Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
File:                     eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft (raw, json)
Hash identifier:          lLXV4Eyl9zaqPKPlD8RjK6vRfPA4rxr4bCM6h+rqfSs=
Subject key identifier:   D6:38:BA:13:70:2F:CF:E5:E2:45:4A:B9:0F:C5:29:80:9A:83:4B:8A
Authority key identifier: 7B:27:11:15:09:10:DC:D1:B1:C7:AB:53:14:48:BD:83:21:FC:1C:36
Certificate issuer:       /CN=7b2711150910dcd1b1c7ab531448bd8321fc1c36
Certificate serial:       019511D9BE5BF9B30CBC25EE1295A44ACC07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
Manifest number:          033D
Signing time:             Mon 17 Feb 2025 03:00:37 +0000
Manifest this update:     Mon 17 Feb 2025 03:00:37 +0000
Manifest next update:     Tue 18 Feb 2025 03:00:37 +0000
Files and hashes:         1: eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl (hash: w+hM1gBJk/TP1Yo8swK3Edj8eirO8/hR1varY5HbdOg=)
                          2: gP8qEhtADxz-fNyyU3vcu8NYBMU.roa (hash: UQJK4mMNNX6B898sPio2JOjeNiXhgW4l71UxZw7LEXo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:d9:be:5b:f9:b3:0c:bc:25:ee:12:95:a4:4a:cc:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b2711150910dcd1b1c7ab531448bd8321fc1c36
        Validity
            Not Before: Feb 17 03:00:37 2025 GMT
            Not After : Feb 18 03:00:37 2025 GMT
        Subject: CN=d638ba13702fcfe5e2454ab90fc529809a834b8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:83:9e:04:92:28:05:e0:93:88:25:24:e1:d9:
                    e2:2a:2c:b3:84:b1:3a:4e:13:77:5a:f1:ee:50:ef:
                    2f:78:20:41:55:5f:4e:51:19:5c:91:73:4c:b1:9c:
                    ca:da:af:b7:68:1e:4d:57:d9:47:be:62:54:22:51:
                    e6:a8:da:d6:48:1b:2f:8f:b9:03:6c:a4:35:75:47:
                    5c:6b:e1:97:8c:28:d6:b0:fa:6c:41:ec:93:07:b6:
                    76:a2:ed:a4:bf:a9:f5:d0:61:d8:3d:bd:82:88:2f:
                    aa:60:13:01:07:fa:41:0e:4c:0c:f6:4f:29:fa:5c:
                    83:d1:5a:9d:e4:18:bc:d2:99:73:df:97:b5:4b:e5:
                    96:45:44:6c:97:1e:9d:6c:0f:e8:ae:20:07:af:e2:
                    e2:82:cf:7a:28:2c:6d:43:8f:8d:8e:14:70:fd:df:
                    91:f1:dc:f6:3f:56:77:34:c4:f4:39:9e:bc:a9:2d:
                    6c:11:6a:b1:96:bd:ed:17:c8:38:a7:38:a0:06:50:
                    3e:47:d0:59:32:98:a3:92:52:db:67:79:88:97:60:
                    73:f9:76:54:50:8d:02:70:13:1b:ef:d3:6c:e4:71:
                    7e:0a:7f:bd:4a:18:f9:de:3f:9f:de:db:e6:d8:2d:
                    93:bf:e9:ad:4a:58:50:b5:83:71:ec:e1:ea:5e:c2:
                    95:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:38:BA:13:70:2F:CF:E5:E2:45:4A:B9:0F:C5:29:80:9A:83:4B:8A
            X509v3 Authority Key Identifier:
                keyid:7B:27:11:15:09:10:DC:D1:B1:C7:AB:53:14:48:BD:83:21:FC:1C:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:8e:64:4d:be:2e:db:e4:e1:db:c1:d0:e8:3d:d5:70:e8:cd:
         06:85:9b:89:e9:ac:68:74:94:82:bd:9f:7a:27:64:e3:6a:31:
         18:7e:14:db:cd:fb:14:f9:c9:d2:62:7c:fd:81:60:ec:16:dd:
         94:f0:c7:b3:81:88:37:26:90:66:d5:31:c0:01:ac:4a:e9:8a:
         91:23:87:81:70:c1:4a:61:57:02:82:6b:a0:fc:92:bb:17:8e:
         cf:f5:77:09:b0:cd:ae:13:7e:13:4d:55:d7:37:58:15:b3:85:
         1c:22:78:be:53:2c:12:a8:37:2a:c3:e9:fa:90:98:87:7c:10:
         d4:4b:99:b4:b7:e6:f5:fd:70:4e:1b:94:66:19:94:b1:92:76:
         ad:6e:11:67:26:0a:84:27:ef:2e:25:2c:6f:ab:0f:38:22:ca:
         8e:62:96:47:2f:1f:37:09:71:bf:22:58:0d:80:74:88:91:3c:
         15:a5:14:66:f1:f7:72:e2:03:d8:f0:a7:6b:d7:c8:e9:a0:5c:
         28:cf:4c:4b:63:6d:d3:ab:2d:33:17:f6:89:2b:45:c3:2b:f3:
         83:99:80:fe:e4:48:e4:49:a2:df:74:c4:36:ba:7f:98:85:cf:
         34:05:a5:76:45:70:da:d8:80:dd:9b:ca:2c:b6:53:29:ed:59:
         6f:30:74:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUR2b5b+bMMvCXuEpWkSswHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMjcxMTE1MDkxMGRjZDFiMWM3YWI1MzE0NDhiZDgzMjFm
YzFjMzYwHhcNMjUwMjE3MDMwMDM3WhcNMjUwMjE4MDMwMDM3WjAzMTEwLwYDVQQD
EyhkNjM4YmExMzcwMmZjZmU1ZTI0NTRhYjkwZmM1Mjk4MDlhODM0YjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA74OeBJIoBeCTiCUk4dniKiyzhLE6
ThN3WvHuUO8veCBBVV9OURlckXNMsZzK2q+3aB5NV9lHvmJUIlHmqNrWSBsvj7kD
bKQ1dUdca+GXjCjWsPpsQeyTB7Z2ou2kv6n10GHYPb2CiC+qYBMBB/pBDkwM9k8p
+lyD0Vqd5Bi80plz35e1S+WWRURslx6dbA/oriAHr+Ligs96KCxtQ4+NjhRw/d+R
8dz2P1Z3NMT0OZ68qS1sEWqxlr3tF8g4pzigBlA+R9BZMpijklLbZ3mIl2Bz+XZU
UI0CcBMb79Ns5HF+Cn+9Shj53j+f3tvm2C2Tv+mtSlhQtYNx7OHqXsKVZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNY4uhNwL8/l4kVKuQ/FKYCag0uKMB8GA1UdIwQY
MBaAFHsnERUJENzRscerUxRIvYMh/Bw2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXljUkZRa1EzTkd4eDZ0VEZFaTlneUg4SERZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9iMTE3NjQtYmU2NS00OWYxLWI0MmMt
YjdhOGI3YzEyZWVlLzEvZXljUkZRa1EzTkd4eDZ0VEZFaTlneUg4SERZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9iMTE3NjQtYmU2NS00OWYxLWI0MmMtYjdhOGI3YzEyZWVl
LzEvZXljUkZRa1EzTkd4eDZ0VEZFaTlneUg4SERZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHo5kTb4u
2+Th28HQ6D3VcOjNBoWbiemsaHSUgr2feidk42oxGH4U2837FPnJ0mJ8/YFg7Bbd
lPDHs4GINyaQZtUxwAGsSumKkSOHgXDBSmFXAoJroPySuxeOz/V3CbDNrhN+E01V
1zdYFbOFHCJ4vlMsEqg3KsPp+pCYh3wQ1EuZtLfm9f1wThuUZhmUsZJ2rW4RZyYK
hCfvLiUsb6sPOCLKjmKWRy8fNwlxvyJYDYB0iJE8FaUUZvH3cuID2PCna9fI6aBc
KM9MS2Nt06stMxf2iStFwyvzg5mA/uRI5Emi33TENrp/mIXPNAWldkVw2tiA3ZvK
LLZTKe1ZbzB0RA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:25 2025 by rpki-client