Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.mft
File:                     96wXOfUp2vTMczgkibgFl-ugf0E.mft (raw, json)
Hash identifier:          P2vzYr2pOyTPXrvya1AOxkE6CF67Epo4+oWHbRBQpR8=
Subject key identifier:   A3:82:04:18:74:EE:C8:62:A6:57:98:9E:56:91:78:61:8E:AE:84:FD
Authority key identifier: F7:AC:17:39:F5:29:DA:F4:CC:73:38:24:89:B8:05:97:EB:A0:7F:41
Certificate issuer:       /CN=f7ac1739f529daf4cc73382489b80597eba07f41
Certificate serial:       01965F84B47F65DE5DD07AF43A01D0377C77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/96wXOfUp2vTMczgkibgFl-ugf0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.mft
Manifest number:          073C
Signing time:             Tue 22 Apr 2025 22:00:54 +0000
Manifest this update:     Tue 22 Apr 2025 22:00:54 +0000
Manifest next update:     Wed 23 Apr 2025 22:00:54 +0000
Files and hashes:         1: 96wXOfUp2vTMczgkibgFl-ugf0E.crl (hash: W/JRQZKLMMRlgVsDIUicV7Np/iGneEspH0jlcwfC8Ds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/96wXOfUp2vTMczgkibgFl-ugf0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 14:46:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5f:84:b4:7f:65:de:5d:d0:7a:f4:3a:01:d0:37:7c:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7ac1739f529daf4cc73382489b80597eba07f41
        Validity
            Not Before: Apr 22 22:00:54 2025 GMT
            Not After : Apr 23 22:00:54 2025 GMT
        Subject: CN=a382041874eec862a657989e569178618eae84fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9a:e0:65:f5:6a:bb:67:52:92:17:8d:26:29:
                    9c:8b:bf:4c:20:c3:2d:6f:69:36:bc:82:c6:fd:ab:
                    33:91:4f:f6:f5:fc:a0:c6:ff:41:3e:8d:a6:e4:86:
                    bc:62:79:f8:e3:a7:a5:30:1d:df:74:31:eb:81:75:
                    3f:93:d5:de:39:17:d3:76:2b:79:c7:85:5b:72:85:
                    e9:a3:87:0d:90:6b:64:23:dd:9a:ed:52:2c:c6:da:
                    11:f9:49:02:62:23:cc:6f:47:fb:2a:a4:50:68:f6:
                    20:22:2f:f5:61:51:eb:e6:85:ff:e3:a6:46:b3:51:
                    f8:d5:1c:05:0b:c9:1c:c5:e9:21:a8:6a:82:76:3e:
                    cb:4c:66:b1:00:8a:90:55:88:92:3d:1d:cd:b4:e6:
                    e8:a1:76:2c:a3:22:c0:f5:62:10:c3:63:65:49:c6:
                    de:7d:5e:7f:4a:bd:e1:05:05:80:a0:18:27:cc:06:
                    c3:6b:a2:99:e1:9e:80:3a:08:de:4e:70:e1:9b:40:
                    8d:da:50:12:48:17:6d:4a:69:d7:96:a6:90:94:80:
                    82:d6:1b:a6:0d:58:82:ba:8a:ee:0a:3e:96:93:25:
                    ac:08:ad:79:96:18:71:4a:8e:5a:40:1a:d3:b3:9b:
                    47:f5:51:65:1e:c0:08:df:ff:0c:e3:4d:cc:47:d1:
                    b9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:82:04:18:74:EE:C8:62:A6:57:98:9E:56:91:78:61:8E:AE:84:FD
            X509v3 Authority Key Identifier:
                keyid:F7:AC:17:39:F5:29:DA:F4:CC:73:38:24:89:B8:05:97:EB:A0:7F:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96wXOfUp2vTMczgkibgFl-ugf0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:fa:6e:69:d7:16:75:c0:0b:db:4f:ff:9c:4f:a7:b9:27:b0:
         70:97:80:bc:97:6e:cd:8d:4d:a6:15:9e:e9:26:d9:64:18:1a:
         04:aa:f7:db:d2:c9:e4:fe:ab:61:43:f5:bf:b1:3b:d4:a4:95:
         48:bb:b3:85:63:13:eb:1a:6c:80:00:e4:c3:03:a7:11:bb:e9:
         eb:04:58:15:c5:94:d0:c3:5e:4c:a5:e0:64:a8:de:5e:13:7c:
         ee:1d:73:23:6d:c6:6b:14:4d:24:64:77:9f:b5:e1:96:69:76:
         1d:3a:ce:b1:d2:a1:fa:6f:79:e6:3a:8d:ac:5f:2a:ac:bd:c5:
         89:ca:38:7c:29:9b:5d:b7:31:22:66:41:1b:33:5c:1b:19:36:
         84:9e:86:cf:1c:8f:b0:5a:03:8e:67:d2:69:bc:14:e8:74:eb:
         a7:ab:2b:f4:e4:50:91:52:c4:7c:bb:a2:32:76:ec:0a:5c:a2:
         0e:43:64:24:01:11:f0:34:1d:82:4f:0f:ee:13:8b:4e:e4:d9:
         4d:79:b1:21:97:5a:7d:9e:40:3d:7a:ac:5b:30:d2:4d:f6:39:
         c5:84:39:a4:1f:04:e3:ed:5f:4d:69:c6:a7:ac:7e:7d:5c:51:
         ce:42:06:a5:4c:11:09:5d:73:48:31:7a:b8:f6:47:5e:b9:0c:
         61:58:2d:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZfhLR/Zd5d0Hr0OgHQN3x3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YWMxNzM5ZjUyOWRhZjRjYzczMzgyNDg5YjgwNTk3ZWJh
MDdmNDEwHhcNMjUwNDIyMjIwMDU0WhcNMjUwNDIzMjIwMDU0WjAzMTEwLwYDVQQD
EyhhMzgyMDQxODc0ZWVjODYyYTY1Nzk4OWU1NjkxNzg2MThlYWU4NGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZrgZfVqu2dSkheNJimci79MIMMt
b2k2vILG/aszkU/29fygxv9BPo2m5Ia8Ynn446elMB3fdDHrgXU/k9XeORfTdit5
x4VbcoXpo4cNkGtkI92a7VIsxtoR+UkCYiPMb0f7KqRQaPYgIi/1YVHr5oX/46ZG
s1H41RwFC8kcxekhqGqCdj7LTGaxAIqQVYiSPR3NtObooXYsoyLA9WIQw2NlScbe
fV5/Sr3hBQWAoBgnzAbDa6KZ4Z6AOgjeTnDhm0CN2lASSBdtSmnXlqaQlICC1hum
DViCuoruCj6WkyWsCK15lhhxSo5aQBrTs5tH9VFlHsAI3/8M403MR9G57QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOCBBh07shipleYnlaReGGOroT9MB8GA1UdIwQY
MBaAFPesFzn1Kdr0zHM4JIm4BZfroH9BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTZ3WE9mVXAydlRNY3pna2liZ0ZsLXVnZjBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8xMjNiMjUtZmVlNC00OTBiLWJlMDAt
MGI4YTc5MmMxYjlkLzEvOTZ3WE9mVXAydlRNY3pna2liZ0ZsLXVnZjBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8xMjNiMjUtZmVlNC00OTBiLWJlMDAtMGI4YTc5MmMxYjlk
LzEvOTZ3WE9mVXAydlRNY3pna2liZ0ZsLXVnZjBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf/puadcW
dcAL20//nE+nuSewcJeAvJduzY1NphWe6SbZZBgaBKr329LJ5P6rYUP1v7E71KSV
SLuzhWMT6xpsgADkwwOnEbvp6wRYFcWU0MNeTKXgZKjeXhN87h1zI23GaxRNJGR3
n7Xhlml2HTrOsdKh+m955jqNrF8qrL3Fico4fCmbXbcxImZBGzNcGxk2hJ6GzxyP
sFoDjmfSabwU6HTrp6sr9ORQkVLEfLuiMnbsClyiDkNkJAER8DQdgk8P7hOLTuTZ
TXmxIZdafZ5APXqsWzDSTfY5xYQ5pB8E4+1fTWnGp6x+fVxRzkIGpUwRCV1zSDF6
uPZHXrkMYVgtjA==
-----END CERTIFICATE-----
Generated at Wed Apr 23 01:11:43 2025 by rpki-client