Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft
File:                     TvYP_RC7937OmKeBY1mERCd9v6Q.mft (raw, json)
Hash identifier:          EfOJRDGxTzBaue9EX1W4a1n9DbENP7qOKQ/DdJDvnlE=
Subject key identifier:   14:CE:4D:FE:A5:15:06:10:0B:80:DA:EA:5B:4F:97:01:BD:6E:C8:71
Authority key identifier: 4E:F6:0F:FD:10:BB:F7:7E:CE:98:A7:81:63:59:84:44:27:7D:BF:A4
Certificate issuer:       /CN=4ef60ffd10bbf77ece98a78163598444277dbfa4
Certificate serial:       0196B1EAB8A641FBFB3E988DEBFD991CD081
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TvYP_RC7937OmKeBY1mERCd9v6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft
Manifest number:          152A
Signing time:             Thu 08 May 2025 22:01:12 +0000
Manifest this update:     Thu 08 May 2025 22:01:12 +0000
Manifest next update:     Fri 09 May 2025 22:01:12 +0000
Files and hashes:         1: TvYP_RC7937OmKeBY1mERCd9v6Q.crl (hash: MMBHY8zO6n6KPksG2z1deXRSu2ZLr+cy/isa5mQF7Rk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TvYP_RC7937OmKeBY1mERCd9v6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 15:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b1:ea:b8:a6:41:fb:fb:3e:98:8d:eb:fd:99:1c:d0:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ef60ffd10bbf77ece98a78163598444277dbfa4
        Validity
            Not Before: May  8 22:01:12 2025 GMT
            Not After : May  9 22:01:12 2025 GMT
        Subject: CN=14ce4dfea51506100b80daea5b4f9701bd6ec871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0e:a1:27:bd:95:91:d7:24:69:a8:f2:6a:4f:
                    e2:bb:49:cb:8d:b3:c2:21:04:61:25:a0:d0:50:0d:
                    f3:9f:7b:3e:18:ba:63:d3:ba:11:1b:7f:ab:50:b3:
                    ff:1c:71:cc:f0:9b:d2:88:6b:d4:68:ca:40:80:fc:
                    90:db:ab:07:2e:dd:44:fb:a8:fa:ab:6a:91:07:57:
                    f6:d4:cd:22:f0:8d:45:4f:8f:4f:98:da:03:b9:aa:
                    2a:85:38:33:f3:36:65:e3:b4:31:ec:e2:08:a9:2c:
                    0a:a8:0f:79:3e:a5:70:71:b3:df:7a:48:7a:82:81:
                    1d:cd:79:51:84:c2:71:e0:30:91:25:d4:e4:90:38:
                    63:7b:e9:65:aa:bf:48:ba:5c:34:24:65:38:2b:79:
                    6b:6b:85:10:d9:2c:1a:50:dc:1f:38:06:dc:03:2f:
                    ab:81:b7:ff:43:ec:74:64:a9:4c:c5:23:82:43:31:
                    f7:04:1b:7c:cb:3d:5b:a2:07:bf:c2:4a:5d:6a:8b:
                    fa:be:c5:f5:60:5b:7b:dd:af:f0:1b:6a:ba:54:80:
                    39:8f:6e:b0:a8:9b:a6:24:52:63:16:91:ac:30:6e:
                    0b:82:27:41:fd:42:8c:37:8d:1e:c6:7c:ab:14:22:
                    7d:03:10:a8:1d:a8:23:f9:ac:1f:8e:1b:2b:36:6d:
                    f2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:CE:4D:FE:A5:15:06:10:0B:80:DA:EA:5B:4F:97:01:BD:6E:C8:71
            X509v3 Authority Key Identifier:
                keyid:4E:F6:0F:FD:10:BB:F7:7E:CE:98:A7:81:63:59:84:44:27:7D:BF:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TvYP_RC7937OmKeBY1mERCd9v6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:24:81:04:c0:35:a6:94:e4:67:d3:de:01:92:66:ec:97:ac:
         79:fb:6c:d6:2a:4c:34:fe:07:f9:1f:27:ef:89:3f:e1:20:7f:
         81:c2:20:9b:ee:ff:52:2b:ae:c5:87:65:4e:29:d5:f1:3b:42:
         56:a5:b5:97:26:5a:93:58:46:73:90:5e:d6:d8:6f:fb:a3:f8:
         cd:d5:e6:a2:d3:3d:1d:07:9e:70:d3:cd:4b:66:0c:33:a9:d0:
         14:4e:82:b8:69:65:4d:ac:6e:ff:02:8d:3e:2b:dd:35:fb:88:
         f5:c1:f2:f6:96:d3:14:b6:c6:61:cc:33:7e:47:43:9d:53:75:
         18:c5:49:18:c0:e2:12:ac:39:7a:7a:ba:2e:e9:28:08:66:b0:
         1d:89:c9:c3:d8:7e:b4:de:8c:bb:c0:ed:6a:62:9c:55:70:2b:
         8a:d9:18:cc:09:9e:ad:26:32:19:a4:d1:31:5e:28:fb:06:e8:
         41:d2:d2:9d:4c:b2:bb:3d:ac:c2:e3:57:d8:08:cd:28:1c:c4:
         42:32:56:66:d0:b1:65:9b:cc:0c:21:c4:59:56:7d:50:28:3c:
         83:7d:a7:04:4c:45:f1:ca:b1:48:fb:37:fb:8f:db:37:8a:12:
         28:43:42:b0:da:34:a9:4d:54:c1:ce:c0:2b:4b:5d:8e:df:a9:
         95:47:79:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZax6rimQfv7PpiN6/2ZHNCBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZjYwZmZkMTBiYmY3N2VjZTk4YTc4MTYzNTk4NDQ0Mjc3
ZGJmYTQwHhcNMjUwNTA4MjIwMTEyWhcNMjUwNTA5MjIwMTEyWjAzMTEwLwYDVQQD
EygxNGNlNGRmZWE1MTUwNjEwMGI4MGRhZWE1YjRmOTcwMWJkNmVjODcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQ6hJ72Vkdckaajyak/iu0nLjbPC
IQRhJaDQUA3zn3s+GLpj07oRG3+rULP/HHHM8JvSiGvUaMpAgPyQ26sHLt1E+6j6
q2qRB1f21M0i8I1FT49PmNoDuaoqhTgz8zZl47Qx7OIIqSwKqA95PqVwcbPfekh6
goEdzXlRhMJx4DCRJdTkkDhje+llqr9Iulw0JGU4K3lra4UQ2SwaUNwfOAbcAy+r
gbf/Q+x0ZKlMxSOCQzH3BBt8yz1boge/wkpdaov6vsX1YFt73a/wG2q6VIA5j26w
qJumJFJjFpGsMG4LgidB/UKMN40exnyrFCJ9AxCoHagj+awfjhsrNm3yKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTOTf6lFQYQC4Da6ltPlwG9bshxMB8GA1UdIwQY
MBaAFE72D/0Qu/d+zpingWNZhEQnfb+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHZZUF9SQzc5MzdPbUtlQlkxbUVSQ2Q5djZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC82MzllNWYtMDc5Ny00NDczLWFlZmYt
NTJmNTc1M2ZjM2JlLzEvVHZZUF9SQzc5MzdPbUtlQlkxbUVSQ2Q5djZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC82MzllNWYtMDc5Ny00NDczLWFlZmYtNTJmNTc1M2ZjM2Jl
LzEvVHZZUF9SQzc5MzdPbUtlQlkxbUVSQ2Q5djZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnCSBBMA1
ppTkZ9PeAZJm7Jesefts1ipMNP4H+R8n74k/4SB/gcIgm+7/UiuuxYdlTinV8TtC
VqW1lyZak1hGc5Be1thv+6P4zdXmotM9HQeecNPNS2YMM6nQFE6CuGllTaxu/wKN
PivdNfuI9cHy9pbTFLbGYcwzfkdDnVN1GMVJGMDiEqw5enq6LukoCGawHYnJw9h+
tN6Mu8DtamKcVXAritkYzAmerSYyGaTRMV4o+wboQdLSnUyyuz2swuNX2AjNKBzE
QjJWZtCxZZvMDCHEWVZ9UCg8g32nBExF8cqxSPs3+4/bN4oSKENCsNo0qU1Uwc7A
K0tdjt+plUd5GA==
-----END CERTIFICATE-----
Generated at Fri May 9 00:43:59 2025 by rpki-client