Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft
File:                     7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft (raw, json)
Hash identifier:          4bfLR63jf500NDgKE+wmJuMo8bZVVY6ef09LvOvdpHU=
Subject key identifier:   B6:56:EE:EA:7B:07:99:FC:C0:8A:87:89:00:2C:B9:DD:FA:2F:F0:2E
Authority key identifier: EC:91:7C:0A:FD:A4:49:EC:C0:42:9C:04:6D:F5:0F:BC:95:9B:4E:EA
Certificate issuer:       /CN=ec917c0afda449ecc0429c046df50fbc959b4eea
Certificate serial:       01976884F55A019AD53DFCD9B1C0685EEC9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7JF8Cv2kSezAQpwEbfUPvJWbTuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft
Manifest number:          1507
Signing time:             Fri 13 Jun 2025 09:00:33 +0000
Manifest this update:     Fri 13 Jun 2025 09:00:33 +0000
Manifest next update:     Sat 14 Jun 2025 09:00:33 +0000
Files and hashes:         1: 7JF8Cv2kSezAQpwEbfUPvJWbTuo.crl (hash: dV0uw0RIP76o+hoRXdkm1cUh8oRWOhUOzQaLRTHU9F0=)
                          2: YeFUZsaHfHTPpiu7f2dFmo68C7E.roa (hash: VFJqwzLzDH7CjnLQbhz/bJw/ANPrHjYMaDgoQuDyxDw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7JF8Cv2kSezAQpwEbfUPvJWbTuo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 09:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:84:f5:5a:01:9a:d5:3d:fc:d9:b1:c0:68:5e:ec:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec917c0afda449ecc0429c046df50fbc959b4eea
        Validity
            Not Before: Jun 13 09:00:33 2025 GMT
            Not After : Jun 14 09:00:33 2025 GMT
        Subject: CN=b656eeea7b0799fcc08a8789002cb9ddfa2ff02e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c0:b1:b3:f8:8c:07:cb:91:df:18:09:39:f2:
                    cf:98:c0:e6:2f:af:99:99:eb:3a:f4:c5:06:d0:a6:
                    9d:72:55:88:ed:3e:76:2a:65:05:65:67:cb:f5:fc:
                    f3:9a:9d:02:17:36:8c:12:19:22:45:d4:4b:b1:b0:
                    67:d8:8c:2f:5f:29:a8:df:56:b9:c9:89:09:24:a4:
                    5f:e8:0c:37:15:d1:3e:13:8d:6b:51:d3:7c:c0:4f:
                    b4:c2:89:42:5c:de:7b:2e:d4:05:fb:48:af:ab:11:
                    cb:65:3a:88:5e:7f:64:39:6c:1a:84:b7:a8:7f:9e:
                    95:58:8f:c3:7f:86:e5:99:d5:e9:b7:75:e8:f4:95:
                    d0:85:c3:03:16:9c:3d:ba:2b:ce:52:59:81:cc:2f:
                    3a:68:ad:8d:c2:95:53:36:4c:b3:8b:40:49:36:0d:
                    c9:b1:75:20:f6:89:79:51:22:be:e2:f4:f1:31:1c:
                    ec:99:e3:97:5d:5b:83:c3:00:2c:41:03:90:7c:de:
                    0d:2d:1d:d8:38:cb:3a:e5:28:22:9c:f3:71:40:94:
                    54:0b:58:24:f2:16:da:37:88:61:08:60:6e:64:08:
                    c2:4e:8a:4a:53:75:94:08:bf:8c:b2:e2:a8:86:7e:
                    4a:bc:2a:e1:78:7e:69:6b:dc:af:76:f8:2d:a1:e0:
                    f8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:56:EE:EA:7B:07:99:FC:C0:8A:87:89:00:2C:B9:DD:FA:2F:F0:2E
            X509v3 Authority Key Identifier:
                keyid:EC:91:7C:0A:FD:A4:49:EC:C0:42:9C:04:6D:F5:0F:BC:95:9B:4E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JF8Cv2kSezAQpwEbfUPvJWbTuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:5f:38:7e:ff:a4:e9:21:15:db:8b:ea:52:ba:ab:2c:5f:08:
         e2:bb:4c:0e:66:da:34:ed:d4:b7:fd:28:cd:ec:d5:d5:54:0d:
         cf:d7:03:9c:10:e3:98:61:4f:40:40:0c:c3:2d:9f:c9:2a:88:
         42:15:9f:0a:ff:5a:81:cb:c5:b3:58:87:44:c0:bc:eb:3d:a3:
         56:5a:4f:0b:2d:f0:fc:82:20:72:37:cf:ba:52:d0:6f:2f:ab:
         21:8d:18:87:ec:c5:71:3b:15:a0:1e:5c:fe:c6:db:f8:e2:8f:
         45:d2:59:0e:c4:0e:9e:db:8c:3c:1f:19:41:51:a9:55:c8:2e:
         60:9b:84:fc:cf:d6:6f:05:92:ce:70:d0:b9:2c:f9:0e:3a:5e:
         05:cd:f4:12:ac:13:d2:ed:6c:25:4f:08:ea:20:20:bc:80:d7:
         8b:02:86:19:6a:be:75:97:7b:02:d4:2e:50:2f:cf:1f:00:3c:
         7f:a1:10:d2:fb:7d:2b:5a:46:67:1e:69:35:ef:88:d4:c5:70:
         d2:55:06:f0:d2:60:20:07:bf:68:22:82:9c:83:c0:e7:e4:1c:
         c1:74:dc:a9:22:c0:85:ee:cf:72:f9:d1:e3:18:eb:ed:79:e4:
         ef:58:6a:84:84:cd:97:48:d9:b9:93:b9:89:5d:f8:15:76:21:
         0f:ff:ea:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdohPVaAZrVPfzZscBoXuyfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjOTE3YzBhZmRhNDQ5ZWNjMDQyOWMwNDZkZjUwZmJjOTU5
YjRlZWEwHhcNMjUwNjEzMDkwMDMzWhcNMjUwNjE0MDkwMDMzWjAzMTEwLwYDVQQD
EyhiNjU2ZWVlYTdiMDc5OWZjYzA4YTg3ODkwMDJjYjlkZGZhMmZmMDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMCxs/iMB8uR3xgJOfLPmMDmL6+Z
mes69MUG0KadclWI7T52KmUFZWfL9fzzmp0CFzaMEhkiRdRLsbBn2IwvXymo31a5
yYkJJKRf6Aw3FdE+E41rUdN8wE+0wolCXN57LtQF+0ivqxHLZTqIXn9kOWwahLeo
f56VWI/Df4blmdXpt3Xo9JXQhcMDFpw9uivOUlmBzC86aK2NwpVTNkyzi0BJNg3J
sXUg9ol5USK+4vTxMRzsmeOXXVuDwwAsQQOQfN4NLR3YOMs65SginPNxQJRUC1gk
8hbaN4hhCGBuZAjCTopKU3WUCL+MsuKohn5KvCrheH5pa9yvdvgtoeD4rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZW7up7B5n8wIqHiQAsud36L/AuMB8GA1UdIwQY
MBaAFOyRfAr9pEnswEKcBG31D7yVm07qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0pGOEN2MmtTZXpBUXB3RWJmVVB2SldiVHVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9jODhhOGYtN2JlMC00ZTQwLTljZTYt
ZDI1MmE1NzRhZThkLzEvN0pGOEN2MmtTZXpBUXB3RWJmVVB2SldiVHVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9jODhhOGYtN2JlMC00ZTQwLTljZTYtZDI1MmE1NzRhZThk
LzEvN0pGOEN2MmtTZXpBUXB3RWJmVVB2SldiVHVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf184fv+k
6SEV24vqUrqrLF8I4rtMDmbaNO3Ut/0ozezV1VQNz9cDnBDjmGFPQEAMwy2fySqI
QhWfCv9agcvFs1iHRMC86z2jVlpPCy3w/IIgcjfPulLQby+rIY0Yh+zFcTsVoB5c
/sbb+OKPRdJZDsQOntuMPB8ZQVGpVcguYJuE/M/WbwWSznDQuSz5DjpeBc30EqwT
0u1sJU8I6iAgvIDXiwKGGWq+dZd7AtQuUC/PHwA8f6EQ0vt9K1pGZx5pNe+I1MVw
0lUG8NJgIAe/aCKCnIPA5+QcwXTcqSLAhe7PcvnR4xjr7Xnk71hqhITNl0jZuZO5
iV34FXYhD//quQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 18:56:58 2025 by rpki-client