Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
File:                     52px9rqT9s9H6zF7K_0EnVzDl2A.mft (raw, json)
Hash identifier:          no8U04S6oXcT9bXonqJNs+0Rs0GuzTbHz0CLljnbZ5U=
Subject key identifier:   51:B7:41:99:A5:33:D6:98:C8:C1:7A:6D:86:C9:BD:75:12:14:59:A3
Authority key identifier: E7:6A:71:F6:BA:93:F6:CF:47:EB:31:7B:2B:FD:04:9D:5C:C3:97:60
Certificate issuer:       /CN=e76a71f6ba93f6cf47eb317b2bfd049d5cc39760
Certificate serial:       01974E5770BAC5A06D3C3ECD0ED25C994ED9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
Manifest number:          098B
Signing time:             Sun 08 Jun 2025 07:00:42 +0000
Manifest this update:     Sun 08 Jun 2025 07:00:42 +0000
Manifest next update:     Mon 09 Jun 2025 07:00:42 +0000
Files and hashes:         1: 52px9rqT9s9H6zF7K_0EnVzDl2A.crl (hash: zPylgZIWWnycKgqKE1dXRNVPAtVNPYBf93Im1jneGUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 07:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:57:70:ba:c5:a0:6d:3c:3e:cd:0e:d2:5c:99:4e:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e76a71f6ba93f6cf47eb317b2bfd049d5cc39760
        Validity
            Not Before: Jun  8 07:00:42 2025 GMT
            Not After : Jun  9 07:00:42 2025 GMT
        Subject: CN=51b74199a533d698c8c17a6d86c9bd75121459a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2c:dc:52:99:8e:36:97:06:0e:20:7e:0e:b3:
                    36:64:5f:4a:1f:e6:3c:c1:fb:96:9f:36:4a:90:82:
                    bf:b9:a8:13:d3:48:8b:b8:36:32:1c:19:a0:0e:fd:
                    60:d7:51:c7:c0:cb:c9:26:3e:62:43:8a:8c:c3:39:
                    5a:d0:0a:b8:1d:e6:02:b5:9f:2c:46:83:c4:47:32:
                    dc:6e:d3:b3:5c:14:67:a7:45:33:13:5e:89:97:b3:
                    d8:06:d3:8a:7a:2d:59:dc:f1:1f:21:3b:77:84:7b:
                    8b:2b:fa:56:52:7b:4f:f9:d7:a4:cc:50:0b:4c:dd:
                    ab:20:28:75:fd:8c:71:51:33:c7:4f:89:36:65:01:
                    f3:aa:ed:c9:6e:38:f3:a4:8d:16:0d:66:08:37:67:
                    fc:5d:00:dd:f7:5e:2a:64:e3:6e:4f:a0:a4:02:ab:
                    2d:0d:b6:9c:81:89:c3:c2:c3:5b:a1:6c:8c:c2:97:
                    94:6a:6c:ed:f9:7d:bb:c9:d3:4d:b0:52:db:01:bd:
                    e8:d4:7c:cb:11:95:e8:65:89:1d:70:05:d5:f3:9c:
                    0e:df:8d:52:c0:fb:94:8f:df:6a:9a:2c:96:b7:92:
                    bd:16:5b:53:bc:90:bb:8b:2f:8a:81:6c:61:99:ba:
                    d7:4f:ce:2a:5a:b8:97:c8:83:8c:b8:16:46:c9:83:
                    39:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B7:41:99:A5:33:D6:98:C8:C1:7A:6D:86:C9:BD:75:12:14:59:A3
            X509v3 Authority Key Identifier:
                keyid:E7:6A:71:F6:BA:93:F6:CF:47:EB:31:7B:2B:FD:04:9D:5C:C3:97:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:5a:07:f7:df:56:43:31:53:3e:ca:00:fb:28:2c:40:b6:79:
         76:35:81:d3:5a:b2:b8:b5:5e:1d:b8:40:d3:ff:4a:74:02:23:
         34:3b:88:da:4c:98:62:0a:02:19:ca:63:0f:cf:14:ac:f7:6b:
         72:34:e9:5d:36:9b:89:8e:16:a4:1e:03:86:6d:97:ba:15:b9:
         89:07:18:a1:e5:22:18:be:fa:27:47:7b:5a:ee:cd:88:9d:dc:
         27:64:1e:15:62:c7:10:48:ec:28:18:5a:fe:36:b5:db:df:51:
         78:c0:11:93:43:d4:50:dc:3d:28:01:fe:e9:b5:fe:cf:02:fa:
         66:77:7d:ed:a0:83:bb:3c:3a:29:8e:c0:31:d0:e6:37:55:5a:
         96:6c:0c:20:e9:af:13:9b:75:8b:1b:bf:e8:7d:33:95:20:64:
         7c:32:b7:75:4b:a0:d7:f1:0d:c0:ef:3a:bc:73:cd:b5:7f:31:
         9f:72:dd:4a:58:27:e8:30:32:90:22:5d:6f:b1:ed:f7:bd:17:
         a2:f4:dc:23:09:bc:fe:e3:ce:d6:7f:6f:40:42:a5:8a:21:56:
         32:42:1b:c2:38:36:bf:5c:ad:3e:ea:20:7a:d6:c2:64:ce:8c:
         f9:01:79:81:de:36:00:c2:73:f5:a2:91:a0:92:4e:7d:dd:2a:
         51:78:6f:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOV3C6xaBtPD7NDtJcmU7ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NmE3MWY2YmE5M2Y2Y2Y0N2ViMzE3YjJiZmQwNDlkNWNj
Mzk3NjAwHhcNMjUwNjA4MDcwMDQyWhcNMjUwNjA5MDcwMDQyWjAzMTEwLwYDVQQD
Eyg1MWI3NDE5OWE1MzNkNjk4YzhjMTdhNmQ4NmM5YmQ3NTEyMTQ1OWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSzcUpmONpcGDiB+DrM2ZF9KH+Y8
wfuWnzZKkIK/uagT00iLuDYyHBmgDv1g11HHwMvJJj5iQ4qMwzla0Aq4HeYCtZ8s
RoPERzLcbtOzXBRnp0UzE16Jl7PYBtOKei1Z3PEfITt3hHuLK/pWUntP+dekzFAL
TN2rICh1/YxxUTPHT4k2ZQHzqu3JbjjzpI0WDWYIN2f8XQDd914qZONuT6CkAqst
DbacgYnDwsNboWyMwpeUamzt+X27ydNNsFLbAb3o1HzLEZXoZYkdcAXV85wO341S
wPuUj99qmiyWt5K9FltTvJC7iy+KgWxhmbrXT84qWriXyIOMuBZGyYM5dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFG3QZmlM9aYyMF6bYbJvXUSFFmjMB8GA1UdIwQY
MBaAFOdqcfa6k/bPR+sxeyv9BJ1cw5dgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTJweDlycVQ5czlINnpGN0tfMEVuVnpEbDJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8yZjY5NDQtYjFmNy00OWJiLWJmZTct
YTM5MGYzY2UzYTU2LzEvNTJweDlycVQ5czlINnpGN0tfMEVuVnpEbDJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS8yZjY5NDQtYjFmNy00OWJiLWJmZTctYTM5MGYzY2UzYTU2
LzEvNTJweDlycVQ5czlINnpGN0tfMEVuVnpEbDJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWVoH999W
QzFTPsoA+ygsQLZ5djWB01qyuLVeHbhA0/9KdAIjNDuI2kyYYgoCGcpjD88UrPdr
cjTpXTabiY4WpB4Dhm2XuhW5iQcYoeUiGL76J0d7Wu7NiJ3cJ2QeFWLHEEjsKBha
/ja1299ReMARk0PUUNw9KAH+6bX+zwL6Znd97aCDuzw6KY7AMdDmN1ValmwMIOmv
E5t1ixu/6H0zlSBkfDK3dUug1/ENwO86vHPNtX8xn3LdSlgn6DAykCJdb7Ht970X
ovTcIwm8/uPO1n9vQEKliiFWMkIbwjg2v1ytPuogetbCZM6M+QF5gd42AMJz9aKR
oJJOfd0qUXhvcw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 14:48:37 2025 by rpki-client