Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
File:                     _-cGk0VLwzSF3sadIZ0FAmVKwEo.mft (raw, json)
Hash identifier:          zeMVsZxzlN14rt4mLfvGqV/prVCySei5DZ1hnoAiE64=
Subject key identifier:   EC:8B:36:41:9B:8A:B7:55:6E:73:4D:FB:3E:48:F7:39:B7:A4:16:F9
Authority key identifier: FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A
Certificate issuer:       /CN=ffe70693454bc33485dec69d219d0502654ac04a
Certificate serial:       01976E1919C7D7DA3858B464E59698A92024
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
Manifest number:          1021
Signing time:             Sat 14 Jun 2025 11:00:28 +0000
Manifest this update:     Sat 14 Jun 2025 11:00:28 +0000
Manifest next update:     Sun 15 Jun 2025 11:00:28 +0000
Files and hashes:         1: _-cGk0VLwzSF3sadIZ0FAmVKwEo.crl (hash: 1nI6vbbZKNb5cNlmR9eCElnluzDLBAXfUjw8bdl1LBI=)
                          2: tTr3yBFPThh1LKoDvfe7lT4KAhU.roa (hash: rMkbO3LBGUKRzGY5bNc/Rymk3Ag6qe14nmgO9u0tnVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 11:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:19:19:c7:d7:da:38:58:b4:64:e5:96:98:a9:20:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffe70693454bc33485dec69d219d0502654ac04a
        Validity
            Not Before: Jun 14 11:00:28 2025 GMT
            Not After : Jun 15 11:00:28 2025 GMT
        Subject: CN=ec8b36419b8ab7556e734dfb3e48f739b7a416f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2f:34:8a:b3:4e:cd:40:04:8a:00:5a:ab:66:
                    85:9f:b9:32:8b:60:bc:7b:d3:2a:61:d8:a4:ac:09:
                    76:68:dc:4d:5c:c4:e6:e8:64:b2:8a:1a:33:8b:39:
                    c3:a9:0c:d8:b8:0d:61:b5:24:11:98:55:af:b6:12:
                    a1:80:b2:93:57:9a:33:68:45:b3:5d:36:85:f2:47:
                    f8:5a:9a:2f:e7:ab:29:d5:a0:f2:8f:7d:0a:e9:05:
                    ea:11:70:0d:18:54:3d:ef:aa:68:0d:0a:fb:68:10:
                    40:b6:a6:5d:83:7c:43:d9:4b:b8:64:39:47:f7:8b:
                    2e:19:9a:0f:a2:7a:f2:c6:b5:e3:7b:2d:5b:89:bc:
                    c6:2a:09:c4:4e:dc:4a:9b:ec:c6:d5:4e:c6:46:28:
                    9a:9e:16:29:86:20:e1:b3:6b:cf:97:b6:bd:68:c2:
                    06:e0:58:b9:49:22:32:f9:98:ba:b8:ae:a6:72:ae:
                    b9:ce:2f:b6:76:75:5b:6c:6f:28:26:3e:52:2c:72:
                    42:de:96:a5:9c:aa:6b:a9:d9:ca:cf:9d:3f:82:9b:
                    da:cf:47:fe:d8:41:2e:9c:a0:4a:32:4f:64:a5:ef:
                    09:58:64:96:50:88:50:47:db:cb:e6:4a:c0:52:e6:
                    2c:e8:8d:3e:9f:e9:62:5b:98:b2:ed:9a:28:74:59:
                    c7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:8B:36:41:9B:8A:B7:55:6E:73:4D:FB:3E:48:F7:39:B7:A4:16:F9
            X509v3 Authority Key Identifier:
                keyid:FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:9c:aa:0d:aa:f4:2e:a2:5b:7f:a2:27:11:a7:e1:76:c1:e1:
         4e:6f:56:3c:a2:e0:9e:e0:72:bd:0d:b7:1d:88:9b:cc:7e:ef:
         18:fb:47:78:ff:78:fe:43:7d:58:bf:82:f2:d7:c3:fc:af:47:
         b7:b3:7f:d8:71:9e:03:8f:55:90:19:7a:86:30:65:7e:4d:e9:
         03:0c:af:0e:94:4b:69:44:00:4c:48:33:a8:e2:88:23:e6:d0:
         e4:a6:d7:75:a8:68:22:dd:80:2e:62:83:44:90:8d:55:3a:0f:
         8d:39:bf:67:b7:0d:92:5a:d6:9d:71:75:8f:5c:86:a6:4b:07:
         2a:1c:bb:81:fd:e7:4c:3c:67:33:55:c4:3a:d5:1c:75:01:2e:
         69:af:12:e2:3b:cf:28:0b:2d:2d:2b:1f:52:1d:3f:f0:a1:97:
         70:9c:f2:83:0d:7c:39:eb:7d:83:48:64:12:43:d2:84:bd:34:
         f5:2a:31:37:00:40:8d:70:16:e0:c6:d6:97:70:de:16:d1:6c:
         3c:47:a6:f4:68:5d:2c:6c:1d:bb:55:f6:20:fb:ef:63:19:96:
         ff:b3:62:6d:61:bf:31:5d:75:dd:8b:8c:38:b9:f7:26:d0:ec:
         84:12:57:9d:d7:96:a2:db:ad:37:57:b3:1a:62:d6:5f:1a:f6:
         59:f2:68:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:38:41 2025 by rpki-client