Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft
File:                     1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft (raw, json)
Hash identifier:          S3oOrijUp5YQaAzfuRlkEfB/A4d628kxSQY1M6AmT7U=
Subject key identifier:   BA:3E:03:18:0E:19:C8:7F:6D:ED:6B:9C:DE:4C:F2:AF:47:20:7E:8C
Authority key identifier: FB:0F:7E:BD:25:F6:AF:46:37:82:2E:FF:48:B2:78:B1:8C:70:6F:82
Certificate issuer:       /CN=fb0f7ebd25f6af4637822eff48b278b18c706f82
Certificate serial:       0197B77CB6A6C8F35664E50095BF364D103B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft
Manifest number:          1544
Signing time:             Sat 28 Jun 2025 17:01:33 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:33 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:33 +0000
Files and hashes:         1: 1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.crl (hash: nxkifyDzNFvC3Mk5xETbS/70FsvNr55/qnTxKXx7nGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 17:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:b6:a6:c8:f3:56:64:e5:00:95:bf:36:4d:10:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb0f7ebd25f6af4637822eff48b278b18c706f82
        Validity
            Not Before: Jun 28 17:01:33 2025 GMT
            Not After : Jun 29 17:01:33 2025 GMT
        Subject: CN=ba3e03180e19c87f6ded6b9cde4cf2af47207e8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:5f:e6:0e:9f:cc:69:7b:12:73:c8:10:68:56:
                    6a:53:93:6e:f2:12:79:4a:07:de:8f:a5:62:cd:f2:
                    c1:19:b4:c2:f0:f4:c1:dc:f0:2d:78:b0:f2:be:ec:
                    e9:6b:74:f3:89:69:a1:49:17:37:01:33:ad:7f:5e:
                    40:9f:e8:4f:45:df:c4:01:d0:62:fc:85:f0:f8:63:
                    84:56:14:1b:a1:2a:64:b7:c0:ee:b5:b2:ea:94:c7:
                    28:23:13:25:4a:77:0f:4e:db:73:75:ce:22:90:32:
                    dc:72:87:87:c2:dd:ba:2f:5f:0f:e0:14:38:1b:21:
                    28:15:42:82:16:08:3c:20:d5:48:ef:ed:33:19:08:
                    60:68:be:5e:44:54:89:08:2c:4a:27:a2:48:1a:9e:
                    57:ed:59:6d:41:b9:22:f6:6a:60:b2:3a:59:30:f7:
                    41:67:e2:bd:ed:b1:f9:7d:9f:42:0b:20:e7:9f:08:
                    04:b2:f6:f9:20:77:aa:5e:e4:cd:ab:02:a4:5c:2e:
                    36:54:1f:b0:9d:09:cc:ce:9c:83:bd:48:f9:6b:16:
                    03:77:04:ee:59:61:98:ca:68:12:6d:71:98:c8:5c:
                    83:e1:0f:37:93:c1:e1:3d:c8:e0:61:d3:8e:fb:30:
                    2b:61:3d:40:b8:04:f3:17:a6:07:39:a5:60:22:d8:
                    c8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:3E:03:18:0E:19:C8:7F:6D:ED:6B:9C:DE:4C:F2:AF:47:20:7E:8C
            X509v3 Authority Key Identifier:
                keyid:FB:0F:7E:BD:25:F6:AF:46:37:82:2E:FF:48:B2:78:B1:8C:70:6F:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:f5:6a:fc:cf:6b:4b:fa:bd:24:21:d4:d8:de:3b:47:6b:28:
         31:ce:d7:0f:3c:c9:ae:0e:49:ef:58:c2:12:02:ff:30:cc:79:
         6a:a1:42:14:57:9e:0a:4b:4a:a0:a0:54:8f:2d:29:9f:b1:6b:
         1f:a2:04:31:4c:29:75:7c:70:d2:cf:be:d8:a3:84:4e:2e:b8:
         76:cc:fe:4d:00:17:dc:cd:a2:ec:89:77:1f:35:09:c6:e7:81:
         ca:29:ba:3d:16:dd:46:83:04:33:67:4a:59:b6:1e:9f:04:20:
         d3:fd:fe:69:d4:7b:a2:68:7c:b3:8d:3d:8b:d5:0b:b3:00:f7:
         35:b5:cc:69:c5:db:10:f1:eb:ee:77:82:c6:da:3c:63:be:ab:
         8c:41:37:9d:6d:15:35:bf:c1:d1:32:63:ca:ef:f4:06:27:cc:
         e2:5b:51:d2:cc:b2:aa:6b:8e:09:25:b8:a7:c0:29:5b:5e:ed:
         a2:3d:99:2c:57:17:7e:3f:b3:a0:10:e6:aa:9c:46:e1:d1:fd:
         d6:21:db:8c:9a:00:c6:62:36:38:09:e1:68:fa:33:c3:98:9f:
         34:85:a9:f7:bd:16:ce:58:34:ad:1a:ca:32:c1:b6:e0:3c:43:
         8e:01:d2:4e:d4:ea:3b:68:49:79:71:53:06:e5:cb:79:fe:ff:
         fc:90:c5:ff
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZe3fLamyPNWZOUAlb82TRA7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMGY3ZWJkMjVmNmFmNDYzNzgyMmVmZjQ4YjI3OGIxOGM3
MDZmODIwHhcNMjUwNjI4MTcwMTMzWhcNMjUwNjI5MTcwMTMzWjAzMTEwLwYDVQQD
EyhiYTNlMDMxODBlMTljODdmNmRlZDZiOWNkZTRjZjJhZjQ3MjA3ZThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7l/mDp/MaXsSc8gQaFZqU5Nu8hJ5
Sgfej6VizfLBGbTC8PTB3PAteLDyvuzpa3TziWmhSRc3ATOtf15An+hPRd/EAdBi
/IXw+GOEVhQboSpkt8DutbLqlMcoIxMlSncPTttzdc4ikDLccoeHwt26L18P4BQ4
GyEoFUKCFgg8INVI7+0zGQhgaL5eRFSJCCxKJ6JIGp5X7VltQbki9mpgsjpZMPdB
Z+K97bH5fZ9CCyDnnwgEsvb5IHeqXuTNqwKkXC42VB+wnQnMzpyDvUj5axYDdwTu
WWGYymgSbXGYyFyD4Q83k8HhPcjgYdOO+zArYT1AuATzF6YHOaVgItjIFwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLo+AxgOGch/be1rnN5M8q9HIH6MMB8GA1UdIwQY
MBaAFPsPfr0l9q9GN4Iu/0iyeLGMcG+CMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS13OS12U1gycjBZM2dpN19TTEo0c1l4d2I0SS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvZTIwOTk3LWExZWUtNDFkZS04Nzhj
LTIxODA1NDA3YjkwYy8xLzEtdzktdlNYMnIwWTNnaTdfU0xKNHNZeHdiNEkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzA1L2UyMDk5Ny1hMWVlLTQxZGUtODc4Yy0yMTgwNTQwN2I5
MGMvMS8xLXc5LXZTWDJyMFkzZ2k3X1NMSjRzWXh3YjRJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATPVq
/M9rS/q9JCHU2N47R2soMc7XDzzJrg5J71jCEgL/MMx5aqFCFFeeCktKoKBUjy0p
n7FrH6IEMUwpdXxw0s++2KOETi64dsz+TQAX3M2i7Il3HzUJxueByim6PRbdRoME
M2dKWbYenwQg0/3+adR7omh8s409i9ULswD3NbXMacXbEPHr7neCxto8Y76rjEE3
nW0VNb/B0TJjyu/0BifM4ltR0syyqmuOCSW4p8ApW17toj2ZLFcXfj+zoBDmqpxG
4dH91iHbjJoAxmI2OAnhaPozw5ifNIWp970Wzlg0rRrKMsG24DxDjgHSTtTqO2hJ
eXFTBuXLef7//JDF/w==
-----END CERTIFICATE-----
Generated at Sun Jun 29 02:08:12 2025 by rpki-client