Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.mft
File:                     5VNEmgBiicjZNrKcfsWO2AnhgbY.mft (raw, json)
Hash identifier:          EDBzKaQG3Vsb07soaDimVyJWLWoXtmRNOp3S1+gBrmU=
Subject key identifier:   7E:FF:F8:B8:ED:47:36:90:2A:54:AF:D5:E8:E5:F9:6F:08:5B:85:AE
Authority key identifier: E5:53:44:9A:00:62:89:C8:D9:36:B2:9C:7E:C5:8E:D8:09:E1:81:B6
Certificate issuer:       /CN=e553449a006289c8d936b29c7ec58ed809e181b6
Certificate serial:       019746D4BB10DB04F3AA7D29B46FFC2B1CCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5VNEmgBiicjZNrKcfsWO2AnhgbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.mft
Manifest number:          0262
Signing time:             Fri 06 Jun 2025 20:00:36 +0000
Manifest this update:     Fri 06 Jun 2025 20:00:36 +0000
Manifest next update:     Sat 07 Jun 2025 20:00:36 +0000
Files and hashes:         1: 5VNEmgBiicjZNrKcfsWO2AnhgbY.crl (hash: iNl3iq2ZQpZXa1vX9+B2R650GMcbXsdzz8wRYyXbW2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5VNEmgBiicjZNrKcfsWO2AnhgbY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 20:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:d4:bb:10:db:04:f3:aa:7d:29:b4:6f:fc:2b:1c:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e553449a006289c8d936b29c7ec58ed809e181b6
        Validity
            Not Before: Jun  6 20:00:36 2025 GMT
            Not After : Jun  7 20:00:36 2025 GMT
        Subject: CN=7efff8b8ed4736902a54afd5e8e5f96f085b85ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f3:6b:d2:77:d2:47:1f:64:37:c0:23:8a:a6:
                    ec:c3:d5:98:b8:e9:c8:06:f6:ce:bd:dd:de:73:e7:
                    a2:42:03:0c:77:e4:dc:03:26:44:ca:10:eb:8b:94:
                    1f:3b:7b:d7:54:0a:01:91:f7:82:3f:bb:3f:4b:2a:
                    87:bc:de:95:bf:89:3c:a1:d0:c5:7f:8e:ef:23:3d:
                    cd:49:87:fb:b0:a4:72:22:a8:3c:ef:95:7e:d5:fb:
                    e3:c1:78:ee:a7:72:af:ad:24:da:75:80:8a:6b:4e:
                    3a:66:5a:ed:1f:58:ab:90:1a:e4:4d:bd:a2:4a:f2:
                    79:71:22:b3:4f:82:dc:d6:94:e3:18:6d:22:41:37:
                    42:ed:b6:a8:e4:15:f1:0e:1b:bf:bf:ff:25:a0:f7:
                    3b:31:8c:89:fe:ac:b2:e8:cd:26:b1:17:b8:cc:40:
                    49:65:9b:9c:64:cb:22:79:6a:45:be:f8:af:7e:de:
                    2b:cd:fe:db:36:9e:22:8c:59:00:e7:24:90:df:ee:
                    06:f7:73:7d:87:2d:24:07:15:ec:50:e4:cb:01:a6:
                    2a:ee:9d:c8:0b:2e:e2:4a:a3:3a:08:90:0a:15:7a:
                    01:5d:46:2b:ce:79:80:6e:61:06:0c:75:2d:12:de:
                    82:93:eb:df:13:28:59:8b:01:93:f1:af:f1:d3:2c:
                    77:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:FF:F8:B8:ED:47:36:90:2A:54:AF:D5:E8:E5:F9:6F:08:5B:85:AE
            X509v3 Authority Key Identifier:
                keyid:E5:53:44:9A:00:62:89:C8:D9:36:B2:9C:7E:C5:8E:D8:09:E1:81:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VNEmgBiicjZNrKcfsWO2AnhgbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:b4:28:9a:ef:86:8c:64:ae:6f:59:88:08:51:8c:ac:a2:87:
         ce:49:d9:1d:a3:94:b7:a8:9a:99:dd:4b:5c:08:2b:19:50:27:
         cd:5a:68:73:8c:d9:6b:2c:0a:0e:d2:0a:a7:bb:60:8e:2f:31:
         4b:ee:a9:c1:dc:2f:af:95:98:4b:30:bb:81:ff:e1:03:d7:71:
         4a:27:ae:ce:e1:bc:78:35:2c:6e:f3:6e:00:a3:0a:99:0d:3a:
         fb:f4:a7:0b:46:ac:6e:af:b9:d8:a9:23:6e:91:81:1f:4c:e5:
         2d:68:9b:88:76:c7:40:01:03:a2:4e:58:97:18:66:b3:ff:ca:
         a9:2b:37:85:7d:36:f5:cf:b5:34:37:c2:fa:74:29:32:88:d9:
         7c:96:f3:7c:23:b4:e1:1c:15:8b:0b:ec:41:b4:de:97:d1:23:
         e4:24:a9:ec:aa:6f:0c:b4:ad:71:0c:19:af:77:0e:b5:24:26:
         36:01:f8:f2:56:53:d7:20:6e:c2:c2:2a:33:c5:d7:7a:13:bb:
         a0:8c:e2:c0:39:95:24:4f:cf:ac:92:b3:93:2a:91:a8:09:7a:
         50:09:6b:05:f3:5a:ab:5d:06:d6:9b:ac:7e:09:52:28:77:e0:
         14:6f:8b:57:68:da:f7:45:26:d4:60:16:46:eb:57:77:cf:a3:
         14:c7:70:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdG1LsQ2wTzqn0ptG/8KxzOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NTM0NDlhMDA2Mjg5YzhkOTM2YjI5YzdlYzU4ZWQ4MDll
MTgxYjYwHhcNMjUwNjA2MjAwMDM2WhcNMjUwNjA3MjAwMDM2WjAzMTEwLwYDVQQD
Eyg3ZWZmZjhiOGVkNDczNjkwMmE1NGFmZDVlOGU1Zjk2ZjA4NWI4NWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfNr0nfSRx9kN8Ajiqbsw9WYuOnI
BvbOvd3ec+eiQgMMd+TcAyZEyhDri5QfO3vXVAoBkfeCP7s/SyqHvN6Vv4k8odDF
f47vIz3NSYf7sKRyIqg875V+1fvjwXjup3KvrSTadYCKa046ZlrtH1irkBrkTb2i
SvJ5cSKzT4Lc1pTjGG0iQTdC7bao5BXxDhu/v/8loPc7MYyJ/qyy6M0msRe4zEBJ
ZZucZMsieWpFvvivft4rzf7bNp4ijFkA5ySQ3+4G93N9hy0kBxXsUOTLAaYq7p3I
Cy7iSqM6CJAKFXoBXUYrznmAbmEGDHUtEt6Ck+vfEyhZiwGT8a/x0yx3yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7/+LjtRzaQKlSv1ejl+W8IW4WuMB8GA1UdIwQY
MBaAFOVTRJoAYonI2TaynH7FjtgJ4YG2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVZORW1nQmlpY2paTnJLY2ZzV08yQW5oZ2JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9iOTM3NWUtMzViMS00MjY4LTk5NGMt
ZjM1OTU5ZmU3ZDRlLzEvNVZORW1nQmlpY2paTnJLY2ZzV08yQW5oZ2JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9iOTM3NWUtMzViMS00MjY4LTk5NGMtZjM1OTU5ZmU3ZDRl
LzEvNVZORW1nQmlpY2paTnJLY2ZzV08yQW5oZ2JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnbQomu+G
jGSub1mICFGMrKKHzknZHaOUt6iamd1LXAgrGVAnzVpoc4zZaywKDtIKp7tgji8x
S+6pwdwvr5WYSzC7gf/hA9dxSieuzuG8eDUsbvNuAKMKmQ06+/SnC0asbq+52Kkj
bpGBH0zlLWibiHbHQAEDok5Ylxhms//KqSs3hX029c+1NDfC+nQpMojZfJbzfCO0
4RwViwvsQbTel9Ej5CSp7KpvDLStcQwZr3cOtSQmNgH48lZT1yBuwsIqM8XXehO7
oIziwDmVJE/PrJKzkyqRqAl6UAlrBfNaq10G1pusfglSKHfgFG+LV2ja90Um1GAW
RutXd8+jFMdw+g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:44:21 2025 by rpki-client