Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft
File:                     ecIGSHmLtlNrI6TrxYgEVBX5boA.mft (raw, json)
Hash identifier:          ni+ObEeSS0NDztEwWqIGm95OiLt5VPIRqIW1KDfRddA=
Subject key identifier:   60:BB:18:DA:E4:4D:E8:C3:04:5F:94:44:51:61:1F:6A:68:9A:83:CE
Authority key identifier: 79:C2:06:48:79:8B:B6:53:6B:23:A4:EB:C5:88:04:54:15:F9:6E:80
Certificate issuer:       /CN=79c20648798bb6536b23a4ebc588045415f96e80
Certificate serial:       01976DAC157045DB6C0FDD5D69881CA1467A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecIGSHmLtlNrI6TrxYgEVBX5boA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft
Manifest number:          0548
Signing time:             Sat 14 Jun 2025 09:01:23 +0000
Manifest this update:     Sat 14 Jun 2025 09:01:23 +0000
Manifest next update:     Sun 15 Jun 2025 09:01:23 +0000
Files and hashes:         1: ecIGSHmLtlNrI6TrxYgEVBX5boA.crl (hash: 6Afs9raGSM9LByGFankaC72uW0Q8q9CfvDPDIGTNDa4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ecIGSHmLtlNrI6TrxYgEVBX5boA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:ac:15:70:45:db:6c:0f:dd:5d:69:88:1c:a1:46:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79c20648798bb6536b23a4ebc588045415f96e80
        Validity
            Not Before: Jun 14 09:01:23 2025 GMT
            Not After : Jun 15 09:01:23 2025 GMT
        Subject: CN=60bb18dae44de8c3045f944451611f6a689a83ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1b:c8:69:d3:81:32:b2:5e:0f:44:45:ef:6f:
                    9f:81:c9:dc:f3:13:b8:b4:15:59:cf:1b:ff:8e:e4:
                    38:85:6a:87:4c:26:1c:6a:ec:b5:19:f0:f2:70:b5:
                    b4:49:dd:5a:c2:eb:5c:fd:58:ac:d6:e7:45:1c:ef:
                    fe:8c:86:40:82:41:27:3d:41:fc:1f:92:58:20:db:
                    e1:2b:e3:b9:f8:8f:ad:0c:d3:b9:f8:19:60:44:ad:
                    56:0d:05:d1:b1:78:bc:33:09:d7:01:86:34:72:5d:
                    f4:32:b5:24:89:1a:76:ad:e1:81:de:8f:fb:26:55:
                    14:24:a2:ff:91:12:e9:f6:5d:90:ab:a5:bb:32:63:
                    5f:72:87:c9:b1:c3:a1:4c:62:16:ea:24:c6:9d:bd:
                    e1:08:7f:ef:2a:f6:23:01:d6:32:5d:5e:ae:62:a1:
                    6d:fe:42:2d:d9:4e:96:02:4d:49:57:bf:de:1d:a3:
                    be:01:b2:88:19:fa:ac:f0:af:51:47:a1:fd:75:e3:
                    be:2b:9c:ae:dc:c7:b7:3b:f7:c9:5c:9b:f7:87:2c:
                    90:9b:85:9f:a4:d2:24:7e:a6:44:3d:a6:49:a7:b1:
                    c2:7e:dc:ad:a3:59:fa:7a:07:51:36:1f:ef:b8:b4:
                    b6:5d:b9:71:29:23:e4:b9:c2:1c:03:c6:0a:67:0a:
                    f1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:BB:18:DA:E4:4D:E8:C3:04:5F:94:44:51:61:1F:6A:68:9A:83:CE
            X509v3 Authority Key Identifier:
                keyid:79:C2:06:48:79:8B:B6:53:6B:23:A4:EB:C5:88:04:54:15:F9:6E:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecIGSHmLtlNrI6TrxYgEVBX5boA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:7b:60:de:02:24:b4:c6:b2:7f:29:b4:36:35:12:ef:b5:eb:
         b6:90:8a:eb:a6:91:72:84:59:3e:d6:1e:b8:4d:e8:1f:1a:fd:
         c9:b9:dc:b0:77:e4:24:2c:25:86:55:9c:6e:24:f1:8c:34:29:
         a2:5e:e4:2b:f1:fe:6c:fb:e7:64:95:88:f2:90:97:b3:36:d3:
         bc:6b:7c:04:4c:86:3a:64:61:80:d1:d7:35:18:5c:01:c5:16:
         a8:a1:df:0f:e6:c2:a0:a2:cd:21:58:3c:6f:8b:34:c9:64:77:
         0b:38:e0:35:68:c2:0b:85:1b:77:c6:18:c4:ab:ea:e5:df:ac:
         8d:fd:4c:80:cb:2c:d7:1d:c4:04:4e:e4:a9:ae:f8:f5:6f:30:
         9a:ea:61:f6:94:79:72:e4:03:a6:8d:51:98:0d:7c:92:43:22:
         76:e9:3d:a7:0c:13:42:ab:46:1c:ce:5f:a8:c1:11:e2:cf:6e:
         82:20:3f:9a:15:51:cb:1e:7b:a9:20:15:28:32:b1:20:03:7b:
         2c:9f:76:0c:29:e7:cf:ec:b1:15:c2:c1:5a:b8:1a:e5:19:1a:
         e6:46:ad:57:66:35:e1:db:32:65:1b:e5:24:47:8e:ca:b4:28:
         21:2a:80:0b:eb:73:e5:d9:f2:cc:0e:0b:c9:5a:7c:52:af:66:
         c6:a2:ac:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtrBVwRdtsD91daYgcoUZ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YzIwNjQ4Nzk4YmI2NTM2YjIzYTRlYmM1ODgwNDU0MTVm
OTZlODAwHhcNMjUwNjE0MDkwMTIzWhcNMjUwNjE1MDkwMTIzWjAzMTEwLwYDVQQD
Eyg2MGJiMThkYWU0NGRlOGMzMDQ1Zjk0NDQ1MTYxMWY2YTY4OWE4M2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBvIadOBMrJeD0RF72+fgcnc8xO4
tBVZzxv/juQ4hWqHTCYcauy1GfDycLW0Sd1awutc/Vis1udFHO/+jIZAgkEnPUH8
H5JYINvhK+O5+I+tDNO5+BlgRK1WDQXRsXi8MwnXAYY0cl30MrUkiRp2reGB3o/7
JlUUJKL/kRLp9l2Qq6W7MmNfcofJscOhTGIW6iTGnb3hCH/vKvYjAdYyXV6uYqFt
/kIt2U6WAk1JV7/eHaO+AbKIGfqs8K9RR6H9deO+K5yu3Me3O/fJXJv3hyyQm4Wf
pNIkfqZEPaZJp7HCftyto1n6egdRNh/vuLS2XblxKSPkucIcA8YKZwrx1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGC7GNrkTejDBF+URFFhH2pomoPOMB8GA1UdIwQY
MBaAFHnCBkh5i7ZTayOk68WIBFQV+W6AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWNJR1NIbUx0bE5ySTZUcnhZZ0VWQlg1Ym9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS80MDVjMzEtNzI0ZS00N2MxLTk0ZTAt
MWZhMTZlZjhjMWFkLzEvZWNJR1NIbUx0bE5ySTZUcnhZZ0VWQlg1Ym9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS80MDVjMzEtNzI0ZS00N2MxLTk0ZTAtMWZhMTZlZjhjMWFk
LzEvZWNJR1NIbUx0bE5ySTZUcnhZZ0VWQlg1Ym9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ3tg3gIk
tMayfym0NjUS77XrtpCK66aRcoRZPtYeuE3oHxr9ybncsHfkJCwlhlWcbiTxjDQp
ol7kK/H+bPvnZJWI8pCXszbTvGt8BEyGOmRhgNHXNRhcAcUWqKHfD+bCoKLNIVg8
b4s0yWR3CzjgNWjCC4Ubd8YYxKvq5d+sjf1MgMss1x3EBE7kqa749W8wmuph9pR5
cuQDpo1RmA18kkMiduk9pwwTQqtGHM5fqMER4s9ugiA/mhVRyx57qSAVKDKxIAN7
LJ92DCnnz+yxFcLBWrga5Rka5katV2Y14dsyZRvlJEeOyrQoISqAC+tz5dnyzA4L
yVp8Uq9mxqKsjw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:20:58 2025 by rpki-client