Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
File:                     EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft (raw, json)
Hash identifier:          uYOe3EUap3g9TnvoH77rsV8v1E+SagFf+G9sqQtOu3A=
Subject key identifier:   28:0C:0C:CE:C4:C1:71:5C:C2:71:C9:DB:21:16:90:A7:DB:12:FB:32
Authority key identifier: 12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04
Certificate issuer:       /CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04
Certificate serial:       0197499F5827B5B343B7BEC2D1710C76A711
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
Manifest number:          0BA3
Signing time:             Sat 07 Jun 2025 09:01:08 +0000
Manifest this update:     Sat 07 Jun 2025 09:01:08 +0000
Manifest next update:     Sun 08 Jun 2025 09:01:08 +0000
Files and hashes:         1: EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl (hash: wOWCoQfQvNIe30iRXI555eEGees+7sKRg/lc0qPZpmA=)
                          2: rOwp4EEdXg6LDTSQ0vKwhdv6jlA.roa (hash: GRZCNLtPKsPA6POGMydW8xxkB4XDVI2vNMs1Ud2kuDg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:9f:58:27:b5:b3:43:b7:be:c2:d1:71:0c:76:a7:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04
        Validity
            Not Before: Jun  7 09:01:08 2025 GMT
            Not After : Jun  8 09:01:08 2025 GMT
        Subject: CN=280c0ccec4c1715cc271c9db211690a7db12fb32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d1:96:28:e9:90:fe:c1:66:16:56:86:68:73:
                    22:42:2e:2b:0c:5b:84:f7:35:20:a1:73:53:f5:cc:
                    3d:bb:56:f3:35:d3:65:c5:28:8f:d8:80:c5:4e:61:
                    e4:34:d5:26:6d:f6:b3:bd:9b:18:db:b0:3f:23:47:
                    f5:eb:06:9b:64:b1:f7:3f:fb:9f:4a:f1:4d:ec:d8:
                    14:13:60:1b:91:87:b7:51:88:a8:d1:f6:20:b8:b0:
                    23:79:22:1b:9a:01:9e:d6:88:6d:99:19:89:e6:16:
                    51:17:44:35:93:d4:69:b1:f0:73:10:7d:ec:2f:73:
                    66:02:9a:81:25:f1:85:fd:5a:c4:11:38:b7:22:01:
                    16:be:27:46:e3:cc:e5:88:bb:d3:b5:74:42:85:c1:
                    20:f0:b9:d8:9f:52:49:79:6e:9c:8a:8b:70:43:c1:
                    3c:d6:87:c2:84:14:e6:6a:85:3e:82:d2:41:98:6c:
                    7a:2d:ca:68:48:64:6c:f4:b8:80:72:a8:ff:d1:f3:
                    07:b1:c5:6b:9f:09:41:37:e9:14:1e:e6:51:bc:2b:
                    58:33:02:b1:f7:01:df:da:8d:5f:a7:7b:7a:e7:5a:
                    a8:73:e0:92:eb:59:98:2f:e2:7c:39:35:2d:e6:7b:
                    76:fc:c3:d4:fd:6e:c5:7c:a1:7e:fc:3c:73:73:67:
                    20:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:0C:0C:CE:C4:C1:71:5C:C2:71:C9:DB:21:16:90:A7:DB:12:FB:32
            X509v3 Authority Key Identifier:
                keyid:12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:79:69:b0:af:7e:36:2f:7f:f1:d2:9e:4d:4b:39:f7:2d:ce:
         b4:c3:8f:cb:89:67:1c:d7:9e:f6:33:d4:a7:e4:29:c8:be:3c:
         03:e8:8b:cc:d1:29:f4:cb:c0:58:ef:f7:90:d7:ea:e5:89:5f:
         cb:64:22:54:63:29:d7:a2:c9:2d:3d:51:f9:cd:ba:cf:98:64:
         0d:db:8f:4f:e7:11:d1:31:5a:17:b7:e5:82:18:3b:d5:54:1f:
         8f:b1:b9:e3:15:af:0a:05:ec:88:b2:44:6c:4a:57:32:f0:3a:
         e5:76:b9:b5:13:49:17:70:3b:4f:8b:22:e5:7e:91:cc:3c:53:
         8f:ef:5c:c2:f4:08:27:b6:93:e9:5a:3d:e9:2c:68:ea:e8:8c:
         63:81:8c:c4:d7:ba:b1:a9:e2:3a:09:ec:28:25:39:12:60:2c:
         3e:47:be:c4:f3:75:cd:46:49:04:f2:75:3a:88:36:a4:32:35:
         e0:d3:57:8e:cf:21:cf:30:13:fe:6a:90:8c:5b:da:fb:0c:dd:
         a0:59:62:00:71:c3:09:65:93:77:a1:bf:c2:5d:da:16:68:1a:
         ae:fc:81:28:fb:57:80:64:e6:8f:47:8a:71:3a:60:62:f4:c0:
         28:21:d4:f2:7b:56:cd:2c:4d:67:2d:4d:34:c6:2f:42:27:b5:
         bb:8d:d4:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJn1gntbNDt77C0XEMdqcRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNzMxZjZkN2UzZTIwYWQ5YmYzMWI4YWNkNjA2ZjA4OTNi
OWZlMDQwHhcNMjUwNjA3MDkwMTA4WhcNMjUwNjA4MDkwMTA4WjAzMTEwLwYDVQQD
EygyODBjMGNjZWM0YzE3MTVjYzI3MWM5ZGIyMTE2OTBhN2RiMTJmYjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstGWKOmQ/sFmFlaGaHMiQi4rDFuE
9zUgoXNT9cw9u1bzNdNlxSiP2IDFTmHkNNUmbfazvZsY27A/I0f16wabZLH3P/uf
SvFN7NgUE2AbkYe3UYio0fYguLAjeSIbmgGe1ohtmRmJ5hZRF0Q1k9RpsfBzEH3s
L3NmApqBJfGF/VrEETi3IgEWvidG48zliLvTtXRChcEg8LnYn1JJeW6ciotwQ8E8
1ofChBTmaoU+gtJBmGx6LcpoSGRs9LiAcqj/0fMHscVrnwlBN+kUHuZRvCtYMwKx
9wHf2o1fp3t651qoc+CS61mYL+J8OTUt5nt2/MPU/W7FfKF+/Dxzc2cg/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCgMDM7EwXFcwnHJ2yEWkKfbEvsyMB8GA1UdIwQY
MBaAFBJzH21+PiCtm/Mbis1gbwiTuf4EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW5NZmJYNC1JSzJiOHh1S3pXQnZDSk81X2dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC85MzY0YmYtMDFhYi00NDdiLWFiMWEt
MWQ3NzJlMmU2NDM4LzEvRW5NZmJYNC1JSzJiOHh1S3pXQnZDSk81X2dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC85MzY0YmYtMDFhYi00NDdiLWFiMWEtMWQ3NzJlMmU2NDM4
LzEvRW5NZmJYNC1JSzJiOHh1S3pXQnZDSk81X2dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkHlpsK9+
Ni9/8dKeTUs59y3OtMOPy4lnHNee9jPUp+QpyL48A+iLzNEp9MvAWO/3kNfq5Ylf
y2QiVGMp16LJLT1R+c26z5hkDduPT+cR0TFaF7flghg71VQfj7G54xWvCgXsiLJE
bEpXMvA65Xa5tRNJF3A7T4si5X6RzDxTj+9cwvQIJ7aT6Vo96Sxo6uiMY4GMxNe6
saniOgnsKCU5EmAsPke+xPN1zUZJBPJ1Oog2pDI14NNXjs8hzzAT/mqQjFva+wzd
oFliAHHDCWWTd6G/wl3aFmgarvyBKPtXgGTmj0eKcTpgYvTAKCHU8ntWzSxNZy1N
NMYvQie1u43Urg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:57:18 2025 by rpki-client