Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft
File:                     eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft (raw, json)
Hash identifier:          ofav1mxhbDp7mV5MhyFdcI5ulO196mVrrjYj6DEi3NY=
Subject key identifier:   57:ED:A9:C7:1A:21:94:25:A0:E2:C4:71:DE:15:3D:FA:88:84:F1:D2
Authority key identifier: 78:59:66:9C:2B:7C:0B:25:C0:7E:79:32:B8:A1:F9:8B:0B:BE:DC:4C
Certificate issuer:       /CN=7859669c2b7c0b25c07e7932b8a1f98b0bbedc4c
Certificate serial:       0197B6A082B30414600A4EA091D7F467CC25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft
Manifest number:          15B3
Signing time:             Sat 28 Jun 2025 13:01:01 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:01 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:01 +0000
Files and hashes:         1: eFlmnCt8CyXAfnkyuKH5iwu-3Ew.crl (hash: QU7t0KFY+7C4gtM8zHOs6VA/xo2CPVcCMfv6mwLwwrc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:82:b3:04:14:60:0a:4e:a0:91:d7:f4:67:cc:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7859669c2b7c0b25c07e7932b8a1f98b0bbedc4c
        Validity
            Not Before: Jun 28 13:01:01 2025 GMT
            Not After : Jun 29 13:01:01 2025 GMT
        Subject: CN=57eda9c71a219425a0e2c471de153dfa8884f1d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:99:bc:27:22:fd:cb:b0:ce:a3:e3:8b:32:9c:
                    62:d1:f1:5a:0c:bf:70:f5:98:c0:53:50:0f:8b:33:
                    a8:35:31:5f:a9:9a:be:eb:ec:40:de:e0:9a:67:0e:
                    ad:41:70:24:0d:1f:f1:91:00:4f:01:92:d9:40:eb:
                    83:20:7e:96:db:66:b3:5b:83:94:94:74:94:ef:e2:
                    b2:75:46:24:6a:0b:7a:e6:b7:e7:72:93:35:64:26:
                    d8:4b:a9:78:1f:95:5a:a8:bd:f7:49:31:a3:73:1f:
                    a8:72:f5:b5:10:03:0b:2e:59:51:f8:a5:fd:1b:84:
                    45:4e:5b:6e:e2:bc:2a:f2:ad:78:af:e5:13:42:bb:
                    d6:3c:43:97:e4:d1:d7:1d:2a:19:0e:1e:ba:d2:67:
                    1e:94:cd:2f:45:b2:cc:45:1f:18:8a:02:ac:35:1f:
                    8f:87:08:b8:49:e1:10:eb:fc:c0:4f:ac:d9:2f:8f:
                    21:fa:be:5e:18:50:b3:4b:a8:db:16:5c:9c:16:7e:
                    5d:f2:f5:1c:a6:2c:6d:89:de:b1:1a:4c:5b:b2:fe:
                    22:ef:a7:0c:0a:f8:04:08:05:78:fd:1c:0f:88:b8:
                    86:af:83:f2:e5:07:0f:fd:ea:a1:09:14:47:de:18:
                    35:e1:6e:ae:c5:30:c3:2e:56:53:92:6e:28:b2:a8:
                    63:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:ED:A9:C7:1A:21:94:25:A0:E2:C4:71:DE:15:3D:FA:88:84:F1:D2
            X509v3 Authority Key Identifier:
                keyid:78:59:66:9C:2B:7C:0B:25:C0:7E:79:32:B8:A1:F9:8B:0B:BE:DC:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:ab:34:b1:27:c3:3d:a2:c0:1e:f4:ba:bb:d2:5d:d3:79:e5:
         a7:72:f9:1b:0c:50:7e:77:99:da:34:d8:b2:4a:30:43:b9:58:
         98:8c:28:99:f6:40:7c:e7:46:0f:99:9f:04:00:16:6b:72:1f:
         af:5f:f1:dd:77:b5:9d:8a:cc:81:e8:c6:ed:b2:d0:46:03:11:
         db:60:d8:3e:e9:0a:00:75:3c:07:49:bd:ee:dd:ad:2d:c7:67:
         98:e9:58:3a:7c:45:03:92:d4:78:fd:4e:e4:46:52:3c:9f:eb:
         d4:68:7a:16:62:45:5b:e6:74:55:36:4c:cd:26:9d:96:72:55:
         ea:65:bc:de:ee:8f:8e:c3:bc:c6:cb:2e:73:6d:80:c2:ab:2e:
         20:79:89:c8:10:0f:76:25:a3:cf:77:77:94:08:5a:0f:3c:77:
         8b:6e:31:f8:1b:22:45:00:17:0d:6c:f0:0f:0d:e1:8a:46:57:
         1f:79:cd:cc:9f:0d:3f:67:3d:ab:ad:f8:7b:83:85:02:75:f6:
         44:0d:1e:45:af:bd:df:76:6d:ef:34:38:92:bc:10:1e:8c:cb:
         cd:0e:3c:01:8d:35:ab:64:4f:09:eb:74:88:51:3b:f9:41:e4:
         b1:85:a4:ef:59:c0:52:9c:4b:bf:a2:e8:51:1a:15:c5:aa:80:
         48:98:af:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oIKzBBRgCk6gkdf0Z8wlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4NTk2NjljMmI3YzBiMjVjMDdlNzkzMmI4YTFmOThiMGJi
ZWRjNGMwHhcNMjUwNjI4MTMwMTAxWhcNMjUwNjI5MTMwMTAxWjAzMTEwLwYDVQQD
Eyg1N2VkYTljNzFhMjE5NDI1YTBlMmM0NzFkZTE1M2RmYTg4ODRmMWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5m8JyL9y7DOo+OLMpxi0fFaDL9w
9ZjAU1APizOoNTFfqZq+6+xA3uCaZw6tQXAkDR/xkQBPAZLZQOuDIH6W22azW4OU
lHSU7+KydUYkagt65rfncpM1ZCbYS6l4H5VaqL33STGjcx+ocvW1EAMLLllR+KX9
G4RFTltu4rwq8q14r+UTQrvWPEOX5NHXHSoZDh660mcelM0vRbLMRR8YigKsNR+P
hwi4SeEQ6/zAT6zZL48h+r5eGFCzS6jbFlycFn5d8vUcpixtid6xGkxbsv4i76cM
CvgECAV4/RwPiLiGr4Py5QcP/eqhCRRH3hg14W6uxTDDLlZTkm4osqhjmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFftqccaIZQloOLEcd4VPfqIhPHSMB8GA1UdIwQY
MBaAFHhZZpwrfAslwH55Mrih+YsLvtxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUZsbW5DdDhDeVhBZm5reXVLSDVpd3UtM0V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS80YjU0OTUtMTA3Mi00ZWYzLTg2Njkt
ZmMzNTU5Njk2MjQ2LzEvZUZsbW5DdDhDeVhBZm5reXVLSDVpd3UtM0V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS80YjU0OTUtMTA3Mi00ZWYzLTg2NjktZmMzNTU5Njk2MjQ2
LzEvZUZsbW5DdDhDeVhBZm5reXVLSDVpd3UtM0V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHqs0sSfD
PaLAHvS6u9Jd03nlp3L5GwxQfneZ2jTYskowQ7lYmIwomfZAfOdGD5mfBAAWa3If
r1/x3Xe1nYrMgejG7bLQRgMR22DYPukKAHU8B0m97t2tLcdnmOlYOnxFA5LUeP1O
5EZSPJ/r1Gh6FmJFW+Z0VTZMzSadlnJV6mW83u6PjsO8xssuc22AwqsuIHmJyBAP
diWjz3d3lAhaDzx3i24x+BsiRQAXDWzwDw3hikZXH3nNzJ8NP2c9q634e4OFAnX2
RA0eRa+933Zt7zQ4krwQHozLzQ48AY01q2RPCet0iFE7+UHksYWk71nAUpxLv6Lo
URoVxaqASJivJQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:42:58 2025 by rpki-client