Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.mft
File:                     eoGS6fdA6NI4BZ4ooKA3CDCBt9I.mft (raw, json)
Hash identifier:          6vBXQ89ANJMZxfoEpSotJl8xhCxms9kSbKUJSnajVkw=
Subject key identifier:   F2:7A:17:B5:08:1E:96:FE:BC:6D:4D:F3:64:30:17:1C:97:35:59:67
Authority key identifier: 7A:81:92:E9:F7:40:E8:D2:38:05:9E:28:A0:A0:37:08:30:81:B7:D2
Certificate issuer:       /CN=7a8192e9f740e8d238059e28a0a037083081b7d2
Certificate serial:       0197488CB3139854514CD1280A01A74B5077
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.mft
Manifest number:          157C
Signing time:             Sat 07 Jun 2025 04:01:09 +0000
Manifest this update:     Sat 07 Jun 2025 04:01:09 +0000
Manifest next update:     Sun 08 Jun 2025 04:01:09 +0000
Files and hashes:         1: bpnZBaQMqQCP4_HM_J4jb2lHwKU.roa (hash: 3xaBBKosMJSpzXSuRQMz4T/JTkCvN7b+xo0iaMV0UsA=)
                          2: eoGS6fdA6NI4BZ4ooKA3CDCBt9I.crl (hash: 47w4HRZOXmou+MRS3Db/8xfnWm/LX5EmOcfyAXTbTrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:b3:13:98:54:51:4c:d1:28:0a:01:a7:4b:50:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a8192e9f740e8d238059e28a0a037083081b7d2
        Validity
            Not Before: Jun  7 04:01:09 2025 GMT
            Not After : Jun  8 04:01:09 2025 GMT
        Subject: CN=f27a17b5081e96febc6d4df36430171c97355967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:07:cf:19:1c:1d:73:9d:c8:0d:7a:15:a3:c2:
                    d6:a9:0f:33:67:ff:8a:b1:d3:71:d9:ca:2e:cb:ce:
                    51:4e:ce:2c:83:00:50:39:f0:6f:8b:41:d1:73:b8:
                    ae:cb:32:27:d5:18:4d:5b:c4:30:33:62:6f:3d:68:
                    43:6a:ea:a9:aa:d3:91:72:8e:63:7e:10:06:a9:da:
                    71:88:08:42:38:cd:16:2d:fe:4e:ef:a4:ea:51:2c:
                    ab:b0:ce:b0:57:b1:f5:be:76:42:6a:cf:51:28:7e:
                    d4:f7:4c:99:01:bf:f3:13:89:bf:c6:25:55:ad:30:
                    a1:81:69:a7:53:97:b3:6e:97:0c:cd:34:20:21:f6:
                    c9:b3:81:ec:00:6c:02:dd:26:2f:aa:ca:f0:a6:72:
                    2c:2c:a6:aa:e9:8d:82:df:3c:64:c8:51:a2:4b:7b:
                    fa:2a:56:da:84:44:02:85:9b:92:25:2f:b7:f8:e6:
                    05:7b:15:2e:cf:eb:81:ee:8b:8c:eb:97:dd:7e:f8:
                    80:27:48:77:01:d0:bf:8a:1d:ca:e9:b6:ba:3a:9f:
                    21:f7:f4:20:a9:8b:92:44:1a:dc:47:91:53:39:84:
                    2f:cc:62:72:74:32:6b:1f:b3:cf:78:59:fa:61:6e:
                    dd:da:55:af:87:77:46:c5:6e:97:a2:1f:a0:b6:1e:
                    52:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:7A:17:B5:08:1E:96:FE:BC:6D:4D:F3:64:30:17:1C:97:35:59:67
            X509v3 Authority Key Identifier:
                keyid:7A:81:92:E9:F7:40:E8:D2:38:05:9E:28:A0:A0:37:08:30:81:B7:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:1f:8d:69:c9:d4:14:38:85:98:23:74:4c:9f:24:fc:21:2a:
         44:19:4f:3e:24:ff:91:08:e8:30:3d:4d:1d:24:29:fe:2e:f7:
         6f:dd:3b:38:71:57:44:7f:0a:b7:e7:da:34:83:21:23:0b:8b:
         9e:05:87:a6:92:c3:54:ed:1a:be:dd:91:3a:86:33:04:97:61:
         c8:f1:eb:a6:e7:69:d3:28:a0:0d:8a:f2:00:28:94:1f:c4:3c:
         12:0d:09:87:22:0e:fd:ed:14:d9:9c:f4:6d:32:56:e6:e9:5c:
         9e:7a:ef:ac:c2:c3:de:97:d3:39:ca:ab:d7:97:0a:57:6c:d1:
         24:49:99:f1:59:3f:56:0f:1c:9d:3d:1d:7d:6e:4a:2f:22:80:
         df:f3:34:89:a6:71:64:e4:e7:10:38:0f:cf:d2:0f:de:cc:00:
         51:09:5e:16:43:89:1f:1a:5f:36:f0:b8:4d:70:a6:e7:d2:60:
         62:8c:cb:fc:c3:f6:b4:1b:f0:6a:11:97:09:55:d0:1d:d5:fc:
         01:de:01:3c:e3:79:32:8d:b7:f0:08:36:b5:97:b1:18:cb:c3:
         a4:86:00:c2:36:cc:aa:fe:21:aa:46:0b:90:9a:7a:94:be:76:
         3f:f4:51:02:41:7c:18:14:48:7e:13:a1:90:a9:74:c5:3f:a5:
         0a:92:53:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjLMTmFRRTNEoCgGnS1B3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhODE5MmU5Zjc0MGU4ZDIzODA1OWUyOGEwYTAzNzA4MzA4
MWI3ZDIwHhcNMjUwNjA3MDQwMTA5WhcNMjUwNjA4MDQwMTA5WjAzMTEwLwYDVQQD
EyhmMjdhMTdiNTA4MWU5NmZlYmM2ZDRkZjM2NDMwMTcxYzk3MzU1OTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggfPGRwdc53IDXoVo8LWqQ8zZ/+K
sdNx2couy85RTs4sgwBQOfBvi0HRc7iuyzIn1RhNW8QwM2JvPWhDauqpqtORco5j
fhAGqdpxiAhCOM0WLf5O76TqUSyrsM6wV7H1vnZCas9RKH7U90yZAb/zE4m/xiVV
rTChgWmnU5ezbpcMzTQgIfbJs4HsAGwC3SYvqsrwpnIsLKaq6Y2C3zxkyFGiS3v6
KlbahEQChZuSJS+3+OYFexUuz+uB7ouM65fdfviAJ0h3AdC/ih3K6ba6Op8h9/Qg
qYuSRBrcR5FTOYQvzGJydDJrH7PPeFn6YW7d2lWvh3dGxW6Xoh+gth5SkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPJ6F7UIHpb+vG1N82QwFxyXNVlnMB8GA1UdIwQY
MBaAFHqBkun3QOjSOAWeKKCgNwgwgbfSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZW9HUzZmZEE2Tkk0Qlo0b29LQTNDRENCdDlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8yMTg3NjAtNjJmZS00NWU5LTlhNGQt
YzBlMzNiYmY1MjM4LzEvZW9HUzZmZEE2Tkk0Qlo0b29LQTNDRENCdDlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8yMTg3NjAtNjJmZS00NWU5LTlhNGQtYzBlMzNiYmY1MjM4
LzEvZW9HUzZmZEE2Tkk0Qlo0b29LQTNDRENCdDlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADh+NacnU
FDiFmCN0TJ8k/CEqRBlPPiT/kQjoMD1NHSQp/i73b907OHFXRH8Kt+faNIMhIwuL
ngWHppLDVO0avt2ROoYzBJdhyPHrpudp0yigDYryACiUH8Q8Eg0JhyIO/e0U2Zz0
bTJW5ulcnnrvrMLD3pfTOcqr15cKV2zRJEmZ8Vk/Vg8cnT0dfW5KLyKA3/M0iaZx
ZOTnEDgPz9IP3swAUQleFkOJHxpfNvC4TXCm59JgYozL/MP2tBvwahGXCVXQHdX8
Ad4BPON5Mo238Ag2tZexGMvDpIYAwjbMqv4hqkYLkJp6lL52P/RRAkF8GBRIfhOh
kKl0xT+lCpJThA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:32:53 2025 by rpki-client