Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft
File:                     E93mmrzMZdCGiMqDVCYzohkpMic.mft (raw, json)
Hash identifier:          swkwlO20E6Fqxw57mX5ULoQiE2ZOYTZ23foZrXOMM8A=
Subject key identifier:   F1:72:61:52:50:25:A0:98:14:C7:15:69:A3:95:C1:81:D5:C4:A7:72
Authority key identifier: 13:DD:E6:9A:BC:CC:65:D0:86:88:CA:83:54:26:33:A2:19:29:32:27
Certificate issuer:       /CN=13dde69abccc65d08688ca83542633a219293227
Certificate serial:       0197B5FC246C75260C2C0B14DFDD14FD7A88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E93mmrzMZdCGiMqDVCYzohkpMic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft
Manifest number:          0BE1
Signing time:             Sat 28 Jun 2025 10:01:29 +0000
Manifest this update:     Sat 28 Jun 2025 10:01:29 +0000
Manifest next update:     Sun 29 Jun 2025 10:01:29 +0000
Files and hashes:         1: E93mmrzMZdCGiMqDVCYzohkpMic.crl (hash: 5rucW9MgEWHKYFcDZgwX5pUROXXqDJAXlvjK145pA5U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E93mmrzMZdCGiMqDVCYzohkpMic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:fc:24:6c:75:26:0c:2c:0b:14:df:dd:14:fd:7a:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13dde69abccc65d08688ca83542633a219293227
        Validity
            Not Before: Jun 28 10:01:29 2025 GMT
            Not After : Jun 29 10:01:29 2025 GMT
        Subject: CN=f17261525025a09814c71569a395c181d5c4a772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4b:42:17:f2:c9:65:0e:6c:f8:15:c8:e6:b1:
                    10:a7:c2:2c:55:ad:8b:cf:89:fc:77:e8:99:79:67:
                    80:11:09:3b:e9:a9:bd:59:9a:12:62:71:ba:de:98:
                    38:f0:40:25:76:cc:fd:2c:05:95:e1:87:40:b1:91:
                    38:ff:01:37:c9:b0:77:3b:71:e1:50:8e:b1:d5:df:
                    48:f7:a0:e8:f4:bd:25:91:c8:9f:99:b2:11:39:af:
                    8f:fe:39:a4:03:65:b9:c0:78:a7:a7:15:d0:f2:34:
                    e8:16:3a:f0:59:b9:3b:4b:2e:50:ac:04:94:d0:05:
                    f5:65:4b:8b:75:a8:fb:97:bb:9d:c9:9b:30:e1:f0:
                    0c:0a:de:a5:3e:3a:00:71:d2:7d:a9:a0:a0:77:c0:
                    d6:e6:c6:23:7a:e9:cb:b0:34:97:eb:22:bd:e8:db:
                    f2:f7:50:b2:e1:42:92:9e:7d:dd:93:1f:77:fc:d8:
                    d9:65:27:6f:32:21:82:e5:c2:a9:77:64:9d:60:c1:
                    2b:6e:dd:69:73:1a:bc:40:c4:c6:ba:2f:e9:68:57:
                    66:db:ce:36:1f:e5:d6:1f:29:db:77:69:d0:e8:92:
                    e9:0a:8f:c7:e8:c4:36:9c:c4:b0:f4:c9:8b:c7:b5:
                    c6:61:3d:ce:06:3d:b3:9d:5f:54:79:f6:90:85:1c:
                    c5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:72:61:52:50:25:A0:98:14:C7:15:69:A3:95:C1:81:D5:C4:A7:72
            X509v3 Authority Key Identifier:
                keyid:13:DD:E6:9A:BC:CC:65:D0:86:88:CA:83:54:26:33:A2:19:29:32:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E93mmrzMZdCGiMqDVCYzohkpMic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:3c:ba:1a:27:0e:84:67:26:08:a0:f3:e9:fb:92:a4:07:be:
         0c:d2:18:50:02:d6:1a:95:08:f2:6b:2d:f3:be:2b:3f:0e:83:
         ca:76:82:40:3f:31:2b:e1:cf:32:61:ef:0f:08:f8:6c:4b:c0:
         7a:7a:2b:d6:3f:8e:79:9d:6e:43:3f:93:99:fe:29:12:0c:f3:
         fb:ce:5c:dd:1c:37:f1:f1:58:46:20:9b:cc:22:54:d0:e6:e4:
         36:ea:f3:65:ac:3b:78:b7:cd:7e:f0:69:75:0d:1a:e5:c7:b9:
         9b:1c:d3:4d:08:66:b4:03:31:bf:22:6b:3c:d6:b0:c5:ed:8b:
         47:9b:4f:d6:9a:50:20:e6:33:76:51:46:4a:47:d2:3e:24:4e:
         d4:e6:92:9d:68:c7:fa:f4:63:b5:bc:a1:b6:61:13:b6:18:3d:
         22:76:30:34:9a:a2:82:ab:23:fc:94:6d:8b:ce:27:3d:3a:73:
         d2:7a:a8:c7:38:e5:97:3d:b9:32:d3:2c:b5:7e:1d:33:6f:32:
         3b:b2:5d:5b:97:22:ca:74:4e:6a:71:59:12:e2:8a:41:f8:a6:
         1f:fe:24:63:d8:e2:7c:42:75:a3:dc:24:4a:60:7a:1f:a9:4c:
         b4:fa:88:67:53:05:e4:b8:9b:82:a1:ed:65:ae:f8:ad:23:3a:
         47:a5:1d:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1/CRsdSYMLAsU390U/XqIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZGRlNjlhYmNjYzY1ZDA4Njg4Y2E4MzU0MjYzM2EyMTky
OTMyMjcwHhcNMjUwNjI4MTAwMTI5WhcNMjUwNjI5MTAwMTI5WjAzMTEwLwYDVQQD
EyhmMTcyNjE1MjUwMjVhMDk4MTRjNzE1NjlhMzk1YzE4MWQ1YzRhNzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxktCF/LJZQ5s+BXI5rEQp8IsVa2L
z4n8d+iZeWeAEQk76am9WZoSYnG63pg48EAldsz9LAWV4YdAsZE4/wE3ybB3O3Hh
UI6x1d9I96Do9L0lkcifmbIROa+P/jmkA2W5wHinpxXQ8jToFjrwWbk7Sy5QrASU
0AX1ZUuLdaj7l7udyZsw4fAMCt6lPjoAcdJ9qaCgd8DW5sYjeunLsDSX6yK96Nvy
91Cy4UKSnn3dkx93/NjZZSdvMiGC5cKpd2SdYMErbt1pcxq8QMTGui/paFdm2842
H+XWHynbd2nQ6JLpCo/H6MQ2nMSw9MmLx7XGYT3OBj2znV9UefaQhRzF6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFyYVJQJaCYFMcVaaOVwYHVxKdyMB8GA1UdIwQY
MBaAFBPd5pq8zGXQhojKg1QmM6IZKTInMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTkzbW1yek1aZENHaU1xRFZDWXpvaGtwTWljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9jNjM2Y2MtNDA1YS00ZjFlLTkzNmEt
ODQzN2NjOTIyODJhLzEvRTkzbW1yek1aZENHaU1xRFZDWXpvaGtwTWljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9jNjM2Y2MtNDA1YS00ZjFlLTkzNmEtODQzN2NjOTIyODJh
LzEvRTkzbW1yek1aZENHaU1xRFZDWXpvaGtwTWljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVDy6GicO
hGcmCKDz6fuSpAe+DNIYUALWGpUI8mst874rPw6DynaCQD8xK+HPMmHvDwj4bEvA
enor1j+OeZ1uQz+Tmf4pEgzz+85c3Rw38fFYRiCbzCJU0ObkNurzZaw7eLfNfvBp
dQ0a5ce5mxzTTQhmtAMxvyJrPNawxe2LR5tP1ppQIOYzdlFGSkfSPiRO1OaSnWjH
+vRjtbyhtmETthg9InYwNJqigqsj/JRti84nPTpz0nqoxzjllz25MtMstX4dM28y
O7JdW5ciynROanFZEuKKQfimH/4kY9jifEJ1o9wkSmB6H6lMtPqIZ1MF5LibgqHt
Za74rSM6R6UdsA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:40 2025 by rpki-client