Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
File:                     gEbjOGAXHvbsYOvPxexayRwldXw.mft (raw, json)
Hash identifier:          1wNiaU8L0LrEcD6D8q3ouB+uhgZPm9oyIrM1+0LDgm8=
Subject key identifier:   73:DB:14:20:C1:83:F7:64:44:C5:65:C7:31:26:40:5A:66:63:A0:79
Authority key identifier: 80:46:E3:38:60:17:1E:F6:EC:60:EB:CF:C5:EC:5A:C9:1C:25:75:7C
Certificate issuer:       /CN=8046e33860171ef6ec60ebcfc5ec5ac91c25757c
Certificate serial:       01974AE85BB4ABB601812EF7BF7A944C2A6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
Manifest number:          0715
Signing time:             Sat 07 Jun 2025 15:00:31 +0000
Manifest this update:     Sat 07 Jun 2025 15:00:31 +0000
Manifest next update:     Sun 08 Jun 2025 15:00:31 +0000
Files and hashes:         1: gEbjOGAXHvbsYOvPxexayRwldXw.crl (hash: rMaEJQoSjozhA6N9vdu3hPleR1GjGD2ga8N3f3osMO4=)
                          2: jXrYu6LJxwivjMZClD5ZjOpwIqA.roa (hash: ck7XGlXmTp2bXTd8xLW029LSmXtDoPF5+uZ9OUYHI7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:5b:b4:ab:b6:01:81:2e:f7:bf:7a:94:4c:2a:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8046e33860171ef6ec60ebcfc5ec5ac91c25757c
        Validity
            Not Before: Jun  7 15:00:31 2025 GMT
            Not After : Jun  8 15:00:31 2025 GMT
        Subject: CN=73db1420c183f76444c565c73126405a6663a079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7f:09:6f:1d:23:18:43:31:86:9a:fe:5a:bc:
                    5b:c2:82:28:98:7a:4e:4e:2f:1e:90:15:a9:28:9c:
                    87:36:12:0c:dd:74:82:bd:d9:26:e3:14:24:b0:0f:
                    36:d7:b7:58:ff:a4:f6:ca:4e:1d:c4:96:33:87:d8:
                    9b:b0:4f:83:23:ae:ae:04:bc:41:bb:30:9c:f1:43:
                    3c:fe:58:0f:07:31:f4:0a:60:d2:aa:70:31:19:a4:
                    cf:5e:e3:00:15:91:09:97:df:bf:fb:f1:ea:ac:3d:
                    17:f0:45:02:5b:9f:c3:b5:6f:31:b9:53:a8:6e:aa:
                    e9:0c:c7:50:a7:f6:52:50:52:cf:3a:3f:3f:9c:4b:
                    0a:29:ea:e9:27:ef:d8:2b:18:d7:a0:03:b4:a9:53:
                    77:f3:6b:01:20:48:fc:e2:85:ce:47:be:a9:f6:01:
                    9f:fa:80:4b:a9:2e:42:30:64:17:07:dd:26:07:10:
                    1d:37:04:62:1d:5e:94:dd:b1:8a:5f:bc:b4:c4:2f:
                    57:26:da:de:16:d8:1a:ac:00:e5:57:84:e7:d9:d0:
                    3a:e7:62:a2:c9:ba:08:3f:50:4f:ba:f3:f7:31:4e:
                    2a:b8:c3:5d:40:94:04:eb:05:0d:f4:92:ac:02:44:
                    9d:c1:b6:09:5a:4b:3f:42:8f:53:d9:c2:1b:4c:8a:
                    8b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DB:14:20:C1:83:F7:64:44:C5:65:C7:31:26:40:5A:66:63:A0:79
            X509v3 Authority Key Identifier:
                keyid:80:46:E3:38:60:17:1E:F6:EC:60:EB:CF:C5:EC:5A:C9:1C:25:75:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:53:29:34:f7:12:84:71:8c:38:ef:08:05:7f:55:5c:e1:e3:
         12:8f:0e:48:fb:f6:9a:b8:26:c2:15:da:cd:3d:41:5c:e2:a1:
         2d:aa:6f:55:29:5f:86:50:5d:f3:42:22:42:b0:d8:68:c3:3b:
         e1:b3:95:e7:fb:98:cc:de:b4:2a:f3:14:e4:fb:51:49:6f:db:
         f7:69:0f:f1:31:63:78:1d:30:f6:72:ab:f8:20:af:43:65:71:
         ac:59:30:5e:7d:24:7b:31:0a:f9:82:48:9c:1e:70:1b:27:1d:
         6b:53:fe:6e:cd:07:b3:14:80:8e:25:af:36:57:34:75:fe:0d:
         55:a7:1a:36:6e:77:d6:17:1d:4d:a0:06:bc:79:b9:e4:9f:61:
         49:26:14:90:45:c3:3f:76:64:1d:47:87:e3:81:72:ad:8f:3b:
         dd:f6:54:d7:31:28:11:d9:a9:43:62:42:5b:c5:f1:bf:6d:21:
         a4:75:a3:86:76:db:26:5e:61:ee:14:60:fe:ce:c7:99:c4:94:
         6d:75:e9:f5:7c:8b:39:85:70:4b:b8:72:76:62:8d:33:6b:73:
         ae:ca:25:d2:29:c8:a7:03:01:bb:54:54:a1:f3:35:8e:5c:0b:
         37:03:e7:9b:84:71:03:76:b5:78:f8:5a:33:4d:30:8a:8e:34:
         23:5e:db:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdK6Fu0q7YBgS73v3qUTCpuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNDZlMzM4NjAxNzFlZjZlYzYwZWJjZmM1ZWM1YWM5MWMy
NTc1N2MwHhcNMjUwNjA3MTUwMDMxWhcNMjUwNjA4MTUwMDMxWjAzMTEwLwYDVQQD
Eyg3M2RiMTQyMGMxODNmNzY0NDRjNTY1YzczMTI2NDA1YTY2NjNhMDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArH8Jbx0jGEMxhpr+WrxbwoIomHpO
Ti8ekBWpKJyHNhIM3XSCvdkm4xQksA8217dY/6T2yk4dxJYzh9ibsE+DI66uBLxB
uzCc8UM8/lgPBzH0CmDSqnAxGaTPXuMAFZEJl9+/+/HqrD0X8EUCW5/DtW8xuVOo
bqrpDMdQp/ZSUFLPOj8/nEsKKerpJ+/YKxjXoAO0qVN382sBIEj84oXOR76p9gGf
+oBLqS5CMGQXB90mBxAdNwRiHV6U3bGKX7y0xC9XJtreFtgarADlV4Tn2dA652Ki
yboIP1BPuvP3MU4quMNdQJQE6wUN9JKsAkSdwbYJWks/Qo9T2cIbTIqLWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPbFCDBg/dkRMVlxzEmQFpmY6B5MB8GA1UdIwQY
MBaAFIBG4zhgFx727GDrz8XsWskcJXV8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0Viak9HQVhIdmJzWU92UHhleGF5UndsZFh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83ODhkMTAtZThkZi00ZGFjLWFhOGYt
ZDM5ZmZjMTZlZjg5LzEvZ0Viak9HQVhIdmJzWU92UHhleGF5UndsZFh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS83ODhkMTAtZThkZi00ZGFjLWFhOGYtZDM5ZmZjMTZlZjg5
LzEvZ0Viak9HQVhIdmJzWU92UHhleGF5UndsZFh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAklMpNPcS
hHGMOO8IBX9VXOHjEo8OSPv2mrgmwhXazT1BXOKhLapvVSlfhlBd80IiQrDYaMM7
4bOV5/uYzN60KvMU5PtRSW/b92kP8TFjeB0w9nKr+CCvQ2VxrFkwXn0kezEK+YJI
nB5wGycda1P+bs0HsxSAjiWvNlc0df4NVacaNm531hcdTaAGvHm55J9hSSYUkEXD
P3ZkHUeH44FyrY873fZU1zEoEdmpQ2JCW8Xxv20hpHWjhnbbJl5h7hRg/s7HmcSU
bXXp9XyLOYVwS7hydmKNM2tzrsol0inIpwMBu1RUofM1jlwLNwPnm4RxA3a1ePha
M00wio40I17b9g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:17:49 2025 by rpki-client