Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/069be4-41c0-4312-94dd-f697c2ea6767/1/eXqQW0595YVil_bgOmViXeIsQvM.mft
File:                     eXqQW0595YVil_bgOmViXeIsQvM.mft (raw, json)
Hash identifier:          wZCUAbg7/HoYyqwSVi8/R5/A3j1OsLeALLWNtHShgXg=
Subject key identifier:   59:70:44:83:E4:1B:1D:D0:AC:AB:09:AF:64:43:35:66:F0:BF:F9:2A
Authority key identifier: 79:7A:90:5B:4E:7D:E5:85:62:97:F6:E0:3A:65:62:5D:E2:2C:42:F3
Certificate issuer:       /CN=797a905b4e7de5856297f6e03a65625de22c42f3
Certificate serial:       01974E2057A37149011DBCB785EA306DB61E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXqQW0595YVil_bgOmViXeIsQvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/069be4-41c0-4312-94dd-f697c2ea6767/1/eXqQW0595YVil_bgOmViXeIsQvM.mft
Manifest number:          0D4A
Signing time:             Sun 08 Jun 2025 06:00:31 +0000
Manifest this update:     Sun 08 Jun 2025 06:00:31 +0000
Manifest next update:     Mon 09 Jun 2025 06:00:31 +0000
Files and hashes:         1: eXqQW0595YVil_bgOmViXeIsQvM.crl (hash: rC8ul+z/3BjnkzvNmMIqNrPxZX6sL1+4uXgwSLXSuJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/069be4-41c0-4312-94dd-f697c2ea6767/1/eXqQW0595YVil_bgOmViXeIsQvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/069be4-41c0-4312-94dd-f697c2ea6767/1/eXqQW0595YVil_bgOmViXeIsQvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eXqQW0595YVil_bgOmViXeIsQvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:20:57:a3:71:49:01:1d:bc:b7:85:ea:30:6d:b6:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797a905b4e7de5856297f6e03a65625de22c42f3
        Validity
            Not Before: Jun  8 06:00:31 2025 GMT
            Not After : Jun  9 06:00:31 2025 GMT
        Subject: CN=59704483e41b1dd0acab09af64433566f0bff92a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b5:61:b6:b2:08:20:69:63:f4:6f:3f:e5:38:
                    dc:0b:21:95:6b:5b:6b:9c:7d:8c:0b:6b:61:6a:8b:
                    a4:9c:12:dc:c5:14:38:98:eb:f3:ce:1d:2e:33:6e:
                    e3:3a:96:e3:4d:9d:bd:47:d8:df:c8:9e:a5:73:73:
                    0d:44:1e:44:fc:20:22:e5:b1:dd:fc:62:51:ae:e4:
                    21:76:ad:7b:e3:0f:d4:41:01:69:f8:36:b9:cd:64:
                    27:2a:a4:8e:e7:ec:3e:da:e2:0a:37:df:c5:71:71:
                    cb:6d:f1:da:ed:50:09:22:ab:81:0f:49:b4:46:6c:
                    14:02:0d:53:3b:ca:88:a7:0c:b8:c9:77:92:3a:d2:
                    66:22:5e:8e:c4:a2:3c:9a:73:b1:eb:eb:4c:ef:99:
                    c1:91:39:91:e7:2e:f8:54:c8:36:a4:7a:b2:b7:4d:
                    cd:e2:c3:6b:9c:25:2f:a6:17:85:cd:a7:cb:f2:d1:
                    dc:19:55:06:f6:0a:0a:33:61:eb:26:b0:fd:a2:e5:
                    d0:de:89:a5:d9:09:20:c9:40:b7:c2:23:fa:4e:76:
                    7c:b1:d5:e5:84:fc:f5:0b:21:42:16:c4:55:0f:4a:
                    f9:f6:9d:9d:b9:d8:cd:07:88:61:4e:2a:1c:f0:fa:
                    d5:b3:23:2f:c6:45:22:b2:9e:e6:1d:bc:9e:3a:11:
                    b0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:70:44:83:E4:1B:1D:D0:AC:AB:09:AF:64:43:35:66:F0:BF:F9:2A
            X509v3 Authority Key Identifier:
                keyid:79:7A:90:5B:4E:7D:E5:85:62:97:F6:E0:3A:65:62:5D:E2:2C:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXqQW0595YVil_bgOmViXeIsQvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/069be4-41c0-4312-94dd-f697c2ea6767/1/eXqQW0595YVil_bgOmViXeIsQvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/069be4-41c0-4312-94dd-f697c2ea6767/1/eXqQW0595YVil_bgOmViXeIsQvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:fe:b3:9e:76:0a:57:14:f1:63:39:1c:a8:79:ac:82:dc:da:
         c4:a5:d7:e8:f7:bd:8a:f8:1f:f4:4f:b3:36:67:d8:96:8d:d1:
         da:7c:d6:42:91:84:9d:51:5e:29:9a:90:6c:13:83:51:64:78:
         09:68:7d:23:10:c2:8e:a4:e4:f5:9c:a4:09:65:6d:d0:bd:a9:
         4f:a0:c9:aa:e1:15:00:98:60:c7:ba:c0:cd:ee:19:e5:aa:5a:
         03:d2:68:47:2a:45:f0:4f:4e:5b:f0:91:87:f5:c4:bf:e4:70:
         d8:2f:cd:b9:51:4d:97:0e:2f:0b:7e:88:7a:ff:15:1f:2b:77:
         a1:ad:3d:4d:62:52:34:7f:54:d5:e4:cc:9d:88:b2:01:06:19:
         0b:b1:e7:50:a7:cd:cd:87:06:e0:71:eb:06:ec:c7:19:7f:e0:
         ad:8b:e0:d6:70:c1:dc:3d:95:26:31:ff:23:2b:44:82:2c:e4:
         d8:3d:84:a4:53:67:cc:14:3b:0e:5c:a3:c3:7d:2b:0d:ab:ae:
         25:85:6d:8c:91:f2:ff:e5:9a:db:32:90:2b:cb:b0:91:c0:de:
         6e:6a:51:95:fc:bc:26:ef:b3:ff:60:a2:f1:6e:fc:9a:cc:a0:
         cd:d8:c7:d1:23:6f:eb:78:a7:13:04:7c:e7:83:15:05:90:0b:
         76:fd:a3:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOIFejcUkBHby3heowbbYeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5N2E5MDViNGU3ZGU1ODU2Mjk3ZjZlMDNhNjU2MjVkZTIy
YzQyZjMwHhcNMjUwNjA4MDYwMDMxWhcNMjUwNjA5MDYwMDMxWjAzMTEwLwYDVQQD
Eyg1OTcwNDQ4M2U0MWIxZGQwYWNhYjA5YWY2NDQzMzU2NmYwYmZmOTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybVhtrIIIGlj9G8/5TjcCyGVa1tr
nH2MC2thaouknBLcxRQ4mOvzzh0uM27jOpbjTZ29R9jfyJ6lc3MNRB5E/CAi5bHd
/GJRruQhdq174w/UQQFp+Da5zWQnKqSO5+w+2uIKN9/FcXHLbfHa7VAJIquBD0m0
RmwUAg1TO8qIpwy4yXeSOtJmIl6OxKI8mnOx6+tM75nBkTmR5y74VMg2pHqyt03N
4sNrnCUvpheFzafL8tHcGVUG9goKM2HrJrD9ouXQ3oml2QkgyUC3wiP6TnZ8sdXl
hPz1CyFCFsRVD0r59p2dudjNB4hhTioc8PrVsyMvxkUisp7mHbyeOhGwFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFlwRIPkGx3QrKsJr2RDNWbwv/kqMB8GA1UdIwQY
MBaAFHl6kFtOfeWFYpf24DplYl3iLELzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVhxUVcwNTk1WVZpbF9iZ09tVmlYZUlzUXZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8wNjliZTQtNDFjMC00MzEyLTk0ZGQt
ZjY5N2MyZWE2NzY3LzEvZVhxUVcwNTk1WVZpbF9iZ09tVmlYZUlzUXZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS8wNjliZTQtNDFjMC00MzEyLTk0ZGQtZjY5N2MyZWE2NzY3
LzEvZVhxUVcwNTk1WVZpbF9iZ09tVmlYZUlzUXZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhf6znnYK
VxTxYzkcqHmsgtzaxKXX6Pe9ivgf9E+zNmfYlo3R2nzWQpGEnVFeKZqQbBODUWR4
CWh9IxDCjqTk9ZykCWVt0L2pT6DJquEVAJhgx7rAze4Z5apaA9JoRypF8E9OW/CR
h/XEv+Rw2C/NuVFNlw4vC36Iev8VHyt3oa09TWJSNH9U1eTMnYiyAQYZC7HnUKfN
zYcG4HHrBuzHGX/grYvg1nDB3D2VJjH/IytEgizk2D2EpFNnzBQ7Dlyjw30rDauu
JYVtjJHy/+Wa2zKQK8uwkcDebmpRlfy8Ju+z/2Ci8W78msygzdjH0SNv63inEwR8
54MVBZALdv2jtA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:11:36 2025 by rpki-client