Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.mft
File:                     b_eJEzFFDchig6CJvZRw5pw37RI.mft (raw, json)
Hash identifier:          hBZdgSjsw5HwtpRn33SUwn7kgC5JJw4BFcUEZBqd1pA=
Subject key identifier:   84:46:CC:29:FC:0A:B0:A3:D1:69:91:0A:8E:90:DB:31:FD:8D:14:CD
Authority key identifier: 6F:F7:89:13:31:45:0D:C8:62:83:A0:89:BD:94:70:E6:9C:37:ED:12
Certificate issuer:       /CN=6ff7891331450dc86283a089bd9470e69c37ed12
Certificate serial:       01976EF509D854C4C436EB0436B3E45ADE28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b_eJEzFFDchig6CJvZRw5pw37RI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.mft
Manifest number:          015F
Signing time:             Sat 14 Jun 2025 15:00:41 +0000
Manifest this update:     Sat 14 Jun 2025 15:00:41 +0000
Manifest next update:     Sun 15 Jun 2025 15:00:41 +0000
Files and hashes:         1: b_eJEzFFDchig6CJvZRw5pw37RI.crl (hash: SLvgYHoP3OnssTKWTu/J4Yu8GsiMHT2LkadRQDxiZIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b_eJEzFFDchig6CJvZRw5pw37RI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 15:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:f5:09:d8:54:c4:c4:36:eb:04:36:b3:e4:5a:de:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ff7891331450dc86283a089bd9470e69c37ed12
        Validity
            Not Before: Jun 14 15:00:41 2025 GMT
            Not After : Jun 15 15:00:41 2025 GMT
        Subject: CN=8446cc29fc0ab0a3d169910a8e90db31fd8d14cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:70:a4:27:c3:cf:ac:50:5c:0b:f0:66:b9:38:
                    33:ef:71:7a:da:5f:67:0d:e6:33:c2:19:c0:57:6c:
                    90:8c:ba:fb:1f:72:e9:c0:cf:3f:aa:66:be:d6:b9:
                    1b:f9:46:40:4f:e6:eb:ae:9d:cb:83:47:e4:4c:49:
                    ad:2e:15:44:b4:ed:58:be:08:42:97:65:50:21:e3:
                    72:86:84:5f:4f:30:0e:d3:a9:43:7b:da:c1:57:29:
                    ab:be:95:2a:c8:a4:c7:a1:9a:61:ca:70:d9:60:6b:
                    7e:10:1f:7e:49:5d:41:e7:bd:0b:64:86:b3:c2:2a:
                    62:1e:05:7f:b3:85:a7:dc:9a:42:2b:63:a5:62:c1:
                    f4:d3:89:0a:00:b3:3c:71:0c:06:48:50:4e:e1:38:
                    b6:51:01:07:62:3c:26:f6:c7:9e:a2:8d:8f:a3:7d:
                    90:af:28:f0:dc:a6:2e:60:0a:d0:7c:a4:55:26:89:
                    94:8e:6e:b4:b5:f3:d1:92:73:cc:7a:5a:ff:69:9a:
                    fd:54:55:ee:19:ec:9e:5c:64:fb:2f:99:19:98:ca:
                    ac:03:d6:e8:28:73:c4:1a:f4:b4:64:e0:d6:fa:23:
                    29:9a:50:1b:ac:2d:3f:c5:1f:4b:13:79:9d:b6:36:
                    d3:17:dd:a3:00:8c:89:a0:52:bb:ad:bc:8b:60:e9:
                    98:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:46:CC:29:FC:0A:B0:A3:D1:69:91:0A:8E:90:DB:31:FD:8D:14:CD
            X509v3 Authority Key Identifier:
                keyid:6F:F7:89:13:31:45:0D:C8:62:83:A0:89:BD:94:70:E6:9C:37:ED:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_eJEzFFDchig6CJvZRw5pw37RI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:22:64:62:3d:68:e2:b2:eb:7a:ec:eb:db:f3:3b:66:7b:8c:
         2e:48:99:21:83:fc:1a:df:fe:fe:2b:93:0e:70:01:9e:15:76:
         14:e0:bf:1d:31:0e:7b:63:a3:dd:87:4f:75:b8:b1:5f:e4:ba:
         5e:63:4f:4c:ca:49:a6:df:9f:32:f6:be:0b:fd:9d:58:c9:75:
         71:c4:ca:63:b8:ec:33:2f:ec:56:55:3c:36:86:93:0a:5a:e4:
         ed:cc:ed:c3:0f:84:2e:ae:da:8d:14:af:78:80:70:5e:f5:ad:
         9e:93:d1:fc:56:e0:0c:fb:7b:f5:0a:cb:b1:ab:84:ef:28:4a:
         7d:f7:ba:f0:f5:04:ab:71:d9:eb:bc:1b:4b:b1:47:66:11:b3:
         55:7f:e4:18:3f:99:58:85:14:2c:7f:c0:73:ac:7b:ed:1c:84:
         0f:11:56:c4:cd:a4:7e:d6:e0:ae:4a:63:cb:75:61:aa:c3:61:
         62:14:3d:f6:3c:b3:7b:d4:fc:22:e4:24:1f:6f:0e:04:06:ec:
         bb:ce:15:59:f4:ea:47:0e:9b:5c:5a:9f:55:11:b4:a8:37:95:
         21:f4:9a:7f:75:80:e9:d2:62:52:0d:90:80:d8:51:2a:4a:c1:
         7e:7e:67:ea:f2:ed:28:58:ac:87:98:0f:5f:49:22:90:09:fc:
         26:7c:98:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdu9QnYVMTENusENrPkWt4oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZjc4OTEzMzE0NTBkYzg2MjgzYTA4OWJkOTQ3MGU2OWMz
N2VkMTIwHhcNMjUwNjE0MTUwMDQxWhcNMjUwNjE1MTUwMDQxWjAzMTEwLwYDVQQD
Eyg4NDQ2Y2MyOWZjMGFiMGEzZDE2OTkxMGE4ZTkwZGIzMWZkOGQxNGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHCkJ8PPrFBcC/BmuTgz73F62l9n
DeYzwhnAV2yQjLr7H3LpwM8/qma+1rkb+UZAT+brrp3Lg0fkTEmtLhVEtO1YvghC
l2VQIeNyhoRfTzAO06lDe9rBVymrvpUqyKTHoZphynDZYGt+EB9+SV1B570LZIaz
wipiHgV/s4Wn3JpCK2OlYsH004kKALM8cQwGSFBO4Ti2UQEHYjwm9seeoo2Po32Q
ryjw3KYuYArQfKRVJomUjm60tfPRknPMelr/aZr9VFXuGeyeXGT7L5kZmMqsA9bo
KHPEGvS0ZODW+iMpmlAbrC0/xR9LE3mdtjbTF92jAIyJoFK7rbyLYOmYdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRGzCn8CrCj0WmRCo6Q2zH9jRTNMB8GA1UdIwQY
MBaAFG/3iRMxRQ3IYoOgib2UcOacN+0SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYl9lSkV6RkZEY2hpZzZDSnZaUnc1cHczN1JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81MDkyNmUtZjBlNS00M2Q2LThlM2Mt
ZDU3NWI5NjI0ZGU3LzEvYl9lSkV6RkZEY2hpZzZDSnZaUnc1cHczN1JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS81MDkyNmUtZjBlNS00M2Q2LThlM2MtZDU3NWI5NjI0ZGU3
LzEvYl9lSkV6RkZEY2hpZzZDSnZaUnc1cHczN1JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaiJkYj1o
4rLreuzr2/M7ZnuMLkiZIYP8Gt/+/iuTDnABnhV2FOC/HTEOe2Oj3YdPdbixX+S6
XmNPTMpJpt+fMva+C/2dWMl1ccTKY7jsMy/sVlU8NoaTClrk7cztww+ELq7ajRSv
eIBwXvWtnpPR/FbgDPt79QrLsauE7yhKffe68PUEq3HZ67wbS7FHZhGzVX/kGD+Z
WIUULH/Ac6x77RyEDxFWxM2kftbgrkpjy3VhqsNhYhQ99jyze9T8IuQkH28OBAbs
u84VWfTqRw6bXFqfVRG0qDeVIfSaf3WA6dJiUg2QgNhRKkrBfn5n6vLtKFish5gP
X0kikAn8JnyYSA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 00:00:54 2025 by rpki-client