Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
File:                     1-eZZ5-721ztobrHSlWxx875bvXc.mft (raw, json)
Hash identifier:          FYvmtK5xDhQmwBoYzEKUtJ2j1c8E2GPTR5quoE3EXEw=
Subject key identifier:   EE:15:7B:49:53:02:A4:E8:0B:28:A2:60:87:88:8F:00:D3:36:DE:92
Authority key identifier: F9:E6:59:E7:EE:F6:D7:3B:68:6E:B1:D2:95:6C:71:F3:BE:5B:BD:77
Certificate issuer:       /CN=f9e659e7eef6d73b686eb1d2956c71f3be5bbd77
Certificate serial:       01976B85EBFCFDA14DAF7C608D8DB8DD7D87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
Manifest number:          158D
Signing time:             Fri 13 Jun 2025 23:00:28 +0000
Manifest this update:     Fri 13 Jun 2025 23:00:28 +0000
Manifest next update:     Sat 14 Jun 2025 23:00:28 +0000
Files and hashes:         1: 1-eZZ5-721ztobrHSlWxx875bvXc.crl (hash: KUJ459NAGwWRH+NK9D3me9xyqItJn8edfaG9WvCft4A=)
                          2: RRxWR41Hund7xXvTLqB2r5qi970.roa (hash: rUpiHcsIUELuq5TefHF1+krXhbgfuQVPMP1TCObsJG4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:85:eb:fc:fd:a1:4d:af:7c:60:8d:8d:b8:dd:7d:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9e659e7eef6d73b686eb1d2956c71f3be5bbd77
        Validity
            Not Before: Jun 13 23:00:28 2025 GMT
            Not After : Jun 14 23:00:28 2025 GMT
        Subject: CN=ee157b495302a4e80b28a26087888f00d336de92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:61:84:ea:a6:a8:fa:bc:40:13:94:61:43:3f:
                    9e:06:1f:29:fc:7f:8c:b7:24:5b:b7:6a:21:c1:22:
                    3d:91:35:b8:2f:7d:e2:aa:07:e7:e8:ca:9e:76:0d:
                    e8:91:f8:86:e6:e2:b3:f6:56:e8:90:f4:fb:e2:ca:
                    7e:25:b1:d7:f4:1f:7b:fe:67:c8:c5:0b:e8:5d:9b:
                    eb:e2:30:4d:4b:0f:7b:30:c7:2e:e9:56:6e:1e:df:
                    d9:f8:35:54:9c:a5:ad:52:00:20:f0:f7:6b:ba:e9:
                    44:b6:49:00:97:b8:2e:e5:39:44:d6:8a:73:2f:7c:
                    0e:fb:87:30:57:87:64:d8:2b:9a:78:1c:fa:7e:5e:
                    f0:44:2a:fd:82:b1:67:c2:86:5f:69:3b:69:a7:3d:
                    9d:77:31:75:f7:08:bc:07:42:c6:27:2e:97:36:65:
                    08:fa:53:30:ad:38:48:15:7b:ed:01:d7:39:76:87:
                    86:5a:a5:a3:8d:eb:79:ed:26:78:d0:b8:36:6f:62:
                    f4:4e:16:20:a5:5b:c2:76:7d:07:15:3a:a0:87:94:
                    29:47:52:fb:38:00:54:4d:14:09:a2:8c:75:17:00:
                    5e:e9:d0:6d:37:62:14:93:bb:f2:99:26:00:91:49:
                    cd:b4:03:3f:e6:0a:c7:ef:55:87:f6:90:6e:a9:0b:
                    6f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:15:7B:49:53:02:A4:E8:0B:28:A2:60:87:88:8F:00:D3:36:DE:92
            X509v3 Authority Key Identifier:
                keyid:F9:E6:59:E7:EE:F6:D7:3B:68:6E:B1:D2:95:6C:71:F3:BE:5B:BD:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:c8:43:75:20:3c:82:62:02:98:28:53:64:4f:06:da:55:9e:
         38:5d:f4:66:6f:7c:2c:28:6c:a9:b1:9a:c3:9b:08:71:30:03:
         65:e8:df:2e:f3:be:f2:c7:da:2a:09:2a:7e:fd:ce:61:a0:dc:
         f1:90:d4:f7:b1:6c:1c:34:11:0c:e7:3a:06:48:46:68:69:47:
         0a:b0:87:4e:cf:75:c5:67:b6:6e:cf:9f:46:a9:6b:a0:8b:74:
         c5:1e:2d:5c:cf:a1:d3:c6:2a:76:f6:fc:74:a1:cb:5c:b8:74:
         c7:7f:35:c8:3c:68:3b:57:5b:7b:d2:b5:0a:ea:9d:16:6d:08:
         d6:02:0d:ac:bb:a8:e0:e2:cd:bb:b2:22:af:cd:fa:4a:7e:5c:
         b1:4d:1e:d7:07:c5:ad:32:3b:07:9b:b6:c3:e1:41:3f:7e:1a:
         f0:71:7d:1a:36:f2:c8:86:38:25:d8:95:33:e3:80:45:e7:3f:
         7a:de:e6:ac:88:a3:68:2c:9b:07:d7:63:c4:2b:6b:6a:c1:9d:
         2c:c0:ce:bc:2f:84:89:de:a7:c9:c8:a9:f5:8d:58:dd:59:ce:
         6e:65:08:44:d7:6b:58:14:2f:45:07:7b:03:d5:e3:b7:67:42:
         cf:27:11:22:46:9f:4a:39:de:14:d7:ce:5f:31:ec:30:7c:55:
         69:68:6f:e0
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZdrhev8/aFNr3xgjY243X2HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5ZTY1OWU3ZWVmNmQ3M2I2ODZlYjFkMjk1NmM3MWYzYmU1
YmJkNzcwHhcNMjUwNjEzMjMwMDI4WhcNMjUwNjE0MjMwMDI4WjAzMTEwLwYDVQQD
EyhlZTE1N2I0OTUzMDJhNGU4MGIyOGEyNjA4Nzg4OGYwMGQzMzZkZTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGGE6qao+rxAE5RhQz+eBh8p/H+M
tyRbt2ohwSI9kTW4L33iqgfn6Mqedg3okfiG5uKz9lbokPT74sp+JbHX9B97/mfI
xQvoXZvr4jBNSw97MMcu6VZuHt/Z+DVUnKWtUgAg8PdruulEtkkAl7gu5TlE1opz
L3wO+4cwV4dk2CuaeBz6fl7wRCr9grFnwoZfaTtppz2ddzF19wi8B0LGJy6XNmUI
+lMwrThIFXvtAdc5doeGWqWjjet57SZ40Lg2b2L0ThYgpVvCdn0HFTqgh5QpR1L7
OABUTRQJoox1FwBe6dBtN2IUk7vymSYAkUnNtAM/5grH71WH9pBuqQtv/wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFO4Ve0lTAqToCyiiYIeIjwDTNt6SMB8GA1UdIwQY
MBaAFPnmWefu9tc7aG6x0pVscfO+W713MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1lWlo1LTcyMXp0b2JySFNsV3h4ODc1YnZYYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYvZmI4ZGI1LTExODktNDM1MS1iZGU3
LTIwNmJjY2E3ODQyMS8xLzEtZVpaNS03MjF6dG9ickhTbFd4eDg3NWJ2WGMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2JmL2ZiOGRiNS0xMTg5LTQzNTEtYmRlNy0yMDZiY2NhNzg0
MjEvMS8xLWVaWjUtNzIxenRvYnJIU2xXeHg4NzVidlhjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn8hD
dSA8gmICmChTZE8G2lWeOF30Zm98LChsqbGaw5sIcTADZejfLvO+8sfaKgkqfv3O
YaDc8ZDU97FsHDQRDOc6BkhGaGlHCrCHTs91xWe2bs+fRqlroIt0xR4tXM+h08Yq
dvb8dKHLXLh0x381yDxoO1dbe9K1CuqdFm0I1gINrLuo4OLNu7Iir836Sn5csU0e
1wfFrTI7B5u2w+FBP34a8HF9GjbyyIY4JdiVM+OARec/et7mrIijaCybB9djxCtr
asGdLMDOvC+Eid6nycip9Y1Y3VnObmUIRNdrWBQvRQd7A9Xjt2dCzycRIkafSjne
FNfOXzHsMHxVaWhv4A==
-----END CERTIFICATE-----
Generated at Sat Jun 14 01:25:18 2025 by rpki-client