Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
File:                     R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft (raw, json)
Hash identifier:          la7EF3rJ/vOIFURyUnNqx7ClXnTDM/vsnC619UCmt5M=
Subject key identifier:   46:46:AD:6E:B8:B4:CA:AE:D4:41:35:BF:F5:A2:70:7C:52:AE:1D:85
Authority key identifier: 47:4A:63:D4:FE:10:A3:46:B8:12:FB:F3:59:C9:B3:37:78:CD:43:11
Certificate issuer:       /CN=474a63d4fe10a346b812fbf359c9b33778cd4311
Certificate serial:       01975912262AF5EF3217CF5BFA21721365ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
Manifest number:          0240
Signing time:             Tue 10 Jun 2025 09:00:50 +0000
Manifest this update:     Tue 10 Jun 2025 09:00:50 +0000
Manifest next update:     Wed 11 Jun 2025 09:00:50 +0000
Files and hashes:         1: R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl (hash: lb+PaabXiPqtDrU5CL1gd7tFhcE8Is59HuWzZmD1hq8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:59:12:26:2a:f5:ef:32:17:cf:5b:fa:21:72:13:65:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=474a63d4fe10a346b812fbf359c9b33778cd4311
        Validity
            Not Before: Jun 10 09:00:50 2025 GMT
            Not After : Jun 11 09:00:50 2025 GMT
        Subject: CN=4646ad6eb8b4caaed44135bff5a2707c52ae1d85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f3:ec:9a:ca:9f:cc:49:29:93:ee:cd:48:fc:
                    91:88:13:85:77:57:a9:81:fa:da:15:2f:c2:9b:91:
                    ad:92:43:bf:93:cb:7f:dd:8c:fa:78:82:7b:0a:d1:
                    72:5e:07:80:cc:23:99:a9:fc:e8:a9:52:ad:b2:8a:
                    5a:f6:d8:d6:a9:18:01:5f:99:4d:ea:ed:64:08:25:
                    62:82:80:44:9a:e8:62:ce:af:c2:e2:73:24:ed:8f:
                    a4:52:1e:d4:b0:d5:e3:04:a3:1f:50:34:39:fa:44:
                    d7:19:cb:81:67:f9:79:e8:83:83:16:46:63:67:7e:
                    ce:af:6c:e8:28:9b:14:cb:7a:f5:26:e2:18:2f:24:
                    32:33:ca:50:a4:37:a6:4a:40:38:ed:4e:c1:08:43:
                    75:16:d7:98:cb:20:ea:f8:a5:fd:0d:16:1f:02:30:
                    d4:ca:d1:88:65:ff:e3:e8:f5:4a:c9:10:34:f8:08:
                    87:20:8f:e4:b5:83:82:47:ae:86:3e:75:10:13:c1:
                    2d:46:1d:ef:00:93:3c:96:cf:bd:1e:7d:51:aa:c2:
                    f3:1b:85:3f:3f:cf:88:11:6c:51:c5:9f:a8:10:e7:
                    e5:bf:ee:36:ae:41:66:78:da:6c:49:5b:cd:93:34:
                    19:3e:c1:b6:15:15:b2:1e:78:85:ac:f5:d1:db:79:
                    61:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:46:AD:6E:B8:B4:CA:AE:D4:41:35:BF:F5:A2:70:7C:52:AE:1D:85
            X509v3 Authority Key Identifier:
                keyid:47:4A:63:D4:FE:10:A3:46:B8:12:FB:F3:59:C9:B3:37:78:CD:43:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:7a:c4:4c:78:9c:7d:64:f1:94:23:01:b9:cd:96:fa:1d:c6:
         5f:30:e6:3c:82:bc:36:38:ed:85:b2:a0:3d:cc:91:46:61:2a:
         7f:aa:76:fa:55:ee:d7:03:cc:05:c2:f7:0f:c9:d3:18:13:b8:
         14:40:b8:a3:17:b8:27:e3:58:c8:36:b3:66:0e:97:c9:45:3d:
         fc:37:66:3b:8a:c6:7e:10:55:29:77:ca:30:7e:49:2a:c3:13:
         cc:f7:f1:01:d3:46:0e:3c:5a:45:ed:77:96:32:43:13:ad:71:
         1a:d0:27:30:50:ed:b1:28:93:51:e7:34:d3:6d:f6:66:e4:7b:
         06:63:f6:80:e2:7e:6d:5d:45:f7:bc:17:2d:8a:a6:5b:5a:a5:
         ca:82:ca:3e:3f:f4:a6:db:3d:e6:c3:a2:a8:47:17:dd:a2:79:
         2f:ab:b9:f6:c8:23:3d:58:41:ed:53:bc:a1:cf:94:c4:bc:28:
         fb:ba:57:9c:c2:84:ad:3e:a0:ae:7c:b4:cf:88:56:af:9d:fe:
         62:71:d2:5c:5e:7a:2b:5c:4c:ad:f2:40:35:3d:1f:a4:5a:77:
         27:6a:2b:cd:13:6b:90:b7:77:e2:bf:ad:46:ae:9d:40:f3:84:
         8c:30:2f:70:37:2d:54:1f:e4:b9:50:55:54:d9:8c:7f:d5:62:
         c9:85:25:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdZEiYq9e8yF89b+iFyE2XtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NGE2M2Q0ZmUxMGEzNDZiODEyZmJmMzU5YzliMzM3Nzhj
ZDQzMTEwHhcNMjUwNjEwMDkwMDUwWhcNMjUwNjExMDkwMDUwWjAzMTEwLwYDVQQD
Eyg0NjQ2YWQ2ZWI4YjRjYWFlZDQ0MTM1YmZmNWEyNzA3YzUyYWUxZDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/PsmsqfzEkpk+7NSPyRiBOFd1ep
gfraFS/Cm5GtkkO/k8t/3Yz6eIJ7CtFyXgeAzCOZqfzoqVKtsopa9tjWqRgBX5lN
6u1kCCVigoBEmuhizq/C4nMk7Y+kUh7UsNXjBKMfUDQ5+kTXGcuBZ/l56IODFkZj
Z37Or2zoKJsUy3r1JuIYLyQyM8pQpDemSkA47U7BCEN1FteYyyDq+KX9DRYfAjDU
ytGIZf/j6PVKyRA0+AiHII/ktYOCR66GPnUQE8EtRh3vAJM8ls+9Hn1RqsLzG4U/
P8+IEWxRxZ+oEOflv+42rkFmeNpsSVvNkzQZPsG2FRWyHniFrPXR23lhOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZGrW64tMqu1EE1v/WicHxSrh2FMB8GA1UdIwQY
MBaAFEdKY9T+EKNGuBL781nJszd4zUMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjBwajFQNFFvMGE0RXZ2eldjbXpOM2pOUXhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84ZjNjMmYtYzE4NS00YWQ4LTkxODEt
N2I3ZmM3YWFiMTQ0LzEvUjBwajFQNFFvMGE0RXZ2eldjbXpOM2pOUXhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi84ZjNjMmYtYzE4NS00YWQ4LTkxODEtN2I3ZmM3YWFiMTQ0
LzEvUjBwajFQNFFvMGE0RXZ2eldjbXpOM2pOUXhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHnrETHic
fWTxlCMBuc2W+h3GXzDmPIK8NjjthbKgPcyRRmEqf6p2+lXu1wPMBcL3D8nTGBO4
FEC4oxe4J+NYyDazZg6XyUU9/DdmO4rGfhBVKXfKMH5JKsMTzPfxAdNGDjxaRe13
ljJDE61xGtAnMFDtsSiTUec00232ZuR7BmP2gOJ+bV1F97wXLYqmW1qlyoLKPj/0
pts95sOiqEcX3aJ5L6u59sgjPVhB7VO8oc+UxLwo+7pXnMKErT6grny0z4hWr53+
YnHSXF56K1xMrfJANT0fpFp3J2orzRNrkLd34r+tRq6dQPOEjDAvcDctVB/kuVBV
VNmMf9ViyYUlaQ==
-----END CERTIFICATE-----
Generated at Tue Jun 10 12:05:29 2025 by rpki-client