Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
File:                     dbzZGxsvmvS3QhSm1njOBxlo4c8.mft (raw, json)
Hash identifier:          L4dK4YtZQ2eSZsrY3M0V/fhYtoCMii7TmJd3TYWnag0=
Subject key identifier:   CE:C7:BE:E5:72:B3:80:18:85:0C:4C:43:07:61:36:BA:5A:92:6D:22
Authority key identifier: 75:BC:D9:1B:1B:2F:9A:F4:B7:42:14:A6:D6:78:CE:07:19:68:E1:CF
Certificate issuer:       /CN=75bcd91b1b2f9af4b74214a6d678ce071968e1cf
Certificate serial:       019767732D0AE2B6CBB7A336A7AF65E267B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
Manifest number:          07B5
Signing time:             Fri 13 Jun 2025 04:01:30 +0000
Manifest this update:     Fri 13 Jun 2025 04:01:30 +0000
Manifest next update:     Sat 14 Jun 2025 04:01:30 +0000
Files and hashes:         1: dbzZGxsvmvS3QhSm1njOBxlo4c8.crl (hash: FUPngkJYTuO17C2FAO1cpcQ1oHbPEhztxmjw3orHYDo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 04:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:67:73:2d:0a:e2:b6:cb:b7:a3:36:a7:af:65:e2:67:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75bcd91b1b2f9af4b74214a6d678ce071968e1cf
        Validity
            Not Before: Jun 13 04:01:30 2025 GMT
            Not After : Jun 14 04:01:30 2025 GMT
        Subject: CN=cec7bee572b38018850c4c43076136ba5a926d22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:fb:fd:5c:02:3d:fb:55:f5:f2:b1:2a:f1:86:
                    28:c7:02:6d:1d:53:af:4e:28:0b:2e:b6:e1:86:54:
                    f9:e7:8f:e5:a9:bd:97:75:a1:36:e4:95:ba:6d:a3:
                    5e:74:52:c1:6d:54:92:e3:95:28:64:19:be:ba:4e:
                    84:c2:f3:f6:71:9b:07:9f:9b:06:e7:80:3f:8d:ee:
                    67:f3:9d:72:1b:67:7e:6c:2c:d1:b3:3d:64:6e:8e:
                    54:e1:4d:0b:11:a6:7a:c0:13:7f:b1:e5:1e:74:67:
                    a0:aa:2d:1b:2b:c7:b8:2d:77:43:62:91:2c:19:48:
                    a0:fc:d3:f6:d7:2e:c6:ec:31:36:f9:99:c1:ce:56:
                    b3:ea:80:c0:b7:c6:e8:c8:33:fb:88:f5:81:b0:df:
                    79:e3:32:34:a1:1f:a4:27:14:b2:01:a5:91:fa:8a:
                    f2:46:34:92:7c:d3:61:46:7b:3c:83:d5:55:ca:21:
                    22:c2:5d:0d:c6:d4:91:c5:5b:6a:2b:97:34:02:2e:
                    db:df:9f:93:65:cd:d2:4d:0f:b4:7a:5f:12:1d:13:
                    87:c3:58:0e:e6:d3:a2:2d:da:26:34:69:39:af:2c:
                    60:75:41:40:34:a3:58:15:e5:c3:52:34:e1:e0:2c:
                    22:d5:fa:18:fc:af:af:1c:1f:53:9b:82:0b:b2:c7:
                    08:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C7:BE:E5:72:B3:80:18:85:0C:4C:43:07:61:36:BA:5A:92:6D:22
            X509v3 Authority Key Identifier:
                keyid:75:BC:D9:1B:1B:2F:9A:F4:B7:42:14:A6:D6:78:CE:07:19:68:E1:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:82:6d:af:a4:f8:29:9d:15:f0:de:20:ec:8a:86:53:a1:ae:
         f5:d6:04:6e:12:18:50:e7:9b:46:b3:51:14:55:f3:91:21:5f:
         3b:90:0a:0e:00:b1:f6:ee:3a:3c:c8:88:45:c1:5f:1e:99:e9:
         9e:5e:c2:83:26:28:56:fc:4f:a4:61:d1:02:77:1f:5d:7b:cd:
         2d:67:07:1a:26:f3:1c:eb:77:9a:02:9b:e4:9b:bd:a1:50:83:
         ea:6a:70:4a:c0:58:51:16:e1:66:65:19:5e:36:f2:c2:ea:42:
         52:19:67:d0:8c:61:9e:bc:56:f2:30:f0:23:a4:38:79:1a:51:
         16:18:cd:de:2c:11:55:09:c0:31:83:55:73:f4:7e:bf:2e:5d:
         29:4e:90:ee:57:73:e9:dc:a7:d7:63:f0:31:9c:a7:7c:3f:34:
         51:f5:cc:ea:e2:be:bf:3e:f7:a7:d1:d2:6a:f0:e3:fe:c7:60:
         da:9d:a4:65:85:60:e9:6e:19:f4:5a:81:ce:b7:a7:43:5a:e1:
         89:62:60:52:e5:8b:61:bd:4b:b6:16:fc:f9:5e:41:84:a4:e4:
         9b:55:2b:13:50:4a:60:13:ed:3f:4d:49:45:40:32:16:5c:db:
         89:2f:3b:89:2a:59:f2:f6:1a:0a:bd:94:9b:d3:ed:68:16:48:
         0b:95:04:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdncy0K4rbLt6M2p69l4me5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YmNkOTFiMWIyZjlhZjRiNzQyMTRhNmQ2NzhjZTA3MTk2
OGUxY2YwHhcNMjUwNjEzMDQwMTMwWhcNMjUwNjE0MDQwMTMwWjAzMTEwLwYDVQQD
EyhjZWM3YmVlNTcyYjM4MDE4ODUwYzRjNDMwNzYxMzZiYTVhOTI2ZDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Pv9XAI9+1X18rEq8YYoxwJtHVOv
TigLLrbhhlT554/lqb2XdaE25JW6baNedFLBbVSS45UoZBm+uk6EwvP2cZsHn5sG
54A/je5n851yG2d+bCzRsz1kbo5U4U0LEaZ6wBN/seUedGegqi0bK8e4LXdDYpEs
GUig/NP21y7G7DE2+ZnBzlaz6oDAt8boyDP7iPWBsN954zI0oR+kJxSyAaWR+ory
RjSSfNNhRns8g9VVyiEiwl0NxtSRxVtqK5c0Ai7b35+TZc3STQ+0el8SHROHw1gO
5tOiLdomNGk5ryxgdUFANKNYFeXDUjTh4Cwi1foY/K+vHB9Tm4ILsscIhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7HvuVys4AYhQxMQwdhNrpakm0iMB8GA1UdIwQY
MBaAFHW82RsbL5r0t0IUptZ4zgcZaOHPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGJ6Wkd4c3ZtdlMzUWhTbTFuak9CeGxvNGM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9jOWMwMzAtNTUzZS00MzBhLTk4N2Qt
MWMwNTc1NTI2OTFlLzEvZGJ6Wkd4c3ZtdlMzUWhTbTFuak9CeGxvNGM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9jOWMwMzAtNTUzZS00MzBhLTk4N2QtMWMwNTc1NTI2OTFl
LzEvZGJ6Wkd4c3ZtdlMzUWhTbTFuak9CeGxvNGM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcYJtr6T4
KZ0V8N4g7IqGU6Gu9dYEbhIYUOebRrNRFFXzkSFfO5AKDgCx9u46PMiIRcFfHpnp
nl7CgyYoVvxPpGHRAncfXXvNLWcHGibzHOt3mgKb5Ju9oVCD6mpwSsBYURbhZmUZ
XjbywupCUhln0IxhnrxW8jDwI6Q4eRpRFhjN3iwRVQnAMYNVc/R+vy5dKU6Q7ldz
6dyn12PwMZynfD80UfXM6uK+vz73p9HSavDj/sdg2p2kZYVg6W4Z9FqBzrenQ1rh
iWJgUuWLYb1Lthb8+V5BhKTkm1UrE1BKYBPtP01JRUAyFlzbiS87iSpZ8vYaCr2U
m9PtaBZIC5UEBA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 09:10:13 2025 by rpki-client