Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft
File:                     E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft (raw, json)
Hash identifier:          b3Z63rJMveTWM5ChINxiI+GNGKJQ5/MRWzQeP6HjC3o=
Subject key identifier:   B1:2F:7C:71:BF:90:0F:EB:73:E9:23:0E:A0:48:23:69:10:D2:05:01
Authority key identifier: 13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2
Certificate issuer:       /CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2
Certificate serial:       0196120EB275515E8DDB05E6C7BF8BDD626F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft
Manifest number:          0765
Signing time:             Mon 07 Apr 2025 21:01:15 +0000
Manifest this update:     Mon 07 Apr 2025 21:01:15 +0000
Manifest next update:     Tue 08 Apr 2025 21:01:15 +0000
Files and hashes:         1: E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl (hash: QCQnsUVBoTGf1iB4T1iEpEUfbMAOc4WksE9XG34j9R0=)
                          2: JwyhTY3gBjH_DHx6X1gPB4EC1Hw.roa (hash: Y38jvMStrd7/OGI8zyUcvfpz5v5z/NCYXMUYLkJSmbY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:28:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:12:0e:b2:75:51:5e:8d:db:05:e6:c7:bf:8b:dd:62:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2
        Validity
            Not Before: Apr  7 21:01:15 2025 GMT
            Not After : Apr  8 21:01:15 2025 GMT
        Subject: CN=b12f7c71bf900feb73e9230ea048236910d20501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e3:76:84:37:e4:27:c1:5a:74:28:ac:06:f7:
                    6b:13:20:27:7b:91:4c:41:59:4c:9b:4b:d5:fc:9f:
                    ad:a3:05:71:9d:e4:bd:f3:70:39:f9:f0:e3:81:5e:
                    d5:ff:7e:49:86:2f:1f:c6:36:5e:81:a7:55:03:a7:
                    9d:1f:10:88:0a:97:11:63:c6:af:d9:38:12:bd:1a:
                    2c:e9:6b:f1:90:f0:86:ee:24:0d:73:38:08:52:f7:
                    66:26:1f:2d:bf:03:f6:2a:56:97:6c:e4:78:8d:42:
                    e8:96:9b:99:ee:50:eb:32:67:e6:d4:3e:57:69:2b:
                    dd:79:22:33:66:d6:6f:bf:8d:7e:b5:f5:99:8d:9d:
                    f2:51:be:8f:26:bf:5f:77:96:f9:a7:95:fc:22:5c:
                    2f:29:17:33:be:8c:19:f9:89:43:2a:f1:d5:14:c9:
                    af:1d:dc:cc:bf:b3:4f:f8:87:7a:27:c8:1c:e1:35:
                    0f:c7:c3:2c:03:99:32:8d:d8:66:0f:0c:1a:c2:dc:
                    aa:9b:f7:be:f5:41:1a:11:ec:1b:5d:cd:5e:bb:17:
                    f5:74:e7:bb:de:be:35:eb:fa:3b:7f:30:7e:79:d5:
                    9c:fe:d5:d1:bb:fc:95:0c:66:c5:95:88:f8:c6:b0:
                    22:6a:fd:51:85:b0:54:31:ee:a6:fe:30:54:f2:c8:
                    f9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:2F:7C:71:BF:90:0F:EB:73:E9:23:0E:A0:48:23:69:10:D2:05:01
            X509v3 Authority Key Identifier:
                keyid:13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:8e:26:05:59:7b:ea:1e:50:87:18:74:e2:a2:74:b6:d3:d3:
         2b:22:19:39:dc:18:64:8a:a0:0b:eb:db:aa:a6:54:d7:cd:7b:
         3d:09:d5:50:31:a6:ef:39:3f:7a:08:26:30:fc:3f:52:89:49:
         23:86:5d:d8:6a:6a:db:de:a1:2c:e9:75:fa:13:8d:49:1f:b7:
         57:37:f2:9c:1f:a0:c4:be:14:73:ee:7e:65:ca:31:89:75:8c:
         ba:88:34:df:26:38:8a:98:00:bb:0d:88:41:3d:24:be:e8:8d:
         51:65:24:3a:e5:f5:ff:dc:c7:3b:fd:1e:03:73:fb:12:f3:b2:
         a5:2f:71:82:ff:27:0b:05:bf:22:46:d5:db:2f:a1:f7:b4:1c:
         cf:95:db:a1:2b:fe:c0:e0:db:f1:e7:f6:f6:e9:33:2e:7e:bf:
         3d:1f:8b:21:82:44:8e:e5:11:b0:48:36:cc:83:e1:57:dd:75:
         50:18:f2:36:ef:51:57:a8:68:c0:4d:d0:c4:6c:ef:75:15:c1:
         37:96:09:ee:be:24:c0:74:5b:c5:4c:dd:34:01:dc:9d:8a:cb:
         07:51:25:61:64:15:c3:16:1a:7f:a6:80:b1:f3:5a:71:08:40:
         09:38:30:c5:3d:24:1e:d3:9b:a2:2e:fc:d0:d0:e4:76:98:51:
         57:c5:17:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYSDrJ1UV6N2wXmx7+L3WJvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNzJlMGMyYjgzZGQ1MTA5MDEzYzdmMWMwYmI5NzE2ZDM2
MThkZDIwHhcNMjUwNDA3MjEwMTE1WhcNMjUwNDA4MjEwMTE1WjAzMTEwLwYDVQQD
EyhiMTJmN2M3MWJmOTAwZmViNzNlOTIzMGVhMDQ4MjM2OTEwZDIwNTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquN2hDfkJ8FadCisBvdrEyAne5FM
QVlMm0vV/J+towVxneS983A5+fDjgV7V/35Jhi8fxjZegadVA6edHxCICpcRY8av
2TgSvRos6WvxkPCG7iQNczgIUvdmJh8tvwP2KlaXbOR4jULolpuZ7lDrMmfm1D5X
aSvdeSIzZtZvv41+tfWZjZ3yUb6PJr9fd5b5p5X8IlwvKRczvowZ+YlDKvHVFMmv
HdzMv7NP+Id6J8gc4TUPx8MsA5kyjdhmDwwawtyqm/e+9UEaEewbXc1euxf1dOe7
3r416/o7fzB+edWc/tXRu/yVDGbFlYj4xrAiav1RhbBUMe6m/jBU8sj5vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLEvfHG/kA/rc+kjDqBII2kQ0gUBMB8GA1UdIwQY
MBaAFBNy4MK4PdUQkBPH8cC7lxbTYY3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTNMZ3dyZzkxUkNRRThmeHdMdVhGdE5oamRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8yMjFmZDYtZTRmNi00M2UzLTk0NmQt
ZGQxZWM1N2Q3ZTc0LzEvRTNMZ3dyZzkxUkNRRThmeHdMdVhGdE5oamRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS8yMjFmZDYtZTRmNi00M2UzLTk0NmQtZGQxZWM1N2Q3ZTc0
LzEvRTNMZ3dyZzkxUkNRRThmeHdMdVhGdE5oamRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuo4mBVl7
6h5Qhxh04qJ0ttPTKyIZOdwYZIqgC+vbqqZU1817PQnVUDGm7zk/eggmMPw/UolJ
I4Zd2Gpq296hLOl1+hONSR+3VzfynB+gxL4Uc+5+ZcoxiXWMuog03yY4ipgAuw2I
QT0kvuiNUWUkOuX1/9zHO/0eA3P7EvOypS9xgv8nCwW/IkbV2y+h97Qcz5XboSv+
wODb8ef29ukzLn6/PR+LIYJEjuURsEg2zIPhV911UBjyNu9RV6howE3QxGzvdRXB
N5YJ7r4kwHRbxUzdNAHcnYrLB1ElYWQVwxYaf6aAsfNacQhACTgwxT0kHtOboi78
0NDkdphRV8UX1Q==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:18 2025 by rpki-client