Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
File:                     ejUIviqGjWzlTbmzqGTUvphcrk0.mft (raw, json)
Hash identifier:          lisXWfIWVWEn9XvS0RtGC3mxu2MwA3cL/doEdkCq3IM=
Subject key identifier:   F4:80:D5:19:03:4F:0F:56:76:E4:02:2E:DB:25:05:61:D2:C9:2A:95
Authority key identifier: 7A:35:08:BE:2A:86:8D:6C:E5:4D:B9:B3:A8:64:D4:BE:98:5C:AE:4D
Certificate issuer:       /CN=7a3508be2a868d6ce54db9b3a864d4be985cae4d
Certificate serial:       0197C80332526889E41A4CB1CC3E20412C80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
Manifest number:          0624
Signing time:             Tue 01 Jul 2025 22:02:22 +0000
Manifest this update:     Tue 01 Jul 2025 22:02:22 +0000
Manifest next update:     Wed 02 Jul 2025 22:02:22 +0000
Files and hashes:         1: ejUIviqGjWzlTbmzqGTUvphcrk0.crl (hash: RFCGDCbQPu+ZEdrQ08gCkazh/ahKyAHYesHe6a8Xlxo=)
                          2: qDr_cYRuD3mPTiGEK_G-6xxMKz0.roa (hash: aqycyjtdIZXGI72ztTizlT0ZMLibQUMgGBBwchmGGPg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 22:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c8:03:32:52:68:89:e4:1a:4c:b1:cc:3e:20:41:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a3508be2a868d6ce54db9b3a864d4be985cae4d
        Validity
            Not Before: Jul  1 22:02:22 2025 GMT
            Not After : Jul  2 22:02:22 2025 GMT
        Subject: CN=f480d519034f0f5676e4022edb250561d2c92a95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:eb:f4:ab:35:9f:64:3d:14:d8:57:4f:5f:89:
                    45:ae:d5:e4:1f:93:de:b9:a6:37:a4:89:7e:fb:58:
                    50:56:b2:7a:44:a4:da:37:5b:ac:49:5c:be:07:14:
                    9f:08:6e:34:16:bf:b9:8f:b6:a0:3b:0d:78:ee:52:
                    b8:84:5e:1a:0b:fd:b5:21:3e:e0:06:aa:29:b2:cc:
                    b4:07:67:00:63:5d:56:c5:ce:8a:10:0e:70:8b:3e:
                    71:fc:42:d4:80:15:44:25:c1:f5:10:0f:97:c3:97:
                    10:be:89:81:f3:1c:40:55:56:51:18:2e:16:f0:45:
                    95:47:e7:03:fe:00:2f:d1:2f:77:fc:a7:46:e7:bc:
                    3e:4a:90:e4:c7:79:74:64:f4:5a:1d:f6:19:91:5f:
                    f1:00:73:eb:19:06:28:86:6c:8a:ec:75:46:5d:19:
                    a7:2f:a4:cb:66:3d:e9:c2:7d:40:32:d9:81:7c:c0:
                    e0:cb:73:fc:a7:66:c3:0b:93:25:a9:ce:9e:cd:6b:
                    7a:cd:ef:46:c9:8c:3f:b8:17:f6:69:52:b3:e8:45:
                    b6:e5:8c:04:f2:1a:06:e4:7f:62:2f:6c:55:93:a0:
                    03:92:3b:09:91:91:27:5f:40:49:1e:b3:b2:ff:13:
                    95:be:37:1c:73:b1:71:af:31:58:9c:c3:bf:e8:d1:
                    0c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:80:D5:19:03:4F:0F:56:76:E4:02:2E:DB:25:05:61:D2:C9:2A:95
            X509v3 Authority Key Identifier:
                keyid:7A:35:08:BE:2A:86:8D:6C:E5:4D:B9:B3:A8:64:D4:BE:98:5C:AE:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:b4:2e:10:f7:94:76:f8:b0:fb:f3:75:32:06:fd:7a:d5:20:
         11:4f:1e:2a:f4:a9:50:8b:42:59:fa:c6:99:40:24:c6:7d:45:
         76:c3:ba:af:e1:9a:1d:15:d3:d0:0d:60:00:0d:45:0f:43:ea:
         ba:a7:4f:e9:c3:92:bc:ec:74:13:3a:60:80:df:09:47:ad:a1:
         54:0d:98:d7:65:20:bc:a6:1e:82:3a:f8:6c:ea:cf:84:79:f7:
         fa:1a:2a:6f:68:e3:25:d5:a6:3e:06:03:19:a3:d1:83:ee:fd:
         65:c5:05:64:95:e1:cd:61:81:1b:7c:22:68:a6:f5:02:17:f2:
         2c:ff:0e:27:a2:e5:5d:7f:65:8c:65:79:ed:79:a2:04:41:b5:
         7b:26:61:0d:94:21:a3:bb:6c:1f:07:16:95:2a:bf:38:27:9d:
         de:70:33:dc:c0:e3:1f:85:10:a1:e0:91:ee:81:91:49:7a:70:
         1b:d5:ec:f6:2d:cd:f5:69:3f:7e:e0:b3:51:e2:d6:d6:ed:0f:
         d2:a7:f0:b2:8c:26:43:9d:5d:bd:76:af:9b:0a:49:3f:36:a0:
         20:9d:25:bf:ba:29:c9:fd:32:83:8c:71:ec:2c:77:4e:55:8a:
         7a:2f:c9:6c:04:92:22:d5:22:1b:2f:ac:cf:ad:c0:be:bc:fa:
         9b:7d:ac:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfIAzJSaInkGkyxzD4gQSyAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMzUwOGJlMmE4NjhkNmNlNTRkYjliM2E4NjRkNGJlOTg1
Y2FlNGQwHhcNMjUwNzAxMjIwMjIyWhcNMjUwNzAyMjIwMjIyWjAzMTEwLwYDVQQD
EyhmNDgwZDUxOTAzNGYwZjU2NzZlNDAyMmVkYjI1MDU2MWQyYzkyYTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOv0qzWfZD0U2FdPX4lFrtXkH5Pe
uaY3pIl++1hQVrJ6RKTaN1usSVy+BxSfCG40Fr+5j7agOw147lK4hF4aC/21IT7g
Bqopssy0B2cAY11Wxc6KEA5wiz5x/ELUgBVEJcH1EA+Xw5cQvomB8xxAVVZRGC4W
8EWVR+cD/gAv0S93/KdG57w+SpDkx3l0ZPRaHfYZkV/xAHPrGQYohmyK7HVGXRmn
L6TLZj3pwn1AMtmBfMDgy3P8p2bDC5Mlqc6ezWt6ze9GyYw/uBf2aVKz6EW25YwE
8hoG5H9iL2xVk6ADkjsJkZEnX0BJHrOy/xOVvjccc7FxrzFYnMO/6NEMlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSA1RkDTw9WduQCLtslBWHSySqVMB8GA1UdIwQY
MBaAFHo1CL4qho1s5U25s6hk1L6YXK5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWpVSXZpcUdqV3psVGJtenFHVFV2cGhjcmswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS83NTg4ZDAtMzNiZC00OWM5LTg4NWQt
NGMzOGJmZjFhZjE4LzEvZWpVSXZpcUdqV3psVGJtenFHVFV2cGhjcmswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS83NTg4ZDAtMzNiZC00OWM5LTg4NWQtNGMzOGJmZjFhZjE4
LzEvZWpVSXZpcUdqV3psVGJtenFHVFV2cGhjcmswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu7QuEPeU
dviw+/N1Mgb9etUgEU8eKvSpUItCWfrGmUAkxn1FdsO6r+GaHRXT0A1gAA1FD0Pq
uqdP6cOSvOx0EzpggN8JR62hVA2Y12UgvKYegjr4bOrPhHn3+hoqb2jjJdWmPgYD
GaPRg+79ZcUFZJXhzWGBG3wiaKb1AhfyLP8OJ6LlXX9ljGV57XmiBEG1eyZhDZQh
o7tsHwcWlSq/OCed3nAz3MDjH4UQoeCR7oGRSXpwG9Xs9i3N9Wk/fuCzUeLW1u0P
0qfwsowmQ51dvXavmwpJPzagIJ0lv7opyf0yg4xx7Cx3TlWKei/JbASSItUiGy+s
z63Avrz6m32syA==
-----END CERTIFICATE-----
Generated at Wed Jul 2 05:26:12 2025 by rpki-client