Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9864ce-6d8b-4cfc-8741-7896c66a1fd1/1/EoUdFaLRhfrzaM7F4GOLAR8dqQI.mft
File:                     EoUdFaLRhfrzaM7F4GOLAR8dqQI.mft (raw, json)
Hash identifier:          X58u6VZCKU6J40KeAIkxRwkBZUjKJVRxVxXUdMSWtss=
Subject key identifier:   AE:DA:1D:A0:0B:41:C5:CB:77:36:AF:E5:50:63:69:8D:57:07:84:11
Authority key identifier: 12:85:1D:15:A2:D1:85:FA:F3:68:CE:C5:E0:63:8B:01:1F:1D:A9:02
Certificate issuer:       /CN=12851d15a2d185faf368cec5e0638b011f1da902
Certificate serial:       0197B7EA780E505A4CFABD09FC6A96A99E9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EoUdFaLRhfrzaM7F4GOLAR8dqQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/9864ce-6d8b-4cfc-8741-7896c66a1fd1/1/EoUdFaLRhfrzaM7F4GOLAR8dqQI.mft
Manifest number:          0C9B
Signing time:             Sat 28 Jun 2025 19:01:26 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:26 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:26 +0000
Files and hashes:         1: EoUdFaLRhfrzaM7F4GOLAR8dqQI.crl (hash: 5CWfT1TFQrs+gFuIfUhE6XSOCZuwZho/MYgxD0sIn/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/9864ce-6d8b-4cfc-8741-7896c66a1fd1/1/EoUdFaLRhfrzaM7F4GOLAR8dqQI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/9864ce-6d8b-4cfc-8741-7896c66a1fd1/1/EoUdFaLRhfrzaM7F4GOLAR8dqQI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EoUdFaLRhfrzaM7F4GOLAR8dqQI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:78:0e:50:5a:4c:fa:bd:09:fc:6a:96:a9:9e:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12851d15a2d185faf368cec5e0638b011f1da902
        Validity
            Not Before: Jun 28 19:01:26 2025 GMT
            Not After : Jun 29 19:01:26 2025 GMT
        Subject: CN=aeda1da00b41c5cb7736afe55063698d57078411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:eb:0f:17:ba:ff:ca:41:37:d8:35:df:32:10:
                    a8:88:61:fd:cb:cf:5f:75:5f:45:84:27:d2:f3:01:
                    a3:a4:2a:7f:97:be:7c:91:85:33:4b:0e:a6:a2:58:
                    68:04:6e:96:74:ec:5f:73:30:71:8e:08:83:4a:32:
                    65:50:f8:38:cb:1e:51:fb:c3:be:98:00:e2:18:26:
                    8d:87:d7:d2:9c:74:99:84:5a:08:93:a4:bf:7e:c6:
                    50:f5:46:98:90:0c:9d:cf:54:ea:fd:30:eb:ee:20:
                    c8:77:6b:bf:da:e7:5a:68:99:da:09:ff:1a:f8:16:
                    bf:58:67:ad:8a:fc:77:58:5d:88:7c:da:06:19:1d:
                    90:e1:e0:4e:78:2a:d5:df:7c:43:81:dc:10:4a:7c:
                    c7:b4:ea:fc:79:93:f6:bd:08:38:55:6e:1a:88:0e:
                    9d:fb:7e:6c:9b:3f:83:ec:ca:f6:6c:48:33:04:d1:
                    84:1d:22:07:12:ea:2d:04:17:cc:51:4b:47:04:f7:
                    1c:f7:7a:f7:79:c8:d7:c9:07:59:99:c1:51:50:5f:
                    b7:1b:39:c8:d3:fa:94:46:64:d5:5a:00:89:f8:3a:
                    17:3f:22:3b:03:cc:a9:61:6c:c5:0b:da:76:12:f8:
                    04:04:16:13:fa:a6:88:79:59:77:bc:76:21:d1:ef:
                    33:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:DA:1D:A0:0B:41:C5:CB:77:36:AF:E5:50:63:69:8D:57:07:84:11
            X509v3 Authority Key Identifier:
                keyid:12:85:1D:15:A2:D1:85:FA:F3:68:CE:C5:E0:63:8B:01:1F:1D:A9:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EoUdFaLRhfrzaM7F4GOLAR8dqQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9864ce-6d8b-4cfc-8741-7896c66a1fd1/1/EoUdFaLRhfrzaM7F4GOLAR8dqQI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9864ce-6d8b-4cfc-8741-7896c66a1fd1/1/EoUdFaLRhfrzaM7F4GOLAR8dqQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:82:6b:e2:d3:0f:80:3a:06:95:a6:b3:25:73:af:6b:0d:00:
         c7:cd:df:d5:aa:31:16:b0:fb:1d:71:f7:4f:64:af:72:f5:9b:
         13:1f:a6:cf:f7:fd:3b:2b:41:86:7c:ca:59:3e:5b:f3:e2:6d:
         a7:bb:66:de:b0:2b:42:af:82:ca:e6:ce:86:67:68:2d:09:82:
         50:e3:b3:75:a9:f8:b8:24:71:37:14:df:a7:d8:24:3d:96:5e:
         3a:a0:84:32:93:36:12:94:68:6a:f9:ef:65:d0:9b:ef:7f:01:
         50:9b:25:97:c7:ab:9d:95:bb:3f:6c:77:28:d5:52:54:5e:84:
         02:64:f9:43:96:20:f4:53:4e:0b:87:fd:3d:3b:fe:b5:b8:56:
         03:fb:5e:3c:f2:15:de:9d:ba:6b:18:1c:3f:2e:cf:00:d8:33:
         aa:e2:1a:18:8d:3d:e6:1a:2f:6d:3c:23:66:15:d0:0d:94:e7:
         d7:67:b6:73:0b:3d:ce:f2:e6:77:20:6d:a6:25:36:18:9a:7f:
         c1:03:33:39:b3:d6:9d:a6:b0:b7:30:66:a1:9c:64:a8:cc:4f:
         7e:99:b4:6e:5c:9b:a7:be:f5:4a:41:fa:3e:e2:df:41:e9:e1:
         cc:ac:13:f1:ca:86:f0:e5:77:48:cf:67:e0:5e:f3:bf:7f:1f:
         47:79:c0:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36ngOUFpM+r0J/GqWqZ6dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyODUxZDE1YTJkMTg1ZmFmMzY4Y2VjNWUwNjM4YjAxMWYx
ZGE5MDIwHhcNMjUwNjI4MTkwMTI2WhcNMjUwNjI5MTkwMTI2WjAzMTEwLwYDVQQD
EyhhZWRhMWRhMDBiNDFjNWNiNzczNmFmZTU1MDYzNjk4ZDU3MDc4NDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOsPF7r/ykE32DXfMhCoiGH9y89f
dV9FhCfS8wGjpCp/l758kYUzSw6molhoBG6WdOxfczBxjgiDSjJlUPg4yx5R+8O+
mADiGCaNh9fSnHSZhFoIk6S/fsZQ9UaYkAydz1Tq/TDr7iDId2u/2udaaJnaCf8a
+Ba/WGetivx3WF2IfNoGGR2Q4eBOeCrV33xDgdwQSnzHtOr8eZP2vQg4VW4aiA6d
+35smz+D7Mr2bEgzBNGEHSIHEuotBBfMUUtHBPcc93r3ecjXyQdZmcFRUF+3GznI
0/qURmTVWgCJ+DoXPyI7A8ypYWzFC9p2EvgEBBYT+qaIeVl3vHYh0e8zrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7aHaALQcXLdzav5VBjaY1XB4QRMB8GA1UdIwQY
MBaAFBKFHRWi0YX682jOxeBjiwEfHakCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW9VZEZhTFJoZnJ6YU03RjRHT0xBUjhkcVFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85ODY0Y2UtNmQ4Yi00Y2ZjLTg3NDEt
Nzg5NmM2NmExZmQxLzEvRW9VZEZhTFJoZnJ6YU03RjRHT0xBUjhkcVFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS85ODY0Y2UtNmQ4Yi00Y2ZjLTg3NDEtNzg5NmM2NmExZmQx
LzEvRW9VZEZhTFJoZnJ6YU03RjRHT0xBUjhkcVFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADIJr4tMP
gDoGlaazJXOvaw0Ax83f1aoxFrD7HXH3T2SvcvWbEx+mz/f9OytBhnzKWT5b8+Jt
p7tm3rArQq+CyubOhmdoLQmCUOOzdan4uCRxNxTfp9gkPZZeOqCEMpM2EpRoavnv
ZdCb738BUJsll8ernZW7P2x3KNVSVF6EAmT5Q5Yg9FNOC4f9PTv+tbhWA/tePPIV
3p26axgcPy7PANgzquIaGI095hovbTwjZhXQDZTn12e2cws9zvLmdyBtpiU2GJp/
wQMzObPWnaawtzBmoZxkqMxPfpm0blybp771SkH6PuLfQenhzKwT8cqG8OV3SM9n
4F7zv38fR3nAQw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:44:40 2025 by rpki-client