Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
File:                     6Is19ZnvHCbySYP5Fafq7GeXx_o.mft (raw, json)
Hash identifier:          ayVHZhwhf+Pjs8zmRkrtSpk1OCYxPOenESWjqajHgaA=
Subject key identifier:   F7:80:EC:F9:D4:F9:35:69:30:B8:B3:95:25:60:1F:10:FD:A7:7B:CB
Authority key identifier: E8:8B:35:F5:99:EF:1C:26:F2:49:83:F9:15:A7:EA:EC:67:97:C7:FA
Certificate issuer:       /CN=e88b35f599ef1c26f24983f915a7eaec6797c7fa
Certificate serial:       019873E2DD2E9AE7C471839AA68ED3DF7743
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
Manifest number:          122C
Signing time:             Mon 04 Aug 2025 07:01:44 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:44 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:44 +0000
Files and hashes:         1: 6Is19ZnvHCbySYP5Fafq7GeXx_o.crl (hash: 4q2I+eaMuwN/DXy4hUTg5YcVkfA/AM+DXlYcZR8h1SY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:dd:2e:9a:e7:c4:71:83:9a:a6:8e:d3:df:77:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e88b35f599ef1c26f24983f915a7eaec6797c7fa
        Validity
            Not Before: Aug  4 07:01:44 2025 GMT
            Not After : Aug  5 07:01:44 2025 GMT
        Subject: CN=f780ecf9d4f9356930b8b39525601f10fda77bcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ce:ee:71:4b:8e:d3:8c:c4:f7:d1:b0:92:15:
                    c7:b9:08:e5:7e:2a:82:59:6a:c5:11:ca:15:a6:77:
                    fc:f5:3f:b6:8f:57:aa:1f:4e:99:51:a1:4d:df:04:
                    ac:24:04:6f:94:25:c5:01:ae:5a:b3:21:c7:bb:c0:
                    9a:e5:0c:b2:8a:13:e0:46:15:9d:e0:a7:61:5a:84:
                    17:eb:9e:8f:76:ed:5b:14:c2:ec:7a:51:71:fb:1c:
                    f5:b4:b6:a8:0d:a4:62:72:c1:29:00:d4:a3:a1:3a:
                    56:10:90:16:52:f3:a9:e8:06:19:1f:c1:7f:65:f1:
                    d4:c3:a7:8a:be:ec:6a:ac:03:3c:3d:06:96:2a:93:
                    26:b2:ee:60:87:50:5e:91:28:fa:4f:2c:fe:3c:b2:
                    8d:5b:50:a2:9d:b3:2a:a2:d2:d1:20:66:80:89:aa:
                    20:fb:c6:2e:75:5d:ae:77:9f:be:c0:8b:cd:ac:49:
                    72:18:cc:a7:5f:39:f0:dc:84:dc:15:22:fb:f2:9f:
                    43:5b:35:54:54:f2:1a:66:90:d0:bd:90:7e:79:0a:
                    55:60:03:dd:22:41:4b:1d:3d:c8:5d:9f:e6:d6:da:
                    db:50:a7:ab:08:6d:c2:ab:83:14:1a:1b:b9:b1:0b:
                    37:32:39:59:5a:d8:b1:f9:2d:b4:0e:6e:8c:26:ac:
                    d5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:80:EC:F9:D4:F9:35:69:30:B8:B3:95:25:60:1F:10:FD:A7:7B:CB
            X509v3 Authority Key Identifier:
                keyid:E8:8B:35:F5:99:EF:1C:26:F2:49:83:F9:15:A7:EA:EC:67:97:C7:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:4d:2d:b3:f0:f5:99:d1:b2:c3:77:95:be:f8:3d:42:86:da:
         d8:3c:9c:02:b8:e3:85:22:4a:b7:d5:3f:d2:6a:14:59:f3:d8:
         29:db:cf:50:87:01:6b:76:85:30:ec:d2:75:e2:f7:b8:86:ca:
         60:0b:32:a7:b6:ab:1d:be:c2:d6:dd:e4:0b:27:77:36:3b:4c:
         ca:08:3a:a9:db:e5:2b:63:6b:16:71:91:29:d9:d6:54:26:23:
         d1:33:a7:5d:04:5a:2d:f4:db:47:9a:13:1b:77:a5:49:78:ea:
         54:c4:cd:b9:ed:c8:0e:3a:57:30:1d:68:9c:48:8a:50:6f:d7:
         c3:cc:e8:88:69:a5:d6:f7:ab:7c:b1:46:32:1d:5e:c7:45:2f:
         ac:58:49:7e:2b:46:2a:f0:63:d0:8e:67:1a:e7:6f:aa:66:ce:
         a7:bf:94:ee:b5:fb:ef:bf:0b:2a:a3:73:3c:10:d3:0c:37:37:
         71:10:a5:25:04:50:27:ce:49:f8:68:c9:07:fe:17:90:ee:2d:
         cc:7a:cc:91:62:db:13:f4:35:9a:aa:9d:20:74:98:49:bc:94:
         fa:44:78:ba:34:a8:97:db:dd:a8:3d:47:c1:d4:c2:1f:5f:bc:
         5c:3e:3f:90:cb:79:cb:51:a2:61:42:2c:c7:e0:85:37:ed:d8:
         5c:75:4b:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4t0umufEcYOapo7T33dDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4OGIzNWY1OTllZjFjMjZmMjQ5ODNmOTE1YTdlYWVjNjc5
N2M3ZmEwHhcNMjUwODA0MDcwMTQ0WhcNMjUwODA1MDcwMTQ0WjAzMTEwLwYDVQQD
EyhmNzgwZWNmOWQ0ZjkzNTY5MzBiOGIzOTUyNTYwMWYxMGZkYTc3YmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvs7ucUuO04zE99GwkhXHuQjlfiqC
WWrFEcoVpnf89T+2j1eqH06ZUaFN3wSsJARvlCXFAa5asyHHu8Ca5QyyihPgRhWd
4KdhWoQX656Pdu1bFMLselFx+xz1tLaoDaRicsEpANSjoTpWEJAWUvOp6AYZH8F/
ZfHUw6eKvuxqrAM8PQaWKpMmsu5gh1BekSj6Tyz+PLKNW1CinbMqotLRIGaAiaog
+8YudV2ud5++wIvNrElyGMynXznw3ITcFSL78p9DWzVUVPIaZpDQvZB+eQpVYAPd
IkFLHT3IXZ/m1trbUKerCG3Cq4MUGhu5sQs3MjlZWtix+S20Dm6MJqzVcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPeA7PnU+TVpMLizlSVgHxD9p3vLMB8GA1UdIwQY
MBaAFOiLNfWZ7xwm8kmD+RWn6uxnl8f6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNklzMTlabnZIQ2J5U1lQNUZhZnE3R2VYeF9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zMTE5NzctMjZiYS00ZGE4LWIwNjIt
NzcwNTk1MzYzZTY1LzEvNklzMTlabnZIQ2J5U1lQNUZhZnE3R2VYeF9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8zMTE5NzctMjZiYS00ZGE4LWIwNjItNzcwNTk1MzYzZTY1
LzEvNklzMTlabnZIQ2J5U1lQNUZhZnE3R2VYeF9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWE0ts/D1
mdGyw3eVvvg9Qoba2DycArjjhSJKt9U/0moUWfPYKdvPUIcBa3aFMOzSdeL3uIbK
YAsyp7arHb7C1t3kCyd3NjtMygg6qdvlK2NrFnGRKdnWVCYj0TOnXQRaLfTbR5oT
G3elSXjqVMTNue3IDjpXMB1onEiKUG/Xw8zoiGml1verfLFGMh1ex0UvrFhJfitG
KvBj0I5nGudvqmbOp7+U7rX7778LKqNzPBDTDDc3cRClJQRQJ85J+GjJB/4XkO4t
zHrMkWLbE/Q1mqqdIHSYSbyU+kR4ujSol9vdqD1HwdTCH1+8XD4/kMt5y1GiYUIs
x+CFN+3YXHVL3A==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:36 2025 by rpki-client