Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
File:                     oVJEYml6J_56uUtqypBnkx2SEC8.mft (raw, json)
Hash identifier:          1H+8umT5SWCTEalH1DYd8X+/toeZeHGgZrFRXLabquE=
Subject key identifier:   22:E5:72:B1:54:5B:95:BE:E4:B5:D7:B2:3A:5E:5D:36:CA:1C:84:CA
Authority key identifier: A1:52:44:62:69:7A:27:FE:7A:B9:4B:6A:CA:90:67:93:1D:92:10:2F
Certificate issuer:       /CN=a1524462697a27fe7ab94b6aca9067931d92102f
Certificate serial:       0197469E952209A51B58B379AB89384AD8DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
Manifest number:          1578
Signing time:             Fri 06 Jun 2025 19:01:27 +0000
Manifest this update:     Fri 06 Jun 2025 19:01:27 +0000
Manifest next update:     Sat 07 Jun 2025 19:01:27 +0000
Files and hashes:         1: oVJEYml6J_56uUtqypBnkx2SEC8.crl (hash: yrbhYaXmqZ9laKHU9ZlwLQa79Cy0zCbCMy8rsOrq7Uo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 19:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9e:95:22:09:a5:1b:58:b3:79:ab:89:38:4a:d8:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1524462697a27fe7ab94b6aca9067931d92102f
        Validity
            Not Before: Jun  6 19:01:27 2025 GMT
            Not After : Jun  7 19:01:27 2025 GMT
        Subject: CN=22e572b1545b95bee4b5d7b23a5e5d36ca1c84ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9d:b9:6b:51:ec:02:df:e6:0e:bf:c8:e8:7d:
                    fe:5c:5e:42:d7:c1:7c:f3:e6:70:b0:60:f2:a8:e3:
                    26:8c:b0:94:d3:68:bd:4f:5f:ad:9d:71:4f:66:1e:
                    32:da:b1:fd:bd:73:53:c1:89:e0:80:6b:d5:59:72:
                    bf:7c:bf:67:99:de:65:c3:3e:94:69:cb:6a:75:a7:
                    f8:16:7b:f0:b9:1a:3a:b9:82:04:dd:3c:18:0e:d9:
                    b2:74:be:6e:92:87:3f:b3:81:3e:00:03:55:75:a7:
                    c9:6b:0d:ae:8e:aa:6d:81:98:68:5f:ee:7c:b1:c3:
                    9e:40:28:32:91:41:81:18:05:c3:d5:80:3c:6d:1c:
                    1e:9a:1d:c7:5d:08:36:6f:68:de:a0:aa:22:c9:b6:
                    95:75:3c:60:19:da:95:14:7f:e5:8a:cd:fa:f0:ba:
                    36:70:1f:4d:19:2c:2d:ac:a3:99:16:97:ba:74:38:
                    34:f6:ca:7c:36:db:be:3f:30:1c:15:24:14:b3:ff:
                    5c:8a:c5:05:5e:de:1d:3e:65:d1:3f:7f:49:97:93:
                    4a:5e:b7:48:b2:b8:56:06:51:0a:55:ed:88:c5:f0:
                    fd:65:ae:30:e2:c4:9c:1d:ec:93:39:06:1f:a3:ae:
                    51:ad:cb:ac:6f:a7:ab:17:96:be:61:e0:74:8e:c4:
                    db:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E5:72:B1:54:5B:95:BE:E4:B5:D7:B2:3A:5E:5D:36:CA:1C:84:CA
            X509v3 Authority Key Identifier:
                keyid:A1:52:44:62:69:7A:27:FE:7A:B9:4B:6A:CA:90:67:93:1D:92:10:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:b5:31:67:88:0d:d4:e3:ed:4d:26:39:8e:51:c7:d8:0d:62:
         79:4b:22:7a:12:63:fd:41:7e:e1:58:9c:e7:a5:12:87:67:f1:
         21:e9:3b:d5:b1:dc:2a:6f:10:f1:14:bc:6d:c6:9f:19:da:b5:
         92:0d:d6:da:45:22:b0:d7:c4:e1:4c:a8:18:d8:ef:f9:62:49:
         1d:6c:88:d9:48:9d:75:d6:fd:24:f3:ba:20:60:86:19:48:f2:
         b7:58:e6:c0:b2:1e:b6:94:c2:71:96:e3:b6:db:1f:ae:6e:71:
         b0:d9:3b:39:e5:33:c3:e5:1e:90:35:ab:86:7c:e4:3b:33:41:
         46:1a:b1:a4:3c:92:58:4d:7a:ec:5e:7c:2e:32:df:7f:6d:c4:
         82:5e:b9:8b:fc:6f:2d:23:41:ee:cb:f2:7e:77:95:5d:c3:34:
         09:a4:e1:6d:39:ba:ac:ef:c8:3f:67:20:fd:b9:20:66:ec:8b:
         31:96:8f:0b:91:1d:44:df:2c:7a:89:86:5e:5e:c3:a1:76:d4:
         2e:d5:37:77:08:d8:9e:ae:d3:62:d2:13:c5:4a:77:f1:62:cb:
         d0:84:7d:a2:50:9b:49:7a:84:9d:a2:57:3b:a5:0c:0a:35:1c:
         0a:65:ca:75:32:f7:a2:a2:bb:4d:1d:95:18:e0:fb:20:83:b3:
         ad:04:65:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGnpUiCaUbWLN5q4k4StjcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNTI0NDYyNjk3YTI3ZmU3YWI5NGI2YWNhOTA2NzkzMWQ5
MjEwMmYwHhcNMjUwNjA2MTkwMTI3WhcNMjUwNjA3MTkwMTI3WjAzMTEwLwYDVQQD
EygyMmU1NzJiMTU0NWI5NWJlZTRiNWQ3YjIzYTVlNWQzNmNhMWM4NGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZ25a1HsAt/mDr/I6H3+XF5C18F8
8+ZwsGDyqOMmjLCU02i9T1+tnXFPZh4y2rH9vXNTwYnggGvVWXK/fL9nmd5lwz6U
actqdaf4FnvwuRo6uYIE3TwYDtmydL5ukoc/s4E+AANVdafJaw2ujqptgZhoX+58
scOeQCgykUGBGAXD1YA8bRwemh3HXQg2b2jeoKoiybaVdTxgGdqVFH/lis368Lo2
cB9NGSwtrKOZFpe6dDg09sp8Ntu+PzAcFSQUs/9cisUFXt4dPmXRP39Jl5NKXrdI
srhWBlEKVe2IxfD9Za4w4sScHeyTOQYfo65Rrcusb6erF5a+YeB0jsTb8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLlcrFUW5W+5LXXsjpeXTbKHITKMB8GA1UdIwQY
MBaAFKFSRGJpeif+erlLasqQZ5MdkhAvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1ZKRVltbDZKXzU2dVV0cXlwQm5reDJTRUM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lYTc2ZmUtNjExOS00ZGUwLWJmNGIt
NGIxYWY0MTRmZDAwLzEvb1ZKRVltbDZKXzU2dVV0cXlwQm5reDJTRUM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9lYTc2ZmUtNjExOS00ZGUwLWJmNGItNGIxYWY0MTRmZDAw
LzEvb1ZKRVltbDZKXzU2dVV0cXlwQm5reDJTRUM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz7UxZ4gN
1OPtTSY5jlHH2A1ieUsiehJj/UF+4Vic56USh2fxIek71bHcKm8Q8RS8bcafGdq1
kg3W2kUisNfE4UyoGNjv+WJJHWyI2Uidddb9JPO6IGCGGUjyt1jmwLIetpTCcZbj
ttsfrm5xsNk7OeUzw+UekDWrhnzkOzNBRhqxpDySWE167F58LjLff23Egl65i/xv
LSNB7svyfneVXcM0CaThbTm6rO/IP2cg/bkgZuyLMZaPC5EdRN8seomGXl7DoXbU
LtU3dwjYnq7TYtITxUp38WLL0IR9olCbSXqEnaJXO6UMCjUcCmXKdTL3oqK7TR2V
GOD7IIOzrQRlcw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:26:22 2025 by rpki-client