Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
File:                     J0VyDZpVOOo1ix9D0I-Izeb267Y.mft (raw, json)
Hash identifier:          w5p7351GMGBcpQgCWKiZEAj1mM5a7oL6e1posee6a6s=
Subject key identifier:   B4:2D:45:38:5D:60:69:58:CA:11:6C:BD:C4:5B:53:E8:D5:ED:09:0B
Authority key identifier: 27:45:72:0D:9A:55:38:EA:35:8B:1F:43:D0:8F:88:CD:E6:F6:EB:B6
Certificate issuer:       /CN=2745720d9a5538ea358b1f43d08f88cde6f6ebb6
Certificate serial:       01974967F579061844C8E448512A827540FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
Manifest number:          114D
Signing time:             Sat 07 Jun 2025 08:00:39 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:39 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:39 +0000
Files and hashes:         1: J0VyDZpVOOo1ix9D0I-Izeb267Y.crl (hash: DC/jpGH7ILu9cKrcChMWb2tAeiMUheqpAKCwRK8YXaY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:67:f5:79:06:18:44:c8:e4:48:51:2a:82:75:40:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2745720d9a5538ea358b1f43d08f88cde6f6ebb6
        Validity
            Not Before: Jun  7 08:00:39 2025 GMT
            Not After : Jun  8 08:00:39 2025 GMT
        Subject: CN=b42d45385d606958ca116cbdc45b53e8d5ed090b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a0:8e:42:7f:ac:4d:8d:bc:18:31:61:db:fa:
                    22:66:e4:11:c7:7e:2d:4e:40:c7:3e:6c:89:d6:71:
                    15:1b:39:23:89:3f:d2:b8:ee:1b:60:08:b8:e5:9b:
                    b2:b6:1c:7c:e3:9a:e8:0c:02:8b:34:ea:01:82:86:
                    6a:0f:26:77:7a:db:10:c7:f5:e4:49:d9:b0:70:8b:
                    95:24:df:d7:3b:80:40:d5:22:be:ef:4d:99:ab:38:
                    b5:cc:e5:cd:b7:5e:24:f6:d8:f7:13:f9:5d:55:47:
                    b8:6f:76:d3:4e:e9:f8:50:4e:ae:a7:17:56:98:09:
                    98:02:14:85:f2:16:28:2c:ce:c3:99:d7:83:27:44:
                    b2:34:ab:a9:0b:ec:1f:50:46:35:99:51:60:1a:9e:
                    3c:aa:c2:c6:4d:27:12:ac:7b:f3:12:22:3b:d5:0e:
                    6a:d6:f7:29:c1:f5:72:d8:61:78:78:df:96:52:1e:
                    9e:5d:a5:cd:3a:8e:45:7f:fd:d4:91:08:8b:5d:41:
                    8f:df:e1:da:c4:34:e5:24:12:db:da:4a:5b:e3:90:
                    a0:40:97:84:00:18:f3:e8:29:52:52:26:2b:73:ed:
                    27:a3:23:61:7c:9b:da:07:cf:75:fa:d2:50:ee:78:
                    13:77:ef:94:5b:bb:b5:b3:08:82:c7:ec:bb:e7:1d:
                    de:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2D:45:38:5D:60:69:58:CA:11:6C:BD:C4:5B:53:E8:D5:ED:09:0B
            X509v3 Authority Key Identifier:
                keyid:27:45:72:0D:9A:55:38:EA:35:8B:1F:43:D0:8F:88:CD:E6:F6:EB:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:93:a6:f9:35:61:50:30:12:a6:78:33:d3:71:07:48:ac:94:
         71:be:9b:de:34:4e:e4:f9:4b:83:f6:f3:66:08:35:68:6d:3c:
         89:20:19:41:c2:df:74:f1:cf:1d:92:65:bb:f5:25:e0:c5:75:
         0c:7d:e4:e5:ae:cf:7d:7c:15:19:c0:1d:88:67:11:1b:36:6b:
         67:4f:a3:3c:44:ff:58:9d:9e:f6:06:97:c6:2e:6b:f1:b7:02:
         0c:11:88:76:52:8e:bd:36:49:b9:0a:db:16:8b:75:aa:24:e9:
         86:1c:8b:08:bc:fe:ca:d3:ad:af:8f:d5:9e:54:b1:8e:c2:19:
         c8:be:1a:35:00:63:1f:bd:ff:af:23:4a:7e:df:27:f0:db:8d:
         9e:89:13:63:ac:7d:22:c7:76:2f:1d:92:ba:b5:90:ad:b3:5a:
         da:ed:cb:40:2f:64:f5:62:3a:98:ed:e2:2a:bc:4d:30:ba:db:
         ee:8e:2e:1a:b8:53:a6:9f:0c:a3:94:87:71:82:fa:05:37:63:
         c2:31:47:60:4c:29:5c:22:76:82:2b:8a:b6:38:61:c9:b4:2a:
         ff:1c:8a:1a:aa:23:25:f9:28:df:f6:cf:2b:34:d7:67:f2:c8:
         20:a8:4e:8d:39:d2:2a:ab:53:a3:04:cf:a6:f3:ea:37:33:1e:
         e9:e9:79:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJZ/V5BhhEyORIUSqCdUD7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NDU3MjBkOWE1NTM4ZWEzNThiMWY0M2QwOGY4OGNkZTZm
NmViYjYwHhcNMjUwNjA3MDgwMDM5WhcNMjUwNjA4MDgwMDM5WjAzMTEwLwYDVQQD
EyhiNDJkNDUzODVkNjA2OTU4Y2ExMTZjYmRjNDViNTNlOGQ1ZWQwOTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaCOQn+sTY28GDFh2/oiZuQRx34t
TkDHPmyJ1nEVGzkjiT/SuO4bYAi45Zuythx845roDAKLNOoBgoZqDyZ3etsQx/Xk
SdmwcIuVJN/XO4BA1SK+702Zqzi1zOXNt14k9tj3E/ldVUe4b3bTTun4UE6upxdW
mAmYAhSF8hYoLM7DmdeDJ0SyNKupC+wfUEY1mVFgGp48qsLGTScSrHvzEiI71Q5q
1vcpwfVy2GF4eN+WUh6eXaXNOo5Ff/3UkQiLXUGP3+HaxDTlJBLb2kpb45CgQJeE
ABjz6ClSUiYrc+0noyNhfJvaB891+tJQ7ngTd++UW7u1swiCx+y75x3eDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQtRThdYGlYyhFsvcRbU+jV7QkLMB8GA1UdIwQY
MBaAFCdFcg2aVTjqNYsfQ9CPiM3m9uu2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjBWeURacFZPT28xaXg5RDBJLUl6ZWIyNjdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9hZjljYjQtODU3NC00MmJmLTlkMDUt
YzNlZjczNzcxMjg2LzEvSjBWeURacFZPT28xaXg5RDBJLUl6ZWIyNjdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9hZjljYjQtODU3NC00MmJmLTlkMDUtYzNlZjczNzcxMjg2
LzEvSjBWeURacFZPT28xaXg5RDBJLUl6ZWIyNjdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJOm+TVh
UDASpngz03EHSKyUcb6b3jRO5PlLg/bzZgg1aG08iSAZQcLfdPHPHZJlu/Ul4MV1
DH3k5a7PfXwVGcAdiGcRGzZrZ0+jPET/WJ2e9gaXxi5r8bcCDBGIdlKOvTZJuQrb
Fot1qiTphhyLCLz+ytOtr4/VnlSxjsIZyL4aNQBjH73/ryNKft8n8NuNnokTY6x9
Isd2Lx2SurWQrbNa2u3LQC9k9WI6mO3iKrxNMLrb7o4uGrhTpp8Mo5SHcYL6BTdj
wjFHYEwpXCJ2giuKtjhhybQq/xyKGqojJfko3/bPKzTXZ/LIIKhOjTnSKqtTowTP
pvPqNzMe6el5iA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:01:44 2025 by rpki-client