Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
File:                     7kDaG04w_7sypOSkt61zHAMeRCk.mft (raw, json)
Hash identifier:          hGPVtYFys83rc/Nl/D8CTPT6Sysm8zUnQ7rgz692VEI=
Subject key identifier:   8F:F0:40:10:76:AE:AB:B4:C7:3D:C2:51:88:63:8D:18:5E:0D:7A:3C
Authority key identifier: EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29
Certificate issuer:       /CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429
Certificate serial:       0197B632B51A732DCD3702A71A2D12CE2231
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
Manifest number:          0448
Signing time:             Sat 28 Jun 2025 11:01:05 +0000
Manifest this update:     Sat 28 Jun 2025 11:01:05 +0000
Manifest next update:     Sun 29 Jun 2025 11:01:05 +0000
Files and hashes:         1: 7kDaG04w_7sypOSkt61zHAMeRCk.crl (hash: fkSMd0lKmEZB9nYEVyqe51NB4/pmNto5s8vjiptMncY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:32:b5:1a:73:2d:cd:37:02:a7:1a:2d:12:ce:22:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429
        Validity
            Not Before: Jun 28 11:01:05 2025 GMT
            Not After : Jun 29 11:01:05 2025 GMT
        Subject: CN=8ff0401076aeabb4c73dc25188638d185e0d7a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0f:a8:81:9d:49:d5:64:14:97:72:82:71:9a:
                    5b:65:ae:6b:42:8d:f1:58:6e:b7:20:a9:f4:ce:ed:
                    36:6b:8a:4d:f1:51:4d:3c:11:94:bc:81:db:b1:b5:
                    ab:eb:c3:2b:9d:d1:ec:1e:4e:51:ea:51:1e:bb:33:
                    a3:00:16:5c:6d:e3:6a:e1:6e:fc:95:b4:79:f2:1b:
                    dd:13:3f:7a:5e:b1:ba:f9:59:ca:17:8f:0c:24:e7:
                    f9:b9:00:32:c3:2b:88:a9:83:37:97:b5:c9:f5:38:
                    84:67:77:cb:33:bf:6b:e1:59:10:b5:a8:e7:92:3e:
                    47:10:13:e5:ac:85:2d:03:03:d9:5a:95:2f:42:e9:
                    26:72:d3:e0:a2:68:87:30:08:44:c5:d6:81:c0:a5:
                    ae:92:8e:8d:a5:f3:32:a6:79:67:c6:75:65:8a:c9:
                    7c:10:67:64:15:83:1b:19:33:f8:a7:67:ac:67:93:
                    b4:0b:c9:f0:69:17:fb:a2:47:2a:fd:8f:42:7e:f1:
                    3e:23:41:8d:24:74:e4:a9:e8:a7:16:4d:3d:37:25:
                    53:f3:a6:49:c7:cc:8a:e2:86:6d:ef:ce:7c:6d:c8:
                    d9:59:bb:d4:69:d1:90:a7:1b:eb:6f:c3:ce:39:ac:
                    48:0a:42:c4:c3:88:bc:94:2d:97:51:8f:6b:4d:fb:
                    38:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F0:40:10:76:AE:AB:B4:C7:3D:C2:51:88:63:8D:18:5E:0D:7A:3C
            X509v3 Authority Key Identifier:
                keyid:EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:42:ac:17:6d:42:72:ce:46:15:bc:81:13:05:d4:98:b2:7e:
         c5:ab:b4:82:bc:1e:ec:f0:76:7d:58:91:d1:4d:9e:dd:75:3c:
         08:18:da:3b:98:94:e7:53:9f:0a:a3:ff:28:f3:43:d3:ad:35:
         b7:ee:f6:3c:06:a4:7a:fd:2b:27:22:8e:e2:d5:2c:ed:7c:68:
         c8:59:46:1f:8a:de:90:9a:64:4d:9a:3c:68:33:8e:40:e7:2b:
         00:05:84:58:bb:6e:79:46:f6:f5:78:bb:e2:ee:ce:b9:35:fc:
         63:4d:73:0c:f9:cf:95:62:4c:02:70:f2:83:e1:0a:ea:ee:c9:
         00:1a:69:9c:65:34:c5:23:e3:46:1f:2c:62:1a:d4:6e:dd:46:
         a5:57:fb:1a:53:6e:0e:12:d9:d9:e4:ca:a5:63:04:e4:b7:f5:
         56:0e:96:ec:a8:06:b1:3d:37:41:ea:30:c8:0e:ec:3e:06:d2:
         b5:7b:19:71:33:f9:c3:11:0e:33:06:17:9f:2b:b5:14:35:4d:
         23:87:e5:7c:58:32:00:5b:a8:4c:92:16:01:ca:58:c4:bb:a8:
         0e:81:29:e7:6c:34:16:e7:36:e7:2b:60:95:f0:ae:af:9f:0e:
         97:14:b7:96:01:6b:49:5a:15:76:08:9c:59:1e:40:d6:57:0f:
         c6:07:7c:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2MrUacy3NNwKnGi0SziIxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlNDBkYTFiNGUzMGZmYmIzMmE0ZTRhNGI3YWQ3MzFjMDMx
ZTQ0MjkwHhcNMjUwNjI4MTEwMTA1WhcNMjUwNjI5MTEwMTA1WjAzMTEwLwYDVQQD
Eyg4ZmYwNDAxMDc2YWVhYmI0YzczZGMyNTE4ODYzOGQxODVlMGQ3YTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmw+ogZ1J1WQUl3KCcZpbZa5rQo3x
WG63IKn0zu02a4pN8VFNPBGUvIHbsbWr68MrndHsHk5R6lEeuzOjABZcbeNq4W78
lbR58hvdEz96XrG6+VnKF48MJOf5uQAywyuIqYM3l7XJ9TiEZ3fLM79r4VkQtajn
kj5HEBPlrIUtAwPZWpUvQukmctPgomiHMAhExdaBwKWuko6NpfMypnlnxnVlisl8
EGdkFYMbGTP4p2esZ5O0C8nwaRf7okcq/Y9CfvE+I0GNJHTkqeinFk09NyVT86ZJ
x8yK4oZt7858bcjZWbvUadGQpxvrb8POOaxICkLEw4i8lC2XUY9rTfs4hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/wQBB2rqu0xz3CUYhjjRheDXo8MB8GA1UdIwQY
MBaAFO5A2htOMP+7MqTkpLetcxwDHkQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2tEYUcwNHdfN3N5cE9Ta3Q2MXpIQU1lUkNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9kYzYyMjktNWVkNS00ZjJkLWIyMDEt
M2Q2NTc4MTQwZmMxLzEvN2tEYUcwNHdfN3N5cE9Ta3Q2MXpIQU1lUkNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9kYzYyMjktNWVkNS00ZjJkLWIyMDEtM2Q2NTc4MTQwZmMx
LzEvN2tEYUcwNHdfN3N5cE9Ta3Q2MXpIQU1lUkNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU0KsF21C
cs5GFbyBEwXUmLJ+xau0grwe7PB2fViR0U2e3XU8CBjaO5iU51OfCqP/KPND0601
t+72PAakev0rJyKO4tUs7XxoyFlGH4rekJpkTZo8aDOOQOcrAAWEWLtueUb29Xi7
4u7OuTX8Y01zDPnPlWJMAnDyg+EK6u7JABppnGU0xSPjRh8sYhrUbt1GpVf7GlNu
DhLZ2eTKpWME5Lf1Vg6W7KgGsT03QeowyA7sPgbStXsZcTP5wxEOMwYXnyu1FDVN
I4flfFgyAFuoTJIWAcpYxLuoDoEp52w0Fuc25ytglfCur58OlxS3lgFrSVoVdgic
WR5A1lcPxgd83g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:23:28 2025 by rpki-client