Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c8ff34-e6d7-47b1-bc64-14a9081b477c/1/T1vL-9AIRYoJuxTRrJ8DIXLjuQA.mft
File:                     T1vL-9AIRYoJuxTRrJ8DIXLjuQA.mft (raw, json)
Hash identifier:          F43lqBBiu+syqoAkkhmdFQ0wtEsnBvfXlBEaVxXIImk=
Subject key identifier:   B1:BF:74:1A:1A:FF:CD:43:1E:0B:7B:82:D9:BA:DB:5A:FE:C3:56:76
Authority key identifier: 4F:5B:CB:FB:D0:08:45:8A:09:BB:14:D1:AC:9F:03:21:72:E3:B9:00
Certificate issuer:       /CN=4f5bcbfbd008458a09bb14d1ac9f032172e3b900
Certificate serial:       01964CA2363CBF9F5DB275267FBE5A3DDF60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T1vL-9AIRYoJuxTRrJ8DIXLjuQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/c8ff34-e6d7-47b1-bc64-14a9081b477c/1/T1vL-9AIRYoJuxTRrJ8DIXLjuQA.mft
Manifest number:          047B
Signing time:             Sat 19 Apr 2025 06:00:21 +0000
Manifest this update:     Sat 19 Apr 2025 06:00:21 +0000
Manifest next update:     Sun 20 Apr 2025 06:00:21 +0000
Files and hashes:         1: T1vL-9AIRYoJuxTRrJ8DIXLjuQA.crl (hash: 2QI//q73+tgOEtjxEpBUgE/26prSzos2YKx/W+Hd4j0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/c8ff34-e6d7-47b1-bc64-14a9081b477c/1/T1vL-9AIRYoJuxTRrJ8DIXLjuQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/c8ff34-e6d7-47b1-bc64-14a9081b477c/1/T1vL-9AIRYoJuxTRrJ8DIXLjuQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T1vL-9AIRYoJuxTRrJ8DIXLjuQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4c:a2:36:3c:bf:9f:5d:b2:75:26:7f:be:5a:3d:df:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f5bcbfbd008458a09bb14d1ac9f032172e3b900
        Validity
            Not Before: Apr 19 06:00:21 2025 GMT
            Not After : Apr 20 06:00:21 2025 GMT
        Subject: CN=b1bf741a1affcd431e0b7b82d9badb5afec35676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9f:3e:32:01:2e:1d:91:93:40:b0:ce:52:93:
                    d2:a7:08:7a:be:6f:fe:3c:cc:b9:0a:2e:d1:b8:71:
                    66:4d:70:5b:c2:dc:da:a3:cf:79:9d:6b:59:1b:fe:
                    a1:0e:36:71:6f:1a:f5:67:ef:70:60:f5:b2:11:76:
                    27:2c:dd:60:f7:51:f1:2d:22:b0:14:6e:13:44:4b:
                    5b:0c:2e:96:6c:46:98:29:d5:76:51:3f:05:28:50:
                    08:6f:58:4b:31:8f:7f:a0:ea:19:03:8f:95:be:1a:
                    b5:85:8d:f7:ac:31:a7:ee:11:be:88:a8:7b:d5:92:
                    30:79:ac:aa:4c:83:aa:98:98:4a:1a:78:65:77:16:
                    d9:c8:95:f2:01:3e:19:9c:84:ca:49:c7:63:e3:92:
                    f4:99:97:38:37:a2:b3:18:ca:14:c5:1e:5a:e0:b5:
                    a7:95:ec:d0:0e:00:50:d8:0a:bf:b7:79:48:b8:f6:
                    de:77:2e:0c:53:ff:fc:c1:1b:91:57:aa:04:24:1f:
                    06:7e:b9:f0:2d:18:ac:1d:1c:c8:78:e6:15:b2:76:
                    88:b6:fb:2e:23:da:86:e1:25:93:5a:33:e6:6d:a1:
                    c3:86:f5:b9:ad:e7:76:82:9d:61:75:40:ef:f1:6c:
                    3e:8e:45:1d:2a:c6:cf:e8:ff:c7:66:a0:3a:19:b4:
                    4e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:BF:74:1A:1A:FF:CD:43:1E:0B:7B:82:D9:BA:DB:5A:FE:C3:56:76
            X509v3 Authority Key Identifier:
                keyid:4F:5B:CB:FB:D0:08:45:8A:09:BB:14:D1:AC:9F:03:21:72:E3:B9:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1vL-9AIRYoJuxTRrJ8DIXLjuQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c8ff34-e6d7-47b1-bc64-14a9081b477c/1/T1vL-9AIRYoJuxTRrJ8DIXLjuQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c8ff34-e6d7-47b1-bc64-14a9081b477c/1/T1vL-9AIRYoJuxTRrJ8DIXLjuQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:21:36:99:69:c6:a1:47:7a:16:51:99:02:70:ed:53:cf:57:
         c8:bd:13:38:42:cb:69:42:18:00:c0:8a:e7:27:35:75:77:21:
         5a:82:19:b6:2b:7d:7a:42:ef:70:dd:9a:ef:d9:c1:9d:b7:dc:
         7d:f6:b1:d7:eb:a9:53:9e:5e:f5:ae:0a:22:73:78:59:30:e2:
         e3:79:e7:e9:4c:0f:64:f8:27:eb:86:57:de:67:27:63:cb:91:
         9d:1d:4e:d9:e8:07:f7:05:3c:1c:c3:2a:8f:7d:d9:1b:f6:36:
         d8:66:d3:c1:27:85:c3:ff:79:09:0c:c1:a8:a5:e5:4c:5f:09:
         3b:f1:1e:4f:1e:cc:b6:b4:2f:ba:cf:cf:3a:a3:cd:54:d2:9e:
         77:ad:a8:ed:ff:86:95:ba:e2:c6:7c:66:d1:7a:2e:59:85:0d:
         6b:2a:d3:62:33:cf:84:79:63:5e:ec:24:a1:ed:86:d8:0a:fa:
         37:17:dd:4a:ec:80:33:6b:7d:b1:72:5a:1b:50:db:8f:40:bf:
         a8:cb:c0:2d:5a:fe:ae:a9:fc:81:6f:56:f8:23:39:63:f7:5c:
         80:7a:6e:0d:ae:01:b2:95:e5:b8:1b:9a:b5:41:09:2e:a9:93:
         fe:d3:9f:22:7a:f9:58:3c:92:b4:e3:11:df:90:b1:5d:b5:01:
         ff:23:ed:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZMojY8v59dsnUmf75aPd9gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmNWJjYmZiZDAwODQ1OGEwOWJiMTRkMWFjOWYwMzIxNzJl
M2I5MDAwHhcNMjUwNDE5MDYwMDIxWhcNMjUwNDIwMDYwMDIxWjAzMTEwLwYDVQQD
EyhiMWJmNzQxYTFhZmZjZDQzMWUwYjdiODJkOWJhZGI1YWZlYzM1Njc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx58+MgEuHZGTQLDOUpPSpwh6vm/+
PMy5Ci7RuHFmTXBbwtzao895nWtZG/6hDjZxbxr1Z+9wYPWyEXYnLN1g91HxLSKw
FG4TREtbDC6WbEaYKdV2UT8FKFAIb1hLMY9/oOoZA4+Vvhq1hY33rDGn7hG+iKh7
1ZIweayqTIOqmJhKGnhldxbZyJXyAT4ZnITKScdj45L0mZc4N6KzGMoUxR5a4LWn
lezQDgBQ2Aq/t3lIuPbedy4MU//8wRuRV6oEJB8GfrnwLRisHRzIeOYVsnaItvsu
I9qG4SWTWjPmbaHDhvW5red2gp1hdUDv8Ww+jkUdKsbP6P/HZqA6GbROKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLG/dBoa/81DHgt7gtm621r+w1Z2MB8GA1UdIwQY
MBaAFE9by/vQCEWKCbsU0ayfAyFy47kAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDF2TC05QUlSWW9KdXhUUnJKOERJWExqdVFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9jOGZmMzQtZTZkNy00N2IxLWJjNjQt
MTRhOTA4MWI0NzdjLzEvVDF2TC05QUlSWW9KdXhUUnJKOERJWExqdVFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9jOGZmMzQtZTZkNy00N2IxLWJjNjQtMTRhOTA4MWI0Nzdj
LzEvVDF2TC05QUlSWW9KdXhUUnJKOERJWExqdVFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdSE2mWnG
oUd6FlGZAnDtU89XyL0TOELLaUIYAMCK5yc1dXchWoIZtit9ekLvcN2a79nBnbfc
ffax1+upU55e9a4KInN4WTDi43nn6UwPZPgn64ZX3mcnY8uRnR1O2egH9wU8HMMq
j33ZG/Y22GbTwSeFw/95CQzBqKXlTF8JO/EeTx7MtrQvus/POqPNVNKed62o7f+G
lbrixnxm0XouWYUNayrTYjPPhHljXuwkoe2G2Ar6NxfdSuyAM2t9sXJaG1Dbj0C/
qMvALVr+rqn8gW9W+CM5Y/dcgHpuDa4BspXluBuatUEJLqmT/tOfInr5WDyStOMR
35CxXbUB/yPtiQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 13:58:57 2025 by rpki-client