Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
File:                     dp1cUsMVfllF5mO5LtRALGBhbjs.mft (raw, json)
Hash identifier:          6fdpSKd1GZOBnZdNd3TJainhio2uU51B8UH5y6P0PEw=
Subject key identifier:   DF:C8:51:BF:31:8B:F5:19:48:3C:EB:5C:CE:40:43:9A:73:29:F5:49
Authority key identifier: 76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B
Certificate issuer:       /CN=769d5c52c3157e5945e663b92ed4402c60616e3b
Certificate serial:       0198D4A84BE6B9BBDE894956268E6EAF2720
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
Manifest number:          032D
Signing time:             Sat 23 Aug 2025 02:00:55 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:55 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:55 +0000
Files and hashes:         1: 08Xj6P3LiBkWV-XyPE1sfuebHwg.roa (hash: GOb53BquANot8lO8WUgTLWPiXo2ewEYSLTJKkoVM5kk=)
                          2: dp1cUsMVfllF5mO5LtRALGBhbjs.crl (hash: O9mgEEc8k14siWuszbXWb6egUjpN1xHOiCfhonYCyi0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a8:4b:e6:b9:bb:de:89:49:56:26:8e:6e:af:27:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=769d5c52c3157e5945e663b92ed4402c60616e3b
        Validity
            Not Before: Aug 23 02:00:55 2025 GMT
            Not After : Aug 24 02:00:55 2025 GMT
        Subject: CN=dfc851bf318bf519483ceb5cce40439a7329f549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:97:c0:36:f3:ee:27:f1:2a:9b:ee:d7:2d:3f:
                    2e:81:34:27:4f:3a:b6:59:63:ce:3b:46:81:87:9c:
                    60:2f:e9:ac:a5:1c:fa:19:56:75:00:36:28:12:f8:
                    7e:63:74:67:1e:31:9a:64:e0:f6:60:cb:f0:1f:14:
                    a8:40:27:53:28:b5:45:ff:24:00:84:b9:55:31:c5:
                    f7:74:38:fa:71:70:c6:b7:72:72:e7:73:0c:70:30:
                    b1:38:75:fa:0f:86:15:e0:93:74:72:ce:68:07:15:
                    e6:c9:e9:63:bb:4b:be:34:32:4d:b3:bc:b5:e0:4f:
                    ea:a7:0f:cc:f8:fc:b1:b1:0e:4f:5a:e0:75:21:2d:
                    98:1d:8c:d4:ad:b4:f2:ac:e2:c6:0e:00:1f:8d:2c:
                    39:ad:1f:3c:e9:7e:fa:07:bc:f3:78:3c:75:df:9d:
                    9e:92:1f:2d:7b:b8:77:43:26:97:cb:75:c5:1d:f5:
                    9c:f0:3e:29:46:95:7c:39:01:4f:d8:77:a4:a4:04:
                    ba:01:bb:1c:b1:98:a2:e1:cd:87:bb:6c:97:e5:f0:
                    5c:80:66:61:97:5d:ea:35:ac:8f:97:e2:ee:d5:d6:
                    d6:9c:8e:86:c9:d4:22:6a:86:72:73:d4:fc:5e:a5:
                    5b:e4:45:d4:15:2d:be:7e:12:db:5e:f3:ea:4d:8d:
                    fe:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C8:51:BF:31:8B:F5:19:48:3C:EB:5C:CE:40:43:9A:73:29:F5:49
            X509v3 Authority Key Identifier:
                keyid:76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:98:06:f6:bc:61:74:09:24:58:3b:dd:78:2e:dc:f6:07:0f:
         81:c4:de:36:e3:6f:ca:97:fb:6e:04:9b:89:8a:62:27:5a:d9:
         fa:26:ea:f3:a2:1f:fb:db:6a:44:57:c7:bd:97:36:74:65:b7:
         e6:c2:8e:8f:59:ba:9d:e2:a5:3e:a3:fa:da:76:cf:3f:af:8d:
         1a:02:2e:2b:0a:43:0d:98:03:48:49:d3:50:de:44:2b:b5:5c:
         1b:15:63:91:bb:a0:f8:49:90:21:f7:e8:46:4e:31:f6:b9:d4:
         d7:0e:52:c2:ab:8a:6e:74:cf:45:b8:59:91:12:47:cb:16:95:
         c6:82:42:ba:52:7e:8b:7e:ce:7d:5f:c4:c2:f3:db:5b:bd:21:
         a3:f3:04:ed:6e:09:ce:a8:13:16:37:75:31:14:91:3d:9e:ca:
         da:e2:21:a6:b5:96:05:07:21:49:ea:0a:60:79:ef:ad:5f:df:
         94:69:21:97:c0:46:dd:49:92:26:ff:70:27:57:e3:73:29:d7:
         31:2b:dc:c4:2d:ca:7e:5f:ec:3b:e7:e4:a5:02:82:c0:9a:6f:
         06:eb:6f:3e:d8:c8:9b:83:18:fe:f7:19:8d:57:1e:39:db:c4:
         48:9b:c6:8b:f1:03:06:91:3e:96:89:e2:23:77:a6:04:20:73:
         c6:4b:27:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:13:01 2025 by rpki-client