Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
File:                     4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft (raw, json)
Hash identifier:          na08dfn58NlMH4emSnEkIceRO5UouXSd8Tau2knLHpM=
Subject key identifier:   EC:E2:93:9D:CA:DA:BC:BC:B2:33:0F:DD:89:18:7C:D2:77:5F:1D:A3
Authority key identifier: E1:D3:C9:AF:6C:F5:2B:8A:39:0B:58:F0:0B:14:A8:87:10:33:69:44
Certificate issuer:       /CN=e1d3c9af6cf52b8a390b58f00b14a88710336944
Certificate serial:       019680222FE97DD19B41D9717BA8639A137C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
Manifest number:          0F8E
Signing time:             Tue 29 Apr 2025 06:00:46 +0000
Manifest this update:     Tue 29 Apr 2025 06:00:46 +0000
Manifest next update:     Wed 30 Apr 2025 06:00:46 +0000
Files and hashes:         1: 4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl (hash: sC4pDHrrC90bgTYPNNa1m1rJRd7peSw3YoPWg1FOyFw=)
                          2: EIPXP4SEmPbV8aQA2-5L0Ta_OhQ.roa (hash: YwImDgJjuNmka436Jqvx4IjnyNxYmhqYhI9Yd1gMUo8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 06:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:80:22:2f:e9:7d:d1:9b:41:d9:71:7b:a8:63:9a:13:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1d3c9af6cf52b8a390b58f00b14a88710336944
        Validity
            Not Before: Apr 29 06:00:46 2025 GMT
            Not After : Apr 30 06:00:46 2025 GMT
        Subject: CN=ece2939dcadabcbcb2330fdd89187cd2775f1da3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:70:d8:18:50:c0:97:56:83:ab:17:6d:64:4d:
                    be:10:fb:84:f4:91:3e:57:1e:6f:d4:96:8e:4a:32:
                    74:00:49:40:eb:86:21:ec:9f:e8:a0:de:b5:a3:54:
                    e9:f6:2d:2d:cb:54:dc:cc:e8:e2:c6:6e:dd:bc:df:
                    d9:29:b5:6f:44:d2:1d:86:6f:c3:b2:a0:35:8b:9f:
                    aa:0a:17:ed:27:3d:34:2a:c3:1e:79:f8:d4:d8:de:
                    e7:c9:9a:3f:93:17:9b:1e:d7:64:14:39:08:16:36:
                    68:ad:46:47:e5:f3:78:30:05:a2:23:a1:a0:d8:a7:
                    e5:fe:ef:43:5e:45:63:48:36:7c:89:2f:98:4d:a0:
                    cb:3e:10:09:fc:3f:61:98:ef:5b:8d:be:dd:66:c6:
                    b0:84:c2:3f:4a:50:bc:7b:27:f9:a8:f0:8c:e2:5f:
                    35:a2:ba:43:c0:38:6a:b1:d0:8b:37:fb:61:9b:70:
                    7b:06:70:2e:45:60:41:34:20:d9:78:f4:4c:53:ef:
                    66:a3:51:bb:09:57:4c:2b:a3:f4:62:5d:a1:64:ba:
                    2b:5e:44:c8:5b:77:55:71:72:43:6d:5b:8f:c2:9b:
                    26:af:a0:4b:e6:c7:c0:8b:0c:9f:e2:ab:a4:6a:4f:
                    6b:db:65:01:28:f6:f3:1d:e6:4a:7c:da:37:93:45:
                    c7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E2:93:9D:CA:DA:BC:BC:B2:33:0F:DD:89:18:7C:D2:77:5F:1D:A3
            X509v3 Authority Key Identifier:
                keyid:E1:D3:C9:AF:6C:F5:2B:8A:39:0B:58:F0:0B:14:A8:87:10:33:69:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:5a:4a:b3:d0:24:42:93:d6:04:1e:60:f1:50:48:29:48:df:
         79:ac:fc:70:b1:f9:53:af:f1:5f:af:d1:1d:b2:8b:4a:ea:f2:
         67:51:99:87:8f:2c:6e:55:2c:ce:b1:d4:e1:fc:00:cd:f5:89:
         70:d5:2f:45:ae:99:79:71:d2:03:d1:f2:a7:d7:a7:b9:c7:62:
         e0:9d:0d:1f:0a:06:2c:b2:75:35:23:59:e8:bb:a5:cd:2d:4a:
         e0:3b:19:6b:3a:ae:47:c3:9c:85:9b:0e:98:b4:2d:78:0a:14:
         25:c4:8e:9e:ab:f0:a0:8a:96:cf:0c:6e:aa:7b:d7:ac:96:be:
         6b:24:74:e4:a7:2b:2c:aa:7f:b2:8b:f8:8c:30:40:b0:ee:2b:
         05:8a:b7:1e:e2:07:b4:f0:15:65:32:9c:86:e2:45:be:b0:00:
         57:79:f8:49:65:5e:b4:87:9c:63:98:d8:70:e4:dc:ac:8f:b9:
         80:26:d6:af:27:5e:5f:fb:6d:00:59:1b:18:5e:e3:85:6c:90:
         84:da:2b:09:1e:eb:68:c1:e1:06:d8:6c:6e:5c:6c:2f:fc:89:
         af:bf:4d:eb:2c:9c:e9:53:b0:b7:19:02:24:19:97:ff:f5:4c:
         b9:9e:25:a3:4e:39:c4:fd:a4:44:ca:2c:53:53:9d:16:09:3e:
         e9:91:6c:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaAIi/pfdGbQdlxe6hjmhN8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZDNjOWFmNmNmNTJiOGEzOTBiNThmMDBiMTRhODg3MTAz
MzY5NDQwHhcNMjUwNDI5MDYwMDQ2WhcNMjUwNDMwMDYwMDQ2WjAzMTEwLwYDVQQD
EyhlY2UyOTM5ZGNhZGFiY2JjYjIzMzBmZGQ4OTE4N2NkMjc3NWYxZGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3DYGFDAl1aDqxdtZE2+EPuE9JE+
Vx5v1JaOSjJ0AElA64Yh7J/ooN61o1Tp9i0ty1TczOjixm7dvN/ZKbVvRNIdhm/D
sqA1i5+qChftJz00KsMeefjU2N7nyZo/kxebHtdkFDkIFjZorUZH5fN4MAWiI6Gg
2Kfl/u9DXkVjSDZ8iS+YTaDLPhAJ/D9hmO9bjb7dZsawhMI/SlC8eyf5qPCM4l81
orpDwDhqsdCLN/thm3B7BnAuRWBBNCDZePRMU+9mo1G7CVdMK6P0Yl2hZLorXkTI
W3dVcXJDbVuPwpsmr6BL5sfAiwyf4qukak9r22UBKPbzHeZKfNo3k0XHQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzik53K2ry8sjMP3YkYfNJ3Xx2jMB8GA1UdIwQY
MBaAFOHTya9s9SuKOQtY8AsUqIcQM2lEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGRQSnIyejFLNG81QzFqd0N4U29oeEF6YVVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yYzBkY2QtOGU0Ny00NDJjLWIwZjQt
Y2M3Njc5ZjE4MDJmLzEvNGRQSnIyejFLNG81QzFqd0N4U29oeEF6YVVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8yYzBkY2QtOGU0Ny00NDJjLWIwZjQtY2M3Njc5ZjE4MDJm
LzEvNGRQSnIyejFLNG81QzFqd0N4U29oeEF6YVVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn1pKs9Ak
QpPWBB5g8VBIKUjfeaz8cLH5U6/xX6/RHbKLSuryZ1GZh48sblUszrHU4fwAzfWJ
cNUvRa6ZeXHSA9Hyp9enucdi4J0NHwoGLLJ1NSNZ6LulzS1K4DsZazquR8OchZsO
mLQteAoUJcSOnqvwoIqWzwxuqnvXrJa+ayR05KcrLKp/sov4jDBAsO4rBYq3HuIH
tPAVZTKchuJFvrAAV3n4SWVetIecY5jYcOTcrI+5gCbWrydeX/ttAFkbGF7jhWyQ
hNorCR7raMHhBthsblxsL/yJr79N6yyc6VOwtxkCJBmX//VMuZ4lo045xP2kRMos
U1OdFgk+6ZFsPw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 13:48:34 2025 by rpki-client