Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.mft
File:                     Ev8-1PtXWS7cr1srdjSlYFQEPFA.mft (raw, json)
Hash identifier:          +NMLBeyqK3lOvmq8eXO+o/JCBXAuRl9L+uF/Yhw72a8=
Subject key identifier:   44:6F:EC:31:67:B6:D5:49:F2:99:AC:34:D0:A6:CE:43:D6:1A:39:C0
Authority key identifier: 12:FF:3E:D4:FB:57:59:2E:DC:AF:5B:2B:76:34:A5:60:54:04:3C:50
Certificate issuer:       /CN=12ff3ed4fb57592edcaf5b2b7634a56054043c50
Certificate serial:       0196760BE3C6CC0FB676EB05ABE88E788205
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ev8-1PtXWS7cr1srdjSlYFQEPFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.mft
Manifest number:          010E
Signing time:             Sun 27 Apr 2025 07:00:12 +0000
Manifest this update:     Sun 27 Apr 2025 07:00:12 +0000
Manifest next update:     Mon 28 Apr 2025 07:00:12 +0000
Files and hashes:         1: Ev8-1PtXWS7cr1srdjSlYFQEPFA.crl (hash: 7/h+Pi+NTyu7QrWsspW/0dsBiZRQGrEXglbgmL1ZlZQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ev8-1PtXWS7cr1srdjSlYFQEPFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:0b:e3:c6:cc:0f:b6:76:eb:05:ab:e8:8e:78:82:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12ff3ed4fb57592edcaf5b2b7634a56054043c50
        Validity
            Not Before: Apr 27 07:00:12 2025 GMT
            Not After : Apr 28 07:00:12 2025 GMT
        Subject: CN=446fec3167b6d549f299ac34d0a6ce43d61a39c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:70:12:7e:d2:a7:d2:ff:d0:5f:4b:ae:9b:77:
                    2a:75:af:68:84:e2:f7:15:d8:97:6a:34:c6:bd:75:
                    c1:98:0b:98:4a:e1:f6:74:bf:e9:58:b1:16:75:db:
                    65:5c:76:6c:46:4a:ee:58:e2:85:e3:73:8b:98:54:
                    da:fe:6c:52:aa:f3:50:8d:fd:67:37:40:b4:c1:fd:
                    f0:41:70:6c:4e:38:2a:1c:e2:4c:8a:09:d1:56:76:
                    b6:a0:85:35:ab:2c:61:7e:95:12:b0:73:de:7d:17:
                    e4:ee:c2:33:32:9b:d8:9f:91:2f:b6:6a:bc:b8:f6:
                    8f:75:53:53:80:a6:69:df:2c:9e:f3:8e:4e:8b:b9:
                    bd:9a:71:ca:37:b4:d2:ed:82:d9:16:3e:e7:45:0f:
                    f8:dc:72:a1:ee:3c:2a:14:82:4a:34:b6:f8:49:02:
                    f9:10:04:4b:4a:1d:3f:da:38:17:40:ab:6a:5f:fe:
                    83:09:f6:ab:d7:76:28:44:d4:84:c3:11:2f:15:29:
                    01:7c:eb:f0:1b:23:f3:f9:b0:55:33:9c:1a:34:30:
                    d8:fc:7a:06:a6:c0:47:56:c6:3d:f4:56:96:80:40:
                    82:ac:c9:44:2d:f8:24:02:ae:d6:e3:69:27:59:13:
                    72:fe:46:77:2b:b8:cf:99:26:0e:2b:0b:cc:ac:3e:
                    b8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:6F:EC:31:67:B6:D5:49:F2:99:AC:34:D0:A6:CE:43:D6:1A:39:C0
            X509v3 Authority Key Identifier:
                keyid:12:FF:3E:D4:FB:57:59:2E:DC:AF:5B:2B:76:34:A5:60:54:04:3C:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ev8-1PtXWS7cr1srdjSlYFQEPFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:0f:9d:70:44:c5:d9:8f:62:5b:b3:5c:b6:52:3b:2d:c5:fc:
         35:0a:a4:e4:1c:f5:dc:95:d9:00:39:b5:72:2b:f3:8c:62:ff:
         4b:76:21:4a:ff:db:c7:0b:dd:35:0a:a5:5f:0c:a4:7a:cb:d2:
         65:70:16:4a:82:f3:ee:cf:87:d6:27:ea:ea:14:f8:e0:b0:49:
         19:f2:d9:86:e5:3c:0c:f6:2f:7c:7c:19:dd:e2:52:73:29:c1:
         82:fd:7c:ed:9c:4b:0a:e8:4d:f9:d2:63:f1:dd:57:9d:4b:e3:
         86:46:12:d1:a0:d1:cd:2e:fd:95:64:07:95:c5:cb:19:b6:dd:
         39:1e:eb:96:12:53:7d:cb:c8:43:fb:60:8f:bf:cf:e5:f3:0c:
         73:d8:97:9d:30:49:b6:ce:7f:1c:27:85:49:27:3b:49:a6:f5:
         6b:9d:3e:c2:95:92:b5:82:79:0e:d4:cc:e1:84:d0:9c:cc:4b:
         df:cb:1f:13:c7:44:a0:4e:71:94:4e:8b:55:7e:b0:3d:f3:6a:
         18:f6:16:a8:61:57:e4:3f:c2:3c:ee:4e:d8:9f:fa:c0:1a:ca:
         99:99:d2:f4:1f:4e:43:4c:d3:bc:4d:f7:37:43:f0:69:22:df:
         a4:59:48:8e:5d:5a:9b:42:1d:65:20:b5:f8:3e:a0:3f:a5:b2:
         49:a2:4d:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2C+PGzA+2dusFq+iOeIIFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyZmYzZWQ0ZmI1NzU5MmVkY2FmNWIyYjc2MzRhNTYwNTQw
NDNjNTAwHhcNMjUwNDI3MDcwMDEyWhcNMjUwNDI4MDcwMDEyWjAzMTEwLwYDVQQD
Eyg0NDZmZWMzMTY3YjZkNTQ5ZjI5OWFjMzRkMGE2Y2U0M2Q2MWEzOWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXASftKn0v/QX0uum3cqda9ohOL3
FdiXajTGvXXBmAuYSuH2dL/pWLEWddtlXHZsRkruWOKF43OLmFTa/mxSqvNQjf1n
N0C0wf3wQXBsTjgqHOJMignRVna2oIU1qyxhfpUSsHPefRfk7sIzMpvYn5Evtmq8
uPaPdVNTgKZp3yye845Oi7m9mnHKN7TS7YLZFj7nRQ/43HKh7jwqFIJKNLb4SQL5
EARLSh0/2jgXQKtqX/6DCfar13YoRNSEwxEvFSkBfOvwGyPz+bBVM5waNDDY/HoG
psBHVsY99FaWgECCrMlELfgkAq7W42knWRNy/kZ3K7jPmSYOKwvMrD64NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFERv7DFnttVJ8pmsNNCmzkPWGjnAMB8GA1UdIwQY
MBaAFBL/PtT7V1ku3K9bK3Y0pWBUBDxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXY4LTFQdFhXUzdjcjFzcmRqU2xZRlFFUEZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8xNGU1NjEtOGZiNi00NTQ0LTk0Yjct
YjBhMDA3YzIyNGQ0LzEvRXY4LTFQdFhXUzdjcjFzcmRqU2xZRlFFUEZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8xNGU1NjEtOGZiNi00NTQ0LTk0YjctYjBhMDA3YzIyNGQ0
LzEvRXY4LTFQdFhXUzdjcjFzcmRqU2xZRlFFUEZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATw+dcETF
2Y9iW7NctlI7LcX8NQqk5Bz13JXZADm1civzjGL/S3YhSv/bxwvdNQqlXwykesvS
ZXAWSoLz7s+H1ifq6hT44LBJGfLZhuU8DPYvfHwZ3eJScynBgv187ZxLCuhN+dJj
8d1XnUvjhkYS0aDRzS79lWQHlcXLGbbdOR7rlhJTfcvIQ/tgj7/P5fMMc9iXnTBJ
ts5/HCeFSSc7Sab1a50+wpWStYJ5DtTM4YTQnMxL38sfE8dEoE5xlE6LVX6wPfNq
GPYWqGFX5D/CPO5O2J/6wBrKmZnS9B9OQ0zTvE33N0PwaSLfpFlIjl1am0IdZSC1
+D6gP6WySaJNQg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 10:36:02 2025 by rpki-client