Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/2bdcfe-172a-423e-8057-c924f8630fe4/1/07yiuLJxkwaZAqfGZkNu3ATr-8c.mft
File:                     07yiuLJxkwaZAqfGZkNu3ATr-8c.mft (raw, json)
Hash identifier:          k6HeqLXVjAaLmRd7FMAvysEjWmpWMw1NIFPLQ3GqR1k=
Subject key identifier:   0B:93:5C:ED:45:AE:56:E0:56:71:8E:FB:C4:2C:57:06:28:65:21:50
Authority key identifier: D3:BC:A2:B8:B2:71:93:06:99:02:A7:C6:66:43:6E:DC:04:EB:FB:C7
Certificate issuer:       /CN=d3bca2b8b27193069902a7c666436edc04ebfbc7
Certificate serial:       01974B8D754C618BF63266CBBE9E0613C5BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07yiuLJxkwaZAqfGZkNu3ATr-8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/2bdcfe-172a-423e-8057-c924f8630fe4/1/07yiuLJxkwaZAqfGZkNu3ATr-8c.mft
Manifest number:          0982
Signing time:             Sat 07 Jun 2025 18:00:51 +0000
Manifest this update:     Sat 07 Jun 2025 18:00:51 +0000
Manifest next update:     Sun 08 Jun 2025 18:00:51 +0000
Files and hashes:         1: 07yiuLJxkwaZAqfGZkNu3ATr-8c.crl (hash: HdXRhr0JTTzI1TXm3935BsFg+4fLSlW7/HU78vzIaEc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/2bdcfe-172a-423e-8057-c924f8630fe4/1/07yiuLJxkwaZAqfGZkNu3ATr-8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/2bdcfe-172a-423e-8057-c924f8630fe4/1/07yiuLJxkwaZAqfGZkNu3ATr-8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/07yiuLJxkwaZAqfGZkNu3ATr-8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:8d:75:4c:61:8b:f6:32:66:cb:be:9e:06:13:c5:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3bca2b8b27193069902a7c666436edc04ebfbc7
        Validity
            Not Before: Jun  7 18:00:51 2025 GMT
            Not After : Jun  8 18:00:51 2025 GMT
        Subject: CN=0b935ced45ae56e056718efbc42c570628652150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ef:87:e9:02:d8:7f:f5:81:68:3b:3d:aa:ec:
                    8a:08:ee:1b:b7:b5:fd:48:bd:1f:ee:81:30:25:f6:
                    93:d3:a0:60:c6:94:57:9b:ac:e6:63:69:65:f4:38:
                    b0:0b:a4:69:07:ed:24:9c:f1:72:db:31:f3:66:55:
                    60:7b:0a:36:8d:bc:21:d8:05:a1:38:ac:e5:b4:82:
                    1c:c8:0a:07:2d:d8:d3:b5:e0:cc:92:82:a2:83:5b:
                    ad:40:d0:03:58:68:bb:c7:18:b9:b6:e9:84:51:b7:
                    f6:60:7a:d0:69:6e:7b:29:a6:9a:ef:67:2e:ec:10:
                    e6:46:f8:8b:4b:ce:ec:8b:fe:e6:53:6f:7b:0c:61:
                    01:a1:f3:72:bf:b3:f2:09:74:a6:85:e4:f9:b2:26:
                    21:98:29:6a:06:6a:15:57:27:de:4f:b0:7b:c1:99:
                    af:d6:90:89:cf:1c:92:81:ac:af:62:68:f7:b3:8e:
                    8b:3a:4b:d5:29:c0:57:3f:2d:42:99:71:f9:0d:98:
                    4b:12:a0:73:28:73:35:f3:75:f0:65:a3:e0:fe:e0:
                    af:f0:a8:f2:89:88:d7:67:98:f6:b0:aa:d6:18:a3:
                    e9:95:91:40:d1:ed:bc:58:b3:4b:d6:4b:d8:f5:a5:
                    c1:b3:f9:ff:98:81:18:69:67:2b:88:01:67:b4:61:
                    e3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:93:5C:ED:45:AE:56:E0:56:71:8E:FB:C4:2C:57:06:28:65:21:50
            X509v3 Authority Key Identifier:
                keyid:D3:BC:A2:B8:B2:71:93:06:99:02:A7:C6:66:43:6E:DC:04:EB:FB:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07yiuLJxkwaZAqfGZkNu3ATr-8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2bdcfe-172a-423e-8057-c924f8630fe4/1/07yiuLJxkwaZAqfGZkNu3ATr-8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2bdcfe-172a-423e-8057-c924f8630fe4/1/07yiuLJxkwaZAqfGZkNu3ATr-8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:30:2b:85:5a:76:a1:c5:dd:21:0f:72:d7:8c:c5:6d:08:1f:
         31:6b:b4:b9:04:75:69:e0:b6:81:4d:31:0f:3c:d2:07:71:a5:
         2c:00:9b:f5:00:f3:50:d5:5c:94:98:04:dd:79:a2:49:f3:c3:
         b0:2f:ef:08:f1:ca:ce:02:e4:8d:7a:c4:2d:39:ef:04:e7:71:
         33:3b:97:3f:45:fd:ff:ef:d4:54:de:22:39:ec:52:e7:18:e7:
         35:e8:2f:fe:db:36:7a:85:c8:2b:bf:81:eb:05:eb:7b:e5:79:
         26:c8:54:13:07:13:b4:5e:5b:2f:79:50:a9:3b:65:5e:b9:c8:
         61:fb:3d:a5:1b:9a:4a:28:2f:75:94:54:7b:6d:ec:a9:ce:0e:
         75:40:d3:ba:2e:22:a0:e2:c7:a0:df:3e:00:ec:4c:a9:18:59:
         b2:50:bd:40:6f:cc:b2:54:57:e3:5f:58:6a:4a:0c:0a:36:b6:
         25:11:a1:f6:7d:37:00:9e:dc:bd:95:77:e1:a0:0b:2f:45:2a:
         96:a9:ba:64:0a:92:d7:ae:3e:6e:b9:81:ab:d6:00:2d:7c:3f:
         c6:41:ee:2f:a3:1c:d5:64:0e:29:af:9a:2a:32:eb:3c:66:6c:
         3d:21:3b:1d:9e:8c:36:57:25:f5:ec:8b:d8:f1:71:d2:ff:c0:
         79:82:af:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLjXVMYYv2MmbLvp4GE8W9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYmNhMmI4YjI3MTkzMDY5OTAyYTdjNjY2NDM2ZWRjMDRl
YmZiYzcwHhcNMjUwNjA3MTgwMDUxWhcNMjUwNjA4MTgwMDUxWjAzMTEwLwYDVQQD
EygwYjkzNWNlZDQ1YWU1NmUwNTY3MThlZmJjNDJjNTcwNjI4NjUyMTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp++H6QLYf/WBaDs9quyKCO4bt7X9
SL0f7oEwJfaT06BgxpRXm6zmY2ll9DiwC6RpB+0knPFy2zHzZlVgewo2jbwh2AWh
OKzltIIcyAoHLdjTteDMkoKig1utQNADWGi7xxi5tumEUbf2YHrQaW57Kaaa72cu
7BDmRviLS87si/7mU297DGEBofNyv7PyCXSmheT5siYhmClqBmoVVyfeT7B7wZmv
1pCJzxySgayvYmj3s46LOkvVKcBXPy1CmXH5DZhLEqBzKHM183XwZaPg/uCv8Kjy
iYjXZ5j2sKrWGKPplZFA0e28WLNL1kvY9aXBs/n/mIEYaWcriAFntGHjPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAuTXO1FrlbgVnGO+8QsVwYoZSFQMB8GA1UdIwQY
MBaAFNO8oriycZMGmQKnxmZDbtwE6/vHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDd5aXVMSnhrd2FaQXFmR1prTnUzQVRyLThjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8yYmRjZmUtMTcyYS00MjNlLTgwNTct
YzkyNGY4NjMwZmU0LzEvMDd5aXVMSnhrd2FaQXFmR1prTnUzQVRyLThjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8yYmRjZmUtMTcyYS00MjNlLTgwNTctYzkyNGY4NjMwZmU0
LzEvMDd5aXVMSnhrd2FaQXFmR1prTnUzQVRyLThjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbDArhVp2
ocXdIQ9y14zFbQgfMWu0uQR1aeC2gU0xDzzSB3GlLACb9QDzUNVclJgE3XmiSfPD
sC/vCPHKzgLkjXrELTnvBOdxMzuXP0X9/+/UVN4iOexS5xjnNegv/ts2eoXIK7+B
6wXre+V5JshUEwcTtF5bL3lQqTtlXrnIYfs9pRuaSigvdZRUe23sqc4OdUDTui4i
oOLHoN8+AOxMqRhZslC9QG/MslRX419YakoMCja2JRGh9n03AJ7cvZV34aALL0Uq
lqm6ZAqS164+brmBq9YALXw/xkHuL6Mc1WQOKa+aKjLrPGZsPSE7HZ6MNlcl9eyL
2PFx0v/AeYKvFw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:36:24 2025 by rpki-client