Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
File:                     blQs7eU6DFcUWmr_L1gZbwLUoS4.mft (raw, json)
Hash identifier:          abZXRiqzwgtyIk1tlZSv2g6t55BEWlMY1AxITG0XeHA=
Subject key identifier:   33:1F:B9:A7:2E:8E:15:1D:FF:C5:DD:EA:E2:2E:85:61:B8:1B:E8:0D
Authority key identifier: 6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E
Certificate issuer:       /CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
Certificate serial:       019644B25231EA1BC774225928CBA4F5AB68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
Manifest number:          14D4
Signing time:             Thu 17 Apr 2025 17:00:59 +0000
Manifest this update:     Thu 17 Apr 2025 17:00:59 +0000
Manifest next update:     Fri 18 Apr 2025 17:00:59 +0000
Files and hashes:         1: blQs7eU6DFcUWmr_L1gZbwLUoS4.crl (hash: c2Cu9CCbkqOyWVyyJyXCabzK/da7cXwPgtdPUS1a59A=)
                          2: pXv8FGbLwxECE7IPZwLe-oIEhlQ.roa (hash: lA0EoJbAgOHytg/Q3yX/rveAnxbQAYlQALMvfLmzZeY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 15:33:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:b2:52:31:ea:1b:c7:74:22:59:28:cb:a4:f5:ab:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
        Validity
            Not Before: Apr 17 17:00:59 2025 GMT
            Not After : Apr 18 17:00:59 2025 GMT
        Subject: CN=331fb9a72e8e151dffc5ddeae22e8561b81be80d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e4:00:d9:0e:0d:bd:5f:78:04:07:85:9d:52:
                    fb:81:13:5a:2f:b6:eb:45:f6:b8:77:3f:28:a7:a0:
                    df:5d:7a:17:1e:46:07:43:d4:a2:2a:ed:2c:58:19:
                    c7:eb:5d:66:77:1b:d1:bf:87:89:74:7a:05:ce:59:
                    51:5c:12:79:6c:e6:97:d9:e3:cd:c1:0d:3c:44:63:
                    51:08:51:c9:da:57:c6:8f:2c:30:39:3b:fa:44:ca:
                    b8:ef:ab:b0:96:d9:4f:d7:49:22:a6:00:ac:dd:15:
                    b4:b5:79:ca:ae:1f:5c:44:00:85:e9:4b:3b:a6:bf:
                    9a:c2:8f:da:10:da:ea:28:03:27:d1:12:b1:51:23:
                    62:68:fd:02:0e:4b:c4:51:ca:f6:10:38:18:97:ec:
                    9c:34:52:2d:53:53:ff:3d:f5:e6:94:7b:4c:12:77:
                    6f:f4:5d:51:47:1e:50:9c:b9:3c:f9:29:f2:34:d8:
                    77:58:94:e2:e4:75:5a:2e:63:2f:a5:d0:02:91:a0:
                    ce:c7:65:e7:0f:b6:e2:87:fb:55:19:67:10:cd:a6:
                    e1:80:68:a1:c7:03:e4:9b:de:0e:06:67:16:33:3f:
                    82:0d:f0:93:77:30:70:5e:ab:a2:f5:a5:28:72:d1:
                    06:53:3c:7f:7b:d1:15:b3:f4:56:83:c9:56:07:17:
                    bb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:1F:B9:A7:2E:8E:15:1D:FF:C5:DD:EA:E2:2E:85:61:B8:1B:E8:0D
            X509v3 Authority Key Identifier:
                keyid:6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:51:4c:8d:77:db:35:3f:fb:7f:b4:a5:94:11:ab:68:dd:01:
         18:48:46:f3:6a:0e:19:cc:55:3d:a0:bd:c4:b3:3d:ae:15:9a:
         fd:bc:04:46:d0:ad:fa:40:c5:23:04:c7:ec:b5:58:f6:98:1c:
         4b:81:dd:9c:7e:ca:ec:95:13:d8:d9:39:62:64:d5:27:c6:37:
         d7:15:1c:98:f4:31:97:51:c8:00:32:28:5d:e8:07:2f:13:f1:
         cc:91:00:a6:6f:20:6f:89:01:98:f5:d0:b4:08:f4:f5:b9:d2:
         b8:d5:bd:76:65:22:79:81:32:f3:af:00:72:31:b6:d2:49:64:
         b3:ce:7c:60:a9:fc:68:61:67:ca:b8:db:2c:c1:c9:6c:cd:8e:
         51:02:c4:c1:cf:8f:9f:97:e6:2e:50:26:50:39:92:56:38:d9:
         84:cd:45:66:ae:e7:80:7a:ad:e6:82:0f:2e:cd:c2:37:0f:c7:
         72:38:7b:11:d7:ca:83:f5:65:ab:bc:95:13:56:60:d4:22:66:
         1d:38:f4:5a:a8:54:3d:ab:b3:ff:29:2b:41:10:63:1a:24:68:
         a9:6c:90:10:12:45:d4:ad:2f:50:28:93:10:f0:11:c6:45:52:
         d5:89:11:63:0d:76:53:ae:3a:d0:ac:dc:c9:8b:2b:1e:ea:e1:
         26:41:88:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZEslIx6hvHdCJZKMuk9atoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNTQyY2VkZTUzYTBjNTcxNDVhNmFmZjJmNTgxOTZmMDJk
NGExMmUwHhcNMjUwNDE3MTcwMDU5WhcNMjUwNDE4MTcwMDU5WjAzMTEwLwYDVQQD
EygzMzFmYjlhNzJlOGUxNTFkZmZjNWRkZWFlMjJlODU2MWI4MWJlODBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOQA2Q4NvV94BAeFnVL7gRNaL7br
Rfa4dz8op6DfXXoXHkYHQ9SiKu0sWBnH611mdxvRv4eJdHoFzllRXBJ5bOaX2ePN
wQ08RGNRCFHJ2lfGjywwOTv6RMq476uwltlP10kipgCs3RW0tXnKrh9cRACF6Us7
pr+awo/aENrqKAMn0RKxUSNiaP0CDkvEUcr2EDgYl+ycNFItU1P/PfXmlHtMEndv
9F1RRx5QnLk8+SnyNNh3WJTi5HVaLmMvpdACkaDOx2XnD7bih/tVGWcQzabhgGih
xwPkm94OBmcWMz+CDfCTdzBwXqui9aUoctEGUzx/e9EVs/RWg8lWBxe7LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMfuacujhUd/8Xd6uIuhWG4G+gNMB8GA1UdIwQY
MBaAFG5ULO3lOgxXFFpq/y9YGW8C1KEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmxRczdlVTZERmNVV21yX0wxZ1pid0xVb1M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zMjE2OWEtNGE1YS00MTFiLWIwMDYt
MzE4YzcxYjExOWY3LzEvYmxRczdlVTZERmNVV21yX0wxZ1pid0xVb1M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8zMjE2OWEtNGE1YS00MTFiLWIwMDYtMzE4YzcxYjExOWY3
LzEvYmxRczdlVTZERmNVV21yX0wxZ1pid0xVb1M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHVFMjXfb
NT/7f7SllBGraN0BGEhG82oOGcxVPaC9xLM9rhWa/bwERtCt+kDFIwTH7LVY9pgc
S4HdnH7K7JUT2Nk5YmTVJ8Y31xUcmPQxl1HIADIoXegHLxPxzJEApm8gb4kBmPXQ
tAj09bnSuNW9dmUieYEy868AcjG20klks858YKn8aGFnyrjbLMHJbM2OUQLEwc+P
n5fmLlAmUDmSVjjZhM1FZq7ngHqt5oIPLs3CNw/Hcjh7EdfKg/Vlq7yVE1Zg1CJm
HTj0WqhUPauz/ykrQRBjGiRoqWyQEBJF1K0vUCiTEPARxkVS1YkRYw12U6460Kzc
yYsrHurhJkGIKg==
-----END CERTIFICATE-----
Generated at Thu Apr 17 18:54:25 2025 by rpki-client