Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft
File:                     Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft (raw, json)
Hash identifier:          rcflJu53Ub8HAlahSRwU5RouX19Q5/l1iaDbj8KzTTE=
Subject key identifier:   CA:DB:23:A6:F0:64:17:0F:1E:96:C5:32:A0:8C:89:21:A8:27:2A:83
Authority key identifier: 13:2E:1E:48:4F:CA:8E:95:28:DF:6A:C1:48:30:56:C8:87:86:77:1D
Certificate issuer:       /CN=132e1e484fca8e9528df6ac1483056c88786771d
Certificate serial:       019873E34F268DE1FC8E7CC2AA4CB5D8EF24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ey4eSE_KjpUo32rBSDBWyIeGdx0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft
Manifest number:          0CE1
Signing time:             Mon 04 Aug 2025 07:02:13 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:13 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:13 +0000
Files and hashes:         1: Ey4eSE_KjpUo32rBSDBWyIeGdx0.crl (hash: YuVCGVQrOfkxEHyvSw4O/6qxBD/g9VRDfEQAfu+Sp3A=)
                          2: TEzCfvre_kNQlO-1mjIWxdip7ZI.roa (hash: EQul9dCLm5RmR5z5S2xFOcA4gCDhpuf1vUT9kUiOZuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ey4eSE_KjpUo32rBSDBWyIeGdx0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:4f:26:8d:e1:fc:8e:7c:c2:aa:4c:b5:d8:ef:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=132e1e484fca8e9528df6ac1483056c88786771d
        Validity
            Not Before: Aug  4 07:02:13 2025 GMT
            Not After : Aug  5 07:02:13 2025 GMT
        Subject: CN=cadb23a6f064170f1e96c532a08c8921a8272a83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:dd:1c:f1:e1:cb:ca:3d:73:ab:e4:df:42:3f:
                    04:d9:83:c8:02:65:9d:55:c1:ed:d6:40:1b:35:32:
                    37:d7:a9:98:26:37:25:da:06:16:dd:c3:da:22:fb:
                    0b:2f:36:97:04:28:d1:93:ed:2f:ce:3e:5c:5b:a1:
                    0b:85:5c:da:f8:4c:dd:63:6f:20:f7:97:b0:e2:60:
                    e8:78:c3:1e:1d:66:a3:c2:1c:9c:0a:1f:d6:4d:e0:
                    1e:e0:a1:b2:88:0b:c4:b3:81:c0:4c:52:ed:4d:1a:
                    53:7e:56:10:18:db:16:f5:8b:66:d0:b2:1a:63:d5:
                    74:17:9d:af:74:91:a5:34:c1:27:da:a2:ab:c5:4e:
                    ef:be:56:51:64:2a:1a:cd:35:a2:a0:79:6d:c6:e4:
                    c4:13:0f:55:df:be:17:0f:95:95:fc:10:e6:73:26:
                    0f:e5:58:24:55:55:a6:76:b8:4d:d3:6c:6f:d5:97:
                    06:9f:6e:d8:c0:e4:7c:7b:6c:34:f5:07:b7:00:73:
                    52:ed:0a:70:1e:bb:e9:b5:64:68:64:d6:7f:96:00:
                    84:fb:06:2f:8c:52:76:86:b7:dc:34:ac:4b:ca:c0:
                    1e:de:79:f3:a4:08:3c:bc:8b:bc:f3:ce:0c:b2:15:
                    4c:d7:91:84:13:98:63:48:e9:8b:80:94:7f:70:06:
                    d7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:DB:23:A6:F0:64:17:0F:1E:96:C5:32:A0:8C:89:21:A8:27:2A:83
            X509v3 Authority Key Identifier:
                keyid:13:2E:1E:48:4F:CA:8E:95:28:DF:6A:C1:48:30:56:C8:87:86:77:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ey4eSE_KjpUo32rBSDBWyIeGdx0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:7e:42:1a:f4:a5:5a:8b:3e:87:0c:61:f7:d3:2f:bf:cb:e4:
         96:55:a5:ad:65:e3:7d:54:16:e7:d9:55:38:b6:fb:fa:5e:3f:
         e3:91:f7:a1:f1:82:79:14:46:3f:ee:30:34:8e:75:53:f3:af:
         a3:3e:57:2a:26:8c:0b:33:43:3b:56:35:5f:4d:23:90:50:17:
         52:9e:4a:ee:43:66:19:2a:43:0d:51:21:0a:47:f5:c8:91:56:
         07:bf:34:95:5b:c0:7a:21:7e:e0:5a:47:6e:ae:9a:f4:03:e8:
         f8:2f:92:83:fc:ff:2a:dd:01:70:27:c7:f3:10:bd:b2:5b:7d:
         d6:fc:61:b8:33:5c:a1:3e:5f:b4:54:8a:a0:bc:d1:94:35:44:
         b4:36:ee:d0:95:5a:53:69:bf:af:6c:2f:c5:86:f5:51:75:57:
         bb:52:8f:a1:43:06:57:45:71:0a:b9:28:23:cd:64:c9:aa:d0:
         9a:b0:37:4c:63:13:12:24:cf:af:e7:c6:a2:2b:d9:67:8a:76:
         ac:bf:c8:83:df:e8:97:15:bd:79:2a:97:02:a8:4f:d0:b3:eb:
         ef:10:af:88:63:56:ac:c5:01:35:5f:ad:72:a8:b3:67:2b:e9:
         27:0b:06:a4:94:4e:d3:da:34:dd:81:6f:03:12:bd:f2:fc:c2:
         11:40:92:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz408mjeH8jnzCqky12O8kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMmUxZTQ4NGZjYThlOTUyOGRmNmFjMTQ4MzA1NmM4ODc4
Njc3MWQwHhcNMjUwODA0MDcwMjEzWhcNMjUwODA1MDcwMjEzWjAzMTEwLwYDVQQD
EyhjYWRiMjNhNmYwNjQxNzBmMWU5NmM1MzJhMDhjODkyMWE4MjcyYTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN0c8eHLyj1zq+TfQj8E2YPIAmWd
VcHt1kAbNTI316mYJjcl2gYW3cPaIvsLLzaXBCjRk+0vzj5cW6ELhVza+EzdY28g
95ew4mDoeMMeHWajwhycCh/WTeAe4KGyiAvEs4HATFLtTRpTflYQGNsW9Ytm0LIa
Y9V0F52vdJGlNMEn2qKrxU7vvlZRZCoazTWioHltxuTEEw9V374XD5WV/BDmcyYP
5VgkVVWmdrhN02xv1ZcGn27YwOR8e2w09Qe3AHNS7QpwHrvptWRoZNZ/lgCE+wYv
jFJ2hrfcNKxLysAe3nnzpAg8vIu8884MshVM15GEE5hjSOmLgJR/cAbXuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMrbI6bwZBcPHpbFMqCMiSGoJyqDMB8GA1UdIwQY
MBaAFBMuHkhPyo6VKN9qwUgwVsiHhncdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXk0ZVNFX0tqcFVvMzJyQlNEQld5SWVHZHgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8zN2Y1NmUtYTIyMS00ZTAwLThlMTQt
NzlkNmY1M2M3YTJlLzEvRXk0ZVNFX0tqcFVvMzJyQlNEQld5SWVHZHgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8zN2Y1NmUtYTIyMS00ZTAwLThlMTQtNzlkNmY1M2M3YTJl
LzEvRXk0ZVNFX0tqcFVvMzJyQlNEQld5SWVHZHgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo35CGvSl
Wos+hwxh99Mvv8vkllWlrWXjfVQW59lVOLb7+l4/45H3ofGCeRRGP+4wNI51U/Ov
oz5XKiaMCzNDO1Y1X00jkFAXUp5K7kNmGSpDDVEhCkf1yJFWB780lVvAeiF+4FpH
bq6a9APo+C+Sg/z/Kt0BcCfH8xC9slt91vxhuDNcoT5ftFSKoLzRlDVEtDbu0JVa
U2m/r2wvxYb1UXVXu1KPoUMGV0VxCrkoI81kyarQmrA3TGMTEiTPr+fGoivZZ4p2
rL/Ig9/olxW9eSqXAqhP0LPr7xCviGNWrMUBNV+tcqizZyvpJwsGpJRO09o03YFv
AxK98vzCEUCSVw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:17 2025 by rpki-client