Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
File:                     Elriz9MVwTEZNIRmWsrafAExY-w.mft (raw, json)
Hash identifier:          XrXHpBveP+H+oNpMF/c//HSFnmomM8lSF0CykIHnv04=
Subject key identifier:   65:9B:9F:B5:56:89:8D:CF:7C:6E:9F:00:F4:67:D3:9B:24:D9:52:2E
Authority key identifier: 12:5A:E2:CF:D3:15:C1:31:19:34:84:66:5A:CA:DA:7C:01:31:63:EC
Certificate issuer:       /CN=125ae2cfd315c131193484665acada7c013163ec
Certificate serial:       0196A164DBACBA5E4760501F117FEB250082
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
Manifest number:          152E
Signing time:             Mon 05 May 2025 17:01:03 +0000
Manifest this update:     Mon 05 May 2025 17:01:03 +0000
Manifest next update:     Tue 06 May 2025 17:01:03 +0000
Files and hashes:         1: Elriz9MVwTEZNIRmWsrafAExY-w.crl (hash: 6SJUzHyIll/ZTKVhlG58jeM0Z/cX6MCOEC4v7JJLIhA=)
                          2: wbTgEv-sqFR9u9r7ZDRXXLL-IqI.roa (hash: taRPRQvI9CVnj6I4aQu8cTaoxv9W7+s+q4UGNBYlAx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 17:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a1:64:db:ac:ba:5e:47:60:50:1f:11:7f:eb:25:00:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=125ae2cfd315c131193484665acada7c013163ec
        Validity
            Not Before: May  5 17:01:03 2025 GMT
            Not After : May  6 17:01:03 2025 GMT
        Subject: CN=659b9fb556898dcf7c6e9f00f467d39b24d9522e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:77:a8:22:e5:22:db:d4:49:fd:c2:5f:d6:1a:
                    85:f3:94:36:6b:f3:d9:32:ff:68:0f:3c:05:b8:18:
                    eb:4d:33:79:87:50:3a:b0:09:c4:41:dc:b0:18:bc:
                    ba:47:6a:64:38:25:22:d3:5e:aa:4c:cc:38:0d:9a:
                    39:1c:f0:53:a0:23:b3:76:35:b6:ce:7a:f9:d3:64:
                    62:0c:4e:69:6e:d1:b7:c4:36:28:dc:de:e9:52:d4:
                    9d:3c:fb:de:37:c7:9e:b5:8a:3a:33:6f:9a:1a:f5:
                    ec:f6:7c:1e:86:93:8f:ba:54:82:7d:fd:11:f6:07:
                    0a:c4:3a:69:e3:5f:61:4c:67:69:bb:b6:c5:8f:1d:
                    e5:0a:a3:ec:c6:92:48:9d:87:a7:4a:23:34:c6:08:
                    f3:b7:a1:76:40:de:75:f4:91:75:ed:ce:b1:42:6d:
                    14:1a:4e:3c:f7:a6:15:e0:94:9d:93:f4:74:49:76:
                    bb:ef:d8:77:07:d5:0d:ce:4f:ec:13:cd:df:c7:50:
                    bf:12:10:ce:8a:c1:42:b0:a9:4f:85:50:13:22:3c:
                    17:42:a2:2b:0a:f7:31:4d:31:7a:74:e5:6b:5c:45:
                    e8:76:ab:3a:5b:e1:28:54:54:ae:2c:a9:8b:26:ee:
                    0a:9d:4b:4d:0b:ab:f1:6f:da:b8:1b:c5:9e:12:48:
                    67:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:9B:9F:B5:56:89:8D:CF:7C:6E:9F:00:F4:67:D3:9B:24:D9:52:2E
            X509v3 Authority Key Identifier:
                keyid:12:5A:E2:CF:D3:15:C1:31:19:34:84:66:5A:CA:DA:7C:01:31:63:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:fd:f8:c9:d8:b1:f6:03:54:f6:be:1e:f5:47:d6:9c:95:cf:
         78:17:63:e5:2f:60:d7:d3:08:7b:89:e8:6d:55:03:1c:a1:40:
         6b:82:17:cd:54:46:1e:ab:ba:b8:c1:3d:4a:20:52:1d:c7:3b:
         9b:94:4f:02:55:14:cc:8e:bd:a9:eb:d4:5c:1b:74:e8:83:8b:
         cc:57:03:c7:43:e5:a5:cb:b7:2b:04:5a:35:41:a2:fd:0d:6a:
         13:e8:c5:07:09:c1:21:57:d9:19:09:73:60:2a:9c:0e:a0:86:
         c2:97:c2:84:13:16:cc:e3:4e:91:05:c6:06:00:7a:f0:e3:2c:
         70:87:7e:a7:39:df:22:64:9f:b5:58:56:f1:4d:2a:4e:73:f6:
         72:95:51:68:37:43:50:02:df:78:98:9d:04:62:b7:f7:9d:cd:
         bb:32:c2:e9:f7:46:5b:34:5e:97:fc:23:63:93:39:73:7f:f1:
         4b:eb:5d:83:14:98:d1:4d:c2:95:67:45:a1:2f:ad:18:10:16:
         53:42:e9:14:50:ce:0f:d1:63:0d:77:b3:85:c4:db:8f:0a:ae:
         5a:a0:35:fa:e2:bb:54:5f:27:6e:2f:09:b4:0e:55:88:e7:4f:
         cd:fa:98:10:26:dd:91:48:2c:e4:7a:21:8e:74:af:5c:a1:e3:
         99:d3:21:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZahZNusul5HYFAfEX/rJQCCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNWFlMmNmZDMxNWMxMzExOTM0ODQ2NjVhY2FkYTdjMDEz
MTYzZWMwHhcNMjUwNTA1MTcwMTAzWhcNMjUwNTA2MTcwMTAzWjAzMTEwLwYDVQQD
Eyg2NTliOWZiNTU2ODk4ZGNmN2M2ZTlmMDBmNDY3ZDM5YjI0ZDk1MjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxneoIuUi29RJ/cJf1hqF85Q2a/PZ
Mv9oDzwFuBjrTTN5h1A6sAnEQdywGLy6R2pkOCUi016qTMw4DZo5HPBToCOzdjW2
znr502RiDE5pbtG3xDYo3N7pUtSdPPveN8eetYo6M2+aGvXs9nwehpOPulSCff0R
9gcKxDpp419hTGdpu7bFjx3lCqPsxpJInYenSiM0xgjzt6F2QN519JF17c6xQm0U
Gk4896YV4JSdk/R0SXa779h3B9UNzk/sE83fx1C/EhDOisFCsKlPhVATIjwXQqIr
CvcxTTF6dOVrXEXodqs6W+EoVFSuLKmLJu4KnUtNC6vxb9q4G8WeEkhnTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGWbn7VWiY3PfG6fAPRn05sk2VIuMB8GA1UdIwQY
MBaAFBJa4s/TFcExGTSEZlrK2nwBMWPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWxyaXo5TVZ3VEVaTklSbVdzcmFmQUV4WS13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8wMzdhZGYtYjljMi00YWQxLTk2MGEt
NGQ0MDMzNjlkMmEyLzEvRWxyaXo5TVZ3VEVaTklSbVdzcmFmQUV4WS13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8wMzdhZGYtYjljMi00YWQxLTk2MGEtNGQ0MDMzNjlkMmEy
LzEvRWxyaXo5TVZ3VEVaTklSbVdzcmFmQUV4WS13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdP34ydix
9gNU9r4e9UfWnJXPeBdj5S9g19MIe4nobVUDHKFAa4IXzVRGHqu6uME9SiBSHcc7
m5RPAlUUzI69qevUXBt06IOLzFcDx0Plpcu3KwRaNUGi/Q1qE+jFBwnBIVfZGQlz
YCqcDqCGwpfChBMWzONOkQXGBgB68OMscId+pznfImSftVhW8U0qTnP2cpVRaDdD
UALfeJidBGK3953NuzLC6fdGWzRel/wjY5M5c3/xS+tdgxSY0U3ClWdFoS+tGBAW
U0LpFFDOD9FjDXezhcTbjwquWqA1+uK7VF8nbi8JtA5ViOdPzfqYECbdkUgs5Hoh
jnSvXKHjmdMhEg==
-----END CERTIFICATE-----
Generated at Mon May 5 22:22:22 2025 by rpki-client