Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.mft
File:                     J4N5A1CHD9tbJnS8YcjY_WLXcZs.mft (raw, json)
Hash identifier:          rlg9ajxw7+53lMQQpfsGdDbYN8EkByAwkcwKTpZzbDw=
Subject key identifier:   43:24:CF:60:D5:AA:9E:7B:8A:70:C0:58:1B:46:8C:DC:1A:5B:04:68
Authority key identifier: 27:83:79:03:50:87:0F:DB:5B:26:74:BC:61:C8:D8:FD:62:D7:71:9B
Certificate issuer:       /CN=2783790350870fdb5b2674bc61c8d8fd62d7719b
Certificate serial:       0197499F052CABE7DEC682D950D7833F3741
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J4N5A1CHD9tbJnS8YcjY_WLXcZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.mft
Manifest number:          05D9
Signing time:             Sat 07 Jun 2025 09:00:47 +0000
Manifest this update:     Sat 07 Jun 2025 09:00:47 +0000
Manifest next update:     Sun 08 Jun 2025 09:00:47 +0000
Files and hashes:         1: J4N5A1CHD9tbJnS8YcjY_WLXcZs.crl (hash: Bbuu20o4QFiKXyOKCPq9TpDOtzcZ7IxxoLvYN3fCujc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J4N5A1CHD9tbJnS8YcjY_WLXcZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:9f:05:2c:ab:e7:de:c6:82:d9:50:d7:83:3f:37:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2783790350870fdb5b2674bc61c8d8fd62d7719b
        Validity
            Not Before: Jun  7 09:00:47 2025 GMT
            Not After : Jun  8 09:00:47 2025 GMT
        Subject: CN=4324cf60d5aa9e7b8a70c0581b468cdc1a5b0468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:21:5e:2f:f8:01:63:1f:cf:fd:0b:10:33:f9:
                    2d:2a:38:a9:e7:79:af:33:b3:d4:51:b9:e5:d5:98:
                    8c:3f:65:1b:25:83:ed:1c:6b:9e:a0:a5:9b:3f:fd:
                    38:d3:39:e3:d9:f4:d5:48:c4:ea:5f:b0:9b:8f:44:
                    48:cf:e1:e7:78:0d:bf:2f:93:2e:48:8a:6f:5a:25:
                    71:da:db:2c:cb:d9:64:fd:34:fa:78:b1:38:ec:5a:
                    80:9f:9c:6d:21:49:82:bd:fe:84:85:85:00:e9:70:
                    1e:4d:ae:77:72:c0:53:da:a0:36:37:b7:e1:49:69:
                    cb:f0:13:bc:96:1a:d6:b9:f8:a2:a4:4b:9d:89:9f:
                    87:26:6e:21:15:36:7a:ac:9b:ad:d7:a0:39:63:57:
                    85:a5:db:cf:93:00:83:d4:76:86:f3:c1:63:30:29:
                    80:18:c5:52:a9:ca:f7:33:92:2b:0c:db:5b:e5:99:
                    30:0e:4f:c8:49:c9:68:e3:6a:06:81:1f:4e:d4:d9:
                    38:fc:91:da:f8:e8:0b:1e:43:8f:b5:81:f9:0f:2f:
                    29:52:b0:e7:c7:e0:19:ab:e4:06:a7:0c:f6:ac:b4:
                    74:49:d1:ad:1c:20:cc:f6:34:e3:e6:63:88:e8:f2:
                    14:26:30:ac:a2:76:e1:e6:85:db:1d:b4:20:77:02:
                    f6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:24:CF:60:D5:AA:9E:7B:8A:70:C0:58:1B:46:8C:DC:1A:5B:04:68
            X509v3 Authority Key Identifier:
                keyid:27:83:79:03:50:87:0F:DB:5B:26:74:BC:61:C8:D8:FD:62:D7:71:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4N5A1CHD9tbJnS8YcjY_WLXcZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:17:13:9e:0b:76:55:2c:ec:c5:d0:e7:2f:35:aa:ce:fc:66:
         8d:7e:37:31:9d:3c:22:b6:a3:86:9b:76:2a:5d:a8:64:49:4b:
         d2:b4:51:48:12:bb:99:59:06:90:5c:56:80:45:b0:19:07:d5:
         07:76:05:a9:00:92:fe:ef:d3:16:45:7a:71:a0:17:78:34:b0:
         67:e8:ae:31:c1:7c:f7:9e:6d:13:fd:65:ef:39:da:9d:b9:43:
         3f:1a:69:d7:a3:ff:42:5f:2e:73:2c:ea:75:0e:aa:ca:4f:d8:
         aa:60:91:a2:e3:b7:10:55:c3:c6:ff:28:ba:de:a2:68:d4:d2:
         85:8d:23:9c:5a:44:9e:ab:b3:3a:78:fc:1b:ac:c6:95:f4:1d:
         18:df:ef:d1:cd:4e:78:0c:17:36:be:de:a3:51:07:c0:3b:76:
         35:84:1e:7c:da:f3:f6:4e:16:b8:1d:1a:46:4a:ea:33:9d:58:
         2d:ce:a3:68:00:a0:76:c5:d5:1d:76:1e:f1:bb:d2:35:75:fa:
         43:c3:6d:f6:69:1b:66:35:eb:2c:36:4b:9a:f0:a4:4e:7e:fc:
         d0:92:20:a7:a8:aa:7b:10:27:06:2c:5d:38:f1:15:b0:64:91:
         1a:17:96:11:00:53:2e:29:81:ba:77:65:e0:9a:64:c3:f5:98:
         32:f4:2e:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJnwUsq+fexoLZUNeDPzdBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ODM3OTAzNTA4NzBmZGI1YjI2NzRiYzYxYzhkOGZkNjJk
NzcxOWIwHhcNMjUwNjA3MDkwMDQ3WhcNMjUwNjA4MDkwMDQ3WjAzMTEwLwYDVQQD
Eyg0MzI0Y2Y2MGQ1YWE5ZTdiOGE3MGMwNTgxYjQ2OGNkYzFhNWIwNDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SFeL/gBYx/P/QsQM/ktKjip53mv
M7PUUbnl1ZiMP2UbJYPtHGueoKWbP/040znj2fTVSMTqX7Cbj0RIz+HneA2/L5Mu
SIpvWiVx2tssy9lk/TT6eLE47FqAn5xtIUmCvf6EhYUA6XAeTa53csBT2qA2N7fh
SWnL8BO8lhrWufiipEudiZ+HJm4hFTZ6rJut16A5Y1eFpdvPkwCD1HaG88FjMCmA
GMVSqcr3M5IrDNtb5ZkwDk/ISclo42oGgR9O1Nk4/JHa+OgLHkOPtYH5Dy8pUrDn
x+AZq+QGpwz2rLR0SdGtHCDM9jTj5mOI6PIUJjCsonbh5oXbHbQgdwL2cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMkz2DVqp57inDAWBtGjNwaWwRoMB8GA1UdIwQY
MBaAFCeDeQNQhw/bWyZ0vGHI2P1i13GbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjRONUExQ0hEOXRiSm5TOFljallfV0xYY1pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9kZDg4ZTItZDdkOS00NjdmLWI1YjQt
ZWNjNWZiYTA4MzQwLzEvSjRONUExQ0hEOXRiSm5TOFljallfV0xYY1pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9kZDg4ZTItZDdkOS00NjdmLWI1YjQtZWNjNWZiYTA4MzQw
LzEvSjRONUExQ0hEOXRiSm5TOFljallfV0xYY1pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbhcTngt2
VSzsxdDnLzWqzvxmjX43MZ08Irajhpt2Kl2oZElL0rRRSBK7mVkGkFxWgEWwGQfV
B3YFqQCS/u/TFkV6caAXeDSwZ+iuMcF8955tE/1l7znanblDPxpp16P/Ql8ucyzq
dQ6qyk/YqmCRouO3EFXDxv8out6iaNTShY0jnFpEnquzOnj8G6zGlfQdGN/v0c1O
eAwXNr7eo1EHwDt2NYQefNrz9k4WuB0aRkrqM51YLc6jaACgdsXVHXYe8bvSNXX6
Q8Nt9mkbZjXrLDZLmvCkTn780JIgp6iqexAnBixdOPEVsGSRGheWEQBTLimBundl
4Jpkw/WYMvQuRQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 17:23:35 2025 by rpki-client