Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.mft
File:                     Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.mft (raw, json)
Hash identifier:          RH6HOSwVASpBKW7cFYcy0ByDkTXAS3SFNsz6eSKRuIk=
Subject key identifier:   5F:DA:C2:CB:86:E7:50:86:80:A7:81:CB:E3:27:C2:57:E3:6B:CA:F6
Authority key identifier: 16:F8:35:98:1E:1E:78:93:47:F4:7F:CC:9B:BA:AC:6B:15:D6:87:C1
Certificate issuer:       /CN=16f835981e1e789347f47fcc9bbaac6b15d687c1
Certificate serial:       01963FF957AA54B669B28F4CC0EDD78FCA90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.mft
Manifest number:          14EF
Signing time:             Wed 16 Apr 2025 19:00:27 +0000
Manifest this update:     Wed 16 Apr 2025 19:00:27 +0000
Manifest next update:     Thu 17 Apr 2025 19:00:27 +0000
Files and hashes:         1: Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.crl (hash: 5W71XNU6q+5VWzS4JmjON6FNSn/J/efWj/ASoKHeDR4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3f:f9:57:aa:54:b6:69:b2:8f:4c:c0:ed:d7:8f:ca:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16f835981e1e789347f47fcc9bbaac6b15d687c1
        Validity
            Not Before: Apr 16 19:00:27 2025 GMT
            Not After : Apr 17 19:00:27 2025 GMT
        Subject: CN=5fdac2cb86e7508680a781cbe327c257e36bcaf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:64:8d:76:86:b7:2b:6a:70:85:37:cc:4c:c6:
                    76:7c:59:51:69:bb:34:34:05:34:a2:c7:0a:30:54:
                    29:5a:4a:2c:70:4a:d6:f0:79:87:91:8e:f1:92:a0:
                    9b:82:3e:6f:16:7a:5e:2d:fe:c1:a5:0d:2c:92:f1:
                    52:01:51:3c:a8:aa:a2:23:e6:85:fa:cc:e6:6f:9a:
                    ad:6a:15:b7:ec:07:c5:39:9e:14:58:dd:af:54:f7:
                    d3:08:ab:9b:21:90:a0:e4:82:de:f5:9e:e6:3b:0f:
                    33:6e:2e:21:51:9f:73:28:52:c8:56:0d:cd:29:af:
                    f5:6e:55:1b:e0:e9:07:b6:3c:61:54:ba:81:7a:4e:
                    0b:35:fa:af:ec:ab:17:8d:ef:4c:57:12:76:cb:76:
                    43:c1:ec:4c:26:af:28:6d:1e:f5:7d:3f:21:45:1b:
                    37:c8:a5:d3:08:01:67:71:18:f9:a7:28:eb:9a:bc:
                    3a:35:2f:b7:8d:9d:30:73:89:55:70:c1:e8:c5:16:
                    24:ea:48:6c:60:75:65:01:1c:eb:64:f9:a5:88:ae:
                    c1:03:de:27:b7:bc:14:5d:b4:fb:12:3e:9c:9d:36:
                    8d:3b:cc:f2:52:12:84:fa:2d:c7:0e:b6:67:1d:92:
                    a5:c5:4e:ed:1d:a6:b1:b0:da:ce:8c:aa:03:38:de:
                    d9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:DA:C2:CB:86:E7:50:86:80:A7:81:CB:E3:27:C2:57:E3:6B:CA:F6
            X509v3 Authority Key Identifier:
                keyid:16:F8:35:98:1E:1E:78:93:47:F4:7F:CC:9B:BA:AC:6B:15:D6:87:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:79:d8:d0:b3:31:ff:86:58:f4:67:91:45:92:b1:e9:7b:df:
         0f:60:0e:09:98:09:76:99:9e:fb:da:9e:d3:79:7a:36:64:13:
         a4:f7:4f:10:54:81:a6:db:e1:27:4a:b7:d8:e6:12:fd:e9:6b:
         70:6e:fd:69:2c:b9:11:0b:b4:fb:9c:33:39:2a:8a:b6:27:ef:
         bd:b7:5f:08:16:7a:18:5f:b0:ae:e1:66:53:a9:ea:c0:91:fe:
         35:51:8d:34:21:62:7b:4c:7d:b9:d2:ee:94:40:8a:cf:af:19:
         19:88:c8:c5:70:34:da:75:f5:a8:ed:d1:75:19:b2:cf:0b:e6:
         42:a6:b2:a2:63:29:6b:8d:81:d7:f4:ac:f8:20:0c:79:f3:05:
         c7:be:2f:65:4c:0a:cc:19:06:f2:6d:11:06:a9:47:bb:8a:ed:
         49:37:5b:b0:d5:61:65:02:53:38:3c:e7:50:30:9f:14:4e:56:
         d0:60:7e:8a:8b:6a:26:f6:04:e3:1d:ed:b3:43:6a:47:12:69:
         a1:a7:60:a8:41:99:1d:81:19:c6:61:38:e6:62:79:b2:76:43:
         b7:9a:25:a1:2d:33:62:a3:1e:39:3e:23:aa:7c:45:eb:e8:de:
         0e:c0:2a:2e:30:a4:46:d5:52:33:09:1e:b3:cd:9e:64:0b:72:
         19:aa:3c:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY/+VeqVLZpso9MwO3Xj8qQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ZjgzNTk4MWUxZTc4OTM0N2Y0N2ZjYzliYmFhYzZiMTVk
Njg3YzEwHhcNMjUwNDE2MTkwMDI3WhcNMjUwNDE3MTkwMDI3WjAzMTEwLwYDVQQD
Eyg1ZmRhYzJjYjg2ZTc1MDg2ODBhNzgxY2JlMzI3YzI1N2UzNmJjYWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWSNdoa3K2pwhTfMTMZ2fFlRabs0
NAU0oscKMFQpWkoscErW8HmHkY7xkqCbgj5vFnpeLf7BpQ0skvFSAVE8qKqiI+aF
+szmb5qtahW37AfFOZ4UWN2vVPfTCKubIZCg5ILe9Z7mOw8zbi4hUZ9zKFLIVg3N
Ka/1blUb4OkHtjxhVLqBek4LNfqv7KsXje9MVxJ2y3ZDwexMJq8obR71fT8hRRs3
yKXTCAFncRj5pyjrmrw6NS+3jZ0wc4lVcMHoxRYk6khsYHVlARzrZPmliK7BA94n
t7wUXbT7Ej6cnTaNO8zyUhKE+i3HDrZnHZKlxU7tHaaxsNrOjKoDON7ZEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/awsuG51CGgKeBy+Mnwlfja8r2MB8GA1UdIwQY
MBaAFBb4NZgeHniTR/R/zJu6rGsV1ofBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnZnMW1CNGVlSk5IOUhfTW03cXNheFhXaDhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80ZThlZmUtOGExNS00YzZiLWEwMGIt
YzFhOGU1YTZkYzU2LzEvRnZnMW1CNGVlSk5IOUhfTW03cXNheFhXaDhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC80ZThlZmUtOGExNS00YzZiLWEwMGItYzFhOGU1YTZkYzU2
LzEvRnZnMW1CNGVlSk5IOUhfTW03cXNheFhXaDhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy3nY0LMx
/4ZY9GeRRZKx6XvfD2AOCZgJdpme+9qe03l6NmQTpPdPEFSBptvhJ0q32OYS/elr
cG79aSy5EQu0+5wzOSqKtifvvbdfCBZ6GF+wruFmU6nqwJH+NVGNNCFie0x9udLu
lECKz68ZGYjIxXA02nX1qO3RdRmyzwvmQqayomMpa42B1/Ss+CAMefMFx74vZUwK
zBkG8m0RBqlHu4rtSTdbsNVhZQJTODznUDCfFE5W0GB+iotqJvYE4x3ts0NqRxJp
oadgqEGZHYEZxmE45mJ5snZDt5oloS0zYqMeOT4jqnxF6+jeDsAqLjCkRtVSMwke
s82eZAtyGao86w==
-----END CERTIFICATE-----
Generated at Thu Apr 17 09:03:22 2025 by rpki-client