Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.mft
File:                     w27RUSe_ywvNemOGi0mck8szURM.mft (raw, json)
Hash identifier:          pFMoJBC+12em/2Wje7RacWW6CTQiD5XpKU3jo5XWbKc=
Subject key identifier:   BE:C1:27:B2:7F:0A:60:0F:C0:67:7D:1D:D5:01:57:7B:10:A8:A2:FB
Authority key identifier: C3:6E:D1:51:27:BF:CB:0B:CD:7A:63:86:8B:49:9C:93:CB:33:51:13
Certificate issuer:       /CN=c36ed15127bfcb0bcd7a63868b499c93cb335113
Certificate serial:       019759B6A3F4A0DACE9C7E9695F2FF9288E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w27RUSe_ywvNemOGi0mck8szURM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.mft
Manifest number:          39
Signing time:             Tue 10 Jun 2025 12:00:31 +0000
Manifest this update:     Tue 10 Jun 2025 12:00:31 +0000
Manifest next update:     Wed 11 Jun 2025 12:00:31 +0000
Files and hashes:         1: w27RUSe_ywvNemOGi0mck8szURM.crl (hash: jdE7SgZaR4Jxr503aLe6e5ZfRylfdycuqoZNhHTMOZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w27RUSe_ywvNemOGi0mck8szURM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 12:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:59:b6:a3:f4:a0:da:ce:9c:7e:96:95:f2:ff:92:88:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c36ed15127bfcb0bcd7a63868b499c93cb335113
        Validity
            Not Before: Jun 10 12:00:31 2025 GMT
            Not After : Jun 11 12:00:31 2025 GMT
        Subject: CN=bec127b27f0a600fc0677d1dd501577b10a8a2fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:04:16:8d:cf:82:20:18:45:f9:63:ac:c5:22:
                    8f:75:17:59:b1:8a:f5:4b:cc:63:32:64:25:84:b4:
                    a3:a9:b6:64:e7:c6:e8:1d:27:b2:9e:02:05:46:62:
                    1d:c6:6e:1d:ad:47:71:0a:ed:12:b7:58:a6:21:85:
                    b4:9c:83:a8:a4:bd:7d:05:58:df:cb:0b:f3:c6:d1:
                    34:24:bf:76:8e:06:9d:18:f1:00:35:df:82:90:03:
                    f0:e5:93:70:d5:56:aa:e2:6a:f4:3d:23:5e:dc:ba:
                    8f:02:7e:f1:77:93:b9:38:2c:2f:d7:bf:7d:89:e8:
                    eb:c2:be:e0:9d:80:5a:c4:fb:65:81:5d:15:c0:78:
                    66:ab:22:e1:01:b7:e0:ab:f1:cf:ac:3f:88:21:f9:
                    2c:77:e1:46:57:66:75:7e:d7:f6:b9:a1:d7:99:84:
                    1f:da:ff:04:e9:57:0d:4e:ea:d7:60:eb:4b:94:77:
                    8b:07:32:f6:ac:2f:94:20:15:49:bd:90:fb:d6:94:
                    b4:5f:25:e6:18:48:69:20:aa:0b:f1:62:13:70:fa:
                    28:b8:b1:d1:83:46:9a:fe:84:fc:b4:80:74:77:46:
                    15:c7:4f:92:b0:f0:cf:89:49:a5:89:36:50:92:f7:
                    fe:d9:68:ca:86:2d:2f:ba:d1:1d:42:51:bb:7e:82:
                    e8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C1:27:B2:7F:0A:60:0F:C0:67:7D:1D:D5:01:57:7B:10:A8:A2:FB
            X509v3 Authority Key Identifier:
                keyid:C3:6E:D1:51:27:BF:CB:0B:CD:7A:63:86:8B:49:9C:93:CB:33:51:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w27RUSe_ywvNemOGi0mck8szURM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:4e:46:06:2e:d0:4a:83:48:30:02:cb:cc:50:3e:a7:41:99:
         9b:2c:5b:1a:44:78:c1:92:2a:46:db:09:63:fc:56:fe:a0:50:
         9e:2a:ab:ed:89:a1:69:62:ca:70:8c:58:e5:ff:3a:e5:78:a8:
         89:21:07:2e:dc:f7:32:9b:4c:3a:7f:82:58:da:1d:05:e5:fc:
         3a:41:a0:61:ca:a5:89:69:75:13:9b:e0:95:be:fc:7e:6f:fb:
         2e:3b:d3:08:5d:b7:e9:8f:7f:d1:0c:fe:85:7a:aa:28:ef:5f:
         3a:13:84:14:fa:d8:74:b9:56:7b:2e:e4:97:84:d1:cc:cb:a0:
         d5:fc:72:11:a1:f6:ae:a4:72:6a:b4:e2:cc:45:f4:25:24:12:
         7d:fd:5b:e8:cc:66:30:e1:2e:81:d2:a2:44:41:67:cb:11:e5:
         c1:16:db:5e:b4:28:91:0b:08:60:f6:0d:e3:88:0e:66:36:c2:
         ff:27:9a:a3:52:d2:3f:c7:7b:f3:60:65:e7:d0:9b:39:be:9f:
         20:f1:f9:e3:e8:94:ad:70:32:10:3a:13:e7:7c:e9:fa:27:ca:
         92:7f:f9:9a:78:eb:8d:26:54:9e:b6:30:3b:53:f7:37:5d:ae:
         6c:c3:1d:1c:92:28:ba:dc:53:50:63:3c:3c:fe:fe:d8:50:3a:
         61:de:6b:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdZtqP0oNrOnH6WlfL/kojoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNmVkMTUxMjdiZmNiMGJjZDdhNjM4NjhiNDk5YzkzY2Iz
MzUxMTMwHhcNMjUwNjEwMTIwMDMxWhcNMjUwNjExMTIwMDMxWjAzMTEwLwYDVQQD
EyhiZWMxMjdiMjdmMGE2MDBmYzA2NzdkMWRkNTAxNTc3YjEwYThhMmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywQWjc+CIBhF+WOsxSKPdRdZsYr1
S8xjMmQlhLSjqbZk58boHSeyngIFRmIdxm4drUdxCu0St1imIYW0nIOopL19BVjf
ywvzxtE0JL92jgadGPEANd+CkAPw5ZNw1Vaq4mr0PSNe3LqPAn7xd5O5OCwv1799
iejrwr7gnYBaxPtlgV0VwHhmqyLhAbfgq/HPrD+IIfksd+FGV2Z1ftf2uaHXmYQf
2v8E6VcNTurXYOtLlHeLBzL2rC+UIBVJvZD71pS0XyXmGEhpIKoL8WITcPoouLHR
g0aa/oT8tIB0d0YVx0+SsPDPiUmliTZQkvf+2WjKhi0vutEdQlG7foLonwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7BJ7J/CmAPwGd9HdUBV3sQqKL7MB8GA1UdIwQY
MBaAFMNu0VEnv8sLzXpjhotJnJPLM1ETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzI3UlVTZV95d3ZOZW1PR2kwbWNrOHN6VVJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9kYTdmZTEtNDYyNy00ODNkLTg4MzIt
MjY5YTZiODIzYjdlLzEvdzI3UlVTZV95d3ZOZW1PR2kwbWNrOHN6VVJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9kYTdmZTEtNDYyNy00ODNkLTg4MzItMjY5YTZiODIzYjdl
LzEvdzI3UlVTZV95d3ZOZW1PR2kwbWNrOHN6VVJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQE5GBi7Q
SoNIMALLzFA+p0GZmyxbGkR4wZIqRtsJY/xW/qBQniqr7YmhaWLKcIxY5f865Xio
iSEHLtz3MptMOn+CWNodBeX8OkGgYcqliWl1E5vglb78fm/7LjvTCF236Y9/0Qz+
hXqqKO9fOhOEFPrYdLlWey7kl4TRzMug1fxyEaH2rqRyarTizEX0JSQSff1b6Mxm
MOEugdKiREFnyxHlwRbbXrQokQsIYPYN44gOZjbC/yeao1LSP8d782Bl59CbOb6f
IPH54+iUrXAyEDoT53zp+ifKkn/5mnjrjSZUnrYwO1P3N12ubMMdHJIoutxTUGM8
PP7+2FA6Yd5rXQ==
-----END CERTIFICATE-----
Generated at Tue Jun 10 21:28:18 2025 by rpki-client