Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.mft
File:                     rvl6leIXAnXoyC7oeLbQjeuCHlU.mft (raw, json)
Hash identifier:          i5dRzDoRT5lJRMC4jB20EeTHASxtN3BFRSfpCK9SAo8=
Subject key identifier:   C5:80:30:22:E8:28:4D:BE:2B:46:55:98:A7:AA:AE:54:65:FF:95:59
Authority key identifier: AE:F9:7A:95:E2:17:02:75:E8:C8:2E:E8:78:B6:D0:8D:EB:82:1E:55
Certificate issuer:       /CN=aef97a95e2170275e8c82ee878b6d08deb821e55
Certificate serial:       01965B035E4F2F36424B40085ABF4D490CC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rvl6leIXAnXoyC7oeLbQjeuCHlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.mft
Manifest number:          0E27
Signing time:             Tue 22 Apr 2025 01:01:09 +0000
Manifest this update:     Tue 22 Apr 2025 01:01:09 +0000
Manifest next update:     Wed 23 Apr 2025 01:01:09 +0000
Files and hashes:         1: rvl6leIXAnXoyC7oeLbQjeuCHlU.crl (hash: 1CkoyANm5PEODhnMuxLl6P0/I9eGGKOC7Cq32kulf3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rvl6leIXAnXoyC7oeLbQjeuCHlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5b:03:5e:4f:2f:36:42:4b:40:08:5a:bf:4d:49:0c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aef97a95e2170275e8c82ee878b6d08deb821e55
        Validity
            Not Before: Apr 22 01:01:09 2025 GMT
            Not After : Apr 23 01:01:09 2025 GMT
        Subject: CN=c5803022e8284dbe2b465598a7aaae5465ff9559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e6:45:bb:dd:54:57:4c:28:b1:34:12:9b:07:
                    33:01:5f:7a:37:f4:db:83:93:cc:ec:aa:17:35:b5:
                    b5:ae:b2:f9:6e:ae:ec:8b:22:50:f7:a4:50:2f:9f:
                    cd:93:13:84:e1:dd:e5:26:9c:78:4d:17:89:e9:b0:
                    e2:25:21:8e:d6:62:26:ed:a7:85:13:cd:e0:22:06:
                    7e:ba:86:b0:81:1e:19:f8:3c:47:9d:2b:20:ab:50:
                    49:bb:8b:25:2c:d0:42:bf:53:ce:c0:68:ce:37:53:
                    9b:4e:76:af:97:1d:44:88:a0:eb:51:87:5b:c4:e0:
                    ae:37:09:7e:5b:5e:61:66:7e:8a:b7:0e:29:54:fc:
                    da:f9:e1:fa:c5:cc:88:bb:be:b5:3b:11:ec:33:c2:
                    80:d0:6c:71:03:13:28:6d:c6:d7:e7:68:7d:44:80:
                    55:02:0d:72:52:cc:35:1c:46:8e:81:12:54:fe:1f:
                    82:72:ca:de:2d:a5:c4:1b:4e:af:3d:f5:ac:f8:26:
                    15:af:1d:d9:3a:a3:91:8b:9b:ac:dd:17:82:82:75:
                    c9:a4:c0:6d:10:bb:7c:27:5d:4e:3f:78:62:c7:21:
                    fe:82:00:de:1c:4e:3f:2d:71:ee:e2:c6:dd:db:78:
                    b6:f3:41:9e:01:7a:73:a5:4c:d3:26:5d:3c:10:c1:
                    d6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:80:30:22:E8:28:4D:BE:2B:46:55:98:A7:AA:AE:54:65:FF:95:59
            X509v3 Authority Key Identifier:
                keyid:AE:F9:7A:95:E2:17:02:75:E8:C8:2E:E8:78:B6:D0:8D:EB:82:1E:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvl6leIXAnXoyC7oeLbQjeuCHlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:4d:d6:d7:b1:48:e2:3e:03:45:67:93:1f:1c:4f:5e:38:41:
         66:5b:41:33:d2:61:80:9d:88:ec:e2:15:ad:09:00:a1:16:cb:
         3d:3a:bf:5e:ff:e0:6f:cf:4b:ec:05:1c:26:8d:77:95:3d:4d:
         0c:5c:de:92:13:e2:66:c3:38:85:36:c9:28:f1:40:33:01:21:
         61:26:c3:f9:ca:09:7f:26:96:c2:dc:bf:8e:02:7c:4a:6d:31:
         4f:9d:91:3e:49:1c:cf:b2:4d:0a:cd:0e:75:d3:c1:30:60:2a:
         5b:e1:aa:82:81:15:cb:4a:da:a1:03:83:93:75:a1:10:cd:80:
         eb:6e:53:fe:ca:b8:25:94:68:bc:19:38:b3:a7:93:f1:52:ce:
         d6:33:85:52:59:5d:a2:1a:c0:5a:42:21:7f:41:32:5a:c0:6a:
         4b:f4:2c:2a:08:03:c5:ab:9d:fe:71:bb:af:8d:29:bd:3b:10:
         36:ba:4d:13:6c:d4:8e:c9:4f:82:98:c3:1b:8b:f4:c6:58:bc:
         07:5b:d3:d7:66:c2:48:15:f1:24:2d:bc:99:e0:b3:bb:64:2a:
         99:0d:64:3a:92:9f:df:1d:43:9d:dc:82:77:8f:c6:77:40:ea:
         27:e0:0f:8e:8c:70:4e:f7:a3:8f:17:22:0b:f3:88:07:1a:ef:
         e2:97:c3:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZbA15PLzZCS0AIWr9NSQzAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZjk3YTk1ZTIxNzAyNzVlOGM4MmVlODc4YjZkMDhkZWI4
MjFlNTUwHhcNMjUwNDIyMDEwMTA5WhcNMjUwNDIzMDEwMTA5WjAzMTEwLwYDVQQD
EyhjNTgwMzAyMmU4Mjg0ZGJlMmI0NjU1OThhN2FhYWU1NDY1ZmY5NTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uZFu91UV0wosTQSmwczAV96N/Tb
g5PM7KoXNbW1rrL5bq7siyJQ96RQL5/NkxOE4d3lJpx4TReJ6bDiJSGO1mIm7aeF
E83gIgZ+uoawgR4Z+DxHnSsgq1BJu4slLNBCv1POwGjON1ObTnavlx1EiKDrUYdb
xOCuNwl+W15hZn6Ktw4pVPza+eH6xcyIu761OxHsM8KA0GxxAxMobcbX52h9RIBV
Ag1yUsw1HEaOgRJU/h+CcsreLaXEG06vPfWs+CYVrx3ZOqORi5us3ReCgnXJpMBt
ELt8J11OP3hixyH+ggDeHE4/LXHu4sbd23i280GeAXpzpUzTJl08EMHW6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMWAMCLoKE2+K0ZVmKeqrlRl/5VZMB8GA1UdIwQY
MBaAFK75epXiFwJ16Mgu6Hi20I3rgh5VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnZsNmxlSVhBblhveUM3b2VMYlFqZXVDSGxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8xNjIzMjktNjIyMS00MjA0LTlkOGMt
MjE0YTlmOTc5YWZjLzEvcnZsNmxlSVhBblhveUM3b2VMYlFqZXVDSGxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8xNjIzMjktNjIyMS00MjA0LTlkOGMtMjE0YTlmOTc5YWZj
LzEvcnZsNmxlSVhBblhveUM3b2VMYlFqZXVDSGxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm03W17FI
4j4DRWeTHxxPXjhBZltBM9JhgJ2I7OIVrQkAoRbLPTq/Xv/gb89L7AUcJo13lT1N
DFzekhPiZsM4hTbJKPFAMwEhYSbD+coJfyaWwty/jgJ8Sm0xT52RPkkcz7JNCs0O
ddPBMGAqW+GqgoEVy0raoQODk3WhEM2A625T/sq4JZRovBk4s6eT8VLO1jOFUlld
ohrAWkIhf0EyWsBqS/QsKggDxaud/nG7r40pvTsQNrpNE2zUjslPgpjDG4v0xli8
B1vT12bCSBXxJC28meCzu2QqmQ1kOpKf3x1DndyCd4/Gd0DqJ+APjoxwTvejjxci
C/OIBxrv4pfDYg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 05:08:33 2025 by rpki-client