Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft
File:                     e6Ix0pxKI7PpixSBPawJg-OjQFk.mft (raw, json)
Hash identifier:          /oz3LDVKoASsnN8WiuTor9E49jbROVE1K6i8iX0zyyw=
Subject key identifier:   35:BE:6E:EF:58:D2:3C:2C:24:8F:D0:6A:CB:68:04:EE:BA:69:D6:F6
Authority key identifier: 7B:A2:31:D2:9C:4A:23:B3:E9:8B:14:81:3D:AC:09:83:E3:A3:40:59
Certificate issuer:       /CN=7ba231d29c4a23b3e98b14813dac0983e3a34059
Certificate serial:       019644E8B92314855FDE0FD89D65A0B54991
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6Ix0pxKI7PpixSBPawJg-OjQFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft
Manifest number:          04CD
Signing time:             Thu 17 Apr 2025 18:00:24 +0000
Manifest this update:     Thu 17 Apr 2025 18:00:24 +0000
Manifest next update:     Fri 18 Apr 2025 18:00:24 +0000
Files and hashes:         1: e6Ix0pxKI7PpixSBPawJg-OjQFk.crl (hash: haxyufOvOe3ByQPBUxL63o0UZ6r9Qu3na78e7jcLJMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e6Ix0pxKI7PpixSBPawJg-OjQFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:e8:b9:23:14:85:5f:de:0f:d8:9d:65:a0:b5:49:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba231d29c4a23b3e98b14813dac0983e3a34059
        Validity
            Not Before: Apr 17 18:00:24 2025 GMT
            Not After : Apr 18 18:00:24 2025 GMT
        Subject: CN=35be6eef58d23c2c248fd06acb6804eeba69d6f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f9:b3:6b:48:15:bd:2f:7d:b2:e0:1b:91:8b:
                    76:b1:35:53:35:99:68:37:2c:e9:67:b2:f7:2f:42:
                    95:bb:42:13:04:0c:47:c4:43:9a:d6:97:4e:82:9c:
                    a5:12:7a:6a:bc:5a:6d:fd:0f:8a:a6:3c:72:74:a7:
                    d4:fb:18:ab:3a:84:50:b1:d6:fa:3c:ac:e6:7b:14:
                    b9:c3:4d:f9:f7:9c:97:9b:6a:90:07:93:c6:ba:fc:
                    a7:70:4e:e3:a5:c9:65:0e:52:bd:a0:48:39:52:74:
                    ee:2f:5f:10:85:2a:7c:d2:19:b3:ca:56:68:31:42:
                    35:84:7c:26:d9:67:8a:cc:df:6f:bb:3c:d8:cf:59:
                    a5:47:4d:75:bf:9a:d4:32:b9:ae:e3:3d:2e:ed:8b:
                    92:9d:08:1f:3e:b6:0e:f2:ec:9c:31:60:06:d7:9e:
                    7e:b5:ee:5e:e9:3a:ea:b2:fb:cb:30:e7:da:e3:c2:
                    1c:2b:cb:89:b0:b2:02:32:8b:15:68:bb:bb:f0:2a:
                    64:33:13:23:d1:54:69:c9:f8:c5:ec:53:3b:58:aa:
                    a8:07:27:b6:e0:26:d9:00:99:98:b0:74:de:d7:dd:
                    6a:af:ad:ab:9c:5f:14:e6:d9:8a:2c:74:12:c1:25:
                    fc:dc:ee:6e:6f:00:d6:a1:17:9a:6f:ae:8c:66:b1:
                    a4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:BE:6E:EF:58:D2:3C:2C:24:8F:D0:6A:CB:68:04:EE:BA:69:D6:F6
            X509v3 Authority Key Identifier:
                keyid:7B:A2:31:D2:9C:4A:23:B3:E9:8B:14:81:3D:AC:09:83:E3:A3:40:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6Ix0pxKI7PpixSBPawJg-OjQFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:b6:db:40:c8:30:dc:e2:4d:04:7d:0c:b1:84:34:34:04:98:
         3c:e5:73:61:b4:b0:aa:a7:73:87:c8:2d:a1:c8:28:97:60:a3:
         c3:62:a0:0a:54:6e:5c:2c:05:90:30:b9:20:f5:9c:f8:ac:eb:
         b4:df:e6:45:aa:37:4a:42:7a:af:58:12:d6:c9:3a:e1:07:34:
         ff:37:33:fa:ec:44:02:10:a2:42:d0:02:b1:62:bb:8e:fe:46:
         b2:f1:51:bf:22:e8:e5:b5:d5:1b:e6:ed:7d:2b:cd:dc:fa:09:
         b8:4f:59:b6:5b:5d:2e:30:d9:bb:bd:d0:b5:ab:f9:0d:8e:73:
         03:ad:a9:a5:96:f4:e2:3c:4d:23:86:02:89:3b:e0:47:7b:3a:
         9c:e1:9f:49:d5:3b:e6:95:f4:97:10:83:40:dd:78:99:0a:42:
         c9:24:5d:df:23:2c:19:9d:50:5c:28:d2:53:d9:2e:36:e4:3a:
         28:57:b6:3c:d6:58:9f:03:ef:e7:c6:9a:55:3f:8d:0c:30:88:
         44:32:92:7f:a7:dd:82:62:92:36:fc:05:68:89:98:5c:3b:f1:
         9d:16:85:07:f9:f5:04:78:42:b3:9b:c5:3d:4a:41:f4:69:68:
         13:e1:be:32:72:d8:16:0a:00:ef:e2:17:b5:82:5e:58:89:f8:
         88:54:d4:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZE6LkjFIVf3g/YnWWgtUmRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiYTIzMWQyOWM0YTIzYjNlOThiMTQ4MTNkYWMwOTgzZTNh
MzQwNTkwHhcNMjUwNDE3MTgwMDI0WhcNMjUwNDE4MTgwMDI0WjAzMTEwLwYDVQQD
EygzNWJlNmVlZjU4ZDIzYzJjMjQ4ZmQwNmFjYjY4MDRlZWJhNjlkNmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPmza0gVvS99suAbkYt2sTVTNZlo
NyzpZ7L3L0KVu0ITBAxHxEOa1pdOgpylEnpqvFpt/Q+KpjxydKfU+xirOoRQsdb6
PKzmexS5w03595yXm2qQB5PGuvyncE7jpcllDlK9oEg5UnTuL18QhSp80hmzylZo
MUI1hHwm2WeKzN9vuzzYz1mlR011v5rUMrmu4z0u7YuSnQgfPrYO8uycMWAG155+
te5e6TrqsvvLMOfa48IcK8uJsLICMosVaLu78CpkMxMj0VRpyfjF7FM7WKqoBye2
4CbZAJmYsHTe191qr62rnF8U5tmKLHQSwSX83O5ubwDWoReab66MZrGkHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDW+bu9Y0jwsJI/QastoBO66adb2MB8GA1UdIwQY
MBaAFHuiMdKcSiOz6YsUgT2sCYPjo0BZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTZJeDBweEtJN1BwaXhTQlBhd0pnLU9qUUZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82NWIxYWUtN2Q5Zi00ZDcwLTlmOGIt
NTEyNGU5NTE1YjE0LzEvZTZJeDBweEtJN1BwaXhTQlBhd0pnLU9qUUZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS82NWIxYWUtN2Q5Zi00ZDcwLTlmOGItNTEyNGU5NTE1YjE0
LzEvZTZJeDBweEtJN1BwaXhTQlBhd0pnLU9qUUZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADbbbQMgw
3OJNBH0MsYQ0NASYPOVzYbSwqqdzh8gtocgol2Cjw2KgClRuXCwFkDC5IPWc+Kzr
tN/mRao3SkJ6r1gS1sk64Qc0/zcz+uxEAhCiQtACsWK7jv5GsvFRvyLo5bXVG+bt
fSvN3PoJuE9ZtltdLjDZu73Qtav5DY5zA62ppZb04jxNI4YCiTvgR3s6nOGfSdU7
5pX0lxCDQN14mQpCySRd3yMsGZ1QXCjSU9kuNuQ6KFe2PNZYnwPv58aaVT+NDDCI
RDKSf6fdgmKSNvwFaImYXDvxnRaFB/n1BHhCs5vFPUpB9GloE+G+MnLYFgoA7+IX
tYJeWIn4iFTUdQ==
-----END CERTIFICATE-----
Generated at Fri Apr 18 03:22:33 2025 by rpki-client