Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
File:                     tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft (raw, json)
Hash identifier:          NILyGDz6QQFP6hHn1phbvTVezkSmJGa61JeuvFke710=
Subject key identifier:   6E:59:09:F6:E3:EF:40:0B:F4:F3:4B:E3:E7:AF:7A:00:C8:7B:B8:49
Authority key identifier: B5:7C:8A:C0:55:C5:74:D8:CF:13:52:2B:96:4B:92:31:4D:21:1E:AE
Certificate issuer:       /CN=b57c8ac055c574d8cf13522b964b92314d211eae
Certificate serial:       01968A377E922C6FF88F68B676E6E02795FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
Manifest number:          1266
Signing time:             Thu 01 May 2025 05:00:14 +0000
Manifest this update:     Thu 01 May 2025 05:00:14 +0000
Manifest next update:     Fri 02 May 2025 05:00:14 +0000
Files and hashes:         1: tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl (hash: 6ZgRJ8W0tv2UiaYz8Slb7l6sEKwfxOdKT81kRewBCKE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 05:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8a:37:7e:92:2c:6f:f8:8f:68:b6:76:e6:e0:27:95:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57c8ac055c574d8cf13522b964b92314d211eae
        Validity
            Not Before: May  1 05:00:14 2025 GMT
            Not After : May  2 05:00:14 2025 GMT
        Subject: CN=6e5909f6e3ef400bf4f34be3e7af7a00c87bb849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:55:e3:d6:fd:28:32:aa:dc:a7:4f:a1:1d:0d:
                    60:c6:79:c4:97:aa:2c:96:d6:9e:ae:20:db:a8:d5:
                    f6:20:4f:22:fa:96:ef:22:0f:38:20:90:70:a4:fe:
                    e3:c8:8c:f8:f6:ef:7c:45:4d:15:bc:63:bd:36:ff:
                    08:55:35:e4:90:66:fb:b3:38:e6:b0:94:fa:53:5b:
                    da:3f:0b:8d:ff:95:27:55:95:f4:1b:09:2c:7e:20:
                    ca:8a:c1:d2:cb:e3:c2:ea:5d:08:5f:e5:ff:cf:16:
                    c4:2d:02:c9:4a:f1:d8:52:82:cf:f8:51:63:b8:c1:
                    fe:88:b0:02:81:31:53:ad:32:a2:14:0d:e7:13:ce:
                    6c:8e:63:18:76:19:8c:62:6f:c5:65:30:a1:5d:5c:
                    a6:8e:16:bb:15:fd:bb:64:de:c3:4d:b9:b6:5c:62:
                    71:2b:98:4e:6b:15:20:97:a0:9b:6d:15:95:43:f3:
                    48:b0:8c:60:5e:1f:f1:79:ad:5c:3e:ce:d2:93:2f:
                    c7:91:ee:45:9b:bb:19:78:ba:1e:44:c8:52:9c:6d:
                    23:28:88:e5:51:a3:c0:f3:85:54:da:7f:27:9d:e7:
                    9c:63:f1:7e:05:3b:31:ae:12:4a:ed:10:5c:0e:53:
                    05:2e:c4:15:b0:d0:b1:b0:02:75:63:d7:99:94:2f:
                    12:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:59:09:F6:E3:EF:40:0B:F4:F3:4B:E3:E7:AF:7A:00:C8:7B:B8:49
            X509v3 Authority Key Identifier:
                keyid:B5:7C:8A:C0:55:C5:74:D8:CF:13:52:2B:96:4B:92:31:4D:21:1E:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:7e:48:5c:a5:3b:69:ac:44:6f:6b:8d:a7:c7:4c:01:2b:e4:
         81:7f:a1:a6:ff:e3:76:a9:14:f0:87:8e:cb:3c:1b:b1:a4:c4:
         23:9e:e2:30:c9:11:ec:90:d6:0d:bc:58:df:84:39:37:b2:3b:
         42:98:f0:fd:5f:3e:cf:19:47:9c:8c:c1:6a:2b:67:d1:bd:dd:
         3b:8c:0e:a1:43:f4:54:ea:32:da:c9:df:fb:12:c6:28:9b:60:
         87:9e:aa:d5:ab:99:26:c6:ce:37:63:ab:23:44:f2:5b:73:72:
         bb:95:86:bd:99:b7:50:f5:a2:53:13:38:94:3f:fd:e7:e8:72:
         ef:bb:ef:0a:89:7d:1f:ac:d2:6d:7e:e7:9f:6d:08:ea:c3:c4:
         fb:ff:af:b7:b7:f6:05:66:9d:11:71:e8:09:c6:99:25:1f:52:
         0d:16:fb:bd:27:60:da:d8:6b:10:a7:b5:c4:7b:21:a7:c7:78:
         9c:09:83:9e:57:5a:38:84:84:5f:3a:2a:61:e9:25:3f:57:32:
         fc:ba:11:9e:ac:71:df:a8:a0:43:dd:9a:07:81:3b:1f:5a:76:
         a6:f6:c2:5e:12:9e:4d:39:6d:6a:14:53:2b:6f:f3:3f:6b:4a:
         6b:7c:3e:6f:ac:78:89:41:99:0f:4b:d6:17:59:b3:12:5b:ce:
         3e:55:4c:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaKN36SLG/4j2i2dubgJ5X6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1N2M4YWMwNTVjNTc0ZDhjZjEzNTIyYjk2NGI5MjMxNGQy
MTFlYWUwHhcNMjUwNTAxMDUwMDE0WhcNMjUwNTAyMDUwMDE0WjAzMTEwLwYDVQQD
Eyg2ZTU5MDlmNmUzZWY0MDBiZjRmMzRiZTNlN2FmN2EwMGM4N2JiODQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVXj1v0oMqrcp0+hHQ1gxnnEl6os
ltaeriDbqNX2IE8i+pbvIg84IJBwpP7jyIz49u98RU0VvGO9Nv8IVTXkkGb7szjm
sJT6U1vaPwuN/5UnVZX0GwksfiDKisHSy+PC6l0IX+X/zxbELQLJSvHYUoLP+FFj
uMH+iLACgTFTrTKiFA3nE85sjmMYdhmMYm/FZTChXVymjha7Ff27ZN7DTbm2XGJx
K5hOaxUgl6CbbRWVQ/NIsIxgXh/xea1cPs7Sky/Hke5Fm7sZeLoeRMhSnG0jKIjl
UaPA84VU2n8nneecY/F+BTsxrhJK7RBcDlMFLsQVsNCxsAJ1Y9eZlC8S2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG5ZCfbj70AL9PNL4+evegDIe7hJMB8GA1UdIwQY
MBaAFLV8isBVxXTYzxNSK5ZLkjFNIR6uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFh5S3dGWEZkTmpQRTFJcmxrdVNNVTBoSHE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8yODlmNDAtYTIzMy00YzYzLWI5M2Ut
OGU0YzdjN2I2NTA0LzEvdFh5S3dGWEZkTmpQRTFJcmxrdVNNVTBoSHE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8yODlmNDAtYTIzMy00YzYzLWI5M2UtOGU0YzdjN2I2NTA0
LzEvdFh5S3dGWEZkTmpQRTFJcmxrdVNNVTBoSHE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVn5IXKU7
aaxEb2uNp8dMASvkgX+hpv/jdqkU8IeOyzwbsaTEI57iMMkR7JDWDbxY34Q5N7I7
Qpjw/V8+zxlHnIzBaitn0b3dO4wOoUP0VOoy2snf+xLGKJtgh56q1auZJsbON2Or
I0TyW3Nyu5WGvZm3UPWiUxM4lD/95+hy77vvCol9H6zSbX7nn20I6sPE+/+vt7f2
BWadEXHoCcaZJR9SDRb7vSdg2thrEKe1xHshp8d4nAmDnldaOISEXzoqYeklP1cy
/LoRnqxx36igQ92aB4E7H1p2pvbCXhKeTTltahRTK2/zP2tKa3w+b6x4iUGZD0vW
F1mzElvOPlVMFQ==
-----END CERTIFICATE-----
Generated at Thu May 1 12:27:55 2025 by rpki-client