Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft
File:                     l7v--RgT0Oj37t9o7VaefP3fDPA.mft (raw, json)
Hash identifier:          0j7/fxLbGTB1wKRKr/WxE5cMnnsTH9TVs/xdXDf42D4=
Subject key identifier:   71:41:15:B4:04:13:7A:5C:71:5B:6C:C9:E7:7B:C6:D1:A0:89:E7:CB
Authority key identifier: 97:BB:FE:F9:18:13:D0:E8:F7:EE:DF:68:ED:56:9E:7C:FD:DF:0C:F0
Certificate issuer:       /CN=97bbfef91813d0e8f7eedf68ed569e7cfddf0cf0
Certificate serial:       0196545C167DE8F393DC16E60CBC856080BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l7v--RgT0Oj37t9o7VaefP3fDPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft
Manifest number:          14FD
Signing time:             Sun 20 Apr 2025 18:00:43 +0000
Manifest this update:     Sun 20 Apr 2025 18:00:43 +0000
Manifest next update:     Mon 21 Apr 2025 18:00:43 +0000
Files and hashes:         1: 1-sigTPJAC1PNSATn-sK6lRfTKyQ.roa (hash: jOHa8XaZlnY37LiuZhg9CFenWtMsktZUfeaX7d5RSx0=)
                          2: l7v--RgT0Oj37t9o7VaefP3fDPA.crl (hash: Ad424QuujHRKniKd70qkgpSnodj8aOo+qYwYhbR0zTI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l7v--RgT0Oj37t9o7VaefP3fDPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:54:5c:16:7d:e8:f3:93:dc:16:e6:0c:bc:85:60:80:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97bbfef91813d0e8f7eedf68ed569e7cfddf0cf0
        Validity
            Not Before: Apr 20 18:00:43 2025 GMT
            Not After : Apr 21 18:00:43 2025 GMT
        Subject: CN=714115b404137a5c715b6cc9e77bc6d1a089e7cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1b:18:f8:0a:c4:5d:fb:07:43:0b:89:30:9c:
                    da:5a:c1:b5:86:38:8e:1e:d7:da:86:a3:6e:f1:02:
                    a1:04:12:06:20:c1:6b:c2:3f:c4:a8:d3:c6:81:7e:
                    e8:88:b0:be:e9:fb:bb:2e:b1:b5:cb:26:33:92:ae:
                    8f:06:eb:ef:22:48:49:2b:31:b4:bc:f6:f7:32:ec:
                    09:f0:32:fa:18:03:4c:67:f1:a7:1d:e9:ad:c6:f8:
                    e4:1c:8d:e4:7c:9e:c1:5a:ff:4b:97:72:00:9f:93:
                    49:d8:d7:00:78:11:bb:ce:8d:92:36:8d:d5:b1:5e:
                    57:45:1f:b4:19:10:8d:93:0a:b9:9e:75:d9:61:00:
                    1b:f1:c7:4d:2d:c5:0c:52:30:2c:5a:61:42:f0:1d:
                    1a:aa:fc:bd:8c:45:db:3d:f0:b3:c1:e8:c1:c0:d7:
                    4e:27:a6:fa:14:3f:15:31:a8:6a:8c:17:1c:9f:a8:
                    f1:68:79:ad:ee:23:1e:6c:54:8f:d2:d0:54:37:b0:
                    72:88:8a:4a:3c:f1:9b:1f:4f:24:31:31:32:89:4f:
                    51:0d:39:3d:9a:8e:10:3d:d0:1a:f1:3c:10:6d:0d:
                    1c:d2:36:69:aa:1d:85:62:8f:a0:64:d5:25:c5:1d:
                    d5:e4:62:ff:72:64:7a:d1:ce:92:1b:3c:c7:1c:53:
                    50:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:41:15:B4:04:13:7A:5C:71:5B:6C:C9:E7:7B:C6:D1:A0:89:E7:CB
            X509v3 Authority Key Identifier:
                keyid:97:BB:FE:F9:18:13:D0:E8:F7:EE:DF:68:ED:56:9E:7C:FD:DF:0C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7v--RgT0Oj37t9o7VaefP3fDPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:15:93:bf:07:e3:c1:53:77:0d:21:55:b3:a8:ca:78:f5:0f:
         1f:59:57:5c:7e:21:e9:f8:a5:cc:55:88:f6:6f:c3:3a:93:7f:
         43:76:73:79:3b:c0:17:b6:af:0a:34:b0:ed:a1:9b:47:30:81:
         28:7c:5e:ab:2b:40:a2:14:f5:a0:cd:1f:18:e5:81:70:ea:e6:
         68:c4:ba:62:13:54:78:bf:94:40:77:fd:5e:bc:0e:38:32:fe:
         8c:11:f6:f9:1b:a6:06:aa:6d:66:1e:ce:05:52:91:a3:1f:28:
         3a:96:82:ab:d4:ec:3c:cb:42:f3:10:5d:ee:c9:14:02:e2:e3:
         e9:87:ef:0d:b8:ee:5c:2a:cf:19:1b:a7:44:19:0e:06:dc:39:
         a1:a5:74:ce:f2:c9:0b:f2:c6:77:54:6d:93:a2:3f:ed:af:21:
         9f:fa:02:21:66:52:e1:f3:a1:f2:dd:19:ad:42:e2:a4:1e:f0:
         46:5f:ce:93:3c:cb:61:9d:6b:7f:6c:0c:4d:2f:b4:af:a9:b1:
         a1:da:e1:86:48:e6:3b:59:0f:8f:06:c1:ae:a0:90:d6:df:f5:
         15:08:dd:d1:92:e3:73:90:6f:05:1e:81:65:8a:3d:a8:6a:fa:
         af:9e:ce:46:3d:c4:67:a7:04:bb:20:56:e8:cb:f1:15:ee:c5:
         72:26:72:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUXBZ96POT3BbmDLyFYIC9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3YmJmZWY5MTgxM2QwZThmN2VlZGY2OGVkNTY5ZTdjZmRk
ZjBjZjAwHhcNMjUwNDIwMTgwMDQzWhcNMjUwNDIxMTgwMDQzWjAzMTEwLwYDVQQD
Eyg3MTQxMTViNDA0MTM3YTVjNzE1YjZjYzllNzdiYzZkMWEwODllN2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBsY+ArEXfsHQwuJMJzaWsG1hjiO
HtfahqNu8QKhBBIGIMFrwj/EqNPGgX7oiLC+6fu7LrG1yyYzkq6PBuvvIkhJKzG0
vPb3MuwJ8DL6GANMZ/GnHemtxvjkHI3kfJ7BWv9Ll3IAn5NJ2NcAeBG7zo2SNo3V
sV5XRR+0GRCNkwq5nnXZYQAb8cdNLcUMUjAsWmFC8B0aqvy9jEXbPfCzwejBwNdO
J6b6FD8VMahqjBccn6jxaHmt7iMebFSP0tBUN7ByiIpKPPGbH08kMTEyiU9RDTk9
mo4QPdAa8TwQbQ0c0jZpqh2FYo+gZNUlxR3V5GL/cmR60c6SGzzHHFNQ3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHFBFbQEE3pccVtsyed7xtGgiefLMB8GA1UdIwQY
MBaAFJe7/vkYE9Do9+7faO1Wnnz93wzwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDd2LS1SZ1QwT2ozN3Q5bzdWYWVmUDNmRFBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy80ZThkMzUtNmY0Zi00NTIzLWFiMzEt
MGUxYTBjYzgzYjE5LzEvbDd2LS1SZ1QwT2ozN3Q5bzdWYWVmUDNmRFBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy80ZThkMzUtNmY0Zi00NTIzLWFiMzEtMGUxYTBjYzgzYjE5
LzEvbDd2LS1SZ1QwT2ozN3Q5bzdWYWVmUDNmRFBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEBWTvwfj
wVN3DSFVs6jKePUPH1lXXH4h6filzFWI9m/DOpN/Q3ZzeTvAF7avCjSw7aGbRzCB
KHxeqytAohT1oM0fGOWBcOrmaMS6YhNUeL+UQHf9XrwOODL+jBH2+RumBqptZh7O
BVKRox8oOpaCq9TsPMtC8xBd7skUAuLj6YfvDbjuXCrPGRunRBkOBtw5oaV0zvLJ
C/LGd1Rtk6I/7a8hn/oCIWZS4fOh8t0ZrULipB7wRl/OkzzLYZ1rf2wMTS+0r6mx
odrhhkjmO1kPjwbBrqCQ1t/1FQjd0ZLjc5BvBR6BZYo9qGr6r57ORj3EZ6cEuyBW
6MvxFe7FciZyTQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:31:04 2025 by rpki-client