a8:08:48:44:9f:66:a8:33:2b:59:6f:4e:6d:9e:70:84:
         62:e3:d9:5c:d2:cd:b7:c6:b5:d7:30:3d:ae:64:e1:8f:79:7d:
         25:89:68:dd:4d:18:1a:be:0b:37:29:b1:90:29:ae:34:01:27:
         de:7c:37:c6:56:f8:4e:41:02:57:b3:c6:f8:f6:84:2d:15:91:
         ec:9a:d8:43:62:dc:2f:6b:6b:85:98:3b:03:ca:85:f8:1a:70:
         dc:c9:c0:b7:86:94:77:7f:e8:01:bf:ac:01:f5:7a:90:6f:a7:
         1f:86:d9:0e:a3:df:dc:70:7e:70:eb:ec:b6:51:04:cb:44:b8:
         90:41:ad:97:08:86:c7:7d:fa:a7:d0:1e:50:37:87:a5:93:46:
         7a:44:ec:6e:3e:10:b1:3c:ff:73:2a:9e:be:4e:aa:47:9d:02:
         d3:04:e2:0e:54:3f:1d:37:a6:22:5b:88:7b:6e:55:b4:57:0b:
         90:48:cb:6b:8b:56:c2:6f:fe:4a:63:a4:84:d3:aa:cd:0d:d3:
         f4:8f:c1:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZausrOJy1lMXzpUhumHfu4nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMWI3ZDBkYzhiY2E0ZmY0ZTc1MzZiZDM4MDM0MDI0MjJl
OGUyNmMwHhcNMjUwNTA4MDcwMTA4WhcNMjUwNTA5MDcwMTA4WjAzMTEwLwYDVQQD
EygwNTFjNjhiNTMxZjEwMTM3NWZhYmI2MWJkMzIyYmM3ZWI4Y2E3NDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhsiUvfrt0cx/yU6nOq0Z3Y5gOeJ
nuPyD6ctL6n0B+jKUi47UZtLGNl7H3eYfeJ7bfmbpOjN4gpq7wMA1Htf70mqzUNJ
5GOpuASvAQIqz8AH7i4MgzfxYYOjM7d5QMoCfRaC5N/FBopGKWgpM3R1hTDYgWa/
jJGExV4yjAxAI1wzWmDi2voa7+zYeruriovLw5M4igrgbu9I9XMBofm/Keo8vAMD
tgYhYHkkq9nVrEm2gdd4auIzUyKwuV1aLEbKmLM80xsObV954s1eNjowhzY5He3V
0zrQb7EQpO4rd/K6vR3471emdQZVugi6zyCmXARZS6EFcxHoHPuRl/9csQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAUcaLUx8QE3X6u2G9MivH64ynRxMB8GA1UdIwQY
MBaAFBIbfQ3IvKT/TnU2vTgDQCQi6OJsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWh0OURjaThwUDlPZFRhOU9BTkFKQ0xvNG13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9mZGI5YjctOTViYS00YzEzLWIzOTYt
OGRiYzc0NjZhZmUzLzEvRWh0OURjaThwUDlPZFRhOU9BTkFKQ0xvNG13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9mZGI5YjctOTViYS00YzEzLWIzOTYtOGRiYzc0NjZhZmUz
LzEvRWh0OURjaThwUDlPZFRhOU9BTkFKQ0xvNG13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVYYuIJmY
eDoAnMmJZM81r/UMjeX9Q/EoCoReRYYWZmPL7FsJlncZFbOBGCaiolNY3pTWgKhJ
7rOoCEhEn2aoMytZb05tnnCEYuPZXNLNt8a11zA9rmThj3l9JYlo3U0YGr4LNymx
kCmuNAEn3nw3xlb4TkECV7PG+PaELRWR7JrYQ2LcL2trhZg7A8qF+Bpw3MnAt4aU
d3/oAb+sAfV6kG+nH4bZDqPf3HB+cOvstlEEy0S4kEGtlwiGx336p9AeUDeHpZNG
ekTsbj4QsTz/cyqevk6qR50C0wTiDlQ/HTemIluIe25VtFcLkEjLa4tWwm/+SmOk
hNOqzQ3T9I/B1g==
-----END CERTIFICATE-----
Generated at Thu May 8 14:58:30 2025 by rpki-client