Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.mft
File:                     EUrQ-uoD9gWTuUC6TBt8hmBANlM.mft (raw, json)
Hash identifier:          MdMvdfGLsV+wXbkT9+mDTS/+nrLZGMXWg4pJFe1+Hww=
Subject key identifier:   73:C5:DF:41:81:37:EE:F4:3B:A7:FE:3A:68:9F:66:8C:E9:40:DF:06
Authority key identifier: 11:4A:D0:FA:EA:03:F6:05:93:B9:40:BA:4C:1B:7C:86:60:40:36:53
Certificate issuer:       /CN=114ad0faea03f60593b940ba4c1b7c8660403653
Certificate serial:       01967679E04D1B70933927695A474A91B247
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EUrQ-uoD9gWTuUC6TBt8hmBANlM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.mft
Manifest number:          02B2
Signing time:             Sun 27 Apr 2025 09:00:20 +0000
Manifest this update:     Sun 27 Apr 2025 09:00:20 +0000
Manifest next update:     Mon 28 Apr 2025 09:00:20 +0000
Files and hashes:         1: EUrQ-uoD9gWTuUC6TBt8hmBANlM.crl (hash: DfsaII+eJnMgt+1uH6xKtdzJtwuU4u1GHNZL9gGLRz0=)
                          2: sxJ4adnYKO7gli2y2qrSkbqN80g.roa (hash: zIiuKl1GBABWNnrsEF/02SPcAT6HuQK8fZBVndJMElk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EUrQ-uoD9gWTuUC6TBt8hmBANlM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:79:e0:4d:1b:70:93:39:27:69:5a:47:4a:91:b2:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=114ad0faea03f60593b940ba4c1b7c8660403653
        Validity
            Not Before: Apr 27 09:00:20 2025 GMT
            Not After : Apr 28 09:00:20 2025 GMT
        Subject: CN=73c5df418137eef43ba7fe3a689f668ce940df06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9a:7b:16:a1:01:9d:1d:be:fb:33:de:34:31:
                    21:0f:cb:81:e2:3b:a5:7e:6e:32:62:d3:6f:d2:d0:
                    06:74:ca:7a:1a:13:ef:66:30:86:83:6d:01:41:44:
                    da:32:a9:b6:ed:d4:99:e0:8f:7f:27:66:ca:3f:f2:
                    db:ab:2b:7e:b4:26:54:28:19:a3:ae:76:34:c8:48:
                    b8:09:e7:9a:d6:1e:b3:59:53:45:0d:30:f8:b8:6c:
                    ea:53:72:b8:ef:e3:bf:79:4f:bb:25:2b:53:c1:0f:
                    17:fb:a4:bc:53:05:4c:fc:97:99:57:c5:8c:61:62:
                    f8:7c:32:bd:0e:65:67:30:56:12:26:dc:78:50:85:
                    4d:74:51:00:81:90:d9:a8:eb:0e:9b:85:3e:57:d7:
                    ae:74:0f:b8:9f:0c:bc:6c:27:1d:70:4f:62:56:64:
                    29:79:f9:75:30:5f:bb:9c:66:10:b4:c7:12:b7:2f:
                    b4:95:df:d4:6a:e5:54:d9:2d:23:2f:60:f2:95:16:
                    7e:88:09:31:29:3a:ef:24:56:00:66:19:38:1f:72:
                    9e:7a:db:a5:ea:ea:90:31:e2:c6:e5:93:0b:62:f5:
                    5c:1a:8f:9f:75:bf:70:60:8c:da:8c:2d:5a:23:4c:
                    8b:ee:02:bd:df:ad:f4:9e:85:84:11:ee:2c:f9:69:
                    15:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C5:DF:41:81:37:EE:F4:3B:A7:FE:3A:68:9F:66:8C:E9:40:DF:06
            X509v3 Authority Key Identifier:
                keyid:11:4A:D0:FA:EA:03:F6:05:93:B9:40:BA:4C:1B:7C:86:60:40:36:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUrQ-uoD9gWTuUC6TBt8hmBANlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:ee:f3:32:83:16:6c:d4:88:0a:40:d2:f9:d8:91:5c:5d:aa:
         48:8c:71:2e:55:e2:23:05:f4:f4:de:07:8d:cf:44:6a:1c:62:
         9b:e2:7b:c2:32:25:13:87:41:eb:c1:8b:32:ec:9d:90:39:86:
         b7:3c:b0:21:69:d8:2a:f1:c8:b6:bc:ac:3b:5c:b2:bc:ed:1b:
         fb:80:e5:5b:c3:3f:cc:c1:f0:57:9e:be:4c:1b:fc:ad:67:04:
         57:88:43:0b:a7:bb:21:6c:35:39:17:15:7d:88:95:bb:71:fa:
         05:81:cc:61:c9:88:16:b7:6a:90:c7:3e:fa:4c:23:4f:c4:b8:
         47:1e:20:2b:7a:d7:9d:74:64:c3:2c:e8:73:77:59:db:dc:49:
         5f:f2:5f:bb:a5:88:ca:2d:7b:ae:57:1b:6a:73:09:a6:29:dd:
         00:e9:92:68:7f:67:9e:fe:25:59:08:bf:05:d9:ff:86:1b:eb:
         c8:d9:3e:21:b0:41:34:30:ee:20:ae:6f:00:ba:b1:c7:75:ea:
         42:42:ee:98:ce:6e:98:0e:2e:73:6a:7f:e5:ce:f3:b0:3f:28:
         8e:dd:89:80:61:c4:01:d1:62:8b:80:3f:4d:3d:3f:2f:b1:e9:
         1b:c9:04:aa:2b:3c:8a:f0:3e:c4:d9:60:ca:68:39:c5:0d:3e:
         f6:c4:bc:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2eeBNG3CTOSdpWkdKkbJHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExNGFkMGZhZWEwM2Y2MDU5M2I5NDBiYTRjMWI3Yzg2NjA0
MDM2NTMwHhcNMjUwNDI3MDkwMDIwWhcNMjUwNDI4MDkwMDIwWjAzMTEwLwYDVQQD
Eyg3M2M1ZGY0MTgxMzdlZWY0M2JhN2ZlM2E2ODlmNjY4Y2U5NDBkZjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJp7FqEBnR2++zPeNDEhD8uB4jul
fm4yYtNv0tAGdMp6GhPvZjCGg20BQUTaMqm27dSZ4I9/J2bKP/Lbqyt+tCZUKBmj
rnY0yEi4Ceea1h6zWVNFDTD4uGzqU3K47+O/eU+7JStTwQ8X+6S8UwVM/JeZV8WM
YWL4fDK9DmVnMFYSJtx4UIVNdFEAgZDZqOsOm4U+V9eudA+4nwy8bCcdcE9iVmQp
efl1MF+7nGYQtMcSty+0ld/UauVU2S0jL2DylRZ+iAkxKTrvJFYAZhk4H3Keetul
6uqQMeLG5ZMLYvVcGo+fdb9wYIzajC1aI0yL7gK93630noWEEe4s+WkViQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPF30GBN+70O6f+OmifZozpQN8GMB8GA1UdIwQY
MBaAFBFK0PrqA/YFk7lAukwbfIZgQDZTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVVyUS11b0Q5Z1dUdVVDNlRCdDhobUJBTmxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9iNDRhNmYtNjliNi00MWUxLWI0NWQt
YzZkOTJhYjY3OGNiLzEvRVVyUS11b0Q5Z1dUdVVDNlRCdDhobUJBTmxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9iNDRhNmYtNjliNi00MWUxLWI0NWQtYzZkOTJhYjY3OGNi
LzEvRVVyUS11b0Q5Z1dUdVVDNlRCdDhobUJBTmxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUu7zMoMW
bNSICkDS+diRXF2qSIxxLlXiIwX09N4Hjc9Eahxim+J7wjIlE4dB68GLMuydkDmG
tzywIWnYKvHItrysO1yyvO0b+4DlW8M/zMHwV56+TBv8rWcEV4hDC6e7IWw1ORcV
fYiVu3H6BYHMYcmIFrdqkMc++kwjT8S4Rx4gK3rXnXRkwyzoc3dZ29xJX/Jfu6WI
yi17rlcbanMJpindAOmSaH9nnv4lWQi/Bdn/hhvryNk+IbBBNDDuIK5vALqxx3Xq
QkLumM5umA4uc2p/5c7zsD8ojt2JgGHEAdFii4A/TT0/L7HpG8kEqis8ivA+xNlg
ymg5xQ0+9sS8TQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:12:34 2025 by rpki-client