Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.mft
File:                     AMe7gqYBJXucgs_3rHkz81E6TUk.mft (raw, json)
Hash identifier:          2gLu/TiiCk5w8P77qu4GrHk+TDMEaRDDBwp+8pg0XGY=
Subject key identifier:   81:F9:75:EA:FF:39:9A:5D:02:82:DA:FF:16:5A:17:0B:3D:E0:3E:33
Authority key identifier: 00:C7:BB:82:A6:01:25:7B:9C:82:CF:F7:AC:79:33:F3:51:3A:4D:49
Certificate issuer:       /CN=00c7bb82a601257b9c82cff7ac7933f3513a4d49
Certificate serial:       01975FB907436B87D769DBA2786C40F7BCC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AMe7gqYBJXucgs_3rHkz81E6TUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.mft
Manifest number:          1586
Signing time:             Wed 11 Jun 2025 16:00:50 +0000
Manifest this update:     Wed 11 Jun 2025 16:00:50 +0000
Manifest next update:     Thu 12 Jun 2025 16:00:50 +0000
Files and hashes:         1: AMe7gqYBJXucgs_3rHkz81E6TUk.crl (hash: GCNcnrvkbgtsxXvpcmKHfwydgjeXgoNW9nyvM8XlrRY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AMe7gqYBJXucgs_3rHkz81E6TUk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 15:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5f:b9:07:43:6b:87:d7:69:db:a2:78:6c:40:f7:bc:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00c7bb82a601257b9c82cff7ac7933f3513a4d49
        Validity
            Not Before: Jun 11 16:00:50 2025 GMT
            Not After : Jun 12 16:00:50 2025 GMT
        Subject: CN=81f975eaff399a5d0282daff165a170b3de03e33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8d:12:f2:e2:3e:4c:cd:65:df:97:cb:28:31:
                    21:cc:5c:a0:83:49:d9:05:97:64:9e:6e:16:f7:e8:
                    25:c9:4a:85:94:ae:71:ed:ff:a1:80:29:40:0e:ca:
                    f9:89:2e:87:0b:1f:e2:99:5e:17:79:88:b8:2f:e1:
                    f6:79:ad:7f:9c:3d:03:30:f7:57:d9:ae:0e:e6:c1:
                    18:2c:ff:38:b3:88:3d:52:36:47:88:61:5b:03:cd:
                    46:ef:a8:2a:51:5e:75:ef:11:76:85:61:b2:03:93:
                    72:09:32:44:44:2c:96:56:e2:04:89:08:0f:57:2b:
                    42:63:8c:bf:40:c0:d3:a4:00:b6:e0:1e:91:bc:9a:
                    26:38:aa:fb:26:b4:2e:f4:dd:be:db:b2:76:e0:75:
                    ac:ff:27:03:7a:cb:6e:a9:38:29:c8:90:9d:91:f9:
                    d0:67:df:06:31:30:e9:78:ab:10:6d:67:11:4a:f8:
                    6b:9b:b0:02:66:b4:63:a1:cb:f6:00:fa:4c:0d:7a:
                    12:f8:76:f1:d5:87:f6:e7:7d:f1:a5:3a:bd:31:51:
                    29:64:15:f7:05:28:db:b2:82:be:6a:43:c7:15:94:
                    25:bb:4b:bd:32:71:b9:07:33:ee:15:0f:8c:24:fe:
                    88:3e:be:66:3d:41:e0:73:eb:8c:63:91:6c:5a:b5:
                    09:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F9:75:EA:FF:39:9A:5D:02:82:DA:FF:16:5A:17:0B:3D:E0:3E:33
            X509v3 Authority Key Identifier:
                keyid:00:C7:BB:82:A6:01:25:7B:9C:82:CF:F7:AC:79:33:F3:51:3A:4D:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMe7gqYBJXucgs_3rHkz81E6TUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:6a:23:cb:0e:74:0e:68:2c:0b:b7:95:0e:d1:13:ef:8f:2c:
         41:a5:dc:31:fd:d2:a0:87:f5:86:97:c7:1b:9b:7f:1f:19:78:
         40:9a:c7:d9:d1:7b:dc:c8:bb:7e:a3:5a:fd:5e:27:e1:25:df:
         85:11:8a:42:80:bb:47:2c:fd:b0:e0:ff:90:29:bd:7c:3d:32:
         6a:3d:7a:1f:5c:a3:2b:6e:f0:3d:68:10:e6:7a:93:fa:47:15:
         bd:e6:27:38:8a:df:1a:cd:95:3d:49:bd:8a:2b:4e:b4:e0:de:
         ee:5b:b9:0c:31:8f:84:95:ec:db:82:42:8d:eb:86:be:0e:99:
         69:e1:6a:cb:ab:6b:bc:31:bf:2d:26:88:68:47:ed:8c:86:7b:
         3b:e6:66:5a:a8:c7:e4:42:52:58:0e:92:b5:85:e5:22:e2:73:
         9a:bd:46:f9:8d:ea:7d:1f:77:e2:ca:ad:dd:9a:4a:7e:7d:cb:
         e3:b2:03:4d:63:ba:25:58:52:78:5d:eb:f6:57:47:ad:b8:4e:
         fe:36:a6:be:3b:68:5b:d7:14:43:55:7a:95:dc:4a:83:fc:f3:
         71:05:82:31:f6:27:00:22:9d:eb:5a:61:2d:07:73:d4:a3:3e:
         db:71:62:e4:d7:52:2a:f4:4f:c1:10:ae:35:65:6a:fe:c7:55:
         54:57:76:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdfuQdDa4fXaduieGxA97zGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYzdiYjgyYTYwMTI1N2I5YzgyY2ZmN2FjNzkzM2YzNTEz
YTRkNDkwHhcNMjUwNjExMTYwMDUwWhcNMjUwNjEyMTYwMDUwWjAzMTEwLwYDVQQD
Eyg4MWY5NzVlYWZmMzk5YTVkMDI4MmRhZmYxNjVhMTcwYjNkZTAzZTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI0S8uI+TM1l35fLKDEhzFygg0nZ
BZdknm4W9+glyUqFlK5x7f+hgClADsr5iS6HCx/imV4XeYi4L+H2ea1/nD0DMPdX
2a4O5sEYLP84s4g9UjZHiGFbA81G76gqUV517xF2hWGyA5NyCTJERCyWVuIEiQgP
VytCY4y/QMDTpAC24B6RvJomOKr7JrQu9N2+27J24HWs/ycDestuqTgpyJCdkfnQ
Z98GMTDpeKsQbWcRSvhrm7ACZrRjocv2APpMDXoS+Hbx1Yf2533xpTq9MVEpZBX3
BSjbsoK+akPHFZQlu0u9MnG5BzPuFQ+MJP6IPr5mPUHgc+uMY5FsWrUJRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIH5der/OZpdAoLa/xZaFws94D4zMB8GA1UdIwQY
MBaAFADHu4KmASV7nILP96x5M/NROk1JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU1lN2dxWUJKWHVjZ3NfM3JIa3o4MUU2VFVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iNjIzZDgtYWY2Mi00OTFhLTlmOWYt
MTIxNjIyNmM2ZmI1LzEvQU1lN2dxWUJKWHVjZ3NfM3JIa3o4MUU2VFVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9iNjIzZDgtYWY2Mi00OTFhLTlmOWYtMTIxNjIyNmM2ZmI1
LzEvQU1lN2dxWUJKWHVjZ3NfM3JIa3o4MUU2VFVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANWojyw50
DmgsC7eVDtET748sQaXcMf3SoIf1hpfHG5t/Hxl4QJrH2dF73Mi7fqNa/V4n4SXf
hRGKQoC7Ryz9sOD/kCm9fD0yaj16H1yjK27wPWgQ5nqT+kcVveYnOIrfGs2VPUm9
iitOtODe7lu5DDGPhJXs24JCjeuGvg6ZaeFqy6trvDG/LSaIaEftjIZ7O+ZmWqjH
5EJSWA6StYXlIuJzmr1G+Y3qfR934sqt3ZpKfn3L47IDTWO6JVhSeF3r9ldHrbhO
/jamvjtoW9cUQ1V6ldxKg/zzcQWCMfYnACKd61phLQdz1KM+23Fi5NdSKvRPwRCu
NWVq/sdVVFd2IQ==
-----END CERTIFICATE-----
Generated at Wed Jun 11 23:48:26 2025 by rpki-client