Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft
File:                     t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft (raw, json)
Hash identifier:          adOy8cUsmhC6x4j67dxGvhGDCDDq8aLg2J2+Rq3CiuU=
Subject key identifier:   B7:C2:C1:59:19:18:30:8D:C2:41:72:0C:4B:18:31:7E:7A:62:3A:58
Authority key identifier: B7:D2:96:D6:90:59:45:7B:E3:9C:3C:82:46:6A:CE:ED:02:76:68:36
Certificate issuer:       /CN=b7d296d69059457be39c3c82466aceed02766836
Certificate serial:       0197D7E3063B4026DD1D7A1F835944F2F464
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft
Manifest number:          06B8
Signing time:             Sat 05 Jul 2025 00:01:08 +0000
Manifest this update:     Sat 05 Jul 2025 00:01:08 +0000
Manifest next update:     Sun 06 Jul 2025 00:01:08 +0000
Files and hashes:         1: t9KW1pBZRXvjnDyCRmrO7QJ2aDY.crl (hash: iikLpCvos+ljVTnLT1MZAUIY8LDJOEjx9PnuXLlANkk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 00:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:d7:e3:06:3b:40:26:dd:1d:7a:1f:83:59:44:f2:f4:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7d296d69059457be39c3c82466aceed02766836
        Validity
            Not Before: Jul  5 00:01:08 2025 GMT
            Not After : Jul  6 00:01:08 2025 GMT
        Subject: CN=b7c2c1591918308dc241720c4b18317e7a623a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0a:44:89:6d:13:cc:7e:50:fe:0b:e6:10:5f:
                    57:60:bf:6d:84:a9:72:59:45:73:16:8a:fd:f5:57:
                    b3:00:51:6a:a8:34:a5:36:31:82:e2:26:25:0f:54:
                    c0:cc:e7:43:4a:66:15:3a:06:75:e1:c1:70:9d:c4:
                    f4:ae:fd:a9:51:c6:9a:3a:35:63:98:93:4a:5d:ba:
                    29:e0:6b:11:db:d4:90:fb:19:4a:80:d1:a7:c8:16:
                    73:57:87:a7:a5:da:44:65:be:1b:51:d4:18:bf:b4:
                    40:d8:d7:9f:bf:ed:f5:46:22:4d:f3:29:47:47:7f:
                    61:54:9c:ef:ad:04:86:88:dc:8d:e6:23:19:60:9c:
                    fa:70:a7:05:0c:0d:e7:31:2e:d2:0a:73:13:ca:c6:
                    32:55:e5:75:fb:ca:a6:f0:14:39:e9:b2:45:72:3f:
                    31:5d:f2:ef:49:d0:80:68:ab:55:06:09:3b:f2:93:
                    5d:19:49:04:7a:c0:db:3b:fd:f7:98:c0:34:79:fa:
                    89:4f:12:c1:4f:b6:69:4a:57:ca:4f:84:4e:cb:69:
                    5d:7b:44:17:da:11:ce:cf:da:34:a8:d3:f2:e3:9f:
                    c5:fb:80:7c:86:06:d8:ab:f3:47:57:ba:3f:f4:91:
                    b5:f9:b5:be:b0:81:23:90:7f:45:5b:21:32:6d:e4:
                    62:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C2:C1:59:19:18:30:8D:C2:41:72:0C:4B:18:31:7E:7A:62:3A:58
            X509v3 Authority Key Identifier:
                keyid:B7:D2:96:D6:90:59:45:7B:E3:9C:3C:82:46:6A:CE:ED:02:76:68:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:2d:3b:dc:7f:6e:36:8a:72:d0:9c:db:5e:81:6d:e8:3c:9c:
         16:40:42:a7:5c:96:32:ca:3d:63:82:9a:2e:f3:eb:b0:a6:03:
         fd:53:3a:1b:ed:b9:d3:ba:23:1e:0c:aa:66:bb:f4:db:9b:0f:
         83:db:9e:77:cf:76:e9:a2:75:0f:58:e1:45:13:52:ce:5c:f6:
         d3:b2:6b:7d:5e:3d:26:95:d9:b9:a6:fe:b6:9d:e4:86:c1:f4:
         44:8f:1d:82:40:97:fa:74:eb:d0:70:3a:49:ec:c2:f6:de:67:
         22:36:ef:5b:ef:1c:b4:55:7d:97:8f:b9:30:91:ad:69:e4:78:
         fd:41:93:dc:35:01:24:8d:c1:0b:53:1d:2b:a8:a8:f6:b9:1c:
         c7:21:59:78:05:da:35:79:51:33:61:02:38:b8:b6:be:25:46:
         ca:ed:ed:35:ec:65:79:7a:f1:07:30:17:5a:40:8a:95:ae:f4:
         40:41:35:42:64:e8:a1:c1:bc:03:80:cc:94:ff:bb:08:34:f1:
         11:92:4d:9d:2f:8e:9d:00:35:eb:22:15:69:95:9b:5b:dc:d1:
         57:66:04:7f:70:58:ce:c1:9c:8c:e1:fa:32:7b:ae:52:87:05:
         56:5c:7c:86:67:c9:0c:f2:dc:e5:5c:10:54:d9:0f:cd:2c:e1:
         19:ab:12:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfX4wY7QCbdHXofg1lE8vRkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ZDI5NmQ2OTA1OTQ1N2JlMzljM2M4MjQ2NmFjZWVkMDI3
NjY4MzYwHhcNMjUwNzA1MDAwMTA4WhcNMjUwNzA2MDAwMTA4WjAzMTEwLwYDVQQD
EyhiN2MyYzE1OTE5MTgzMDhkYzI0MTcyMGM0YjE4MzE3ZTdhNjIzYTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwpEiW0TzH5Q/gvmEF9XYL9thKly
WUVzFor99VezAFFqqDSlNjGC4iYlD1TAzOdDSmYVOgZ14cFwncT0rv2pUcaaOjVj
mJNKXbop4GsR29SQ+xlKgNGnyBZzV4enpdpEZb4bUdQYv7RA2Nefv+31RiJN8ylH
R39hVJzvrQSGiNyN5iMZYJz6cKcFDA3nMS7SCnMTysYyVeV1+8qm8BQ56bJFcj8x
XfLvSdCAaKtVBgk78pNdGUkEesDbO/33mMA0efqJTxLBT7ZpSlfKT4ROy2lde0QX
2hHOz9o0qNPy45/F+4B8hgbYq/NHV7o/9JG1+bW+sIEjkH9FWyEybeRibQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLfCwVkZGDCNwkFyDEsYMX56YjpYMB8GA1UdIwQY
MBaAFLfSltaQWUV745w8gkZqzu0Cdmg2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDlLVzFwQlpSWHZqbkR5Q1Jtck83UUoyYURZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8zNzQ5NDctM2UyYy00MDI2LTgzMjQt
MTU5MjlkMDJmZDBjLzEvdDlLVzFwQlpSWHZqbkR5Q1Jtck83UUoyYURZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8zNzQ5NDctM2UyYy00MDI2LTgzMjQtMTU5MjlkMDJmZDBj
LzEvdDlLVzFwQlpSWHZqbkR5Q1Jtck83UUoyYURZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmS073H9u
Nopy0JzbXoFt6DycFkBCp1yWMso9Y4KaLvPrsKYD/VM6G+2507ojHgyqZrv025sP
g9ued8926aJ1D1jhRRNSzlz207JrfV49JpXZuab+tp3khsH0RI8dgkCX+nTr0HA6
SezC9t5nIjbvW+8ctFV9l4+5MJGtaeR4/UGT3DUBJI3BC1MdK6io9rkcxyFZeAXa
NXlRM2ECOLi2viVGyu3tNexleXrxBzAXWkCKla70QEE1QmToocG8A4DMlP+7CDTx
EZJNnS+OnQA16yIVaZWbW9zRV2YEf3BYzsGcjOH6MnuuUocFVlx8hmfJDPLc5VwQ
VNkPzSzhGasS5g==
-----END CERTIFICATE-----
Generated at Sat Jul 5 05:25:03 2025 by rpki-client