Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/7uNuuo1bP-lfMgGrLRFnXqAceBw.mft
File:                     7uNuuo1bP-lfMgGrLRFnXqAceBw.mft (raw, json)
Hash identifier:          r7vWT7qE54vgC/9aZpyib+NEDiB6NP6bEYiipHVKLGI=
Subject key identifier:   5A:67:39:01:30:93:1B:30:34:22:65:5A:69:BC:20:D3:AC:6C:5F:5D
Authority key identifier: EE:E3:6E:BA:8D:5B:3F:E9:5F:32:01:AB:2D:11:67:5E:A0:1C:78:1C
Certificate issuer:       /CN=eee36eba8d5b3fe95f3201ab2d11675ea01c781c
Certificate serial:       0197499F032E6BE9EFC3FF4AFC1377B35E04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7uNuuo1bP-lfMgGrLRFnXqAceBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/7uNuuo1bP-lfMgGrLRFnXqAceBw.mft
Manifest number:          35
Signing time:             Sat 07 Jun 2025 09:00:47 +0000
Manifest this update:     Sat 07 Jun 2025 09:00:47 +0000
Manifest next update:     Sun 08 Jun 2025 09:00:47 +0000
Files and hashes:         1: 7uNuuo1bP-lfMgGrLRFnXqAceBw.crl (hash: aSLPd5F1k5mobae0rDwng9DtpCLA2E/taa+n+etUXrU=)
                          2: qatCLbB1wt003ugiHLUeaH6Egzo.roa (hash: kqMRNz8HFIkfR5BK7WY1x5EiB+ZuSgywUlDGBzooYrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/7uNuuo1bP-lfMgGrLRFnXqAceBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/7uNuuo1bP-lfMgGrLRFnXqAceBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7uNuuo1bP-lfMgGrLRFnXqAceBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:9f:03:2e:6b:e9:ef:c3:ff:4a:fc:13:77:b3:5e:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eee36eba8d5b3fe95f3201ab2d11675ea01c781c
        Validity
            Not Before: Jun  7 09:00:47 2025 GMT
            Not After : Jun  8 09:00:47 2025 GMT
        Subject: CN=5a67390130931b303422655a69bc20d3ac6c5f5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c3:b4:5a:98:5f:7a:d4:5a:ee:54:d9:bb:cd:
                    17:50:22:63:96:2c:47:d3:8b:1f:b0:e4:93:f6:e7:
                    69:9e:1d:ca:87:e4:36:af:0d:f6:01:f4:66:6b:7a:
                    67:93:3a:c5:5c:80:d4:ba:aa:10:71:86:6a:c1:af:
                    64:23:07:72:6d:a1:2c:91:62:2d:f3:79:7e:cd:12:
                    42:16:86:1b:68:70:ef:45:57:e1:9a:1c:ff:19:18:
                    9b:ed:a0:cf:aa:82:07:cd:79:43:93:4c:16:f5:4d:
                    eb:79:ec:f6:94:de:9d:b5:cf:18:e8:42:24:70:36:
                    29:3b:b8:b0:f2:fa:1c:21:78:4a:ff:6a:7e:ab:b2:
                    e4:f9:f2:40:18:97:2c:58:a0:1d:cc:59:0c:71:53:
                    38:26:87:04:1a:c0:c2:2e:fb:ea:ce:22:03:ab:19:
                    ec:fe:f6:62:a6:72:80:41:57:6a:24:2b:7c:24:a1:
                    45:80:53:6e:22:6e:58:b6:43:9d:59:49:6d:d9:b7:
                    b9:29:36:6a:e1:5a:f9:0d:c5:55:e9:f0:ce:13:d8:
                    d3:a8:18:1d:1b:2a:69:6b:18:56:be:6a:85:eb:56:
                    78:77:dd:ef:9e:a6:61:13:38:df:5d:7b:a8:fa:7f:
                    59:70:e1:52:7e:bf:5f:8e:46:a7:62:bc:7a:b2:82:
                    15:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:67:39:01:30:93:1B:30:34:22:65:5A:69:BC:20:D3:AC:6C:5F:5D
            X509v3 Authority Key Identifier:
                keyid:EE:E3:6E:BA:8D:5B:3F:E9:5F:32:01:AB:2D:11:67:5E:A0:1C:78:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uNuuo1bP-lfMgGrLRFnXqAceBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/7uNuuo1bP-lfMgGrLRFnXqAceBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/7uNuuo1bP-lfMgGrLRFnXqAceBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:af:27:c5:36:cc:82:bf:b0:f6:fb:7e:9a:74:81:13:11:17:
         69:90:0b:3d:3f:ea:f0:2f:92:f8:00:b5:66:32:e6:d7:8c:75:
         86:99:6b:f9:c7:11:7a:c7:7e:1f:b4:52:9e:60:01:4d:4b:e8:
         c2:b5:23:16:00:07:82:06:b5:3c:60:fe:51:79:da:58:de:40:
         e2:c9:da:de:31:73:39:83:0d:d9:ee:da:90:cf:74:75:b6:e9:
         0e:80:1d:1f:12:b1:d0:af:72:28:2e:a9:65:ce:47:e3:98:79:
         21:31:58:6d:53:fd:f9:94:7c:31:d6:d7:92:17:8d:39:1b:14:
         05:c6:87:d8:fe:bd:c4:65:80:bc:31:55:c2:34:f6:bc:69:21:
         ab:3d:45:54:a4:17:ca:c7:74:89:cd:2e:13:15:7c:5d:3d:89:
         74:d0:c1:f5:e0:8c:fe:b4:6b:9e:f3:e3:b9:c5:83:22:f9:65:
         02:55:9b:cc:7c:00:e3:45:d4:1b:d2:a8:b7:cf:23:cf:1d:49:
         e8:32:a9:bd:20:35:04:0c:42:24:95:81:e9:99:47:b1:da:59:
         69:4f:31:35:f9:98:41:ca:a4:d4:9c:b4:72:90:fa:d4:6f:b6:
         42:ea:14:af:3e:d7:26:d8:93:a5:f2:51:05:71:58:21:b8:e3:
         88:1b:4d:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJnwMua+nvw/9K/BN3s14EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZTM2ZWJhOGQ1YjNmZTk1ZjMyMDFhYjJkMTE2NzVlYTAx
Yzc4MWMwHhcNMjUwNjA3MDkwMDQ3WhcNMjUwNjA4MDkwMDQ3WjAzMTEwLwYDVQQD
Eyg1YTY3MzkwMTMwOTMxYjMwMzQyMjY1NWE2OWJjMjBkM2FjNmM1ZjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsO0WphfetRa7lTZu80XUCJjlixH
04sfsOST9udpnh3Kh+Q2rw32AfRma3pnkzrFXIDUuqoQcYZqwa9kIwdybaEskWIt
83l+zRJCFoYbaHDvRVfhmhz/GRib7aDPqoIHzXlDk0wW9U3reez2lN6dtc8Y6EIk
cDYpO7iw8vocIXhK/2p+q7Lk+fJAGJcsWKAdzFkMcVM4JocEGsDCLvvqziIDqxns
/vZipnKAQVdqJCt8JKFFgFNuIm5YtkOdWUlt2be5KTZq4Vr5DcVV6fDOE9jTqBgd
GyppaxhWvmqF61Z4d93vnqZhEzjfXXuo+n9ZcOFSfr9fjkanYrx6soIVmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpnOQEwkxswNCJlWmm8INOsbF9dMB8GA1UdIwQY
MBaAFO7jbrqNWz/pXzIBqy0RZ16gHHgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3VOdXVvMWJQLWxmTWdHckxSRm5YcUFjZUJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9iMDZlMDctMDFmNS00M2RjLWI4MGIt
ZTVjOGNjODZhYmQyLzEvN3VOdXVvMWJQLWxmTWdHckxSRm5YcUFjZUJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9iMDZlMDctMDFmNS00M2RjLWI4MGItZTVjOGNjODZhYmQy
LzEvN3VOdXVvMWJQLWxmTWdHckxSRm5YcUFjZUJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcK8nxTbM
gr+w9vt+mnSBExEXaZALPT/q8C+S+AC1ZjLm14x1hplr+ccResd+H7RSnmABTUvo
wrUjFgAHgga1PGD+UXnaWN5A4sna3jFzOYMN2e7akM90dbbpDoAdHxKx0K9yKC6p
Zc5H45h5ITFYbVP9+ZR8MdbXkheNORsUBcaH2P69xGWAvDFVwjT2vGkhqz1FVKQX
ysd0ic0uExV8XT2JdNDB9eCM/rRrnvPjucWDIvllAlWbzHwA40XUG9Kot88jzx1J
6DKpvSA1BAxCJJWB6ZlHsdpZaU8xNfmYQcqk1Jy0cpD61G+2QuoUrz7XJtiTpfJR
BXFYIbjjiBtNTA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:49:34 2025 by rpki-client