Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.mft
File:                     vEwRj9Pu4hW2w_173dXCod42MwI.mft (raw, json)
Hash identifier:          2jsl1O2Lryx0rXWSu5SDsCCS6LVvBCWuhWkC25scfJI=
Subject key identifier:   0C:84:ED:A2:0A:1F:7D:C5:68:9B:66:2C:DA:A2:D3:DB:AD:DF:1D:C5
Authority key identifier: BC:4C:11:8F:D3:EE:E2:15:B6:C3:FD:7B:DD:D5:C2:A1:DE:36:33:02
Certificate issuer:       /CN=bc4c118fd3eee215b6c3fd7bddd5c2a1de363302
Certificate serial:       0197469DDB11F3811077EB4342B35B2C2BAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vEwRj9Pu4hW2w_173dXCod42MwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.mft
Manifest number:          1001
Signing time:             Fri 06 Jun 2025 19:00:39 +0000
Manifest this update:     Fri 06 Jun 2025 19:00:39 +0000
Manifest next update:     Sat 07 Jun 2025 19:00:39 +0000
Files and hashes:         1: vEwRj9Pu4hW2w_173dXCod42MwI.crl (hash: S1q1H3d6EQdMaAG0jVz68uXxc9CKWyuH3ZpVKY2A7xk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vEwRj9Pu4hW2w_173dXCod42MwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9d:db:11:f3:81:10:77:eb:43:42:b3:5b:2c:2b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc4c118fd3eee215b6c3fd7bddd5c2a1de363302
        Validity
            Not Before: Jun  6 19:00:39 2025 GMT
            Not After : Jun  7 19:00:39 2025 GMT
        Subject: CN=0c84eda20a1f7dc5689b662cdaa2d3dbaddf1dc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:df:b1:e2:54:c1:f3:d1:ce:6c:0c:cc:3c:7d:
                    17:49:b8:14:3f:f2:fb:00:e5:3f:ba:7e:5f:a8:d8:
                    5a:a1:50:b9:0b:84:39:ed:c8:c0:54:96:d8:ea:7b:
                    da:ab:d1:45:65:2a:52:11:cb:13:49:44:d1:d1:f3:
                    a7:bd:92:d5:8d:2e:87:48:cd:b7:58:22:a0:14:c2:
                    6e:ed:74:70:a0:48:14:2b:fc:ae:cb:b0:c7:bc:33:
                    1b:62:eb:06:b6:ed:84:55:48:c5:f5:b1:06:50:72:
                    de:9d:5e:a5:0e:23:3c:d9:02:08:3d:08:22:d7:b7:
                    d4:34:48:9d:bc:48:37:db:07:2f:48:ec:22:89:12:
                    6c:56:d2:36:73:36:58:3d:ea:e2:bb:52:7b:c8:a9:
                    6f:57:4f:74:64:c3:7c:37:34:52:96:e3:f1:0d:6b:
                    54:89:a7:3d:29:d4:f3:4f:fe:bb:88:4e:50:80:1a:
                    3c:b5:20:4c:20:c9:16:7a:cb:e5:3b:23:c8:d0:b2:
                    58:fc:f2:84:58:e7:2b:ca:47:39:5d:17:ee:08:64:
                    c4:ff:eb:57:c0:dd:4d:2b:e9:cf:e5:3f:0b:d9:8a:
                    00:47:b7:2d:f8:71:8a:81:2f:8b:c6:33:ee:e1:64:
                    15:71:05:70:fc:ab:cc:fb:af:4a:fa:fe:6b:a3:ed:
                    69:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:84:ED:A2:0A:1F:7D:C5:68:9B:66:2C:DA:A2:D3:DB:AD:DF:1D:C5
            X509v3 Authority Key Identifier:
                keyid:BC:4C:11:8F:D3:EE:E2:15:B6:C3:FD:7B:DD:D5:C2:A1:DE:36:33:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEwRj9Pu4hW2w_173dXCod42MwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:3a:4f:3d:10:c9:6a:6a:94:8c:04:63:7f:3c:5f:48:63:61:
         3e:56:fd:db:ca:50:6a:af:d5:d1:f8:74:34:33:15:5f:46:13:
         a0:61:9c:a4:fd:3d:26:73:62:5f:ff:97:6d:fc:1b:9e:d6:e8:
         4a:11:d0:a9:6b:95:fd:eb:82:a2:27:75:95:21:d5:76:a9:c4:
         de:3c:f2:f8:43:89:5d:1f:1b:88:f5:10:aa:57:64:ae:d2:ab:
         86:54:ae:27:c1:5c:2a:31:72:a9:aa:41:a8:a3:23:a1:66:b4:
         1b:87:8f:19:aa:41:a7:4f:93:99:5c:f5:ab:b1:13:0b:d3:de:
         b1:3e:83:54:22:44:2d:45:38:52:59:52:e3:4e:71:55:82:b6:
         88:c7:ac:fa:61:24:0d:9c:76:76:46:a1:e8:9b:4c:59:55:73:
         70:21:ee:2d:5e:19:a6:33:b1:d8:bc:06:21:eb:38:80:63:4f:
         92:e8:86:13:fd:b0:29:9a:ff:ee:e5:73:62:4f:d8:3b:f4:46:
         3a:ce:17:68:37:c9:73:61:22:19:8a:49:59:5f:ad:84:35:c9:
         71:13:eb:b9:da:2a:22:43:46:66:bd:c2:9d:5b:e2:f8:c7:3d:
         4e:f1:e4:01:98:b7:43:91:5e:fa:3e:b4:29:fb:27:64:06:54:
         b9:6f:ef:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGndsR84EQd+tDQrNbLCuqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNGMxMThmZDNlZWUyMTViNmMzZmQ3YmRkZDVjMmExZGUz
NjMzMDIwHhcNMjUwNjA2MTkwMDM5WhcNMjUwNjA3MTkwMDM5WjAzMTEwLwYDVQQD
EygwYzg0ZWRhMjBhMWY3ZGM1Njg5YjY2MmNkYWEyZDNkYmFkZGYxZGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvt+x4lTB89HObAzMPH0XSbgUP/L7
AOU/un5fqNhaoVC5C4Q57cjAVJbY6nvaq9FFZSpSEcsTSUTR0fOnvZLVjS6HSM23
WCKgFMJu7XRwoEgUK/yuy7DHvDMbYusGtu2EVUjF9bEGUHLenV6lDiM82QIIPQgi
17fUNEidvEg32wcvSOwiiRJsVtI2czZYPeriu1J7yKlvV090ZMN8NzRSluPxDWtU
iac9KdTzT/67iE5QgBo8tSBMIMkWesvlOyPI0LJY/PKEWOcrykc5XRfuCGTE/+tX
wN1NK+nP5T8L2YoAR7ct+HGKgS+LxjPu4WQVcQVw/KvM+69K+v5ro+1pMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyE7aIKH33FaJtmLNqi09ut3x3FMB8GA1UdIwQY
MBaAFLxMEY/T7uIVtsP9e93VwqHeNjMCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkV3Umo5UHU0aFcyd18xNzNkWENvZDQyTXdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS84NjRmNDUtNWQ5ZC00YTM3LTg4MDgt
Y2NlNDZhYzRiZTA0LzEvdkV3Umo5UHU0aFcyd18xNzNkWENvZDQyTXdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS84NjRmNDUtNWQ5ZC00YTM3LTg4MDgtY2NlNDZhYzRiZTA0
LzEvdkV3Umo5UHU0aFcyd18xNzNkWENvZDQyTXdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGDpPPRDJ
amqUjARjfzxfSGNhPlb928pQaq/V0fh0NDMVX0YToGGcpP09JnNiX/+Xbfwbntbo
ShHQqWuV/euCoid1lSHVdqnE3jzy+EOJXR8biPUQqldkrtKrhlSuJ8FcKjFyqapB
qKMjoWa0G4ePGapBp0+TmVz1q7ETC9PesT6DVCJELUU4UllS405xVYK2iMes+mEk
DZx2dkah6JtMWVVzcCHuLV4ZpjOx2LwGIes4gGNPkuiGE/2wKZr/7uVzYk/YO/RG
Os4XaDfJc2EiGYpJWV+thDXJcRPrudoqIkNGZr3CnVvi+Mc9TvHkAZi3Q5Fe+j60
KfsnZAZUuW/vNg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:19:05 2025 by rpki-client