Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/37e5cb-d9ee-45d3-95ab-0db0fd74db32/1/chgSXs-7IR7fwt4EcvlkqobL6Z4.mft
File:                     chgSXs-7IR7fwt4EcvlkqobL6Z4.mft (raw, json)
Hash identifier:          Bg/wVKJTaNAkmB/6yUgFJArrPajxRO0hQJZ/xcgkvsE=
Subject key identifier:   75:F9:C9:E6:7E:4E:54:8F:53:72:EA:0E:FA:B1:64:06:0A:C3:1D:D0
Authority key identifier: 72:18:12:5E:CF:BB:21:1E:DF:C2:DE:04:72:F9:64:AA:86:CB:E9:9E
Certificate issuer:       /CN=7218125ecfbb211edfc2de0472f964aa86cbe99e
Certificate serial:       01975045AB14054AA362615F534A768B74B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/chgSXs-7IR7fwt4EcvlkqobL6Z4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/37e5cb-d9ee-45d3-95ab-0db0fd74db32/1/chgSXs-7IR7fwt4EcvlkqobL6Z4.mft
Manifest number:          0C65
Signing time:             Sun 08 Jun 2025 16:00:32 +0000
Manifest this update:     Sun 08 Jun 2025 16:00:32 +0000
Manifest next update:     Mon 09 Jun 2025 16:00:32 +0000
Files and hashes:         1: chgSXs-7IR7fwt4EcvlkqobL6Z4.crl (hash: nnJRD5pEvstL9dZnmr3LDSuY2v1dVmAGGkdRHBJhf1I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/37e5cb-d9ee-45d3-95ab-0db0fd74db32/1/chgSXs-7IR7fwt4EcvlkqobL6Z4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/37e5cb-d9ee-45d3-95ab-0db0fd74db32/1/chgSXs-7IR7fwt4EcvlkqobL6Z4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/chgSXs-7IR7fwt4EcvlkqobL6Z4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 11:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:45:ab:14:05:4a:a3:62:61:5f:53:4a:76:8b:74:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7218125ecfbb211edfc2de0472f964aa86cbe99e
        Validity
            Not Before: Jun  8 16:00:32 2025 GMT
            Not After : Jun  9 16:00:32 2025 GMT
        Subject: CN=75f9c9e67e4e548f5372ea0efab164060ac31dd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c8:97:93:11:b4:db:b2:5a:63:6a:c5:79:be:
                    7f:3b:c4:df:65:11:84:99:88:df:ac:c7:47:bf:df:
                    75:ac:3a:1d:38:61:b8:8c:3f:80:b2:aa:6d:18:e8:
                    5a:0a:20:d7:4b:11:0e:80:af:a8:bd:4c:d5:30:26:
                    04:1e:58:bc:ec:49:58:72:26:14:57:f7:bc:e2:7c:
                    0f:d3:59:a7:58:78:71:96:f5:cf:53:fe:33:8f:9e:
                    11:db:d1:ad:71:19:93:3c:64:d2:8f:6f:61:66:f0:
                    61:8a:4e:5b:4a:b5:67:9d:ac:70:c2:03:5a:19:3e:
                    25:e6:d2:49:96:00:7a:c7:df:76:dd:8a:bb:52:17:
                    20:19:cd:d4:14:c8:96:1a:ef:69:16:c1:30:fe:1c:
                    19:6e:ae:ee:8e:0a:18:60:56:c8:71:e4:2b:7f:29:
                    0e:02:77:1b:28:36:cc:db:00:3c:b6:50:1b:36:38:
                    a5:15:90:f3:2b:7d:b5:31:15:88:5a:ee:0c:5b:ba:
                    09:58:de:13:e3:0e:52:d5:b3:d6:ff:a1:21:58:0b:
                    03:c4:90:a0:05:6e:cc:82:58:b3:c0:7d:6d:d6:91:
                    d7:d8:cf:f8:29:a5:5d:79:c7:c6:2b:69:53:26:ff:
                    08:3a:3e:3a:b7:9a:fa:c6:2f:30:99:8e:59:ce:ce:
                    00:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F9:C9:E6:7E:4E:54:8F:53:72:EA:0E:FA:B1:64:06:0A:C3:1D:D0
            X509v3 Authority Key Identifier:
                keyid:72:18:12:5E:CF:BB:21:1E:DF:C2:DE:04:72:F9:64:AA:86:CB:E9:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/chgSXs-7IR7fwt4EcvlkqobL6Z4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/37e5cb-d9ee-45d3-95ab-0db0fd74db32/1/chgSXs-7IR7fwt4EcvlkqobL6Z4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/37e5cb-d9ee-45d3-95ab-0db0fd74db32/1/chgSXs-7IR7fwt4EcvlkqobL6Z4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:6c:ba:ac:7a:02:9e:64:f5:e1:d2:5a:04:4c:57:ea:14:e2:
         ec:43:c8:4c:35:04:5e:03:12:b5:fc:ad:19:d6:47:05:5f:f3:
         23:75:4a:69:20:61:56:7d:e5:86:9a:76:e9:23:dc:ff:3a:62:
         1d:b9:f7:27:60:63:76:ba:3e:63:51:10:4a:aa:fa:47:c3:43:
         28:b5:f7:d3:a0:1a:b1:14:05:27:fc:ec:59:6d:ea:e5:eb:48:
         15:69:40:c7:ca:ee:35:ca:db:ac:02:d1:df:52:08:29:0b:8d:
         b3:6b:fd:4a:7f:3c:eb:dc:91:bb:11:04:37:01:28:8f:d1:56:
         a7:64:dc:b6:bf:04:25:c5:32:2b:38:40:c1:05:22:8a:6b:a8:
         85:fe:ac:ab:cd:29:9b:ed:e6:19:ba:b5:bc:6a:0f:9b:d0:c0:
         05:d5:ca:51:78:14:e2:a6:9d:50:51:d1:4a:a3:2e:9d:84:96:
         48:3c:76:27:7b:0f:99:62:f6:71:34:cf:8d:00:41:5a:a8:ec:
         aa:91:e0:62:0b:20:3e:4e:02:69:3c:6d:cf:2b:d5:51:87:2b:
         8a:29:17:d3:39:b7:9e:3c:a7:6f:9a:c3:53:dd:97:93:fe:36:
         6d:82:bf:09:8e:73:5c:36:51:6c:26:39:6a:9d:77:45:8e:22:
         b5:24:69:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQRasUBUqjYmFfU0p2i3S4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMTgxMjVlY2ZiYjIxMWVkZmMyZGUwNDcyZjk2NGFhODZj
YmU5OWUwHhcNMjUwNjA4MTYwMDMyWhcNMjUwNjA5MTYwMDMyWjAzMTEwLwYDVQQD
Eyg3NWY5YzllNjdlNGU1NDhmNTM3MmVhMGVmYWIxNjQwNjBhYzMxZGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8iXkxG027JaY2rFeb5/O8TfZRGE
mYjfrMdHv991rDodOGG4jD+AsqptGOhaCiDXSxEOgK+ovUzVMCYEHli87ElYciYU
V/e84nwP01mnWHhxlvXPU/4zj54R29GtcRmTPGTSj29hZvBhik5bSrVnnaxwwgNa
GT4l5tJJlgB6x9923Yq7UhcgGc3UFMiWGu9pFsEw/hwZbq7ujgoYYFbIceQrfykO
AncbKDbM2wA8tlAbNjilFZDzK321MRWIWu4MW7oJWN4T4w5S1bPW/6EhWAsDxJCg
BW7MglizwH1t1pHX2M/4KaVdecfGK2lTJv8IOj46t5r6xi8wmY5Zzs4ASQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHX5yeZ+TlSPU3LqDvqxZAYKwx3QMB8GA1UdIwQY
MBaAFHIYEl7PuyEe38LeBHL5ZKqGy+meMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2hnU1hzLTdJUjdmd3Q0RWN2bGtxb2JMNlo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8zN2U1Y2ItZDllZS00NWQzLTk1YWIt
MGRiMGZkNzRkYjMyLzEvY2hnU1hzLTdJUjdmd3Q0RWN2bGtxb2JMNlo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8zN2U1Y2ItZDllZS00NWQzLTk1YWItMGRiMGZkNzRkYjMy
LzEvY2hnU1hzLTdJUjdmd3Q0RWN2bGtxb2JMNlo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN2y6rHoC
nmT14dJaBExX6hTi7EPITDUEXgMStfytGdZHBV/zI3VKaSBhVn3lhpp26SPc/zpi
Hbn3J2Bjdro+Y1EQSqr6R8NDKLX306AasRQFJ/zsWW3q5etIFWlAx8ruNcrbrALR
31IIKQuNs2v9Sn8869yRuxEENwEoj9FWp2Tctr8EJcUyKzhAwQUiimuohf6sq80p
m+3mGbq1vGoPm9DABdXKUXgU4qadUFHRSqMunYSWSDx2J3sPmWL2cTTPjQBBWqjs
qpHgYgsgPk4CaTxtzyvVUYcriikX0zm3njynb5rDU92Xk/42bYK/CY5zXDZRbCY5
ap13RY4itSRptg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 17:52:51 2025 by rpki-client