Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft
File:                     xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft (raw, json)
Hash identifier:          n42b2g4i0wbgS526fF7fcw77zwRo2shcElOaslaPrCA=
Subject key identifier:   EF:BE:1F:07:6A:62:24:6D:24:CF:27:B3:53:9C:6C:49:C6:D4:62:8F
Authority key identifier: C6:CC:F9:CE:97:D1:23:2E:01:62:FC:CD:43:F6:0C:4E:79:83:1E:1A
Certificate issuer:       /CN=c6ccf9ce97d1232e0162fccd43f60c4e79831e1a
Certificate serial:       0196AFFBAD4DEA8B07CB270C4BB64AFE7E86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xsz5zpfRIy4BYvzNQ_YMTnmDHho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft
Manifest number:          0C8B
Signing time:             Thu 08 May 2025 13:00:28 +0000
Manifest this update:     Thu 08 May 2025 13:00:28 +0000
Manifest next update:     Fri 09 May 2025 13:00:28 +0000
Files and hashes:         1: xsz5zpfRIy4BYvzNQ_YMTnmDHho.crl (hash: 6q43Ll4z8Y2iil6Vutu88/jXy03vk5jTvnP4NfnRS0Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xsz5zpfRIy4BYvzNQ_YMTnmDHho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 13:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:af:fb:ad:4d:ea:8b:07:cb:27:0c:4b:b6:4a:fe:7e:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6ccf9ce97d1232e0162fccd43f60c4e79831e1a
        Validity
            Not Before: May  8 13:00:28 2025 GMT
            Not After : May  9 13:00:28 2025 GMT
        Subject: CN=efbe1f076a62246d24cf27b3539c6c49c6d4628f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:91:9e:97:29:21:4f:63:d1:bc:61:33:92:71:
                    aa:98:2c:65:ab:22:64:4d:cf:79:41:66:a8:12:38:
                    de:86:9a:f0:ca:91:a4:fc:c3:82:de:12:58:dd:26:
                    53:58:c8:21:0c:97:51:18:06:39:5c:a4:64:ea:45:
                    ef:aa:94:90:66:79:83:11:2c:79:bf:04:96:4e:76:
                    e4:79:8e:cf:f2:11:b3:83:fb:a9:30:37:e8:a1:f9:
                    06:44:f7:aa:65:f3:6b:5a:f4:94:a9:f1:99:17:ac:
                    8c:58:08:a4:b9:ce:aa:0f:39:3c:88:b7:77:d7:2a:
                    89:0b:33:e3:8f:4f:c0:fb:7a:95:0b:4f:76:70:79:
                    a0:18:f4:a8:92:1d:8f:d7:35:fa:53:88:bb:5c:9f:
                    d3:11:83:f3:d5:c7:fd:52:7d:84:fb:4e:b2:7f:89:
                    87:fa:40:c6:31:cf:58:24:03:f4:f8:05:14:ad:f8:
                    28:71:77:bc:2b:2c:1d:a1:47:fd:b0:33:6e:d7:f8:
                    59:ad:9a:11:9c:68:92:e3:db:a9:df:3d:a8:1d:d2:
                    20:2d:39:be:59:20:43:60:f3:a0:07:c9:eb:2d:37:
                    de:de:ce:5d:35:35:e0:09:ef:e6:ac:bd:fc:8c:f5:
                    12:5a:2e:8a:d0:7e:c7:21:97:9a:24:60:a5:30:c0:
                    22:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:BE:1F:07:6A:62:24:6D:24:CF:27:B3:53:9C:6C:49:C6:D4:62:8F
            X509v3 Authority Key Identifier:
                keyid:C6:CC:F9:CE:97:D1:23:2E:01:62:FC:CD:43:F6:0C:4E:79:83:1E:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsz5zpfRIy4BYvzNQ_YMTnmDHho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:2d:4d:fb:91:e8:e2:a4:a7:30:34:ca:50:0f:43:27:b5:8e:
         76:d5:33:8f:60:d1:4f:e1:4e:fc:78:e3:30:7a:a1:a9:92:59:
         8e:03:34:f8:0f:23:2b:aa:ce:fb:15:56:03:5a:5a:77:09:b0:
         54:d8:eb:2e:48:19:ab:2f:c2:fc:42:8f:17:1e:3b:d1:07:33:
         9d:54:79:fb:8a:44:13:76:9a:40:4c:86:4f:2a:96:2f:30:53:
         ca:52:f2:4e:fc:98:0b:12:85:4d:96:f2:6c:79:1d:70:3d:72:
         4e:e7:f0:f6:e0:94:04:63:92:3e:f4:1f:e3:c3:c5:d7:4c:5c:
         49:ea:c1:c1:13:3a:b4:52:a5:f1:6c:c1:be:fd:4d:eb:a2:27:
         b9:43:04:7f:1a:4d:bb:2f:59:6e:c2:69:c0:ee:3d:09:81:cc:
         12:ca:34:de:0f:8c:bd:a6:9c:b8:87:b7:27:2e:dc:16:55:b3:
         d5:43:e1:60:b3:92:44:e3:d2:5c:6a:a9:bc:21:a8:67:d7:d2:
         dc:04:b4:8c:70:cb:5e:25:c8:5a:21:c8:63:67:19:3d:ef:c0:
         b9:10:6f:9c:22:46:c6:e3:e2:d8:0b:ae:60:0d:0c:02:9c:58:
         e2:a9:64:3b:5e:46:e6:01:5a:dc:b7:1a:e3:03:76:d4:1b:b3:
         8c:3b:42:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZav+61N6osHyycMS7ZK/n6GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2Y2NmOWNlOTdkMTIzMmUwMTYyZmNjZDQzZjYwYzRlNzk4
MzFlMWEwHhcNMjUwNTA4MTMwMDI4WhcNMjUwNTA5MTMwMDI4WjAzMTEwLwYDVQQD
EyhlZmJlMWYwNzZhNjIyNDZkMjRjZjI3YjM1MzljNmM0OWM2ZDQ2MjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5GelykhT2PRvGEzknGqmCxlqyJk
Tc95QWaoEjjehprwypGk/MOC3hJY3SZTWMghDJdRGAY5XKRk6kXvqpSQZnmDESx5
vwSWTnbkeY7P8hGzg/upMDfoofkGRPeqZfNrWvSUqfGZF6yMWAikuc6qDzk8iLd3
1yqJCzPjj0/A+3qVC092cHmgGPSokh2P1zX6U4i7XJ/TEYPz1cf9Un2E+06yf4mH
+kDGMc9YJAP0+AUUrfgocXe8KywdoUf9sDNu1/hZrZoRnGiS49up3z2oHdIgLTm+
WSBDYPOgB8nrLTfe3s5dNTXgCe/mrL38jPUSWi6K0H7HIZeaJGClMMAisQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO++HwdqYiRtJM8ns1OcbEnG1GKPMB8GA1UdIwQY
MBaAFMbM+c6X0SMuAWL8zUP2DE55gx4aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHN6NXpwZlJJeTRCWXZ6TlFfWU1Ubm1ESGhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xODZiZjItZmI4OC00NzI4LWJmNjct
NWExZTVmYTczZTRkLzEveHN6NXpwZlJJeTRCWXZ6TlFfWU1Ubm1ESGhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8xODZiZjItZmI4OC00NzI4LWJmNjctNWExZTVmYTczZTRk
LzEveHN6NXpwZlJJeTRCWXZ6TlFfWU1Ubm1ESGhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjC1N+5Ho
4qSnMDTKUA9DJ7WOdtUzj2DRT+FO/HjjMHqhqZJZjgM0+A8jK6rO+xVWA1padwmw
VNjrLkgZqy/C/EKPFx470QcznVR5+4pEE3aaQEyGTyqWLzBTylLyTvyYCxKFTZby
bHkdcD1yTufw9uCUBGOSPvQf48PF10xcSerBwRM6tFKl8WzBvv1N66InuUMEfxpN
uy9ZbsJpwO49CYHMEso03g+MvaacuIe3Jy7cFlWz1UPhYLOSROPSXGqpvCGoZ9fS
3AS0jHDLXiXIWiHIY2cZPe/AuRBvnCJGxuPi2AuuYA0MApxY4qlkO15G5gFa3Lca
4wN21BuzjDtCQg==
-----END CERTIFICATE-----
Generated at Thu May 8 22:58:39 2025 by rpki-client