Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft
File:                     7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft (raw, json)
Hash identifier:          ZFJ+vxbDVBaJRWj16h0vxiJhDT063UNqx1f0jXH9YZ0=
Subject key identifier:   9C:09:C8:9C:71:D4:25:64:D2:52:0F:2B:85:72:21:DC:A2:07:81:00
Authority key identifier: EC:B0:D2:68:75:66:5E:C2:6B:31:A5:C7:66:E0:90:FC:FE:90:AE:AC
Certificate issuer:       /CN=ecb0d26875665ec26b31a5c766e090fcfe90aeac
Certificate serial:       0197B7EA69B3D05F772CBDEE1D1C3A2293C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft
Manifest number:          15B3
Signing time:             Sat 28 Jun 2025 19:01:22 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:22 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:22 +0000
Files and hashes:         1: 7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.crl (hash: DrH9Kqoo2lW818W0g+gI725HeKM1DkgU0oLpfNGhZi0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:69:b3:d0:5f:77:2c:bd:ee:1d:1c:3a:22:93:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecb0d26875665ec26b31a5c766e090fcfe90aeac
        Validity
            Not Before: Jun 28 19:01:22 2025 GMT
            Not After : Jun 29 19:01:22 2025 GMT
        Subject: CN=9c09c89c71d42564d2520f2b857221dca2078100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d0:17:99:d7:30:b1:23:f9:6f:ff:67:ae:15:
                    e6:db:19:2c:5b:70:19:9e:0f:d3:93:27:82:a8:7e:
                    cb:e8:a5:68:29:0e:a4:c7:b8:ba:f9:56:3d:bf:6b:
                    16:44:31:1d:65:a2:f5:a5:30:e3:a1:8b:df:08:26:
                    0b:79:c9:c4:d4:98:73:6a:08:80:8d:f2:e5:3a:a5:
                    bb:e7:26:29:84:35:94:f2:79:57:8b:ce:a7:16:76:
                    dc:0f:09:04:a2:7d:76:79:c9:72:15:be:84:b4:a4:
                    ca:bd:c8:e4:48:d5:71:9b:54:27:e7:c0:9b:41:fa:
                    2f:75:59:08:65:c9:9f:ff:24:44:50:65:37:c6:d2:
                    9d:ae:7a:c9:15:19:da:4d:0a:31:ab:74:71:c1:a1:
                    f0:2d:fc:c5:bb:54:38:82:91:52:df:97:91:c6:95:
                    60:dc:a3:98:b0:72:57:09:16:fe:4a:30:bd:1f:1c:
                    14:7f:e5:0b:ad:a4:e1:8e:52:7a:f7:03:07:5b:cd:
                    dd:67:ac:ce:33:23:19:46:68:3a:3a:f2:3c:06:a3:
                    5c:b8:7c:ad:38:37:58:f2:5d:c6:d7:fb:eb:c0:aa:
                    5f:7e:a9:af:d8:f5:c9:f7:57:d1:3d:92:85:bb:f6:
                    3f:27:39:27:28:15:95:ae:77:0b:b2:e6:bc:36:3d:
                    75:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:09:C8:9C:71:D4:25:64:D2:52:0F:2B:85:72:21:DC:A2:07:81:00
            X509v3 Authority Key Identifier:
                keyid:EC:B0:D2:68:75:66:5E:C2:6B:31:A5:C7:66:E0:90:FC:FE:90:AE:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:8e:ed:79:ed:63:91:25:b6:9a:da:b0:39:81:cb:3d:9a:ea:
         10:58:7d:1d:ef:c9:55:a3:54:67:a0:b8:b4:2b:be:11:2f:d7:
         b8:9c:b9:f0:d6:4a:11:90:7f:e2:b2:0b:59:5a:a1:ba:a5:92:
         89:f7:97:0c:24:7f:e6:7f:e4:4d:d3:ee:80:64:54:0f:ff:a2:
         d3:cd:e7:b2:ed:4a:9e:04:d0:d1:89:3d:a3:b2:68:7a:22:d8:
         5e:03:0d:0c:8c:6b:5b:fc:87:e8:41:0f:fc:ba:ef:c7:99:ed:
         f5:9a:24:75:e2:4e:9d:f4:23:61:1d:b6:2d:ba:17:6c:e3:bb:
         f0:67:df:95:8a:15:7b:7a:6f:8e:73:d0:ba:a9:7d:3e:76:7a:
         7a:be:c0:86:5e:8e:95:32:8b:84:a9:74:12:e9:a4:cb:ae:cb:
         60:d1:5b:bf:92:32:36:86:5d:02:b8:96:54:c0:e7:24:b5:8b:
         57:5d:b0:38:2f:53:ac:0d:7f:d4:d4:15:7c:7a:8c:9a:c7:9c:
         14:87:c4:1d:2b:17:a4:b0:61:9d:55:08:ba:43:f6:7e:18:aa:
         20:11:0d:a1:49:68:bb:39:06:61:35:13:a3:24:dd:71:90:d8:
         ea:72:3a:ee:87:e6:f3:cc:30:10:7c:da:e9:14:f6:f5:aa:0f:
         b1:f7:3a:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36mmz0F93LL3uHRw6IpPBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjYjBkMjY4NzU2NjVlYzI2YjMxYTVjNzY2ZTA5MGZjZmU5
MGFlYWMwHhcNMjUwNjI4MTkwMTIyWhcNMjUwNjI5MTkwMTIyWjAzMTEwLwYDVQQD
Eyg5YzA5Yzg5YzcxZDQyNTY0ZDI1MjBmMmI4NTcyMjFkY2EyMDc4MTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNAXmdcwsSP5b/9nrhXm2xksW3AZ
ng/TkyeCqH7L6KVoKQ6kx7i6+VY9v2sWRDEdZaL1pTDjoYvfCCYLecnE1JhzagiA
jfLlOqW75yYphDWU8nlXi86nFnbcDwkEon12eclyFb6EtKTKvcjkSNVxm1Qn58Cb
QfovdVkIZcmf/yREUGU3xtKdrnrJFRnaTQoxq3RxwaHwLfzFu1Q4gpFS35eRxpVg
3KOYsHJXCRb+SjC9HxwUf+ULraThjlJ69wMHW83dZ6zOMyMZRmg6OvI8BqNcuHyt
ODdY8l3G1/vrwKpffqmv2PXJ91fRPZKFu/Y/JzknKBWVrncLsua8Nj111wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJwJyJxx1CVk0lIPK4VyIdyiB4EAMB8GA1UdIwQY
MBaAFOyw0mh1Zl7CazGlx2bgkPz+kK6sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0xEU2FIVm1Yc0pyTWFYSFp1Q1FfUDZRcnF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni84MWY5NGYtOTU1Zi00NjdiLTlhMzYt
MmUxODE4YTdkZTNlLzEvN0xEU2FIVm1Yc0pyTWFYSFp1Q1FfUDZRcnF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni84MWY5NGYtOTU1Zi00NjdiLTlhMzYtMmUxODE4YTdkZTNl
LzEvN0xEU2FIVm1Yc0pyTWFYSFp1Q1FfUDZRcnF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM47tee1j
kSW2mtqwOYHLPZrqEFh9He/JVaNUZ6C4tCu+ES/XuJy58NZKEZB/4rILWVqhuqWS
ifeXDCR/5n/kTdPugGRUD/+i083nsu1KngTQ0Yk9o7JoeiLYXgMNDIxrW/yH6EEP
/Lrvx5nt9ZokdeJOnfQjYR22LboXbOO78GfflYoVe3pvjnPQuql9PnZ6er7Ahl6O
lTKLhKl0Eumky67LYNFbv5IyNoZdAriWVMDnJLWLV12wOC9TrA1/1NQVfHqMmsec
FIfEHSsXpLBhnVUIukP2fhiqIBENoUlouzkGYTUToyTdcZDY6nI67ofm88wwEHza
6RT29aoPsfc6lQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:37:07 2025 by rpki-client