Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft
File:                     BLVuw7rwqesioTYUdj8YFF0M8Eo.mft (raw, json)
Hash identifier:          IytzAHfRmyXsiM74qVT6orj/z7rwqnfEpg1fUcDu8no=
Subject key identifier:   58:B8:96:40:83:2C:18:5E:0F:22:58:7A:5E:D9:6C:42:28:56:67:35
Authority key identifier: 04:B5:6E:C3:BA:F0:A9:EB:22:A1:36:14:76:3F:18:14:5D:0C:F0:4A
Certificate issuer:       /CN=04b56ec3baf0a9eb22a13614763f18145d0cf04a
Certificate serial:       01964443DFEE912D47A88B86DD516C622E5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft
Manifest number:          01EE
Signing time:             Thu 17 Apr 2025 15:00:20 +0000
Manifest this update:     Thu 17 Apr 2025 15:00:20 +0000
Manifest next update:     Fri 18 Apr 2025 15:00:20 +0000
Files and hashes:         1: BLVuw7rwqesioTYUdj8YFF0M8Eo.crl (hash: r4nA7OAKG827mDMza5ucoFjrLFwsNqfkRGUg1Jd0HPQ=)
                          2: CQgo9i7xKCKF-brlO7bOG3BNmVY.roa (hash: X8lPFkVQRlIn745XFiJL9ENZDguoL523rt5LMcrNdrw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 15:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:43:df:ee:91:2d:47:a8:8b:86:dd:51:6c:62:2e:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04b56ec3baf0a9eb22a13614763f18145d0cf04a
        Validity
            Not Before: Apr 17 15:00:20 2025 GMT
            Not After : Apr 18 15:00:20 2025 GMT
        Subject: CN=58b89640832c185e0f22587a5ed96c4228566735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5c:48:99:57:8c:94:95:ae:da:e9:2c:9a:39:
                    e3:9a:a7:60:2b:b8:dc:d6:02:9e:85:66:3c:75:80:
                    a7:7c:75:59:da:67:5f:b8:97:fe:52:2b:21:a8:32:
                    10:2f:99:83:c3:67:49:b3:28:29:42:59:6d:4d:d4:
                    6b:c3:06:fe:c1:65:aa:69:cc:36:62:5c:3b:82:9e:
                    ea:8c:cf:70:0d:26:3a:64:01:6b:85:30:24:71:1b:
                    14:44:e3:40:8d:14:35:4f:b4:1a:98:32:36:76:de:
                    99:38:07:9d:79:2b:df:0c:e3:a9:fe:5b:3d:e7:07:
                    da:4b:77:bd:da:d8:c6:56:2f:e1:b6:73:f2:dc:99:
                    37:87:93:fb:ee:e4:6f:e9:62:9b:7c:20:df:ee:1a:
                    bc:36:da:bc:13:47:06:21:fa:a2:bd:a4:0b:ef:91:
                    c7:31:62:1d:a5:11:de:8a:89:eb:81:6a:cd:de:3f:
                    56:e3:a3:bd:b8:76:d0:9c:4a:f1:7e:60:a2:62:70:
                    d5:c8:42:9b:88:83:85:a7:92:a4:d8:1b:99:ee:96:
                    76:33:9b:07:0f:d8:2e:5c:2a:81:b1:87:ff:9d:76:
                    7c:8c:20:70:01:43:2e:6b:c5:49:a8:92:2f:80:ac:
                    39:13:37:13:0d:1f:67:f0:c2:67:db:4b:58:30:59:
                    06:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B8:96:40:83:2C:18:5E:0F:22:58:7A:5E:D9:6C:42:28:56:67:35
            X509v3 Authority Key Identifier:
                keyid:04:B5:6E:C3:BA:F0:A9:EB:22:A1:36:14:76:3F:18:14:5D:0C:F0:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:82:6b:84:99:57:59:93:34:ba:d8:5f:40:aa:70:cc:f5:64:
         b3:74:03:e1:00:77:19:db:b4:f1:16:8a:6f:a3:29:4c:9a:ed:
         86:51:1d:a7:8f:19:66:36:34:42:bc:5b:18:83:84:55:41:72:
         f5:14:67:0d:49:3a:0d:79:1f:70:45:22:0c:44:e5:67:54:8d:
         b0:10:5d:a5:89:5b:b6:1b:6f:5b:86:e4:e0:2d:42:79:4a:d9:
         02:cb:9f:43:c4:02:5c:62:75:4a:49:16:72:44:d5:38:0b:6a:
         4d:19:db:24:da:6b:14:a4:00:98:0e:e5:37:ff:ce:3d:82:ff:
         7b:9f:21:e2:0d:04:72:99:e3:1d:20:f5:7c:30:de:c3:b8:26:
         b6:d9:62:a2:0a:06:27:e9:48:54:59:91:3b:cf:c3:40:29:bf:
         7e:1f:65:f7:5b:72:18:46:2a:d7:a1:3a:9f:a4:fb:b0:4a:b7:
         79:36:48:56:f1:e1:4e:93:1a:6e:c1:c6:6d:aa:7a:00:af:73:
         74:9c:ef:d0:9f:24:27:e2:99:db:a9:62:14:4d:27:78:76:f6:
         4f:17:7b:86:35:35:ef:a5:10:28:e8:98:fc:2a:42:3a:7b:fb:
         91:78:1f:c9:9e:f2:32:93:e5:07:98:99:71:ce:10:ff:74:3a:
         7f:47:36:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZEQ9/ukS1HqIuG3VFsYi5eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YjU2ZWMzYmFmMGE5ZWIyMmExMzYxNDc2M2YxODE0NWQw
Y2YwNGEwHhcNMjUwNDE3MTUwMDIwWhcNMjUwNDE4MTUwMDIwWjAzMTEwLwYDVQQD
Eyg1OGI4OTY0MDgzMmMxODVlMGYyMjU4N2E1ZWQ5NmM0MjI4NTY2NzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVxImVeMlJWu2uksmjnjmqdgK7jc
1gKehWY8dYCnfHVZ2mdfuJf+UishqDIQL5mDw2dJsygpQlltTdRrwwb+wWWqacw2
Ylw7gp7qjM9wDSY6ZAFrhTAkcRsURONAjRQ1T7QamDI2dt6ZOAedeSvfDOOp/ls9
5wfaS3e92tjGVi/htnPy3Jk3h5P77uRv6WKbfCDf7hq8Ntq8E0cGIfqivaQL75HH
MWIdpRHeionrgWrN3j9W46O9uHbQnErxfmCiYnDVyEKbiIOFp5Kk2BuZ7pZ2M5sH
D9guXCqBsYf/nXZ8jCBwAUMua8VJqJIvgKw5EzcTDR9n8MJn20tYMFkGDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFi4lkCDLBheDyJYel7ZbEIoVmc1MB8GA1UdIwQY
MBaAFAS1bsO68KnrIqE2FHY/GBRdDPBKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkxWdXc3cndxZXNpb1RZVWRqOFlGRjBNOEVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYzYwY2QtZDBiNC00YzhiLThhNGQt
Njk1ZDgyOTk5MjZlLzEvQkxWdXc3cndxZXNpb1RZVWRqOFlGRjBNOEVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9mYzYwY2QtZDBiNC00YzhiLThhNGQtNjk1ZDgyOTk5MjZl
LzEvQkxWdXc3cndxZXNpb1RZVWRqOFlGRjBNOEVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgoJrhJlX
WZM0uthfQKpwzPVks3QD4QB3Gdu08RaKb6MpTJrthlEdp48ZZjY0QrxbGIOEVUFy
9RRnDUk6DXkfcEUiDETlZ1SNsBBdpYlbthtvW4bk4C1CeUrZAsufQ8QCXGJ1SkkW
ckTVOAtqTRnbJNprFKQAmA7lN//OPYL/e58h4g0EcpnjHSD1fDDew7gmttliogoG
J+lIVFmRO8/DQCm/fh9l91tyGEYq16E6n6T7sEq3eTZIVvHhTpMabsHGbap6AK9z
dJzv0J8kJ+KZ26liFE0neHb2Txd7hjU176UQKOiY/CpCOnv7kXgfyZ7yMpPlB5iZ
cc4Q/3Q6f0c2pw==
-----END CERTIFICATE-----
Generated at Thu Apr 17 20:54:01 2025 by rpki-client