Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
File:                     7oAELqPLNIc97Q6wZJWU4v8jkIE.mft (raw, json)
Hash identifier:          w+LggjB6jHp+r4ehFAHGQT8VujMMsRWuY0MaM1euOfM=
Subject key identifier:   8B:79:8A:E9:FF:B6:DF:7D:57:3B:05:BC:E6:3E:87:AD:DC:C2:EB:E5
Authority key identifier: EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81
Certificate issuer:       /CN=ee80042ea3cb34873ded0eb0649594e2ff239081
Certificate serial:       0197B6A1806E2E0AE2B660F90B77A1515FD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
Manifest number:          09C1
Signing time:             Sat 28 Jun 2025 13:02:06 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:06 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:06 +0000
Files and hashes:         1: 7oAELqPLNIc97Q6wZJWU4v8jkIE.crl (hash: 7Y5PM1YPtu3SZVPLNFuIq1e1mG8q12mhsjowhhm2R08=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:80:6e:2e:0a:e2:b6:60:f9:0b:77:a1:51:5f:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee80042ea3cb34873ded0eb0649594e2ff239081
        Validity
            Not Before: Jun 28 13:02:06 2025 GMT
            Not After : Jun 29 13:02:06 2025 GMT
        Subject: CN=8b798ae9ffb6df7d573b05bce63e87addcc2ebe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:40:fc:75:23:d8:43:d3:a0:17:4f:0f:8e:a5:
                    ac:7c:c3:82:0f:7c:23:ed:84:a2:a9:e6:fb:3d:03:
                    b0:5f:60:45:5f:46:fe:a7:d6:8a:a5:cc:6c:0f:4c:
                    dd:c0:a7:91:ef:d1:08:df:f2:bf:8c:97:54:22:ef:
                    d2:75:dd:50:3d:b0:1b:ed:98:ad:5a:01:57:19:89:
                    41:c7:dc:3e:c0:ce:39:c0:ff:f0:90:16:ad:66:f4:
                    0b:44:47:ea:6b:e5:e2:a7:d0:3e:23:cc:dd:28:61:
                    92:9d:44:4a:21:77:ec:42:d1:83:53:de:f4:48:78:
                    59:e3:46:79:06:ce:2b:26:ac:54:23:41:d8:94:5b:
                    ae:50:d3:ff:c4:5c:dd:a4:68:17:ff:6b:84:aa:6c:
                    43:ae:0e:90:68:8d:b1:7e:dc:45:e4:ee:ea:ae:47:
                    28:e0:d9:d3:e2:bc:3c:f2:61:f0:e5:f2:8a:51:f8:
                    24:79:2d:00:0e:97:49:47:a4:ba:10:6c:f7:ad:d5:
                    a1:33:2c:bf:cd:a5:1f:bc:1f:91:74:95:6e:a2:ca:
                    11:b6:bd:27:f2:9f:e1:72:17:6b:dc:28:aa:0e:39:
                    4d:c9:29:ec:f5:43:6d:13:b8:fc:a6:5b:e2:af:2c:
                    92:ba:90:ff:16:b0:34:7a:7a:81:f7:dd:82:48:03:
                    b5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:79:8A:E9:FF:B6:DF:7D:57:3B:05:BC:E6:3E:87:AD:DC:C2:EB:E5
            X509v3 Authority Key Identifier:
                keyid:EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:f5:1a:c7:4e:f5:2c:f6:5f:4d:48:e0:29:7c:21:fa:63:04:
         12:73:d5:4d:df:d1:13:80:e1:cd:40:79:8c:99:b0:8b:f2:d1:
         4a:bc:50:1a:f2:e4:e5:41:df:6e:c5:67:fa:14:4e:8b:f1:51:
         ad:95:25:bc:3c:2a:ff:12:b8:1d:5f:ad:ff:f1:ad:4a:a6:69:
         76:d9:1c:92:9f:e5:7d:63:8e:23:a1:58:a8:be:30:cd:01:6c:
         28:d9:d7:83:4e:59:8a:b4:26:3c:33:0d:a8:45:2d:ac:90:d0:
         d4:e9:47:6f:72:2f:dd:c4:11:bb:3c:3a:2a:69:84:9b:77:6f:
         12:7b:ce:45:25:4d:f1:e9:69:a4:02:4f:14:46:68:62:35:be:
         33:99:d1:7a:c5:30:36:85:9b:f9:c3:cd:ba:3b:56:51:ec:fe:
         77:32:d2:8a:5d:6b:43:e6:96:ae:d8:b1:8d:67:94:e0:d1:87:
         1e:e6:58:fc:b7:7f:59:c8:08:a2:27:01:04:da:f5:df:0a:38:
         ad:8f:23:c3:fa:64:d3:54:87:a5:f9:47:48:b3:ef:58:cb:22:
         1f:5b:9e:f5:2d:b8:89:c2:73:9a:e3:23:78:86:a1:fc:79:63:
         a6:c5:bc:2e:d1:78:77:d6:b5:26:96:04:b3:6c:bb:3b:3f:77:
         6e:f3:cf:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oYBuLgritmD5C3ehUV/RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlODAwNDJlYTNjYjM0ODczZGVkMGViMDY0OTU5NGUyZmYy
MzkwODEwHhcNMjUwNjI4MTMwMjA2WhcNMjUwNjI5MTMwMjA2WjAzMTEwLwYDVQQD
Eyg4Yjc5OGFlOWZmYjZkZjdkNTczYjA1YmNlNjNlODdhZGRjYzJlYmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ED8dSPYQ9OgF08PjqWsfMOCD3wj
7YSiqeb7PQOwX2BFX0b+p9aKpcxsD0zdwKeR79EI3/K/jJdUIu/Sdd1QPbAb7Zit
WgFXGYlBx9w+wM45wP/wkBatZvQLREfqa+Xip9A+I8zdKGGSnURKIXfsQtGDU970
SHhZ40Z5Bs4rJqxUI0HYlFuuUNP/xFzdpGgX/2uEqmxDrg6QaI2xftxF5O7qrkco
4NnT4rw88mHw5fKKUfgkeS0ADpdJR6S6EGz3rdWhMyy/zaUfvB+RdJVuosoRtr0n
8p/hchdr3CiqDjlNySns9UNtE7j8plviryySupD/FrA0enqB992CSAO1FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIt5iun/tt99VzsFvOY+h63cwuvlMB8GA1UdIwQY
MBaAFO6ABC6jyzSHPe0OsGSVlOL/I5CBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN29BRUxxUExOSWM5N1E2d1pKV1U0djhqa0lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9mNWUyYTctNWRiYi00YjM2LTk2MTQt
ZDUxNjE3ZTAyOTgzLzEvN29BRUxxUExOSWM5N1E2d1pKV1U0djhqa0lFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9mNWUyYTctNWRiYi00YjM2LTk2MTQtZDUxNjE3ZTAyOTgz
LzEvN29BRUxxUExOSWM5N1E2d1pKV1U0djhqa0lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY/Uax071
LPZfTUjgKXwh+mMEEnPVTd/RE4DhzUB5jJmwi/LRSrxQGvLk5UHfbsVn+hROi/FR
rZUlvDwq/xK4HV+t//GtSqZpdtkckp/lfWOOI6FYqL4wzQFsKNnXg05ZirQmPDMN
qEUtrJDQ1OlHb3Iv3cQRuzw6KmmEm3dvEnvORSVN8elppAJPFEZoYjW+M5nResUw
NoWb+cPNujtWUez+dzLSil1rQ+aWrtixjWeU4NGHHuZY/Ld/WcgIoicBBNr13wo4
rY8jw/pk01SHpflHSLPvWMsiH1ue9S24icJzmuMjeIah/HljpsW8LtF4d9a1JpYE
s2y7Oz93bvPPXg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:30:15 2025 by rpki-client