Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
File:                     EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft (raw, json)
Hash identifier:          7PpsmvVmHoei4cXYT0MnCp5BKGTT+9s4jtBzogiavuU=
Subject key identifier:   0D:B3:C0:B6:C7:6C:58:8B:36:75:A6:81:3B:BE:9A:14:F7:C6:27:BE
Authority key identifier: 10:51:50:90:F8:50:E3:37:EB:3B:11:8A:15:7E:4E:39:08:3B:77:A6
Certificate issuer:       /CN=10515090f850e337eb3b118a157e4e39083b77a6
Certificate serial:       01968390F7D06E9E80F1707B78A42BEA941D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
Manifest number:          1518
Signing time:             Tue 29 Apr 2025 22:00:37 +0000
Manifest this update:     Tue 29 Apr 2025 22:00:37 +0000
Manifest next update:     Wed 30 Apr 2025 22:00:37 +0000
Files and hashes:         1: EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl (hash: D4hZlauW/Q9zrM6N3KEHkw0OKSLf6usQGccRblBQYz8=)
                          2: oNabnVBprWmOKAwf55I_S596kpA.roa (hash: oPO4zSXw/czstjjrx9MIpyMDwMbOHA6CB7TjTGFGR/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 22:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:83:90:f7:d0:6e:9e:80:f1:70:7b:78:a4:2b:ea:94:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10515090f850e337eb3b118a157e4e39083b77a6
        Validity
            Not Before: Apr 29 22:00:37 2025 GMT
            Not After : Apr 30 22:00:37 2025 GMT
        Subject: CN=0db3c0b6c76c588b3675a6813bbe9a14f7c627be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:95:ff:d2:94:d6:db:a7:d7:33:93:2b:7d:6e:
                    b9:b5:01:c2:ec:7f:0b:40:9d:60:77:ac:11:fc:8c:
                    75:69:24:10:f1:b4:83:56:ce:4c:3c:bd:11:3d:7d:
                    99:5e:3e:4e:0f:bf:8e:13:16:28:9e:06:d2:b2:b9:
                    1d:9b:55:d2:ac:b7:b3:f5:41:b6:a6:2d:a0:79:55:
                    73:5a:fd:28:56:cd:65:c1:fe:85:1c:ff:a9:3d:37:
                    47:3d:b0:3e:c1:b2:e3:49:44:9d:ba:66:da:8b:d6:
                    72:43:53:47:cf:19:cb:66:9e:96:3e:64:9a:e1:4b:
                    83:40:52:b8:0b:4d:53:74:73:04:70:ec:17:65:d8:
                    86:c8:15:6b:df:ca:36:cb:52:2a:ab:4d:69:91:22:
                    bc:3f:74:6f:17:5d:30:82:b8:11:cd:b1:de:95:97:
                    dc:f1:6f:54:1a:79:fe:6f:a4:bb:23:cb:6b:31:9f:
                    78:9f:5c:59:a7:fd:70:e4:a9:03:90:d9:0e:a2:96:
                    d4:83:34:6f:76:e6:12:6b:71:79:d3:09:ee:51:3f:
                    7d:38:15:22:81:27:a9:06:b0:9d:e6:5c:1c:9b:09:
                    ee:7c:89:c9:46:71:f3:23:0e:34:86:7b:20:8b:c5:
                    a0:db:77:a0:e2:a3:54:c7:d5:07:81:5e:64:ef:bc:
                    69:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B3:C0:B6:C7:6C:58:8B:36:75:A6:81:3B:BE:9A:14:F7:C6:27:BE
            X509v3 Authority Key Identifier:
                keyid:10:51:50:90:F8:50:E3:37:EB:3B:11:8A:15:7E:4E:39:08:3B:77:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:0a:bc:f1:9b:a3:71:63:dd:0d:5f:7d:2f:1a:d0:06:2b:d2:
         f9:da:6f:c8:81:7d:73:be:dd:60:7d:2c:9e:b7:0b:69:32:ca:
         f5:f0:07:a1:c1:9e:38:81:7a:ec:cd:50:b4:a2:2c:84:b8:b8:
         54:b3:2e:10:97:47:42:b7:c3:8a:3c:e9:b4:4b:40:b4:0a:1a:
         c1:52:7e:ef:eb:59:7a:5d:a2:44:39:05:71:5c:e9:82:b5:68:
         35:86:31:f2:05:a5:90:a8:4b:24:2b:13:bc:49:36:ce:6b:b1:
         d8:47:33:c9:a5:4c:e2:a6:a3:e4:f4:ed:41:6f:82:43:cb:61:
         fe:6a:37:10:79:d3:ea:8c:b6:20:cf:f5:a0:03:d5:8d:48:24:
         09:a8:6a:a0:72:fa:b8:40:07:67:37:e9:ef:9d:a1:54:1f:69:
         54:8c:1f:bd:cf:97:0b:87:36:b8:5e:cf:ce:d4:19:07:6c:c4:
         e0:46:de:46:e4:ec:1a:b9:18:b5:18:88:ff:9d:b3:e2:9e:0a:
         29:30:7d:61:aa:55:a6:dc:a8:6e:1f:ec:5e:05:3f:67:2c:d6:
         ce:ee:db:1e:b3:98:76:50:8c:e5:4f:fb:45:39:b3:b0:18:45:
         ce:12:f7:38:0d:3d:9b:b5:f8:f5:96:2a:e7:43:d6:98:18:6c:
         fa:2b:1d:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDkPfQbp6A8XB7eKQr6pQdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNTE1MDkwZjg1MGUzMzdlYjNiMTE4YTE1N2U0ZTM5MDgz
Yjc3YTYwHhcNMjUwNDI5MjIwMDM3WhcNMjUwNDMwMjIwMDM3WjAzMTEwLwYDVQQD
EygwZGIzYzBiNmM3NmM1ODhiMzY3NWE2ODEzYmJlOWExNGY3YzYyN2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpX/0pTW26fXM5MrfW65tQHC7H8L
QJ1gd6wR/Ix1aSQQ8bSDVs5MPL0RPX2ZXj5OD7+OExYongbSsrkdm1XSrLez9UG2
pi2geVVzWv0oVs1lwf6FHP+pPTdHPbA+wbLjSUSdumbai9ZyQ1NHzxnLZp6WPmSa
4UuDQFK4C01TdHMEcOwXZdiGyBVr38o2y1Iqq01pkSK8P3RvF10wgrgRzbHelZfc
8W9UGnn+b6S7I8trMZ94n1xZp/1w5KkDkNkOopbUgzRvduYSa3F50wnuUT99OBUi
gSepBrCd5lwcmwnufInJRnHzIw40hnsgi8Wg23eg4qNUx9UHgV5k77xpGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2zwLbHbFiLNnWmgTu+mhT3xie+MB8GA1UdIwQY
MBaAFBBRUJD4UOM36zsRihV+TjkIO3emMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUZGUWtQaFE0emZyT3hHS0ZYNU9PUWc3ZDZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNDgyMmItNjE4NC00NmEwLWJjYzUt
OGYyOWYzZDk4MjE0LzEvRUZGUWtQaFE0emZyT3hHS0ZYNU9PUWc3ZDZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNDgyMmItNjE4NC00NmEwLWJjYzUtOGYyOWYzZDk4MjE0
LzEvRUZGUWtQaFE0emZyT3hHS0ZYNU9PUWc3ZDZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATQq88Zuj
cWPdDV99LxrQBivS+dpvyIF9c77dYH0snrcLaTLK9fAHocGeOIF67M1QtKIshLi4
VLMuEJdHQrfDijzptEtAtAoawVJ+7+tZel2iRDkFcVzpgrVoNYYx8gWlkKhLJCsT
vEk2zmux2EczyaVM4qaj5PTtQW+CQ8th/mo3EHnT6oy2IM/1oAPVjUgkCahqoHL6
uEAHZzfp752hVB9pVIwfvc+XC4c2uF7PztQZB2zE4EbeRuTsGrkYtRiI/52z4p4K
KTB9YapVptyobh/sXgU/ZyzWzu7bHrOYdlCM5U/7RTmzsBhFzhL3OA09m7X49ZYq
50PWmBhs+isd8Q==
-----END CERTIFICATE-----
Generated at Wed Apr 30 08:16:41 2025 by rpki-client