Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft
File:                     cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft (raw, json)
Hash identifier:          wqHDlijoOF/AzsjtzYaIZ4hIBU7nVqHpXBWbmd0/Zzk=
Subject key identifier:   D1:91:00:E7:EC:BB:90:93:50:37:EC:82:FF:F5:8D:B4:50:AA:E9:05
Authority key identifier: 73:0C:BC:47:A6:A3:0F:23:C5:D8:4C:18:0B:14:88:1D:20:BA:0A:C2
Certificate issuer:       /CN=730cbc47a6a30f23c5d84c180b14881d20ba0ac2
Certificate serial:       01974D4533013C890BF4B86DAC40B2B1E5BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cwy8R6ajDyPF2EwYCxSIHSC6CsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft
Manifest number:          0219
Signing time:             Sun 08 Jun 2025 02:01:09 +0000
Manifest this update:     Sun 08 Jun 2025 02:01:09 +0000
Manifest next update:     Mon 09 Jun 2025 02:01:09 +0000
Files and hashes:         1: cwy8R6ajDyPF2EwYCxSIHSC6CsI.crl (hash: xA4dYxL8E/yA5nQ0d7fO2bkm+qPRphRLzyLdvO8nI1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cwy8R6ajDyPF2EwYCxSIHSC6CsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 02:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:45:33:01:3c:89:0b:f4:b8:6d:ac:40:b2:b1:e5:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=730cbc47a6a30f23c5d84c180b14881d20ba0ac2
        Validity
            Not Before: Jun  8 02:01:09 2025 GMT
            Not After : Jun  9 02:01:09 2025 GMT
        Subject: CN=d19100e7ecbb90935037ec82fff58db450aae905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1c:73:19:e2:80:6c:20:7a:82:4d:9a:af:a8:
                    6a:11:eb:a7:36:db:e1:53:d5:8a:95:72:8f:5a:dd:
                    b7:94:49:c1:16:36:18:9b:8a:95:7e:87:d5:c4:06:
                    cb:e7:35:1e:82:31:2d:bd:ed:1f:05:0f:59:a6:6a:
                    6a:94:61:49:fd:66:e7:7d:eb:c0:c6:5c:b7:d6:38:
                    e7:a5:f5:c5:76:7a:77:d0:97:17:fb:72:50:2d:01:
                    9f:1f:b9:ee:8b:ee:13:49:5a:80:af:d7:97:cf:29:
                    2a:70:b9:90:e1:d1:bc:a3:d6:67:fd:e2:72:47:67:
                    6a:d8:96:7c:2a:f9:62:27:5d:25:c0:fb:aa:a6:7f:
                    c9:4a:3c:53:a3:78:d0:40:e6:a8:60:e3:d1:57:82:
                    9b:fd:9b:f2:54:da:7d:96:66:a8:2d:9b:84:47:74:
                    be:a1:82:4a:8f:ff:96:0c:0b:c9:3e:c6:e1:28:89:
                    10:34:01:1e:77:66:2f:ca:3e:43:df:76:a7:35:06:
                    ec:23:5c:1f:ab:06:c9:86:96:ae:18:54:c9:df:3e:
                    f1:69:51:6a:b8:1d:a3:69:5e:8c:6a:97:56:53:1a:
                    32:99:cf:44:f6:71:a1:b3:40:33:00:25:6f:08:e4:
                    39:ec:93:c8:68:f2:a1:ca:d9:86:78:24:99:ac:df:
                    2b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:91:00:E7:EC:BB:90:93:50:37:EC:82:FF:F5:8D:B4:50:AA:E9:05
            X509v3 Authority Key Identifier:
                keyid:73:0C:BC:47:A6:A3:0F:23:C5:D8:4C:18:0B:14:88:1D:20:BA:0A:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwy8R6ajDyPF2EwYCxSIHSC6CsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:bf:09:1a:36:93:71:52:e9:ae:74:30:6f:8e:1f:4e:fd:8f:
         c6:67:97:59:f5:d9:8d:6b:97:5e:b3:ae:d4:8a:97:44:64:d3:
         17:52:63:44:59:81:d2:f1:94:a4:86:eb:e5:b2:d2:7e:3b:76:
         d2:cc:b7:08:9b:f7:b6:0e:ab:b8:bd:05:01:66:45:78:7d:9b:
         8a:e0:a3:b8:e5:3a:d1:ba:20:5a:39:53:64:2d:0f:f2:7f:ad:
         44:9f:dd:e7:e2:f7:83:cd:e4:8f:84:74:fe:96:c7:32:a9:4e:
         8e:93:57:0a:7b:3e:c7:26:aa:76:00:7f:78:cf:56:af:05:9a:
         7b:cd:ba:2a:69:56:d7:c8:08:e5:3c:20:27:b0:e4:5a:1f:94:
         79:0d:cd:53:6e:26:f1:05:54:e4:d5:df:d2:38:84:7d:59:40:
         06:f2:17:7e:80:be:8a:d4:f3:e4:f6:2b:5a:1f:7a:a1:d7:98:
         19:e9:4a:c6:96:5e:6d:fe:21:54:a2:f3:db:59:72:f4:49:1e:
         c4:27:71:34:86:d7:f7:8a:eb:f8:3b:ed:13:7d:82:b2:37:23:
         a0:a7:05:6a:a7:42:45:e5:02:77:22:ec:73:d4:e2:52:8c:1a:
         7c:3d:f0:ad:5e:13:c0:83:76:19:40:dd:c0:a2:5e:cf:05:6c:
         b4:86:c7:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNRTMBPIkL9LhtrECyseW/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMGNiYzQ3YTZhMzBmMjNjNWQ4NGMxODBiMTQ4ODFkMjBi
YTBhYzIwHhcNMjUwNjA4MDIwMTA5WhcNMjUwNjA5MDIwMTA5WjAzMTEwLwYDVQQD
EyhkMTkxMDBlN2VjYmI5MDkzNTAzN2VjODJmZmY1OGRiNDUwYWFlOTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBxzGeKAbCB6gk2ar6hqEeunNtvh
U9WKlXKPWt23lEnBFjYYm4qVfofVxAbL5zUegjEtve0fBQ9ZpmpqlGFJ/WbnfevA
xly31jjnpfXFdnp30JcX+3JQLQGfH7nui+4TSVqAr9eXzykqcLmQ4dG8o9Zn/eJy
R2dq2JZ8KvliJ10lwPuqpn/JSjxTo3jQQOaoYOPRV4Kb/ZvyVNp9lmaoLZuER3S+
oYJKj/+WDAvJPsbhKIkQNAEed2Yvyj5D33anNQbsI1wfqwbJhpauGFTJ3z7xaVFq
uB2jaV6MapdWUxoymc9E9nGhs0AzACVvCOQ57JPIaPKhytmGeCSZrN8rRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNGRAOfsu5CTUDfsgv/1jbRQqukFMB8GA1UdIwQY
MBaAFHMMvEemow8jxdhMGAsUiB0gugrCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3d5OFI2YWpEeVBGMkV3WUN4U0lIU0M2Q3NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS84NGIwNzQtOWM4ZC00OGY1LWJhZGUt
Y2JhNDlhNDQ2ZDIyLzEvY3d5OFI2YWpEeVBGMkV3WUN4U0lIU0M2Q3NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS84NGIwNzQtOWM4ZC00OGY1LWJhZGUtY2JhNDlhNDQ2ZDIy
LzEvY3d5OFI2YWpEeVBGMkV3WUN4U0lIU0M2Q3NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgL8JGjaT
cVLprnQwb44fTv2PxmeXWfXZjWuXXrOu1IqXRGTTF1JjRFmB0vGUpIbr5bLSfjt2
0sy3CJv3tg6ruL0FAWZFeH2biuCjuOU60bogWjlTZC0P8n+tRJ/d5+L3g83kj4R0
/pbHMqlOjpNXCns+xyaqdgB/eM9WrwWae826KmlW18gI5TwgJ7DkWh+UeQ3NU24m
8QVU5NXf0jiEfVlABvIXfoC+itTz5PYrWh96odeYGelKxpZebf4hVKLz21ly9Eke
xCdxNIbX94rr+DvtE32CsjcjoKcFaqdCReUCdyLsc9TiUowafD3wrV4TwIN2GUDd
wKJezwVstIbHhA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:15:44 2025 by rpki-client