Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
File:                     E-xHMfECwwzBPi-1p_l1jOqWNFI.mft (raw, json)
Hash identifier:          3MsDBcrP5cIyFNFsIyQ+uPjBKT3ZUfciVcrYkj3C6mo=
Subject key identifier:   43:7A:00:75:04:44:2C:86:A3:8E:7B:39:69:92:B1:88:7A:24:46:95
Authority key identifier: 13:EC:47:31:F1:02:C3:0C:C1:3E:2F:B5:A7:F9:75:8C:EA:96:34:52
Certificate issuer:       /CN=13ec4731f102c30cc13e2fb5a7f9758cea963452
Certificate serial:       0197B7459E271C546A388D1E06A0049BFA7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
Manifest number:          12F3
Signing time:             Sat 28 Jun 2025 16:01:22 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:22 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:22 +0000
Files and hashes:         1: E-xHMfECwwzBPi-1p_l1jOqWNFI.crl (hash: cUorqH5qjeJx3hXofhCdUPwTZkZjSwTokqOvvELJM48=)
                          2: zB_eI0R_E9fHHHjTeKsfbCfUNfE.roa (hash: ojS7UDvnpbti0L0m+Z7X9vfIKPOWqVpCsWT632+KxOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:9e:27:1c:54:6a:38:8d:1e:06:a0:04:9b:fa:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ec4731f102c30cc13e2fb5a7f9758cea963452
        Validity
            Not Before: Jun 28 16:01:22 2025 GMT
            Not After : Jun 29 16:01:22 2025 GMT
        Subject: CN=437a007504442c86a38e7b396992b1887a244695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:62:2c:f5:27:f3:e8:55:a9:20:f6:d4:97:86:
                    fb:63:ec:00:93:6c:b2:35:7e:a2:6d:ae:f6:2b:26:
                    e7:15:ea:e2:c3:46:cd:0f:ae:62:d9:b3:ec:84:36:
                    d1:8e:85:ad:ea:d9:13:42:6e:14:71:4f:7a:cf:ce:
                    7a:76:0b:e8:11:ab:c0:17:03:c8:4b:a7:6b:c6:d0:
                    6d:e3:bd:8a:13:87:b5:a2:c2:bb:34:dd:8b:0d:d8:
                    c4:dc:47:5c:ef:fd:c8:d5:c9:b4:7e:0f:c0:9a:9c:
                    3f:c5:49:4b:d1:e0:7b:b8:e0:8b:e3:99:ae:91:d8:
                    26:6e:eb:3c:78:27:ea:de:8e:44:73:f4:9a:b5:d6:
                    ff:ce:b2:0e:a7:a7:36:2f:4f:b7:0d:70:b5:35:b9:
                    f2:37:b2:d0:f6:ff:f4:25:b5:5d:28:2b:f1:c9:10:
                    0d:bd:52:1a:8f:98:14:84:1f:2b:32:0d:18:f8:8c:
                    f6:e6:12:e3:95:91:bd:8a:4a:bf:77:d6:2c:fb:a6:
                    22:55:b5:1d:a6:71:c7:c1:1f:b5:53:32:c5:e4:92:
                    03:f2:81:22:22:07:4a:60:08:a5:ae:c6:2c:49:8d:
                    23:9a:a0:90:61:29:18:56:27:b9:67:58:e6:aa:cf:
                    8b:88:6a:da:ac:5e:08:fa:6b:f2:10:0f:e4:41:87:
                    87:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:7A:00:75:04:44:2C:86:A3:8E:7B:39:69:92:B1:88:7A:24:46:95
            X509v3 Authority Key Identifier:
                keyid:13:EC:47:31:F1:02:C3:0C:C1:3E:2F:B5:A7:F9:75:8C:EA:96:34:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:be:bb:56:98:c3:15:94:e4:92:66:5e:5d:f0:c1:ea:24:48:
         3a:01:24:a6:f5:a8:d7:e6:97:cf:a6:96:b4:52:e1:46:87:47:
         8f:d7:74:3e:f8:1d:2c:e2:fe:0f:02:d5:60:e0:1d:60:10:23:
         a5:6b:c5:da:89:f6:45:0f:5e:da:af:32:7b:f9:a9:79:d8:d7:
         c9:13:e3:0c:03:0d:e8:80:6f:4f:ec:83:4f:57:b7:30:be:8c:
         bb:8c:e5:da:fa:ec:89:47:2b:41:1f:bd:3e:d9:4e:ac:d5:0a:
         44:a8:22:e0:0b:15:e5:fc:be:c3:6c:26:48:fd:90:10:1d:61:
         96:96:c5:6d:ba:02:8d:1b:61:ee:9d:0a:2c:03:3c:0b:18:ad:
         79:48:3c:37:58:b6:a9:da:77:40:eb:92:7c:1f:2f:63:7f:7c:
         15:65:83:fb:ea:f1:b3:bd:4a:0e:24:4d:0b:00:83:32:10:e5:
         5e:6d:bf:83:bb:58:31:09:4e:f9:3d:0c:0b:f1:7c:5a:01:5c:
         36:86:20:03:6f:18:80:d1:b7:09:18:c4:5c:e8:ba:83:51:25:
         63:0c:3f:7e:5a:f2:c2:91:69:bf:a3:61:c6:cb:48:05:34:b6:
         48:14:fb:72:42:d4:fc:35:2d:80:8a:b3:89:55:65:99:d6:d9:
         99:71:67:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RZ4nHFRqOI0eBqAEm/p6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZWM0NzMxZjEwMmMzMGNjMTNlMmZiNWE3Zjk3NThjZWE5
NjM0NTIwHhcNMjUwNjI4MTYwMTIyWhcNMjUwNjI5MTYwMTIyWjAzMTEwLwYDVQQD
Eyg0MzdhMDA3NTA0NDQyYzg2YTM4ZTdiMzk2OTkyYjE4ODdhMjQ0Njk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWIs9Sfz6FWpIPbUl4b7Y+wAk2yy
NX6iba72KybnFeriw0bND65i2bPshDbRjoWt6tkTQm4UcU96z856dgvoEavAFwPI
S6drxtBt472KE4e1osK7NN2LDdjE3Edc7/3I1cm0fg/Ampw/xUlL0eB7uOCL45mu
kdgmbus8eCfq3o5Ec/Satdb/zrIOp6c2L0+3DXC1NbnyN7LQ9v/0JbVdKCvxyRAN
vVIaj5gUhB8rMg0Y+Iz25hLjlZG9ikq/d9Ys+6YiVbUdpnHHwR+1UzLF5JID8oEi
IgdKYAilrsYsSY0jmqCQYSkYVie5Z1jmqs+LiGrarF4I+mvyEA/kQYeHWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEN6AHUERCyGo457OWmSsYh6JEaVMB8GA1UdIwQY
MBaAFBPsRzHxAsMMwT4vtaf5dYzqljRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS14SE1mRUN3d3pCUGktMXBfbDFqT3FXTkZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85ODJmMWQtNDEyMS00NmI1LWFkZDAt
ZDQxYmNjOTI4Mzc1LzEvRS14SE1mRUN3d3pCUGktMXBfbDFqT3FXTkZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi85ODJmMWQtNDEyMS00NmI1LWFkZDAtZDQxYmNjOTI4Mzc1
LzEvRS14SE1mRUN3d3pCUGktMXBfbDFqT3FXTkZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAob67VpjD
FZTkkmZeXfDB6iRIOgEkpvWo1+aXz6aWtFLhRodHj9d0PvgdLOL+DwLVYOAdYBAj
pWvF2on2RQ9e2q8ye/mpedjXyRPjDAMN6IBvT+yDT1e3ML6Mu4zl2vrsiUcrQR+9
PtlOrNUKRKgi4AsV5fy+w2wmSP2QEB1hlpbFbboCjRth7p0KLAM8CxiteUg8N1i2
qdp3QOuSfB8vY398FWWD++rxs71KDiRNCwCDMhDlXm2/g7tYMQlO+T0MC/F8WgFc
NoYgA28YgNG3CRjEXOi6g1ElYww/flrywpFpv6NhxstIBTS2SBT7ckLU/DUtgIqz
iVVlmdbZmXFneA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:34:14 2025 by rpki-client