Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.mft
File:                     coe8FdmVjihdWllYuOZJfl_OkfU.mft (raw, json)
Hash identifier:          12m47ySd5D2LHutRHF4eePEBaN261l5RoOxJyah1ghA=
Subject key identifier:   9E:78:97:5B:7F:F7:E8:A1:19:A7:9D:54:CF:0E:FB:44:4A:33:81:2B
Authority key identifier: 72:87:BC:15:D9:95:8E:28:5D:5A:59:58:B8:E6:49:7E:5F:CE:91:F5
Certificate issuer:       /CN=7287bc15d9958e285d5a5958b8e6497e5fce91f5
Certificate serial:       01967A5737C23EAFC019ADD4E47847F386BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/coe8FdmVjihdWllYuOZJfl_OkfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.mft
Manifest number:          09F1
Signing time:             Mon 28 Apr 2025 03:00:58 +0000
Manifest this update:     Mon 28 Apr 2025 03:00:58 +0000
Manifest next update:     Tue 29 Apr 2025 03:00:58 +0000
Files and hashes:         1: coe8FdmVjihdWllYuOZJfl_OkfU.crl (hash: HoBnfygv3+PnhIPsqLJLuA6QXjIESEbovF5XXtay1tY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/coe8FdmVjihdWllYuOZJfl_OkfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 03:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7a:57:37:c2:3e:af:c0:19:ad:d4:e4:78:47:f3:86:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7287bc15d9958e285d5a5958b8e6497e5fce91f5
        Validity
            Not Before: Apr 28 03:00:58 2025 GMT
            Not After : Apr 29 03:00:58 2025 GMT
        Subject: CN=9e78975b7ff7e8a119a79d54cf0efb444a33812b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1f:00:00:d3:51:dc:67:df:fb:a8:9b:7d:d7:
                    40:40:d4:bd:47:4a:49:2c:7b:a1:31:4f:ef:a9:dc:
                    7a:1c:e8:dd:02:da:81:5c:fe:1a:e9:8f:dc:b3:a3:
                    ee:3a:ea:dd:e9:36:8a:01:9e:d6:98:0d:49:39:29:
                    0a:f6:41:9c:ab:9c:4d:2f:f2:8e:f7:b5:62:6e:5e:
                    cc:f3:27:0a:03:7b:15:ea:b5:c5:5e:b1:7a:ab:77:
                    2d:02:d0:96:5a:5d:da:2e:b7:62:27:db:7e:94:61:
                    d0:52:dd:8c:12:82:97:a7:79:ef:8c:a2:99:01:e2:
                    e3:4b:3c:4d:8b:2a:c1:0e:ed:11:38:ae:d3:a4:a9:
                    87:96:ec:85:0c:bf:bb:3e:7e:3b:44:12:c1:2a:d5:
                    75:38:23:35:7e:ae:28:03:96:a1:6e:14:4d:2d:26:
                    ee:e8:31:3a:ed:d5:ed:0f:93:86:36:56:6e:e5:be:
                    f1:ea:8e:79:e2:6f:28:75:ee:bf:e0:1c:9f:64:cd:
                    cf:53:f6:85:cf:a4:ad:2b:c6:72:95:4b:6d:16:cc:
                    32:ae:4d:e6:f9:46:26:ba:c4:b2:3d:92:79:85:47:
                    37:ac:9b:e6:a1:1f:54:54:a8:cc:ec:12:22:42:25:
                    d4:31:04:c4:b9:a0:1a:51:fa:ed:d0:2d:05:73:2a:
                    32:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:78:97:5B:7F:F7:E8:A1:19:A7:9D:54:CF:0E:FB:44:4A:33:81:2B
            X509v3 Authority Key Identifier:
                keyid:72:87:BC:15:D9:95:8E:28:5D:5A:59:58:B8:E6:49:7E:5F:CE:91:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/coe8FdmVjihdWllYuOZJfl_OkfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:b6:ed:73:2e:c3:d4:28:05:84:ea:89:63:bf:58:bd:d1:98:
         09:5e:a6:9d:d9:3e:82:cc:79:a1:1e:76:70:0c:71:2a:91:38:
         0f:d6:24:dd:7d:ba:cd:93:b5:32:18:06:62:03:79:29:b0:01:
         58:77:70:a3:30:05:a2:8e:af:be:00:23:f9:06:e8:f3:0d:8f:
         cc:f7:20:54:65:b6:c2:d2:ac:2b:9a:43:9d:a2:51:2b:4c:9e:
         cf:5b:ad:3a:bf:ee:83:b5:dc:3a:1b:dd:28:b0:f2:2e:69:ec:
         10:21:36:6c:71:1e:83:e8:21:c3:1e:8f:d6:47:62:7f:30:d4:
         ab:be:3e:d5:e0:b0:ed:84:fc:d4:02:db:c5:85:c6:70:a1:22:
         1c:23:b1:0b:7a:ea:56:91:7a:4d:d4:6a:f6:af:96:61:25:96:
         fe:34:1d:6e:19:a7:80:9f:e3:89:88:9c:84:85:eb:6b:dc:18:
         d2:33:50:61:de:cc:27:8f:24:7e:71:80:5f:29:45:f7:46:9e:
         4a:15:6d:6c:68:cf:3e:b6:ab:0f:9e:16:cb:24:7a:66:93:3b:
         31:2d:3e:4c:1d:38:78:bf:71:79:55:e4:ef:3c:74:cb:26:43:
         7c:a0:cb:2c:a8:a1:60:ef:15:db:04:f9:55:d0:b9:20:79:30:
         81:e3:e4:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ6VzfCPq/AGa3U5HhH84a9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyODdiYzE1ZDk5NThlMjg1ZDVhNTk1OGI4ZTY0OTdlNWZj
ZTkxZjUwHhcNMjUwNDI4MDMwMDU4WhcNMjUwNDI5MDMwMDU4WjAzMTEwLwYDVQQD
Eyg5ZTc4OTc1YjdmZjdlOGExMTlhNzlkNTRjZjBlZmI0NDRhMzM4MTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnB8AANNR3Gff+6ibfddAQNS9R0pJ
LHuhMU/vqdx6HOjdAtqBXP4a6Y/cs6PuOurd6TaKAZ7WmA1JOSkK9kGcq5xNL/KO
97Vibl7M8ycKA3sV6rXFXrF6q3ctAtCWWl3aLrdiJ9t+lGHQUt2MEoKXp3nvjKKZ
AeLjSzxNiyrBDu0ROK7TpKmHluyFDL+7Pn47RBLBKtV1OCM1fq4oA5ahbhRNLSbu
6DE67dXtD5OGNlZu5b7x6o554m8ode6/4ByfZM3PU/aFz6StK8ZylUttFswyrk3m
+UYmusSyPZJ5hUc3rJvmoR9UVKjM7BIiQiXUMQTEuaAaUfrt0C0FcyoyPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ54l1t/9+ihGaedVM8O+0RKM4ErMB8GA1UdIwQY
MBaAFHKHvBXZlY4oXVpZWLjmSX5fzpH1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY29lOEZkbVZqaWhkV2xsWXVPWkpmbF9Pa2ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy85ZTVkZTQtZjY1MC00NGQ3LWJkMzAt
N2VjMjEzY2IxMTVmLzEvY29lOEZkbVZqaWhkV2xsWXVPWkpmbF9Pa2ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy85ZTVkZTQtZjY1MC00NGQ3LWJkMzAtN2VjMjEzY2IxMTVm
LzEvY29lOEZkbVZqaWhkV2xsWXVPWkpmbF9Pa2ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApbbtcy7D
1CgFhOqJY79YvdGYCV6mndk+gsx5oR52cAxxKpE4D9Yk3X26zZO1MhgGYgN5KbAB
WHdwozAFoo6vvgAj+Qbo8w2PzPcgVGW2wtKsK5pDnaJRK0yez1utOr/ug7XcOhvd
KLDyLmnsECE2bHEeg+ghwx6P1kdifzDUq74+1eCw7YT81ALbxYXGcKEiHCOxC3rq
VpF6TdRq9q+WYSWW/jQdbhmngJ/jiYichIXra9wY0jNQYd7MJ48kfnGAXylF90ae
ShVtbGjPPrarD54WyyR6ZpM7MS0+TB04eL9xeVXk7zx0yyZDfKDLLKihYO8V2wT5
VdC5IHkwgePkKw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 12:41:01 2025 by rpki-client