Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/00b426-128b-4f9c-a3af-bdb5f16d46f0/1/_e3ZOtbKqmCtSfD5N32Kq_h34ts.mft
File:                     _e3ZOtbKqmCtSfD5N32Kq_h34ts.mft (raw, json)
Hash identifier:          xnck4LE0eD4nbOcpoNGL+/tIeXyk1CDdJx6ySnCGYKs=
Subject key identifier:   71:61:8E:20:8A:3A:57:84:20:B9:39:F2:5A:C0:63:AB:CD:D0:7E:50
Authority key identifier: FD:ED:D9:3A:D6:CA:AA:60:AD:49:F0:F9:37:7D:8A:AB:F8:77:E2:DB
Certificate issuer:       /CN=fdedd93ad6caaa60ad49f0f9377d8aabf877e2db
Certificate serial:       01976D3DF474A64C28C943B43CF8BD7C49AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_e3ZOtbKqmCtSfD5N32Kq_h34ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/00b426-128b-4f9c-a3af-bdb5f16d46f0/1/_e3ZOtbKqmCtSfD5N32Kq_h34ts.mft
Manifest number:          070E
Signing time:             Sat 14 Jun 2025 07:01:06 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:06 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:06 +0000
Files and hashes:         1: _e3ZOtbKqmCtSfD5N32Kq_h34ts.crl (hash: D5wo0SplyvCwzI7kcijnEBsO+eyeJpXkYcCa+muo5XY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/00b426-128b-4f9c-a3af-bdb5f16d46f0/1/_e3ZOtbKqmCtSfD5N32Kq_h34ts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/00b426-128b-4f9c-a3af-bdb5f16d46f0/1/_e3ZOtbKqmCtSfD5N32Kq_h34ts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_e3ZOtbKqmCtSfD5N32Kq_h34ts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3d:f4:74:a6:4c:28:c9:43:b4:3c:f8:bd:7c:49:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdedd93ad6caaa60ad49f0f9377d8aabf877e2db
        Validity
            Not Before: Jun 14 07:01:06 2025 GMT
            Not After : Jun 15 07:01:06 2025 GMT
        Subject: CN=71618e208a3a578420b939f25ac063abcdd07e50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:43:36:4c:35:5e:21:40:65:8b:0b:31:16:f8:
                    aa:3a:23:31:ad:b8:07:75:43:39:b3:ea:b8:bf:03:
                    c8:8f:f7:e6:fd:4e:f4:ae:73:58:d0:28:fa:2e:a9:
                    b2:b4:89:93:ab:e5:c2:fb:26:71:4f:74:1b:8e:37:
                    25:19:e3:c2:39:32:32:0c:c2:8d:44:9b:18:b3:3e:
                    d7:08:1c:53:93:eb:23:2e:48:7c:b3:5a:2b:7d:ab:
                    14:cf:44:f0:d4:76:50:79:06:ed:37:ea:64:a0:0b:
                    51:c1:51:1b:96:fa:92:84:46:c7:1d:4a:e1:4c:14:
                    08:72:e4:ab:bc:63:91:4c:67:32:64:c4:5b:62:57:
                    88:ff:23:64:cc:35:cc:a3:b6:53:fd:e0:98:f0:50:
                    99:92:29:9a:09:af:57:84:e7:b4:ef:70:90:8e:4e:
                    8b:56:0f:69:12:9a:ff:75:34:ea:a7:92:db:40:be:
                    59:38:71:28:59:82:16:14:f8:87:ad:bb:48:04:48:
                    bb:65:d2:9a:5e:e0:9e:5b:19:c2:19:13:8a:7e:f6:
                    14:e2:c7:c2:12:50:bd:b2:10:68:c2:b8:48:be:67:
                    a6:b6:f4:e1:1a:7f:8e:b5:08:f5:15:34:85:fe:2b:
                    4b:8a:78:43:76:f0:90:d7:31:2c:81:59:8e:54:35:
                    db:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:61:8E:20:8A:3A:57:84:20:B9:39:F2:5A:C0:63:AB:CD:D0:7E:50
            X509v3 Authority Key Identifier:
                keyid:FD:ED:D9:3A:D6:CA:AA:60:AD:49:F0:F9:37:7D:8A:AB:F8:77:E2:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_e3ZOtbKqmCtSfD5N32Kq_h34ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/00b426-128b-4f9c-a3af-bdb5f16d46f0/1/_e3ZOtbKqmCtSfD5N32Kq_h34ts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/00b426-128b-4f9c-a3af-bdb5f16d46f0/1/_e3ZOtbKqmCtSfD5N32Kq_h34ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:38:e1:0c:3b:dc:90:da:31:7d:a0:96:10:92:71:a9:4e:27:
         a8:31:01:17:3a:11:6b:37:3a:99:1f:76:d4:0e:b9:9a:5a:7a:
         02:53:df:6e:66:bb:c0:e8:31:f9:c9:0e:8b:b8:b2:09:ee:75:
         7b:09:74:44:6c:70:41:5c:88:e1:24:a0:6e:ed:27:84:e7:fd:
         4d:3c:11:a9:4f:29:a1:37:6f:ec:16:8b:d5:94:af:76:28:9c:
         52:88:28:90:c8:de:35:fd:a1:51:c8:4d:64:5a:3b:bb:6f:5a:
         c0:f5:e4:9c:87:cc:f1:63:95:98:40:2f:c9:a7:96:f5:88:d4:
         19:a7:1c:5f:9e:13:f4:fc:a3:5a:9d:97:fc:07:db:e8:e0:41:
         66:65:12:a3:72:0b:f7:e6:48:e7:8a:45:0a:30:c5:29:f5:45:
         5f:95:84:75:54:39:2a:2b:f2:c1:9f:02:7a:4c:47:d1:b7:64:
         b0:e6:6c:ba:b6:31:62:31:d6:b7:8e:b6:c9:eb:4a:58:a2:c9:
         60:87:33:02:27:5f:20:4b:12:1d:45:18:38:ac:a5:4e:80:77:
         83:db:98:a9:fa:77:35:e9:bc:a0:56:b8:05:6b:8e:58:82:c7:
         20:0a:3e:54:e3:3d:87:e3:44:9f:db:9e:34:84:e2:90:ec:54:
         30:86:a0:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPfR0pkwoyUO0PPi9fEmqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZWRkOTNhZDZjYWFhNjBhZDQ5ZjBmOTM3N2Q4YWFiZjg3
N2UyZGIwHhcNMjUwNjE0MDcwMTA2WhcNMjUwNjE1MDcwMTA2WjAzMTEwLwYDVQQD
Eyg3MTYxOGUyMDhhM2E1Nzg0MjBiOTM5ZjI1YWMwNjNhYmNkZDA3ZTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEM2TDVeIUBliwsxFviqOiMxrbgH
dUM5s+q4vwPIj/fm/U70rnNY0Cj6LqmytImTq+XC+yZxT3QbjjclGePCOTIyDMKN
RJsYsz7XCBxTk+sjLkh8s1orfasUz0Tw1HZQeQbtN+pkoAtRwVEblvqShEbHHUrh
TBQIcuSrvGORTGcyZMRbYleI/yNkzDXMo7ZT/eCY8FCZkimaCa9XhOe073CQjk6L
Vg9pEpr/dTTqp5LbQL5ZOHEoWYIWFPiHrbtIBEi7ZdKaXuCeWxnCGROKfvYU4sfC
ElC9shBowrhIvmemtvThGn+OtQj1FTSF/itLinhDdvCQ1zEsgVmOVDXbIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHFhjiCKOleEILk58lrAY6vN0H5QMB8GA1UdIwQY
MBaAFP3t2TrWyqpgrUnw+Td9iqv4d+LbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2UzWk90YktxbUN0U2ZENU4zMktxX2gzNHRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8wMGI0MjYtMTI4Yi00ZjljLWEzYWYt
YmRiNWYxNmQ0NmYwLzEvX2UzWk90YktxbUN0U2ZENU4zMktxX2gzNHRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8wMGI0MjYtMTI4Yi00ZjljLWEzYWYtYmRiNWYxNmQ0NmYw
LzEvX2UzWk90YktxbUN0U2ZENU4zMktxX2gzNHRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcTjhDDvc
kNoxfaCWEJJxqU4nqDEBFzoRazc6mR921A65mlp6AlPfbma7wOgx+ckOi7iyCe51
ewl0RGxwQVyI4SSgbu0nhOf9TTwRqU8poTdv7BaL1ZSvdiicUogokMjeNf2hUchN
ZFo7u29awPXknIfM8WOVmEAvyaeW9YjUGaccX54T9PyjWp2X/Afb6OBBZmUSo3IL
9+ZI54pFCjDFKfVFX5WEdVQ5KivywZ8CekxH0bdksOZsurYxYjHWt462yetKWKLJ
YIczAidfIEsSHUUYOKylToB3g9uYqfp3Nem8oFa4BWuOWILHIAo+VOM9h+NEn9ue
NITikOxUMIag3A==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:08:27 2025 by rpki-client