Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft
File:                     5i7oJCK3hJkSKWNhQEZJp__smOU.mft (raw, json)
Hash identifier:          nPvAD+I3kN7mIFO2vJ5IAQenafAsCqSk9/KREmhSb+o=
Subject key identifier:   76:29:F0:9F:A4:FC:2F:5D:9A:A8:B9:E7:A7:11:25:A8:C3:11:1E:84
Authority key identifier: E6:2E:E8:24:22:B7:84:99:12:29:63:61:40:46:49:A7:FF:EC:98:E5
Certificate issuer:       /CN=e62ee82422b7849912296361404649a7ffec98e5
Certificate serial:       0196365212F643AB4BBC72646F8FD95E3CA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5i7oJCK3hJkSKWNhQEZJp__smOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft
Manifest number:          0BAE
Signing time:             Mon 14 Apr 2025 22:01:10 +0000
Manifest this update:     Mon 14 Apr 2025 22:01:10 +0000
Manifest next update:     Tue 15 Apr 2025 22:01:10 +0000
Files and hashes:         1: 5i7oJCK3hJkSKWNhQEZJp__smOU.crl (hash: NMlhYOkLKsHzDgSPy6G/WHxQu0p7JIYDij7gjMxo4RA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5i7oJCK3hJkSKWNhQEZJp__smOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 15 Apr 2025 19:34:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:36:52:12:f6:43:ab:4b:bc:72:64:6f:8f:d9:5e:3c:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e62ee82422b7849912296361404649a7ffec98e5
        Validity
            Not Before: Apr 14 22:01:10 2025 GMT
            Not After : Apr 15 22:01:10 2025 GMT
        Subject: CN=7629f09fa4fc2f5d9aa8b9e7a71125a8c3111e84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8d:0d:73:02:00:c0:49:ac:74:82:ee:fd:b6:
                    5e:d7:ec:70:86:9a:6d:61:88:df:19:e6:8c:db:22:
                    3a:5c:a9:69:72:3e:a3:03:93:95:47:c6:8e:fa:4a:
                    cd:10:92:54:b0:ad:fc:da:63:81:2f:31:22:5d:24:
                    9a:6c:bd:ec:99:92:f6:8b:26:2b:29:76:63:31:d3:
                    b2:dc:e4:a0:32:84:79:74:17:c6:2a:1e:06:26:2e:
                    0b:3b:77:24:47:78:95:98:00:a1:cd:fd:1a:39:4f:
                    33:fd:3b:61:12:1f:5c:c8:15:51:05:5c:1e:12:cf:
                    ae:d4:f1:9d:60:19:69:b6:8c:2f:82:09:4d:06:6a:
                    09:1e:d2:1f:c1:bb:2d:a6:43:49:a5:21:c0:f0:1f:
                    16:2c:13:8f:a6:54:9d:b7:92:b4:b0:83:63:89:98:
                    f0:bf:93:07:95:b6:66:0a:39:35:6b:e1:dd:8a:80:
                    ca:ad:bf:79:62:fc:0c:eb:c4:d9:2c:1a:69:9f:d1:
                    e2:7f:4c:a0:1e:2a:b2:cc:c2:cf:42:d6:df:e7:f2:
                    0c:9d:b1:5e:a0:a0:cf:a5:29:e0:a2:82:fc:0e:68:
                    ff:1a:05:b1:7f:3b:5c:7e:46:a0:ac:2f:db:d4:81:
                    9b:f4:4e:72:c9:38:24:d4:c6:c1:d0:ec:6f:97:08:
                    51:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:29:F0:9F:A4:FC:2F:5D:9A:A8:B9:E7:A7:11:25:A8:C3:11:1E:84
            X509v3 Authority Key Identifier:
                keyid:E6:2E:E8:24:22:B7:84:99:12:29:63:61:40:46:49:A7:FF:EC:98:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5i7oJCK3hJkSKWNhQEZJp__smOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:b3:27:9c:8d:94:c2:5b:a4:1a:6e:0c:2b:95:d7:af:1a:ab:
         cc:9b:ec:15:85:01:17:39:af:a7:67:55:49:61:fd:5b:72:dc:
         3c:d3:a1:5e:18:3a:7e:66:4c:ec:19:7f:86:ca:73:78:a6:9f:
         fb:a2:aa:b6:bc:ad:88:d3:d8:da:20:ce:91:92:b2:47:ae:98:
         30:6a:0d:44:54:c5:c8:d0:8a:a7:42:cb:07:f3:1f:47:b7:3d:
         36:b6:9a:f0:46:4e:06:49:55:63:4a:e7:fd:08:dd:fd:ff:85:
         58:dd:34:49:a6:9c:99:46:f1:c4:4e:82:f9:1f:13:f2:d0:63:
         7c:52:2e:a0:e0:95:8a:9c:2c:66:d2:66:af:05:aa:10:53:44:
         0b:5b:f3:40:bd:da:55:74:d3:6b:9c:4f:bc:36:77:3c:18:ae:
         2e:7e:ca:bc:c7:20:be:64:bb:25:da:2a:d8:2d:b4:a2:f1:80:
         34:07:45:d7:af:1f:09:0e:63:73:f5:04:e6:03:19:26:a6:35:
         0b:61:37:68:0f:c1:76:9f:b7:dd:18:e1:58:e5:eb:10:c3:92:
         59:a1:52:70:6f:07:6b:fc:76:9a:a9:9a:10:29:b7:81:8b:ce:
         48:78:90:51:48:99:8e:57:6e:7e:34:6c:14:dd:b5:53:e6:a2:
         df:45:cb:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY2UhL2Q6tLvHJkb4/ZXjylMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MmVlODI0MjJiNzg0OTkxMjI5NjM2MTQwNDY0OWE3ZmZl
Yzk4ZTUwHhcNMjUwNDE0MjIwMTEwWhcNMjUwNDE1MjIwMTEwWjAzMTEwLwYDVQQD
Eyg3NjI5ZjA5ZmE0ZmMyZjVkOWFhOGI5ZTdhNzExMjVhOGMzMTExZTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy40NcwIAwEmsdILu/bZe1+xwhppt
YYjfGeaM2yI6XKlpcj6jA5OVR8aO+krNEJJUsK382mOBLzEiXSSabL3smZL2iyYr
KXZjMdOy3OSgMoR5dBfGKh4GJi4LO3ckR3iVmAChzf0aOU8z/TthEh9cyBVRBVwe
Es+u1PGdYBlptowvgglNBmoJHtIfwbstpkNJpSHA8B8WLBOPplSdt5K0sINjiZjw
v5MHlbZmCjk1a+HdioDKrb95YvwM68TZLBppn9Hif0ygHiqyzMLPQtbf5/IMnbFe
oKDPpSngooL8Dmj/GgWxfztcfkagrC/b1IGb9E5yyTgk1MbB0OxvlwhR3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYp8J+k/C9dmqi556cRJajDER6EMB8GA1UdIwQY
MBaAFOYu6CQit4SZEiljYUBGSaf/7JjlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWk3b0pDSzNoSmtTS1dOaFFFWkpwX19zbU9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9iZDMxMWUtYzkwMS00YWVmLWIxODUt
ZmZiMWJlYzMyNzIxLzEvNWk3b0pDSzNoSmtTS1dOaFFFWkpwX19zbU9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9iZDMxMWUtYzkwMS00YWVmLWIxODUtZmZiMWJlYzMyNzIx
LzEvNWk3b0pDSzNoSmtTS1dOaFFFWkpwX19zbU9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAurMnnI2U
wlukGm4MK5XXrxqrzJvsFYUBFzmvp2dVSWH9W3LcPNOhXhg6fmZM7Bl/hspzeKaf
+6KqtrytiNPY2iDOkZKyR66YMGoNRFTFyNCKp0LLB/MfR7c9Nraa8EZOBklVY0rn
/Qjd/f+FWN00SaacmUbxxE6C+R8T8tBjfFIuoOCVipwsZtJmrwWqEFNEC1vzQL3a
VXTTa5xPvDZ3PBiuLn7KvMcgvmS7Jdoq2C20ovGANAdF168fCQ5jc/UE5gMZJqY1
C2E3aA/Bdp+33RjhWOXrEMOSWaFScG8Ha/x2mqmaECm3gYvOSHiQUUiZjldufjRs
FN21U+ai30XLFA==
-----END CERTIFICATE-----
Generated at Tue Apr 15 01:30:37 2025 by rpki-client