Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
File:                     7uTEl10mDZew0zxNbNDVh_EMIqA.mft (raw, json)
Hash identifier:          LvmzbzpNit4aL2EDmJpIeHuV2Gd+9KwY6ZzaM4X38p0=
Subject key identifier:   E1:A0:4D:43:64:0F:52:81:CD:6B:B5:03:4B:5A:1A:8C:ED:AF:5E:B5
Authority key identifier: EE:E4:C4:97:5D:26:0D:97:B0:D3:3C:4D:6C:D0:D5:87:F1:0C:22:A0
Certificate issuer:       /CN=eee4c4975d260d97b0d33c4d6cd0d587f10c22a0
Certificate serial:       01965914E5AEE2C7B56E8E918F8E648D2CCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
Manifest number:          14ED
Signing time:             Mon 21 Apr 2025 16:01:03 +0000
Manifest this update:     Mon 21 Apr 2025 16:01:03 +0000
Manifest next update:     Tue 22 Apr 2025 16:01:03 +0000
Files and hashes:         1: 7uTEl10mDZew0zxNbNDVh_EMIqA.crl (hash: QgAhmq6WcD5wBq7c7NALwjzFdM/6mwj90nACqmCYRg8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 13:46:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:59:14:e5:ae:e2:c7:b5:6e:8e:91:8f:8e:64:8d:2c:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eee4c4975d260d97b0d33c4d6cd0d587f10c22a0
        Validity
            Not Before: Apr 21 16:01:03 2025 GMT
            Not After : Apr 22 16:01:03 2025 GMT
        Subject: CN=e1a04d43640f5281cd6bb5034b5a1a8cedaf5eb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4e:ec:00:6a:93:23:be:49:b5:e7:fd:13:d4:
                    ad:ee:b7:4b:05:a6:56:87:d6:05:ed:2e:fd:8f:3d:
                    7e:e0:99:15:a3:f0:19:d4:a1:b6:90:4b:f9:22:01:
                    e9:61:48:5c:b6:fa:f9:36:52:da:f8:72:1d:26:30:
                    dd:27:6e:4f:1e:ee:d9:b2:6c:4f:71:63:5a:97:7e:
                    4e:72:96:b7:af:f8:07:19:eb:53:64:ec:b4:af:e4:
                    af:04:be:82:5c:c7:f0:58:e8:f9:3a:84:0f:d7:44:
                    30:f2:82:81:69:3c:4f:3e:fd:74:9c:e5:f0:63:e1:
                    f4:a9:06:6c:d5:3a:33:81:48:de:cc:19:40:26:45:
                    2e:05:1e:fe:57:54:f4:55:2e:17:09:a7:78:b0:02:
                    56:dc:11:c9:91:85:06:14:59:57:c0:b5:25:d3:76:
                    45:ad:36:5a:b2:6b:9f:25:d1:d0:9a:ba:ad:59:cb:
                    6e:14:82:05:0a:ad:62:ca:e9:ca:3c:1c:71:49:8e:
                    dc:85:f2:dd:ba:d9:bb:52:9e:74:71:0d:2c:89:ef:
                    cd:f1:87:91:8b:3e:9d:b1:0f:d6:bc:7d:1c:3a:3e:
                    79:1a:ee:68:61:d0:9c:63:a2:2e:9d:8f:a5:b1:5d:
                    1a:47:43:4e:d0:99:dd:df:d0:59:66:b8:f1:38:e4:
                    e9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A0:4D:43:64:0F:52:81:CD:6B:B5:03:4B:5A:1A:8C:ED:AF:5E:B5
            X509v3 Authority Key Identifier:
                keyid:EE:E4:C4:97:5D:26:0D:97:B0:D3:3C:4D:6C:D0:D5:87:F1:0C:22:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:10:51:ff:1f:af:39:91:81:6b:80:02:41:0a:4b:98:63:67:
         43:f1:00:b1:39:0d:29:c9:be:ea:36:1b:41:21:8c:c9:0e:ac:
         a9:21:0e:88:d1:66:09:d1:3e:3b:bd:12:df:a8:d6:04:d8:e7:
         c6:4e:fa:d5:4d:a8:5e:ab:2d:f1:14:a5:dc:e2:34:f1:9d:3b:
         dc:0d:0e:a3:f6:9d:d4:e3:7d:f0:07:ab:25:4a:e0:8d:b7:eb:
         05:b2:3f:13:9e:8b:cb:b1:76:42:76:0f:41:dd:91:b7:0c:33:
         43:48:e8:9a:56:3a:fe:8b:4e:4b:ac:75:ba:0c:a4:ac:c5:d2:
         8f:66:9d:70:a3:05:1e:32:99:cd:96:e7:2d:3a:26:9a:87:38:
         62:7b:61:d8:3d:b9:cd:4d:38:7e:ef:28:34:b7:ff:40:fb:3e:
         82:25:4b:33:b4:9c:57:e3:d5:a7:6e:ca:f2:80:e5:f3:38:8c:
         27:df:7b:b5:3d:b4:1f:12:1b:3f:64:bc:af:88:cb:ac:d2:32:
         d7:01:65:26:c2:20:0f:cb:c3:1b:66:ec:a6:ba:69:d5:31:47:
         16:66:34:79:a5:11:10:07:76:dd:a8:6e:ba:e9:1d:eb:a2:fd:
         a1:6a:43:57:8a:b8:8e:7c:d9:21:4f:28:77:9b:b5:18:ea:3c:
         d6:c7:6e:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZFOWu4se1bo6Rj45kjSzPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZTRjNDk3NWQyNjBkOTdiMGQzM2M0ZDZjZDBkNTg3ZjEw
YzIyYTAwHhcNMjUwNDIxMTYwMTAzWhcNMjUwNDIyMTYwMTAzWjAzMTEwLwYDVQQD
EyhlMWEwNGQ0MzY0MGY1MjgxY2Q2YmI1MDM0YjVhMWE4Y2VkYWY1ZWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA307sAGqTI75Jtef9E9St7rdLBaZW
h9YF7S79jz1+4JkVo/AZ1KG2kEv5IgHpYUhctvr5NlLa+HIdJjDdJ25PHu7ZsmxP
cWNal35Ocpa3r/gHGetTZOy0r+SvBL6CXMfwWOj5OoQP10Qw8oKBaTxPPv10nOXw
Y+H0qQZs1TozgUjezBlAJkUuBR7+V1T0VS4XCad4sAJW3BHJkYUGFFlXwLUl03ZF
rTZasmufJdHQmrqtWctuFIIFCq1iyunKPBxxSY7chfLdutm7Up50cQ0sie/N8YeR
iz6dsQ/WvH0cOj55Gu5oYdCcY6IunY+lsV0aR0NO0Jnd39BZZrjxOOTpZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOGgTUNkD1KBzWu1A0taGoztr161MB8GA1UdIwQY
MBaAFO7kxJddJg2XsNM8TWzQ1YfxDCKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3VURWwxMG1EWmV3MHp4TmJORFZoX0VNSXFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lODRiZmMtOGEzNi00NDA5LThkY2Mt
NDMyZDNmYjBmYzIyLzEvN3VURWwxMG1EWmV3MHp4TmJORFZoX0VNSXFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9lODRiZmMtOGEzNi00NDA5LThkY2MtNDMyZDNmYjBmYzIy
LzEvN3VURWwxMG1EWmV3MHp4TmJORFZoX0VNSXFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvBBR/x+v
OZGBa4ACQQpLmGNnQ/EAsTkNKcm+6jYbQSGMyQ6sqSEOiNFmCdE+O70S36jWBNjn
xk761U2oXqst8RSl3OI08Z073A0Oo/ad1ON98AerJUrgjbfrBbI/E56Ly7F2QnYP
Qd2RtwwzQ0jomlY6/otOS6x1ugykrMXSj2adcKMFHjKZzZbnLTommoc4Ynth2D25
zU04fu8oNLf/QPs+giVLM7ScV+PVp27K8oDl8ziMJ997tT20HxIbP2S8r4jLrNIy
1wFlJsIgD8vDG2bsprpp1TFHFmY0eaUREAd23ahuuukd66L9oWpDV4q4jnzZIU8o
d5u1GOo81sdulg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 21:18:10 2025 by rpki-client