Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
File:                     n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft (raw, json)
Hash identifier:          oRxlORzZ9WxOKAoipnkTe2eQlN9jyVpymjXJnskll/8=
Subject key identifier:   37:BB:17:57:E1:6F:58:D0:5E:6C:4A:3E:42:40:F3:EB:58:0F:7A:5C
Authority key identifier: 9F:97:11:09:D2:EA:56:9B:33:E9:0A:38:E0:30:2C:FF:16:7B:D0:35
Certificate issuer:       /CN=9f971109d2ea569b33e90a38e0302cff167bd035
Certificate serial:       019643D60D944EF5F1DC076C224E79B2B561
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
Manifest number:          09F5
Signing time:             Thu 17 Apr 2025 13:00:23 +0000
Manifest this update:     Thu 17 Apr 2025 13:00:23 +0000
Manifest next update:     Fri 18 Apr 2025 13:00:23 +0000
Files and hashes:         1: n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl (hash: CD+Bk72IPeEJXleYzKvVeUvzMZFF6vXcd8Gnyz2gH7g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 13:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:43:d6:0d:94:4e:f5:f1:dc:07:6c:22:4e:79:b2:b5:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f971109d2ea569b33e90a38e0302cff167bd035
        Validity
            Not Before: Apr 17 13:00:23 2025 GMT
            Not After : Apr 18 13:00:23 2025 GMT
        Subject: CN=37bb1757e16f58d05e6c4a3e4240f3eb580f7a5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:79:fb:10:de:f8:19:e5:6b:91:36:51:89:aa:
                    7d:b0:34:b8:fc:91:1d:08:64:b6:1f:26:1d:b5:2c:
                    d4:53:c9:72:46:8c:e4:c1:2e:dd:64:a3:97:b4:02:
                    ff:cc:d3:03:19:1e:01:36:2a:c4:89:7f:a0:e6:e4:
                    04:91:4d:53:01:d3:15:9a:1e:bc:d9:5c:84:13:b9:
                    d7:ef:a8:7d:f8:a5:57:a2:bd:c1:28:b8:8c:a4:ba:
                    4c:e4:68:c9:cb:55:61:2a:a0:b5:90:51:cc:22:81:
                    72:63:78:3c:5e:f4:5f:94:35:d7:67:4d:0e:7e:98:
                    51:bc:3c:e0:fd:7b:55:f9:a0:f5:e2:19:dc:64:e4:
                    88:48:e3:37:8f:43:6a:ba:83:e1:75:fb:c4:8c:2e:
                    08:bc:52:39:61:7a:8f:81:fc:0b:fc:8c:7b:37:14:
                    dd:24:e2:6a:20:03:1f:cb:8d:5a:85:61:bd:01:fc:
                    d8:de:56:71:e0:09:fa:30:6f:da:b2:30:b7:24:bb:
                    02:8c:19:57:ef:db:cf:d8:5b:fa:10:3a:64:9d:7e:
                    e5:9c:1c:ee:04:68:fb:87:5a:b2:8e:64:1a:fd:d4:
                    53:6a:7d:98:f2:78:22:c4:50:12:08:d0:22:44:ce:
                    76:ba:64:31:77:a7:2e:8b:cd:4d:6f:5c:c5:12:17:
                    54:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:BB:17:57:E1:6F:58:D0:5E:6C:4A:3E:42:40:F3:EB:58:0F:7A:5C
            X509v3 Authority Key Identifier:
                keyid:9F:97:11:09:D2:EA:56:9B:33:E9:0A:38:E0:30:2C:FF:16:7B:D0:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:25:8e:8c:39:30:4c:5b:fb:36:65:8d:46:3a:ae:90:ba:16:
         be:8d:3e:63:65:da:5e:a7:aa:aa:55:b6:b5:f7:3a:8a:b5:08:
         c9:40:5d:37:72:7d:40:99:fb:be:73:f9:7c:f1:e1:1f:7e:95:
         a6:be:89:d1:fe:d0:4f:69:8e:b0:5f:c8:8e:ab:0a:28:9a:47:
         3c:c1:0a:fc:95:9e:6a:1a:f5:17:66:bc:26:5a:d7:fc:e1:96:
         ce:d7:3f:9e:51:66:3f:cc:20:6d:e2:15:f5:b4:b5:f8:1d:dd:
         77:2b:05:e4:ad:52:b1:76:e0:31:eb:b5:a6:f5:c2:0d:62:b5:
         c2:89:9c:7c:a6:66:58:6e:7b:42:a1:a5:2b:48:18:bf:e6:5c:
         79:68:a9:6d:f4:84:07:09:e8:ce:87:9f:02:48:54:57:2b:93:
         cb:2b:6a:c8:99:3d:16:41:e9:19:d8:e0:e6:17:5a:eb:2f:12:
         1f:92:97:b8:07:1f:df:7b:3c:4c:f2:c0:c8:43:d5:b8:6d:04:
         83:ef:fa:91:3c:d5:10:81:0b:b0:71:5c:ce:17:c8:13:95:76:
         96:bc:3e:64:a9:2d:b3:55:e0:21:f8:c0:ca:bb:be:a2:f7:91:
         a7:6c:dc:f4:02:51:a4:f2:8c:a5:0d:cd:d9:d7:81:b7:13:c7:
         de:ad:39:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZD1g2UTvXx3AdsIk55srVhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmOTcxMTA5ZDJlYTU2OWIzM2U5MGEzOGUwMzAyY2ZmMTY3
YmQwMzUwHhcNMjUwNDE3MTMwMDIzWhcNMjUwNDE4MTMwMDIzWjAzMTEwLwYDVQQD
EygzN2JiMTc1N2UxNmY1OGQwNWU2YzRhM2U0MjQwZjNlYjU4MGY3YTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3n7EN74GeVrkTZRiap9sDS4/JEd
CGS2HyYdtSzUU8lyRozkwS7dZKOXtAL/zNMDGR4BNirEiX+g5uQEkU1TAdMVmh68
2VyEE7nX76h9+KVXor3BKLiMpLpM5GjJy1VhKqC1kFHMIoFyY3g8XvRflDXXZ00O
fphRvDzg/XtV+aD14hncZOSISOM3j0NquoPhdfvEjC4IvFI5YXqPgfwL/Ix7NxTd
JOJqIAMfy41ahWG9AfzY3lZx4An6MG/asjC3JLsCjBlX79vP2Fv6EDpknX7lnBzu
BGj7h1qyjmQa/dRTan2Y8ngixFASCNAiRM52umQxd6cui81Nb1zFEhdU6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDe7F1fhb1jQXmxKPkJA8+tYD3pcMB8GA1UdIwQY
MBaAFJ+XEQnS6labM+kKOOAwLP8We9A1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjVjUkNkTHFWcHN6NlFvNDREQXNfeFo3MERVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kNzRlMTAtMzQ5NC00NDZmLWEwMDUt
OTZiMjI0MjE5M2Y5LzEvbjVjUkNkTHFWcHN6NlFvNDREQXNfeFo3MERVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9kNzRlMTAtMzQ5NC00NDZmLWEwMDUtOTZiMjI0MjE5M2Y5
LzEvbjVjUkNkTHFWcHN6NlFvNDREQXNfeFo3MERVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVyWOjDkw
TFv7NmWNRjqukLoWvo0+Y2XaXqeqqlW2tfc6irUIyUBdN3J9QJn7vnP5fPHhH36V
pr6J0f7QT2mOsF/IjqsKKJpHPMEK/JWeahr1F2a8JlrX/OGWztc/nlFmP8wgbeIV
9bS1+B3ddysF5K1SsXbgMeu1pvXCDWK1womcfKZmWG57QqGlK0gYv+ZceWipbfSE
BwnozoefAkhUVyuTyytqyJk9FkHpGdjg5hda6y8SH5KXuAcf33s8TPLAyEPVuG0E
g+/6kTzVEIELsHFczhfIE5V2lrw+ZKkts1XgIfjAyru+oveRp2zc9AJRpPKMpQ3N
2deBtxPH3q05eQ==
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:07:09 2025 by rpki-client