Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft
File:                     54CVVajwXwQLRfmuycPvVaG6kz0.mft (raw, json)
Hash identifier:          huom4gPi4YLq6Su91J9cmGBKVFIlvQ2icGCLEnUr70o=
Subject key identifier:   F5:81:B0:76:91:2F:61:58:26:F7:80:AC:D8:AC:20:FE:60:56:14:0F
Authority key identifier: E7:80:95:55:A8:F0:5F:04:0B:45:F9:AE:C9:C3:EF:55:A1:BA:93:3D
Certificate issuer:       /CN=e7809555a8f05f040b45f9aec9c3ef55a1ba933d
Certificate serial:       0197515869E30DAF2884E87A52ADEDE8A5E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft
Manifest number:          0355
Signing time:             Sun 08 Jun 2025 21:00:38 +0000
Manifest this update:     Sun 08 Jun 2025 21:00:38 +0000
Manifest next update:     Mon 09 Jun 2025 21:00:38 +0000
Files and hashes:         1: 54CVVajwXwQLRfmuycPvVaG6kz0.crl (hash: wVlPHHAyjE54IEaqBl6wLg1+WgJUIRgVqHD5wvv+t/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:51:58:69:e3:0d:af:28:84:e8:7a:52:ad:ed:e8:a5:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7809555a8f05f040b45f9aec9c3ef55a1ba933d
        Validity
            Not Before: Jun  8 21:00:38 2025 GMT
            Not After : Jun  9 21:00:38 2025 GMT
        Subject: CN=f581b076912f615826f780acd8ac20fe6056140f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2b:fc:d4:df:3e:7a:24:08:47:da:29:1a:ab:
                    fe:dd:09:69:11:b3:a4:89:ee:be:a7:9e:dd:a2:f3:
                    70:bb:4c:a8:7f:0b:29:78:84:ed:44:fe:a6:dc:7d:
                    81:fa:8f:5c:28:e8:2f:78:44:e3:c2:f0:29:5d:79:
                    89:96:06:8e:7c:4a:25:c8:85:07:40:76:b9:ad:e5:
                    a3:ba:67:62:63:82:bd:88:5d:af:d3:10:24:c0:95:
                    2e:86:46:21:5d:51:d1:95:21:c7:6c:aa:98:ab:4a:
                    4c:0d:7a:c9:7a:c2:cc:0c:b3:3c:54:29:39:53:2e:
                    ce:ef:aa:17:df:06:80:f7:d9:9a:c4:0f:22:ba:18:
                    1f:1c:2a:14:00:e3:22:73:c6:63:b8:98:31:af:33:
                    28:e7:a7:98:dd:ac:61:b3:12:9d:b5:e0:49:0f:00:
                    d5:ec:9a:a2:4e:33:e6:52:c9:c8:f8:cd:5a:29:1c:
                    ef:b8:b3:30:cf:1f:18:e8:6e:ad:21:df:65:f2:18:
                    19:34:35:cd:85:48:01:b9:fc:ef:dd:c5:cf:1b:fe:
                    16:6b:c0:58:07:9d:f0:8c:eb:cc:47:bd:b8:3a:76:
                    95:a2:47:db:2e:a0:00:c3:14:5b:ac:d4:1c:05:1d:
                    bd:78:6b:15:8e:4e:4f:1e:54:eb:5d:31:3d:06:5a:
                    44:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:81:B0:76:91:2F:61:58:26:F7:80:AC:D8:AC:20:FE:60:56:14:0F
            X509v3 Authority Key Identifier:
                keyid:E7:80:95:55:A8:F0:5F:04:0B:45:F9:AE:C9:C3:EF:55:A1:BA:93:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:02:62:b8:80:26:a9:b2:a0:40:2b:10:2b:95:ff:de:20:1c:
         b7:33:22:ce:8d:8e:33:ca:a5:d5:33:15:c8:a1:bb:ec:9c:f8:
         fe:b7:64:38:27:a5:57:98:a7:bc:04:1c:db:30:64:89:93:d6:
         88:95:13:58:ec:88:90:44:78:5e:17:46:6c:83:20:06:d8:ba:
         3d:11:6d:90:9b:59:31:04:3a:4a:8c:83:e7:1b:ca:7e:71:48:
         e1:ee:12:1c:77:a4:df:e4:74:e1:29:61:37:bf:87:3b:67:73:
         95:6f:19:0d:21:2b:91:72:2a:b9:04:36:23:d6:24:58:0d:1e:
         73:c8:82:b2:cb:a9:16:03:a6:f3:df:ad:71:96:b0:c1:7a:e4:
         18:c9:09:cb:67:a1:27:a5:c9:6d:ef:40:3c:63:b7:13:d9:77:
         c1:0a:e1:66:5c:6e:8d:35:5d:69:a3:76:2a:37:57:a1:0b:b1:
         1c:c5:5a:4c:20:10:13:bf:db:27:61:43:66:41:40:05:d2:85:
         4d:69:87:52:b9:c1:56:53:55:ba:01:e9:24:ef:4f:32:39:af:
         b0:49:db:76:21:b3:c3:5e:75:22:74:ae:6d:7f:60:e8:44:57:
         a3:af:ae:80:04:e8:3b:d6:73:5e:58:7f:e8:35:4f:a3:aa:0d:
         ce:e8:70:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdRWGnjDa8ohOh6Uq3t6KXkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ODA5NTU1YThmMDVmMDQwYjQ1ZjlhZWM5YzNlZjU1YTFi
YTkzM2QwHhcNMjUwNjA4MjEwMDM4WhcNMjUwNjA5MjEwMDM4WjAzMTEwLwYDVQQD
EyhmNTgxYjA3NjkxMmY2MTU4MjZmNzgwYWNkOGFjMjBmZTYwNTYxNDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyv81N8+eiQIR9opGqv+3QlpEbOk
ie6+p57dovNwu0yofwspeITtRP6m3H2B+o9cKOgveETjwvApXXmJlgaOfEolyIUH
QHa5reWjumdiY4K9iF2v0xAkwJUuhkYhXVHRlSHHbKqYq0pMDXrJesLMDLM8VCk5
Uy7O76oX3waA99maxA8iuhgfHCoUAOMic8ZjuJgxrzMo56eY3axhsxKdteBJDwDV
7JqiTjPmUsnI+M1aKRzvuLMwzx8Y6G6tId9l8hgZNDXNhUgBufzv3cXPG/4Wa8BY
B53wjOvMR724OnaVokfbLqAAwxRbrNQcBR29eGsVjk5PHlTrXTE9BlpE/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWBsHaRL2FYJveArNisIP5gVhQPMB8GA1UdIwQY
MBaAFOeAlVWo8F8EC0X5rsnD71WhupM9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTRDVlZhandYd1FMUmZtdXljUHZWYUc2a3owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lMDVlMjQtOTY3Yi00NDA5LThkZTgt
Y2EwOGZlNmYzZTU3LzEvNTRDVlZhandYd1FMUmZtdXljUHZWYUc2a3owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9lMDVlMjQtOTY3Yi00NDA5LThkZTgtY2EwOGZlNmYzZTU3
LzEvNTRDVlZhandYd1FMUmZtdXljUHZWYUc2a3owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATgJiuIAm
qbKgQCsQK5X/3iActzMizo2OM8ql1TMVyKG77Jz4/rdkOCelV5invAQc2zBkiZPW
iJUTWOyIkER4XhdGbIMgBti6PRFtkJtZMQQ6SoyD5xvKfnFI4e4SHHek3+R04Slh
N7+HO2dzlW8ZDSErkXIquQQ2I9YkWA0ec8iCssupFgOm89+tcZawwXrkGMkJy2eh
J6XJbe9APGO3E9l3wQrhZlxujTVdaaN2KjdXoQuxHMVaTCAQE7/bJ2FDZkFABdKF
TWmHUrnBVlNVugHpJO9PMjmvsEnbdiGzw151InSubX9g6ERXo6+ugAToO9ZzXlh/
6DVPo6oNzuhw2A==
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:17:44 2025 by rpki-client