Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
File:                     1-cuQlMt82hOL0BABPrnswzGQMEE.mft (raw, json)
Hash identifier:          YbN3BN8bjIrfn/kfasJZUk1rmKtu0z433ku2EyI9dkc=
Subject key identifier:   36:33:85:02:E2:18:3B:4A:04:AD:4E:C1:1F:5D:94:92:0F:B2:E4:CD
Authority key identifier: F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
Certificate issuer:       /CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Certificate serial:       01968E143ED3BD99F5C230478C9DA1E745F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
Manifest number:          151E
Signing time:             Thu 01 May 2025 23:00:13 +0000
Manifest this update:     Thu 01 May 2025 23:00:13 +0000
Manifest next update:     Fri 02 May 2025 23:00:13 +0000
Files and hashes:         1: 1-cuQlMt82hOL0BABPrnswzGQMEE.crl (hash: 3AGKh3RXLT2FIvmCZhbpkMrQHuBGg5hrXGMi5xKSAp8=)
                          2: YHDrFWwxkrS_T2zm-XD8OnCCk3I.roa (hash: ats4DX7q3HbDaXBiSmUVMOKuQb0H1KPc5eA6NgFMmhA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8e:14:3e:d3:bd:99:f5:c2:30:47:8c:9d:a1:e7:45:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9cb9094cb7cda138bd010013eb9ecc331903041
        Validity
            Not Before: May  1 23:00:13 2025 GMT
            Not After : May  2 23:00:13 2025 GMT
        Subject: CN=36338502e2183b4a04ad4ec11f5d94920fb2e4cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0b:6c:c6:10:6f:24:2f:8e:a4:da:d3:de:b7:
                    e3:3d:50:3b:e2:16:24:25:7a:b7:99:66:bf:5f:02:
                    9a:89:f6:7f:ea:e8:be:a4:73:05:60:82:8c:dc:11:
                    e0:3d:78:13:fd:17:cd:3a:1c:d9:d8:ef:de:f3:18:
                    ea:7b:76:c0:3e:71:a0:e5:71:1c:70:7e:f3:9d:7c:
                    b7:bb:f0:11:a0:36:c6:fb:a4:13:c8:55:df:ca:58:
                    8d:80:01:e3:f5:0e:fc:db:08:e5:8d:a9:13:13:4c:
                    ff:3b:bc:89:d4:1c:1e:fb:db:f6:8f:53:70:a2:cb:
                    e5:fb:5e:80:52:c3:e6:8c:74:8a:e8:d2:ed:c2:dd:
                    30:46:d7:d3:48:f1:ad:d6:f5:20:87:15:da:e0:57:
                    39:59:4f:b0:e0:d5:e4:52:95:2c:3e:e7:e6:b8:fa:
                    53:7c:3c:7e:ce:ff:b1:9e:b3:cf:c7:aa:07:58:ec:
                    77:f2:43:c7:7c:96:90:ef:7a:22:3f:a7:a5:8b:2d:
                    a9:71:90:73:5b:ea:e3:b4:86:90:87:4f:54:32:9c:
                    49:40:c4:a6:18:07:63:87:5f:7f:e0:f9:de:ac:89:
                    89:c1:a6:4a:6c:81:d5:fb:3c:9a:9f:01:c2:a1:3d:
                    be:2c:44:ef:f3:98:0c:61:70:a2:55:0b:8e:fb:89:
                    cf:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:33:85:02:E2:18:3B:4A:04:AD:4E:C1:1F:5D:94:92:0F:B2:E4:CD
            X509v3 Authority Key Identifier:
                keyid:F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:e1:76:7f:e2:34:08:06:83:17:b3:7c:85:bd:fb:4c:5f:ac:
         24:32:cb:87:f7:4d:ca:0a:92:02:ee:cf:67:98:be:3e:83:e7:
         69:f5:0c:7c:f1:ff:09:15:02:fe:98:68:1c:65:7c:37:c5:77:
         96:a0:12:4b:62:5f:79:ec:17:36:4f:e9:32:0b:bf:79:40:42:
         8d:e8:e5:ad:d7:e9:3f:38:df:89:32:35:41:66:65:bf:97:25:
         49:66:f4:f4:cf:c0:7c:75:ab:eb:50:7b:16:84:af:0d:66:d3:
         b6:33:74:22:10:a3:bf:ae:f4:47:13:ca:85:bd:e9:15:c6:5f:
         e8:66:be:ce:67:d7:26:bc:ea:d5:37:d6:01:3f:85:48:15:17:
         24:e9:6c:8a:3c:29:d1:20:ec:c1:ae:0a:a4:1b:0f:51:26:8b:
         cb:7a:17:fc:c1:47:34:90:8a:ca:e0:08:28:b0:90:2e:42:26:
         ee:97:5b:a2:6e:34:f2:64:38:88:de:37:a7:aa:7e:86:dd:e3:
         a4:ef:ff:e8:46:e7:d0:9a:99:20:0a:2c:20:b4:fd:6d:2f:c9:
         50:1a:50:8c:a2:da:5b:13:b8:c1:62:a4:fb:af:f2:8a:4e:62:
         0c:88:50:49:a9:75:52:71:3e:77:f3:ed:4d:4c:ba:72:fe:9e:
         f4:47:92:9d
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZaOFD7TvZn1wjBHjJ2h50X2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5Y2I5MDk0Y2I3Y2RhMTM4YmQwMTAwMTNlYjllY2MzMzE5
MDMwNDEwHhcNMjUwNTAxMjMwMDEzWhcNMjUwNTAyMjMwMDEzWjAzMTEwLwYDVQQD
EygzNjMzODUwMmUyMTgzYjRhMDRhZDRlYzExZjVkOTQ5MjBmYjJlNGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AtsxhBvJC+OpNrT3rfjPVA74hYk
JXq3mWa/XwKaifZ/6ui+pHMFYIKM3BHgPXgT/RfNOhzZ2O/e8xjqe3bAPnGg5XEc
cH7znXy3u/ARoDbG+6QTyFXfyliNgAHj9Q782wjljakTE0z/O7yJ1Bwe+9v2j1Nw
osvl+16AUsPmjHSK6NLtwt0wRtfTSPGt1vUghxXa4Fc5WU+w4NXkUpUsPufmuPpT
fDx+zv+xnrPPx6oHWOx38kPHfJaQ73oiP6eliy2pcZBzW+rjtIaQh09UMpxJQMSm
GAdjh19/4PnerImJwaZKbIHV+zyanwHCoT2+LETv85gMYXCiVQuO+4nPVwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDYzhQLiGDtKBK1OwR9dlJIPsuTNMB8GA1UdIwQY
MBaAFPnLkJTLfNoTi9AQAT657MMxkDBBMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1jdVFsTXQ4MmhPTDBCQUJQcm5zd3pHUU1FRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvNjI0NTQ2LTRhYzgtNGRiZS04Njk3
LWFhY2U4NzhiYWI2NS8xLzEtY3VRbE10ODJoT0wwQkFCUHJuc3d6R1FNRUUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2VhLzYyNDU0Ni00YWM4LTRkYmUtODY5Ny1hYWNlODc4YmFi
NjUvMS8xLWN1UWxNdDgyaE9MMEJBQlBybnN3ekdRTUVFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHeF2
f+I0CAaDF7N8hb37TF+sJDLLh/dNygqSAu7PZ5i+PoPnafUMfPH/CRUC/phoHGV8
N8V3lqASS2JfeewXNk/pMgu/eUBCjejlrdfpPzjfiTI1QWZlv5clSWb09M/AfHWr
61B7FoSvDWbTtjN0IhCjv670RxPKhb3pFcZf6Ga+zmfXJrzq1TfWAT+FSBUXJOls
ijwp0SDswa4KpBsPUSaLy3oX/MFHNJCKyuAIKLCQLkIm7pdbom408mQ4iN43p6p+
ht3jpO//6Ebn0JqZIAosILT9bS/JUBpQjKLaWxO4wWKk+6/yik5iDIhQSal1UnE+
d/PtTUy6cv6e9EeSnQ==
-----END CERTIFICATE-----
Generated at Fri May 2 08:55:41 2025 by rpki-client