Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
File:                     PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft (raw, json)
Hash identifier:          mq70EHazbgQ4YOywjx6qA34fqADC9XZQzGe2VjE9pOg=
Subject key identifier:   C6:B0:60:EC:29:EB:7A:4F:E7:31:E2:11:D9:B6:5A:7A:33:03:62:90
Authority key identifier: 3C:CA:84:9B:37:50:15:F4:33:E9:A2:40:EC:AB:F0:3C:F1:52:C7:81
Certificate issuer:       /CN=3cca849b375015f433e9a240ecabf03cf152c781
Certificate serial:       0196C6BA8E3ED173121B4984FA659424A734
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
Manifest number:          1536
Signing time:             Mon 12 May 2025 23:00:36 +0000
Manifest this update:     Mon 12 May 2025 23:00:36 +0000
Manifest next update:     Tue 13 May 2025 23:00:36 +0000
Files and hashes:         1: PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl (hash: W8yWN+VqlaPBsAh0xcKPdCsQi4bfiSZ4IEbWHQDBkwg=)
                          2: tJh122419FX7oJQGYtZtkXOvqn0.roa (hash: 80WcSAxcwtJA+++UZrQ3DpOoXBp5rklUr6m+pRMbNZo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c6:ba:8e:3e:d1:73:12:1b:49:84:fa:65:94:24:a7:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cca849b375015f433e9a240ecabf03cf152c781
        Validity
            Not Before: May 12 23:00:36 2025 GMT
            Not After : May 13 23:00:36 2025 GMT
        Subject: CN=c6b060ec29eb7a4fe731e211d9b65a7a33036290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0a:6a:2e:b6:9d:d9:d4:7f:9c:eb:11:ba:ec:
                    f4:38:e4:b1:89:13:76:58:ae:f1:e2:de:cf:37:2c:
                    ad:bb:79:97:8d:ce:5a:c7:28:8d:55:c1:39:d9:c2:
                    a1:2b:81:b8:b5:85:19:64:85:3f:05:d9:40:fd:17:
                    51:92:7a:06:a0:2d:ae:b1:33:9a:b5:f8:be:df:02:
                    e8:39:d9:cf:c2:6c:fa:5a:21:54:7e:9c:92:2c:b2:
                    83:cd:2a:2c:95:a2:36:70:03:8e:7f:cd:e7:73:3d:
                    4d:ec:ef:58:2f:e9:56:48:22:19:0b:5c:9f:78:ab:
                    68:ee:f4:ac:b3:93:7b:b6:f6:f0:8c:d5:2c:5a:09:
                    be:b0:27:0c:02:ee:a6:77:eb:ae:6e:ce:0b:fa:31:
                    4a:cd:e1:18:f5:95:fc:d8:59:43:61:8f:22:92:1f:
                    a0:74:48:ac:71:cf:5f:43:00:b3:97:c8:8a:b6:cf:
                    bd:fb:73:fb:05:ce:4a:3c:25:46:cf:4c:26:73:7c:
                    33:89:04:3e:27:d9:9b:dd:a0:a2:bb:e0:4f:a4:7b:
                    a3:f5:ac:70:ac:9c:57:36:7f:ff:f3:26:fb:34:eb:
                    d7:bb:a9:49:cb:9d:74:cb:ef:d9:dd:6a:ea:16:d5:
                    f1:98:ba:89:77:43:2d:b7:6b:3d:25:d1:c1:8e:ee:
                    c1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:B0:60:EC:29:EB:7A:4F:E7:31:E2:11:D9:B6:5A:7A:33:03:62:90
            X509v3 Authority Key Identifier:
                keyid:3C:CA:84:9B:37:50:15:F4:33:E9:A2:40:EC:AB:F0:3C:F1:52:C7:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:29:b6:56:60:7c:36:8d:72:26:c3:46:54:9e:c0:7a:79:16:
         f0:3b:6f:f4:fb:10:6e:c9:a5:07:ea:3a:c7:39:a5:97:85:27:
         81:40:dc:cb:22:37:6e:19:68:ec:cf:82:99:40:65:ff:2f:55:
         62:21:a1:26:0d:b9:64:ac:d0:53:c7:24:b2:07:b1:d4:1e:9f:
         ab:16:bd:73:68:8f:83:2c:3b:00:13:6b:8a:95:c8:8d:65:ae:
         35:cc:ae:e7:fd:b8:44:8d:93:50:58:7b:7d:02:69:b9:e9:3c:
         c8:2d:92:3b:6a:fa:2e:86:d5:40:ef:bf:4e:9c:b8:6f:c9:e5:
         e0:b0:19:d2:c8:e7:c8:28:9f:23:84:ff:9e:55:05:de:d6:a4:
         ac:e1:d4:48:03:c6:99:a8:ae:4e:92:d7:23:9e:10:e8:57:ec:
         95:cd:46:6d:6f:ab:22:1b:48:04:5e:1b:dc:16:98:67:2c:e3:
         1e:ca:11:25:28:ba:0d:75:4a:16:54:ba:09:ee:3b:ef:ca:b1:
         b5:65:b4:c8:c4:5d:f4:8c:f8:1b:2b:a9:5b:48:2f:ed:23:ca:
         1b:0e:93:88:55:7c:00:a5:25:a5:5b:a4:a8:11:a1:34:d1:b5:
         f5:fc:77:3e:d1:8a:04:3d:e4:3c:a8:d0:65:2c:92:77:d6:c6:
         6b:4a:33:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbGuo4+0XMSG0mE+mWUJKc0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjY2E4NDliMzc1MDE1ZjQzM2U5YTI0MGVjYWJmMDNjZjE1
MmM3ODEwHhcNMjUwNTEyMjMwMDM2WhcNMjUwNTEzMjMwMDM2WjAzMTEwLwYDVQQD
EyhjNmIwNjBlYzI5ZWI3YTRmZTczMWUyMTFkOWI2NWE3YTMzMDM2MjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQpqLrad2dR/nOsRuuz0OOSxiRN2
WK7x4t7PNyytu3mXjc5axyiNVcE52cKhK4G4tYUZZIU/BdlA/RdRknoGoC2usTOa
tfi+3wLoOdnPwmz6WiFUfpySLLKDzSoslaI2cAOOf83ncz1N7O9YL+lWSCIZC1yf
eKto7vSss5N7tvbwjNUsWgm+sCcMAu6md+uubs4L+jFKzeEY9ZX82FlDYY8ikh+g
dEiscc9fQwCzl8iKts+9+3P7Bc5KPCVGz0wmc3wziQQ+J9mb3aCiu+BPpHuj9axw
rJxXNn//8yb7NOvXu6lJy510y+/Z3WrqFtXxmLqJd0Mtt2s9JdHBju7BNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMawYOwp63pP5zHiEdm2WnozA2KQMB8GA1UdIwQY
MBaAFDzKhJs3UBX0M+miQOyr8DzxUseBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE1xRW16ZFFGZlF6NmFKQTdLdndQUEZTeDRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yNzU2MzYtZmUzZi00NTI4LWJkN2Ut
ZDYyNTVmMjUyN2RhLzEvUE1xRW16ZFFGZlF6NmFKQTdLdndQUEZTeDRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8yNzU2MzYtZmUzZi00NTI4LWJkN2UtZDYyNTVmMjUyN2Rh
LzEvUE1xRW16ZFFGZlF6NmFKQTdLdndQUEZTeDRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJim2VmB8
No1yJsNGVJ7AenkW8Dtv9PsQbsmlB+o6xzmll4UngUDcyyI3bhlo7M+CmUBl/y9V
YiGhJg25ZKzQU8cksgex1B6fqxa9c2iPgyw7ABNripXIjWWuNcyu5/24RI2TUFh7
fQJpuek8yC2SO2r6LobVQO+/Tpy4b8nl4LAZ0sjnyCifI4T/nlUF3takrOHUSAPG
maiuTpLXI54Q6Ffslc1GbW+rIhtIBF4b3BaYZyzjHsoRJSi6DXVKFlS6Ce4778qx
tWW0yMRd9Iz4GyupW0gv7SPKGw6TiFV8AKUlpVukqBGhNNG19fx3PtGKBD3kPKjQ
ZSySd9bGa0ozbQ==
-----END CERTIFICATE-----
Generated at Tue May 13 09:17:22 2025 by rpki-client