Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft
File:                     _ejRxqr0qT_0G7-hvR2sYZfVlXU.mft (raw, json)
Hash identifier:          K79ytNf7atsdjhDlIUoPXpcSIyHf3Ri7JpxzZ5VeWTo=
Subject key identifier:   A1:6B:2F:F2:83:49:AA:3E:C4:AD:71:03:10:FF:8E:31:C9:29:31:DA
Authority key identifier: FD:E8:D1:C6:AA:F4:A9:3F:F4:1B:BF:A1:BD:1D:AC:61:97:D5:95:75
Certificate issuer:       /CN=fde8d1c6aaf4a93ff41bbfa1bd1dac6197d59575
Certificate serial:       01965FBBDB0D526EFD647FA4CDAA73BAA929
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ejRxqr0qT_0G7-hvR2sYZfVlXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft
Manifest number:          1506
Signing time:             Tue 22 Apr 2025 23:01:08 +0000
Manifest this update:     Tue 22 Apr 2025 23:01:08 +0000
Manifest next update:     Wed 23 Apr 2025 23:01:08 +0000
Files and hashes:         1: _ejRxqr0qT_0G7-hvR2sYZfVlXU.crl (hash: A1PSrMuDhlkAnvk4IemCa4x0lKFBhGM/GddLXDdGDVU=)
                          2: ogdJ5zX5wTF7smlXdUUiP3O_2TY.roa (hash: 0hvRawGMcRsHAlIFZoRJONgavYCSdSg9j7QPcw+vZig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_ejRxqr0qT_0G7-hvR2sYZfVlXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 20:22:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5f:bb:db:0d:52:6e:fd:64:7f:a4:cd:aa:73:ba:a9:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde8d1c6aaf4a93ff41bbfa1bd1dac6197d59575
        Validity
            Not Before: Apr 22 23:01:08 2025 GMT
            Not After : Apr 23 23:01:08 2025 GMT
        Subject: CN=a16b2ff28349aa3ec4ad710310ff8e31c92931da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c7:ca:4d:20:b5:33:65:69:c2:bb:52:f7:c7:
                    9d:04:36:f5:68:bc:51:1f:b4:d1:43:b4:a8:88:65:
                    8d:11:cf:cd:63:9b:a6:0d:d0:a8:04:2a:55:ac:d1:
                    9f:22:b5:57:3b:03:06:7e:b5:1a:05:6b:45:3b:d7:
                    70:d8:d2:aa:2e:c3:da:6a:03:e7:b4:9f:e9:c8:fd:
                    9b:4e:ea:bc:68:bc:75:6b:ef:fa:2b:07:04:71:66:
                    ea:17:39:29:a3:fb:78:3c:b6:63:1e:8b:ca:21:16:
                    69:0a:c6:17:44:64:99:ef:b2:ef:69:70:8b:7b:a5:
                    41:99:97:3c:95:87:dd:0c:ad:91:21:0d:a9:52:a3:
                    8a:96:d3:da:d5:81:1f:25:69:bf:19:08:99:fa:c7:
                    ad:4a:15:f3:c8:f3:0c:9f:1e:28:fc:dd:11:9b:04:
                    19:5f:62:a9:3f:6f:b7:f2:f6:e8:3f:f9:61:2a:92:
                    be:98:14:eb:f2:af:2f:aa:41:6f:ed:a8:e5:47:84:
                    d6:a3:5e:50:69:b0:38:99:e4:9e:93:36:91:60:19:
                    d7:2a:15:30:fc:71:fd:3c:86:eb:b3:06:c7:4e:b5:
                    81:10:7c:55:cf:ac:5b:34:24:58:0c:b5:d8:aa:c6:
                    ce:17:4b:83:db:af:87:35:ee:c8:fe:1b:50:d2:6e:
                    18:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:6B:2F:F2:83:49:AA:3E:C4:AD:71:03:10:FF:8E:31:C9:29:31:DA
            X509v3 Authority Key Identifier:
                keyid:FD:E8:D1:C6:AA:F4:A9:3F:F4:1B:BF:A1:BD:1D:AC:61:97:D5:95:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ejRxqr0qT_0G7-hvR2sYZfVlXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:3f:a4:a3:26:10:c4:a5:ef:45:48:92:2e:ff:ee:e7:7d:cd:
         01:7e:50:90:9d:f2:56:42:56:a7:be:21:d5:b8:4b:13:f0:8a:
         b2:d3:be:f2:1b:1f:64:09:fe:12:5d:c2:59:75:43:3d:63:4b:
         a0:06:07:0e:e8:57:58:d0:fe:f1:de:f6:85:90:79:4e:e4:3a:
         99:3e:80:bb:79:45:6c:f8:6b:d1:98:4d:ec:93:87:35:66:5a:
         d8:c7:4c:9b:d1:b4:6e:e0:84:65:63:0e:14:fe:c0:29:20:2e:
         d1:32:41:b6:f2:a1:de:62:60:1c:60:36:8d:f9:b3:58:cc:5a:
         b4:14:29:21:14:17:e3:4b:e7:a5:eb:90:25:ef:52:27:4d:31:
         0b:f9:a1:9a:cd:15:cf:61:1b:b7:e0:84:00:a9:38:22:c8:70:
         b3:e3:fb:ce:96:81:fc:b2:1a:3d:c6:00:40:8a:d1:4e:b2:8f:
         7f:8d:92:00:6c:42:89:47:83:10:fb:18:a1:5c:6c:b5:f5:de:
         a4:0b:f6:2b:5a:de:e5:2c:b3:3b:88:5d:b5:df:93:76:23:4d:
         d8:c8:28:5b:bd:4c:b1:02:24:42:17:58:bc:04:57:4e:b2:6f:
         4c:bc:42:88:87:bc:f8:cc:57:80:a8:c1:41:f7:08:e1:cd:95:
         a8:49:52:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZfu9sNUm79ZH+kzapzuqkpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZThkMWM2YWFmNGE5M2ZmNDFiYmZhMWJkMWRhYzYxOTdk
NTk1NzUwHhcNMjUwNDIyMjMwMTA4WhcNMjUwNDIzMjMwMTA4WjAzMTEwLwYDVQQD
EyhhMTZiMmZmMjgzNDlhYTNlYzRhZDcxMDMxMGZmOGUzMWM5MjkzMWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sfKTSC1M2VpwrtS98edBDb1aLxR
H7TRQ7SoiGWNEc/NY5umDdCoBCpVrNGfIrVXOwMGfrUaBWtFO9dw2NKqLsPaagPn
tJ/pyP2bTuq8aLx1a+/6KwcEcWbqFzkpo/t4PLZjHovKIRZpCsYXRGSZ77LvaXCL
e6VBmZc8lYfdDK2RIQ2pUqOKltPa1YEfJWm/GQiZ+setShXzyPMMnx4o/N0RmwQZ
X2KpP2+38vboP/lhKpK+mBTr8q8vqkFv7ajlR4TWo15QabA4meSekzaRYBnXKhUw
/HH9PIbrswbHTrWBEHxVz6xbNCRYDLXYqsbOF0uD26+HNe7I/htQ0m4YzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKFrL/KDSao+xK1xAxD/jjHJKTHaMB8GA1UdIwQY
MBaAFP3o0caq9Kk/9Bu/ob0drGGX1ZV1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2VqUnhxcjBxVF8wRzctaHZSMnNZWmZWbFhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC80OTY4ODUtNzA5Zi00YmJiLTkzNzUt
OTU0ZDE5NTQ5YjYxLzEvX2VqUnhxcjBxVF8wRzctaHZSMnNZWmZWbFhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC80OTY4ODUtNzA5Zi00YmJiLTkzNzUtOTU0ZDE5NTQ5YjYx
LzEvX2VqUnhxcjBxVF8wRzctaHZSMnNZWmZWbFhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAij+koyYQ
xKXvRUiSLv/u533NAX5QkJ3yVkJWp74h1bhLE/CKstO+8hsfZAn+El3CWXVDPWNL
oAYHDuhXWND+8d72hZB5TuQ6mT6Au3lFbPhr0ZhN7JOHNWZa2MdMm9G0buCEZWMO
FP7AKSAu0TJBtvKh3mJgHGA2jfmzWMxatBQpIRQX40vnpeuQJe9SJ00xC/mhms0V
z2Ebt+CEAKk4Ishws+P7zpaB/LIaPcYAQIrRTrKPf42SAGxCiUeDEPsYoVxstfXe
pAv2K1re5SyzO4hdtd+TdiNN2MgoW71MsQIkQhdYvARXTrJvTLxCiIe8+MxXgKjB
QfcI4c2VqElSHA==
-----END CERTIFICATE-----
Generated at Wed Apr 23 02:39:25 2025 by rpki-client