Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft
File:                     aeoVk9ahKCtuhMLTMlEeoqmahCA.mft (raw, json)
Hash identifier:          4y9JMYa76xJrhWr0Y9Ttz8vi/BnXBuebNZPoX/HzCVk=
Subject key identifier:   07:83:E6:69:28:24:4F:C6:7B:69:D1:3F:A7:20:D9:54:66:27:0D:6F
Authority key identifier: 69:EA:15:93:D6:A1:28:2B:6E:84:C2:D3:32:51:1E:A2:A9:9A:84:20
Certificate issuer:       /CN=69ea1593d6a1282b6e84c2d332511ea2a99a8420
Certificate serial:       01974EC5FEA7F260B91F02279FC110D52601
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aeoVk9ahKCtuhMLTMlEeoqmahCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft
Manifest number:          0788
Signing time:             Sun 08 Jun 2025 09:01:27 +0000
Manifest this update:     Sun 08 Jun 2025 09:01:27 +0000
Manifest next update:     Mon 09 Jun 2025 09:01:27 +0000
Files and hashes:         1: aeoVk9ahKCtuhMLTMlEeoqmahCA.crl (hash: PbVsLpb32gup4xqmrqh+V0w9lXN1oKzeRRUexitPO2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aeoVk9ahKCtuhMLTMlEeoqmahCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 09:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:c5:fe:a7:f2:60:b9:1f:02:27:9f:c1:10:d5:26:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69ea1593d6a1282b6e84c2d332511ea2a99a8420
        Validity
            Not Before: Jun  8 09:01:27 2025 GMT
            Not After : Jun  9 09:01:27 2025 GMT
        Subject: CN=0783e66928244fc67b69d13fa720d95466270d6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c2:f3:16:a6:07:25:5a:e7:2e:91:42:f3:10:
                    39:61:28:b9:30:63:0a:b1:f8:1e:01:98:46:1d:76:
                    e9:2a:e6:4d:ec:5e:5a:5e:93:d1:a2:7e:2b:e9:7f:
                    40:16:ff:9a:54:e2:32:2f:cc:db:df:1c:2e:a4:bf:
                    9d:df:14:6b:e4:5a:64:ea:63:21:91:44:d5:35:a2:
                    c2:89:93:72:e3:7b:ab:9e:7a:95:09:83:ba:6b:5b:
                    53:fd:13:a2:1c:b2:60:e3:11:79:ca:56:3d:e8:ab:
                    be:94:f9:26:9e:06:01:f1:46:b6:ef:07:eb:e6:56:
                    64:2a:f5:f1:be:70:7e:82:8f:e0:7c:9c:00:bc:61:
                    03:ba:2f:90:d0:6d:a4:5f:5b:0b:f3:b6:5c:ac:0f:
                    63:ac:87:39:1e:c0:d1:72:7d:67:f2:dd:15:b7:b3:
                    15:14:0f:c0:cd:bd:2b:c3:27:4c:81:fd:cf:b4:f3:
                    2e:12:e6:3e:df:44:d4:e8:24:de:6e:0f:cf:6a:1d:
                    f6:2b:ce:33:b1:35:e0:49:92:97:39:8e:29:45:47:
                    06:f7:3e:f0:c2:da:7c:94:31:fe:39:c7:6a:06:f9:
                    a5:0f:e1:99:43:63:21:77:cf:82:e2:61:16:03:76:
                    14:92:c4:43:dd:70:14:a5:02:57:93:8e:6e:f1:35:
                    73:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:83:E6:69:28:24:4F:C6:7B:69:D1:3F:A7:20:D9:54:66:27:0D:6F
            X509v3 Authority Key Identifier:
                keyid:69:EA:15:93:D6:A1:28:2B:6E:84:C2:D3:32:51:1E:A2:A9:9A:84:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aeoVk9ahKCtuhMLTMlEeoqmahCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:0d:61:db:f1:94:ef:37:6c:0c:6d:bc:f3:a6:c8:48:12:c3:
         3d:f2:38:83:0f:05:1f:51:53:5e:55:16:50:f7:6e:47:b3:25:
         59:0c:ed:e4:18:eb:48:27:27:5c:86:63:96:f6:38:81:32:70:
         e0:11:68:cd:62:3d:b9:21:6a:ae:29:ab:df:2e:7f:6d:ae:67:
         ad:2e:16:ed:50:76:98:cd:ab:b8:e3:08:17:bf:a6:cd:43:36:
         9c:bd:fc:1a:40:b2:c9:0c:32:1c:6b:c2:a8:69:97:67:85:d6:
         54:e5:67:f2:2d:07:62:6b:81:26:4e:9a:b9:4e:f4:4a:5a:15:
         31:59:90:4f:75:ec:8e:b7:c9:93:b0:c6:5d:e0:8b:e2:7c:fc:
         56:5a:d4:c2:e4:70:c3:79:bc:49:dd:01:a5:4d:25:93:1d:6e:
         d5:d5:0a:11:27:f8:03:61:77:21:71:be:47:38:d3:a7:d4:b4:
         bc:b0:79:aa:09:a3:52:eb:4e:8c:e4:6f:4d:b4:a2:af:63:06:
         32:9e:fd:ef:d5:d4:92:95:87:6e:b4:d1:6f:b2:23:47:5e:df:
         49:bb:fd:64:15:83:e6:2a:15:e2:b6:69:df:22:34:75:f2:75:
         b4:c1:d4:58:87:36:2a:14:1c:80:31:3d:04:88:16:c0:32:e2:
         8c:9e:8d:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOxf6n8mC5HwInn8EQ1SYBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZWExNTkzZDZhMTI4MmI2ZTg0YzJkMzMyNTExZWEyYTk5
YTg0MjAwHhcNMjUwNjA4MDkwMTI3WhcNMjUwNjA5MDkwMTI3WjAzMTEwLwYDVQQD
EygwNzgzZTY2OTI4MjQ0ZmM2N2I2OWQxM2ZhNzIwZDk1NDY2MjcwZDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsLzFqYHJVrnLpFC8xA5YSi5MGMK
sfgeAZhGHXbpKuZN7F5aXpPRon4r6X9AFv+aVOIyL8zb3xwupL+d3xRr5Fpk6mMh
kUTVNaLCiZNy43urnnqVCYO6a1tT/ROiHLJg4xF5ylY96Ku+lPkmngYB8Ua27wfr
5lZkKvXxvnB+go/gfJwAvGEDui+Q0G2kX1sL87ZcrA9jrIc5HsDRcn1n8t0Vt7MV
FA/Azb0rwydMgf3PtPMuEuY+30TU6CTebg/Pah32K84zsTXgSZKXOY4pRUcG9z7w
wtp8lDH+OcdqBvmlD+GZQ2Mhd8+C4mEWA3YUksRD3XAUpQJXk45u8TVzBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAeD5mkoJE/Ge2nRP6cg2VRmJw1vMB8GA1UdIwQY
MBaAFGnqFZPWoSgrboTC0zJRHqKpmoQgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWVvVms5YWhLQ3R1aE1MVE1sRWVvcW1haENBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lYjdiNjItYzQ2Yy00NDYyLWJkOGQt
Nzk2ZmJiNmFlOWJlLzEvYWVvVms5YWhLQ3R1aE1MVE1sRWVvcW1haENBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9lYjdiNjItYzQ2Yy00NDYyLWJkOGQtNzk2ZmJiNmFlOWJl
LzEvYWVvVms5YWhLQ3R1aE1MVE1sRWVvcW1haENBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOw1h2/GU
7zdsDG2886bISBLDPfI4gw8FH1FTXlUWUPduR7MlWQzt5BjrSCcnXIZjlvY4gTJw
4BFozWI9uSFqrimr3y5/ba5nrS4W7VB2mM2ruOMIF7+mzUM2nL38GkCyyQwyHGvC
qGmXZ4XWVOVn8i0HYmuBJk6auU70SloVMVmQT3XsjrfJk7DGXeCL4nz8VlrUwuRw
w3m8Sd0BpU0lkx1u1dUKESf4A2F3IXG+RzjTp9S0vLB5qgmjUutOjORvTbSir2MG
Mp7979XUkpWHbrTRb7IjR17fSbv9ZBWD5ioV4rZp3yI0dfJ1tMHUWIc2KhQcgDE9
BIgWwDLijJ6NgQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 16:39:58 2025 by rpki-client