Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
File:                     4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft (raw, json)
Hash identifier:          e8Pam9SIomW0iH3xvl0aKEbLmrnFjNFNfbGBV+LdLgE=
Subject key identifier:   49:24:3D:9B:76:BA:0D:BF:F9:D3:BB:56:4F:D4:82:8E:D3:FA:E0:A9
Authority key identifier: E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB
Certificate issuer:       /CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
Certificate serial:       019748C36623F40D8FAF2867EE917DC26B6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
Manifest number:          157B
Signing time:             Sat 07 Jun 2025 05:00:54 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:54 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:54 +0000
Files and hashes:         1: 4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl (hash: Qb03+tZUAUkuGYCSTImOACNa4/fFQeY6/iWl9lfJdu4=)
                          2: MCauzdzhAV-eC2FQCIe1KmEfC3E.roa (hash: qyelRqdJ6kSMtNhACvHl/U5TJ8kn8s3czDwjuibAJCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 05:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c3:66:23:f4:0d:8f:af:28:67:ee:91:7d:c2:6b:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
        Validity
            Not Before: Jun  7 05:00:54 2025 GMT
            Not After : Jun  8 05:00:54 2025 GMT
        Subject: CN=49243d9b76ba0dbff9d3bb564fd4828ed3fae0a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:20:c7:a6:c7:c7:ee:65:9f:4d:ff:30:a3:14:
                    39:0e:8b:16:9f:10:1b:a1:17:02:8a:e8:96:a6:c9:
                    76:0b:ef:57:b7:1a:51:c9:a1:17:35:36:3e:fc:db:
                    41:86:d4:46:46:7d:09:93:e5:2d:9d:d8:c1:a7:be:
                    79:dc:8a:7b:47:2a:b4:22:6f:fd:4b:84:38:c0:a0:
                    2e:f8:4e:c3:a1:21:7e:19:43:3f:16:8f:fc:ad:8f:
                    e3:dd:d3:e4:bd:8b:a3:d1:f9:87:f7:89:bb:0a:d8:
                    74:18:86:fb:fc:bb:21:f8:0b:a8:e0:4d:b1:1e:87:
                    87:0c:c1:50:65:a4:e7:90:a9:eb:16:16:94:58:18:
                    f0:01:f8:6d:19:c6:fd:6c:0a:fc:13:06:68:aa:de:
                    9e:db:f8:de:9a:9b:6f:f0:3d:1d:24:3a:df:7b:b9:
                    c2:89:30:ec:b3:25:15:cb:eb:de:00:44:74:d1:4d:
                    33:0a:3e:ac:69:85:ab:40:66:88:50:18:b9:9b:10:
                    25:d5:78:15:62:ac:ab:8a:60:64:7c:78:61:f7:09:
                    cc:24:ce:2b:3d:72:a5:52:88:be:c2:5f:c0:80:f5:
                    a4:88:80:51:4e:8d:fd:df:3a:47:8b:aa:46:71:8f:
                    e0:c7:10:ff:ab:97:7d:67:3a:9d:46:b7:64:12:e9:
                    ae:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:24:3D:9B:76:BA:0D:BF:F9:D3:BB:56:4F:D4:82:8E:D3:FA:E0:A9
            X509v3 Authority Key Identifier:
                keyid:E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:fb:b3:f4:3b:58:77:70:e2:b1:5e:c9:bc:38:61:74:88:ed:
         1c:2a:88:b2:39:28:21:6f:0b:93:ee:d3:06:e8:e5:bd:cf:fd:
         34:64:8b:68:15:60:b5:ed:32:39:01:41:73:39:02:9b:ce:52:
         05:29:bd:34:ab:10:34:c9:34:89:77:93:8e:e9:35:c2:21:1a:
         0f:c6:d6:f0:eb:00:ec:2f:9a:19:01:34:03:a8:a8:97:78:e5:
         e7:ee:9d:3b:fa:48:b3:52:1c:1a:73:2d:71:aa:e6:e0:38:9b:
         23:57:d1:ff:87:fb:9d:c3:db:7a:fb:09:c0:92:64:0f:e9:af:
         c3:24:4f:5e:6a:e8:40:cf:ac:d0:1f:bc:54:d7:01:e5:47:d7:
         39:8d:0a:fd:0b:88:af:fd:0c:17:3d:d0:b2:c3:1c:de:1e:d0:
         30:22:63:6c:93:44:3a:d3:c6:3c:61:29:5f:77:87:79:97:3a:
         f6:50:5d:d7:da:e0:a3:f8:dc:49:80:ae:a5:ad:a3:87:9a:7b:
         e7:f5:02:e8:f3:f7:a2:96:de:28:d7:f6:6b:2e:c8:ca:87:a4:
         6d:ce:b4:77:1a:20:23:a4:39:9e:46:6b:2b:89:06:66:20:66:
         0b:eb:5b:3a:a3:a9:3d:0a:9b:91:e2:96:48:57:00:0c:8d:dd:
         7b:ee:bf:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIw2Yj9A2Pryhn7pF9wmtuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMzhjZDY4MTFkY2UyZWQ0ZjQyNjE0M2MzZmM4NDU3YjFi
NDM0YmIwHhcNMjUwNjA3MDUwMDU0WhcNMjUwNjA4MDUwMDU0WjAzMTEwLwYDVQQD
Eyg0OTI0M2Q5Yjc2YmEwZGJmZjlkM2JiNTY0ZmQ0ODI4ZWQzZmFlMGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCDHpsfH7mWfTf8woxQ5DosWnxAb
oRcCiuiWpsl2C+9XtxpRyaEXNTY+/NtBhtRGRn0Jk+UtndjBp7553Ip7Ryq0Im/9
S4Q4wKAu+E7DoSF+GUM/Fo/8rY/j3dPkvYuj0fmH94m7Cth0GIb7/Lsh+Auo4E2x
HoeHDMFQZaTnkKnrFhaUWBjwAfhtGcb9bAr8EwZoqt6e2/jemptv8D0dJDrfe7nC
iTDssyUVy+veAER00U0zCj6saYWrQGaIUBi5mxAl1XgVYqyrimBkfHhh9wnMJM4r
PXKlUoi+wl/AgPWkiIBRTo393zpHi6pGcY/gxxD/q5d9ZzqdRrdkEumu6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEkkPZt2ug2/+dO7Vk/Ugo7T+uCpMB8GA1UdIwQY
MBaAFOM4zWgR3OLtT0JhQ8P8hFextDS7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHpqTmFCSGM0dTFQUW1GRHdfeUVWN0cwTkxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy81ZWE0YjQtOWVkNy00NDRlLTg2YmYt
MmViMGFmM2FjNzgxLzEvNHpqTmFCSGM0dTFQUW1GRHdfeUVWN0cwTkxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy81ZWE0YjQtOWVkNy00NDRlLTg2YmYtMmViMGFmM2FjNzgx
LzEvNHpqTmFCSGM0dTFQUW1GRHdfeUVWN0cwTkxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq/uz9DtY
d3DisV7JvDhhdIjtHCqIsjkoIW8Lk+7TBujlvc/9NGSLaBVgte0yOQFBczkCm85S
BSm9NKsQNMk0iXeTjuk1wiEaD8bW8OsA7C+aGQE0A6iol3jl5+6dO/pIs1IcGnMt
carm4DibI1fR/4f7ncPbevsJwJJkD+mvwyRPXmroQM+s0B+8VNcB5UfXOY0K/QuI
r/0MFz3QssMc3h7QMCJjbJNEOtPGPGEpX3eHeZc69lBd19rgo/jcSYCupa2jh5p7
5/UC6PP3opbeKNf2ay7Iyoekbc60dxogI6Q5nkZrK4kGZiBmC+tbOqOpPQqbkeKW
SFcADI3de+6/9A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:09:42 2025 by rpki-client