Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.mft
File:                     e9kR8fTQvD7mLvgzIwehNUVitSU.mft (raw, json)
Hash identifier:          332JCnQ2aVykXiqqiGB0Hofe8PlC/kJB+Si+XVdGGug=
Subject key identifier:   FD:7C:79:7B:BC:E6:C6:EA:E0:4C:10:32:A7:FE:43:B4:9F:B1:D7:4D
Authority key identifier: 7B:D9:11:F1:F4:D0:BC:3E:E6:2E:F8:33:23:07:A1:35:45:62:B5:25
Certificate issuer:       /CN=7bd911f1f4d0bc3ee62ef8332307a1354562b525
Certificate serial:       0197523411F4B67BF3154AC8AB5A57483D25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e9kR8fTQvD7mLvgzIwehNUVitSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.mft
Manifest number:          0983
Signing time:             Mon 09 Jun 2025 01:00:33 +0000
Manifest this update:     Mon 09 Jun 2025 01:00:33 +0000
Manifest next update:     Tue 10 Jun 2025 01:00:33 +0000
Files and hashes:         1: e9kR8fTQvD7mLvgzIwehNUVitSU.crl (hash: JSXdUorD/moMPl6Ed88TlLNMlajL788lIBb0/5V9LRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e9kR8fTQvD7mLvgzIwehNUVitSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:52:34:11:f4:b6:7b:f3:15:4a:c8:ab:5a:57:48:3d:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bd911f1f4d0bc3ee62ef8332307a1354562b525
        Validity
            Not Before: Jun  9 01:00:33 2025 GMT
            Not After : Jun 10 01:00:33 2025 GMT
        Subject: CN=fd7c797bbce6c6eae04c1032a7fe43b49fb1d74d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e2:08:a6:5b:ce:4b:34:cb:42:b5:10:49:6d:
                    07:29:6d:f1:2a:bf:a2:63:a1:b5:6b:59:98:fc:87:
                    21:7a:81:09:c7:86:de:33:84:d0:05:48:de:5f:b0:
                    19:cc:9c:4a:5d:5d:3e:b4:09:cc:f1:81:ee:d6:05:
                    58:05:3e:aa:65:72:c9:aa:b8:1f:39:71:ef:81:59:
                    ab:c1:87:f4:71:1f:16:77:13:30:b9:40:57:15:e0:
                    4a:ce:65:08:77:3c:6f:ee:0b:4c:f0:f5:b1:92:d6:
                    0e:f2:84:ef:10:00:87:c4:c8:d4:85:87:45:7e:ac:
                    11:28:aa:e3:69:1a:42:96:c9:e7:60:d0:36:12:15:
                    22:b7:cc:18:48:19:ba:53:f2:02:9c:c7:4e:29:22:
                    e3:38:f1:f7:bc:2a:d6:73:ac:e3:e6:77:de:4d:f8:
                    a0:88:32:63:19:47:3c:2f:08:56:64:1b:78:90:43:
                    d9:c6:68:c6:4d:4f:c1:4f:ff:94:fb:54:e7:0a:51:
                    0e:43:26:41:bd:c8:49:65:60:4d:9c:b4:64:3e:97:
                    cd:fb:a1:7c:bd:60:b8:fb:2c:4d:4d:59:83:b8:44:
                    de:da:61:85:14:82:7b:dd:c2:96:95:41:df:2b:70:
                    e9:88:78:d9:81:02:6e:82:56:ec:cf:3f:da:f7:41:
                    07:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:7C:79:7B:BC:E6:C6:EA:E0:4C:10:32:A7:FE:43:B4:9F:B1:D7:4D
            X509v3 Authority Key Identifier:
                keyid:7B:D9:11:F1:F4:D0:BC:3E:E6:2E:F8:33:23:07:A1:35:45:62:B5:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9kR8fTQvD7mLvgzIwehNUVitSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:77:f8:e4:80:eb:11:ae:a8:de:e5:da:02:6a:1a:b6:bc:b6:
         35:d6:ec:f5:be:ce:86:54:d1:1f:53:8e:4e:9c:1a:fc:32:47:
         6d:4f:29:94:a2:bb:4f:21:77:76:7c:ab:43:52:01:3e:6c:c4:
         2c:0a:92:11:2c:e3:ef:19:45:c3:72:da:8e:48:43:c1:26:8d:
         3e:e1:80:bf:ff:07:cb:9a:06:71:80:1f:a7:9f:94:9a:54:0b:
         f0:d6:54:01:57:1c:04:3d:a1:40:47:d5:7f:84:93:71:9d:d5:
         ee:5d:de:2a:e3:46:37:c3:1b:de:1b:5c:94:ce:c2:aa:48:db:
         00:b6:1d:fc:11:19:46:43:b1:47:70:96:13:5e:41:1c:d7:6a:
         c1:44:3d:64:f3:1b:5b:b8:5b:a6:08:da:0f:67:81:8f:0b:01:
         ad:de:28:e2:69:7f:ae:a9:5e:a0:5d:e3:36:92:cf:f0:5c:71:
         42:c7:1f:81:9b:9b:ca:09:d0:ad:93:54:95:f5:78:8b:43:ae:
         10:b4:95:93:48:26:39:bc:48:ef:9c:4c:80:4f:3f:4a:d7:d1:
         dd:7a:aa:b4:65:56:bb:89:05:50:9d:be:da:3e:42:7f:d5:36:
         73:3d:6d:25:f2:72:6f:39:42:a9:1e:6b:39:9c:40:78:b0:db:
         12:1c:24:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdSNBH0tnvzFUrIq1pXSD0lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiZDkxMWYxZjRkMGJjM2VlNjJlZjgzMzIzMDdhMTM1NDU2
MmI1MjUwHhcNMjUwNjA5MDEwMDMzWhcNMjUwNjEwMDEwMDMzWjAzMTEwLwYDVQQD
EyhmZDdjNzk3YmJjZTZjNmVhZTA0YzEwMzJhN2ZlNDNiNDlmYjFkNzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+IIplvOSzTLQrUQSW0HKW3xKr+i
Y6G1a1mY/IcheoEJx4beM4TQBUjeX7AZzJxKXV0+tAnM8YHu1gVYBT6qZXLJqrgf
OXHvgVmrwYf0cR8WdxMwuUBXFeBKzmUIdzxv7gtM8PWxktYO8oTvEACHxMjUhYdF
fqwRKKrjaRpClsnnYNA2EhUit8wYSBm6U/ICnMdOKSLjOPH3vCrWc6zj5nfeTfig
iDJjGUc8LwhWZBt4kEPZxmjGTU/BT/+U+1TnClEOQyZBvchJZWBNnLRkPpfN+6F8
vWC4+yxNTVmDuETe2mGFFIJ73cKWlUHfK3DpiHjZgQJuglbszz/a90EH4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP18eXu85sbq4EwQMqf+Q7SfsddNMB8GA1UdIwQY
MBaAFHvZEfH00Lw+5i74MyMHoTVFYrUlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTlrUjhmVFF2RDdtTHZnekl3ZWhOVVZpdFNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS81MWYyNWYtNjM1My00YjhjLTkzY2Mt
ZGEyNTUwNjRkM2RjLzEvZTlrUjhmVFF2RDdtTHZnekl3ZWhOVVZpdFNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS81MWYyNWYtNjM1My00YjhjLTkzY2MtZGEyNTUwNjRkM2Rj
LzEvZTlrUjhmVFF2RDdtTHZnekl3ZWhOVVZpdFNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhnf45IDr
Ea6o3uXaAmoatry2Ndbs9b7OhlTRH1OOTpwa/DJHbU8plKK7TyF3dnyrQ1IBPmzE
LAqSESzj7xlFw3LajkhDwSaNPuGAv/8Hy5oGcYAfp5+UmlQL8NZUAVccBD2hQEfV
f4STcZ3V7l3eKuNGN8Mb3htclM7CqkjbALYd/BEZRkOxR3CWE15BHNdqwUQ9ZPMb
W7hbpgjaD2eBjwsBrd4o4ml/rqleoF3jNpLP8FxxQscfgZubygnQrZNUlfV4i0Ou
ELSVk0gmObxI75xMgE8/StfR3XqqtGVWu4kFUJ2+2j5Cf9U2cz1tJfJybzlCqR5r
OZxAeLDbEhwkZg==
-----END CERTIFICATE-----
Generated at Mon Jun 9 05:12:47 2025 by rpki-client