Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.mft
File:                     MFKpUR4ZpULAuyN4td6PT7RSHb4.mft (raw, json)
Hash identifier:          M6TykAW4S+m8hOGnn1HVq0oube7eE0kmFQ0r2xtuvUs=
Subject key identifier:   82:02:18:FF:AB:E6:4F:95:14:D2:80:A1:20:80:AB:F1:59:00:AB:5A
Authority key identifier: 30:52:A9:51:1E:19:A5:42:C0:BB:23:78:B5:DE:8F:4F:B4:52:1D:BE
Certificate issuer:       /CN=3052a9511e19a542c0bb2378b5de8f4fb4521dbe
Certificate serial:       019649A1275A67F5D9150410AD34E4649F97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MFKpUR4ZpULAuyN4td6PT7RSHb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.mft
Manifest number:          1487
Signing time:             Fri 18 Apr 2025 16:00:20 +0000
Manifest this update:     Fri 18 Apr 2025 16:00:20 +0000
Manifest next update:     Sat 19 Apr 2025 16:00:20 +0000
Files and hashes:         1: MFKpUR4ZpULAuyN4td6PT7RSHb4.crl (hash: kis3XZMt6MiadFzz2HvSAU5Wh6ed3lb2Yek5DLC2xNg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MFKpUR4ZpULAuyN4td6PT7RSHb4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 14:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:49:a1:27:5a:67:f5:d9:15:04:10:ad:34:e4:64:9f:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3052a9511e19a542c0bb2378b5de8f4fb4521dbe
        Validity
            Not Before: Apr 18 16:00:20 2025 GMT
            Not After : Apr 19 16:00:20 2025 GMT
        Subject: CN=820218ffabe64f9514d280a12080abf15900ab5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6e:3d:13:e6:2b:f7:40:0d:d0:58:7b:a2:e6:
                    21:89:9c:12:bc:e7:25:ae:d5:99:30:8c:b4:8b:82:
                    8d:e6:1e:40:d2:1a:47:20:3d:7c:85:20:be:c6:3c:
                    7a:d2:e5:1c:1e:fd:81:11:dd:68:68:a0:24:75:41:
                    6c:6e:9d:57:d2:49:1a:11:cc:8a:65:76:90:a3:2f:
                    ef:61:f7:71:84:c1:d2:fb:c6:10:35:58:ac:6d:da:
                    a8:87:8f:15:aa:2d:bc:cb:a1:69:af:7a:09:ea:9a:
                    0a:2e:2c:70:b8:7b:01:7a:03:1f:74:ea:b4:3c:7c:
                    f2:0d:f0:9f:f9:bf:97:b7:55:81:e9:f5:9f:94:fe:
                    97:03:5f:3a:d7:e3:54:2c:d4:1b:89:63:df:9c:0d:
                    9e:04:9d:17:c0:59:d3:e2:d2:64:bb:cd:d7:08:81:
                    41:a4:cc:20:17:95:a6:b5:b4:17:b9:a0:1e:47:f5:
                    66:b8:44:c2:82:bb:53:7d:05:a9:7c:ce:e1:a5:24:
                    a1:63:d1:a2:71:d2:bb:87:73:c3:78:62:33:53:c7:
                    b3:7d:8b:4c:ba:5e:0c:83:bb:ef:ae:ed:7a:e5:0e:
                    8d:90:22:24:ca:5d:fa:66:b4:dc:6b:fd:55:4e:25:
                    27:49:64:ec:3e:16:4f:75:a8:6d:6d:c0:91:9f:6d:
                    32:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:02:18:FF:AB:E6:4F:95:14:D2:80:A1:20:80:AB:F1:59:00:AB:5A
            X509v3 Authority Key Identifier:
                keyid:30:52:A9:51:1E:19:A5:42:C0:BB:23:78:B5:DE:8F:4F:B4:52:1D:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFKpUR4ZpULAuyN4td6PT7RSHb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:52:26:ff:ea:1c:ef:2c:32:39:dc:64:88:81:80:69:4b:1b:
         2a:c7:24:52:7d:fa:bd:11:75:5e:1f:27:ab:e7:0a:b9:e2:47:
         3a:46:dc:09:77:25:aa:5b:9a:2d:f6:b2:ad:51:a7:c0:45:07:
         7e:58:33:fa:49:f6:14:ba:58:a9:24:6a:f0:c0:0c:fa:11:99:
         2a:d5:35:10:4c:80:d8:e8:7f:fa:fc:01:b1:8c:31:7c:c5:96:
         36:ab:bc:91:ab:1b:50:06:25:7a:36:57:8b:fb:3c:29:e9:df:
         32:a1:8c:ec:48:3a:de:c7:b7:5a:84:62:07:6c:c2:ee:bb:80:
         25:5b:0f:a8:53:6e:93:0a:f9:0b:ea:34:21:38:84:de:ae:46:
         3c:01:d4:17:75:13:0c:89:1c:c4:6d:98:d1:6f:ff:43:d4:a5:
         44:10:25:4d:aa:6f:2c:48:6e:06:6f:90:ec:da:e9:d4:38:fb:
         6b:c9:ec:83:59:48:7a:95:b9:a4:8d:29:5a:dc:43:3f:c0:8f:
         a5:20:80:4f:08:21:9d:ff:f4:73:f3:be:b4:b5:e2:ed:83:74:
         3c:56:2d:db:b5:84:6e:3c:a6:dc:7b:64:89:e5:4f:00:cf:ab:
         9a:41:84:37:27:b1:bf:a2:24:cb:be:a8:6b:b2:bc:c7:e6:40:
         5a:e1:03:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZJoSdaZ/XZFQQQrTTkZJ+XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNTJhOTUxMWUxOWE1NDJjMGJiMjM3OGI1ZGU4ZjRmYjQ1
MjFkYmUwHhcNMjUwNDE4MTYwMDIwWhcNMjUwNDE5MTYwMDIwWjAzMTEwLwYDVQQD
Eyg4MjAyMThmZmFiZTY0Zjk1MTRkMjgwYTEyMDgwYWJmMTU5MDBhYjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt249E+Yr90AN0Fh7ouYhiZwSvOcl
rtWZMIy0i4KN5h5A0hpHID18hSC+xjx60uUcHv2BEd1oaKAkdUFsbp1X0kkaEcyK
ZXaQoy/vYfdxhMHS+8YQNVisbdqoh48Vqi28y6Fpr3oJ6poKLixwuHsBegMfdOq0
PHzyDfCf+b+Xt1WB6fWflP6XA1861+NULNQbiWPfnA2eBJ0XwFnT4tJku83XCIFB
pMwgF5WmtbQXuaAeR/VmuETCgrtTfQWpfM7hpSShY9GicdK7h3PDeGIzU8ezfYtM
ul4Mg7vvru165Q6NkCIkyl36ZrTca/1VTiUnSWTsPhZPdahtbcCRn20yewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIICGP+r5k+VFNKAoSCAq/FZAKtaMB8GA1UdIwQY
MBaAFDBSqVEeGaVCwLsjeLXej0+0Uh2+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUZLcFVSNFpwVUxBdXlONHRkNlBUN1JTSGI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9kMzVhMWQtOTRlOS00ZWI0LTgzZjQt
MDIwZTE4NTFlOTQzLzEvTUZLcFVSNFpwVUxBdXlONHRkNlBUN1JTSGI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9kMzVhMWQtOTRlOS00ZWI0LTgzZjQtMDIwZTE4NTFlOTQz
LzEvTUZLcFVSNFpwVUxBdXlONHRkNlBUN1JTSGI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAilIm/+oc
7ywyOdxkiIGAaUsbKsckUn36vRF1Xh8nq+cKueJHOkbcCXclqluaLfayrVGnwEUH
flgz+kn2FLpYqSRq8MAM+hGZKtU1EEyA2Oh/+vwBsYwxfMWWNqu8kasbUAYlejZX
i/s8KenfMqGM7Eg63se3WoRiB2zC7ruAJVsPqFNukwr5C+o0ITiE3q5GPAHUF3UT
DIkcxG2Y0W//Q9SlRBAlTapvLEhuBm+Q7Nrp1Dj7a8nsg1lIepW5pI0pWtxDP8CP
pSCATwghnf/0c/O+tLXi7YN0PFYt27WEbjym3HtkieVPAM+rmkGENyexv6Iky76o
a7K8x+ZAWuEDvg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:00:49 2025 by rpki-client