Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
File:                     9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft (raw, json)
Hash identifier:          DfkEMwgxJskKE1JGp/o3M3xWf0E1CJUs7bGRUUz3n4I=
Subject key identifier:   CF:DA:8B:DB:A3:D3:6C:A8:22:BC:BC:78:C5:B5:79:7D:41:75:C4:F5
Authority key identifier: F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24
Certificate issuer:       /CN=f4b207ef8024244bbb4a0106af19270150c9f624
Certificate serial:       01965E039B32F423BE0C7CBEF6478B1069C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
Manifest number:          0479
Signing time:             Tue 22 Apr 2025 15:00:16 +0000
Manifest this update:     Tue 22 Apr 2025 15:00:16 +0000
Manifest next update:     Wed 23 Apr 2025 15:00:16 +0000
Files and hashes:         1: 9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl (hash: 4ooyNVKtKaUGD7uA5KtrB7gAWvGZM/e9hEhgHpVSFlc=)
                          2: zYg006i-1WUWweE30u-SYPbT9Pw.roa (hash: Z8k/zZnitgyMfHbzB0hfDTUSf1BlauNSPllDbsEjoIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 14:46:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5e:03:9b:32:f4:23:be:0c:7c:be:f6:47:8b:10:69:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b207ef8024244bbb4a0106af19270150c9f624
        Validity
            Not Before: Apr 22 15:00:16 2025 GMT
            Not After : Apr 23 15:00:16 2025 GMT
        Subject: CN=cfda8bdba3d36ca822bcbc78c5b5797d4175c4f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f3:3b:e6:27:3e:90:a3:c1:4f:1b:8e:fb:e6:
                    38:b5:66:c0:54:aa:e8:e8:13:cc:f6:24:4b:e9:16:
                    a6:06:59:c6:25:2a:21:28:8b:c4:4d:32:ea:3b:f7:
                    40:40:6b:ea:3e:e2:e7:a0:47:f7:94:be:c2:1c:cd:
                    db:3c:97:9c:dc:ad:54:73:35:fd:88:df:64:34:c1:
                    b8:5d:e8:ea:ae:f8:fa:f7:69:b3:6f:b6:e5:80:5d:
                    2c:ec:7f:48:83:f9:88:0e:ef:7c:7a:c9:b8:57:1d:
                    56:b6:d9:ab:fc:ab:d4:8d:d6:22:27:74:7a:48:2c:
                    d7:9d:a7:ae:18:3a:bf:be:c0:99:fc:f4:d2:61:80:
                    0d:40:1b:2a:ec:cc:03:08:7e:06:b9:1b:bf:ad:95:
                    66:f0:fe:bc:97:16:68:23:14:e0:70:0f:10:37:d6:
                    13:24:eb:ee:7f:74:4e:cd:89:9e:76:36:bc:af:68:
                    7a:e9:4d:dc:c3:a2:6f:12:4b:96:d5:25:2a:96:7a:
                    b1:e9:73:77:ca:64:7f:59:61:38:50:e5:8c:e3:d6:
                    b6:dc:90:2c:9a:b0:af:2a:04:36:8c:f7:b2:35:b6:
                    2b:25:ca:e1:6d:b5:90:ce:58:a0:0c:0d:e2:5d:07:
                    54:c9:88:da:98:f2:e3:14:1a:24:04:42:16:26:fd:
                    dc:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:DA:8B:DB:A3:D3:6C:A8:22:BC:BC:78:C5:B5:79:7D:41:75:C4:F5
            X509v3 Authority Key Identifier:
                keyid:F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:9a:7f:5f:db:3c:5c:5c:5d:28:04:d8:3a:b1:30:eb:64:34:
         ac:c7:ef:14:0c:2c:62:e4:f7:0c:16:4a:80:e7:65:8c:c3:2a:
         95:47:15:f0:0c:2f:5a:ea:40:88:6f:6f:fc:fb:a4:6d:0f:82:
         a1:1d:71:04:44:6b:7f:03:51:0a:df:f5:9f:7a:2a:43:ab:ec:
         c2:2a:6a:7c:ed:c7:7b:38:8a:6b:16:37:04:ed:2e:23:fd:1e:
         61:18:fc:c6:82:8d:13:c3:92:a4:bc:19:59:b4:3c:1d:27:df:
         c9:83:e9:67:99:b0:39:e0:53:bd:78:20:3e:0b:ef:20:4f:c1:
         61:70:e6:d7:33:78:49:c9:f8:d1:f8:4a:95:b6:92:59:13:1e:
         25:c0:68:e0:29:03:f7:28:3e:f1:9b:f1:00:ce:9c:b9:74:53:
         47:fc:dd:59:78:41:3a:84:6d:b3:9b:c7:53:e0:e3:6f:eb:cc:
         27:e6:ae:40:03:af:f4:55:15:4c:99:a2:90:48:83:82:dc:19:
         21:59:b6:e0:c4:f4:26:15:3d:b7:21:a1:85:7e:e6:a6:ed:1d:
         f6:0e:9e:56:63:1d:71:e9:fb:cf:2a:ed:89:9b:cc:2c:3c:d0:
         80:a2:8a:f0:30:0b:14:a7:dd:a5:3c:86:e8:ce:47:c4:12:6b:
         2a:b8:9e:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZeA5sy9CO+DHy+9keLEGnGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YjIwN2VmODAyNDI0NGJiYjRhMDEwNmFmMTkyNzAxNTBj
OWY2MjQwHhcNMjUwNDIyMTUwMDE2WhcNMjUwNDIzMTUwMDE2WjAzMTEwLwYDVQQD
EyhjZmRhOGJkYmEzZDM2Y2E4MjJiY2JjNzhjNWI1Nzk3ZDQxNzVjNGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvM75ic+kKPBTxuO++Y4tWbAVKro
6BPM9iRL6RamBlnGJSohKIvETTLqO/dAQGvqPuLnoEf3lL7CHM3bPJec3K1UczX9
iN9kNMG4Xejqrvj692mzb7blgF0s7H9Ig/mIDu98esm4Vx1Wttmr/KvUjdYiJ3R6
SCzXnaeuGDq/vsCZ/PTSYYANQBsq7MwDCH4GuRu/rZVm8P68lxZoIxTgcA8QN9YT
JOvuf3ROzYmedja8r2h66U3cw6JvEkuW1SUqlnqx6XN3ymR/WWE4UOWM49a23JAs
mrCvKgQ2jPeyNbYrJcrhbbWQzligDA3iXQdUyYjamPLjFBokBEIWJv3cbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/ai9uj02yoIry8eMW1eX1BdcT1MB8GA1UdIwQY
MBaAFPSyB++AJCRLu0oBBq8ZJwFQyfYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUxJSDc0QWtKRXU3U2dFR3J4a25BVkRKOWlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS84YmYyNTYtZDk2Zi00NTAwLWIxM2Mt
MzVlMDY5MzQ4ZWIzLzEvOUxJSDc0QWtKRXU3U2dFR3J4a25BVkRKOWlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS84YmYyNTYtZDk2Zi00NTAwLWIxM2MtMzVlMDY5MzQ4ZWIz
LzEvOUxJSDc0QWtKRXU3U2dFR3J4a25BVkRKOWlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJp/X9s8
XFxdKATYOrEw62Q0rMfvFAwsYuT3DBZKgOdljMMqlUcV8AwvWupAiG9v/PukbQ+C
oR1xBERrfwNRCt/1n3oqQ6vswipqfO3HeziKaxY3BO0uI/0eYRj8xoKNE8OSpLwZ
WbQ8HSffyYPpZ5mwOeBTvXggPgvvIE/BYXDm1zN4Scn40fhKlbaSWRMeJcBo4CkD
9yg+8ZvxAM6cuXRTR/zdWXhBOoRts5vHU+Djb+vMJ+auQAOv9FUVTJmikEiDgtwZ
IVm24MT0JhU9tyGhhX7mpu0d9g6eVmMdcen7zyrtiZvMLDzQgKKK8DALFKfdpTyG
6M5HxBJrKrieHA==
-----END CERTIFICATE-----
Generated at Tue Apr 22 20:56:48 2025 by rpki-client