Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft
File:                     dIZPUCPsYmPvnxb5AYf18oBh0RU.mft (raw, json)
Hash identifier:          gOvVY8Z6Cw1sGspaqHAibOKtPWYBnF/zpWwcsjMZ7qQ=
Subject key identifier:   39:59:3A:7C:8A:77:93:27:69:C8:B8:01:87:8D:8A:20:E7:FC:5B:9E
Authority key identifier: 74:86:4F:50:23:EC:62:63:EF:9F:16:F9:01:87:F5:F2:80:61:D1:15
Certificate issuer:       /CN=74864f5023ec6263ef9f16f90187f5f28061d115
Certificate serial:       0197CD28B983D7E587B93E35B9D45D940054
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft
Manifest number:          0BAE
Signing time:             Wed 02 Jul 2025 22:01:27 +0000
Manifest this update:     Wed 02 Jul 2025 22:01:27 +0000
Manifest next update:     Thu 03 Jul 2025 22:01:27 +0000
Files and hashes:         1: dIZPUCPsYmPvnxb5AYf18oBh0RU.crl (hash: 9B0DdCWY4EbwIrstlDMDCD+LtukPGJfnrLcgy8dC+Zc=)
                          2: vj_VJ7c4UiwkU_5yyGsly7O6qIk.roa (hash: RoD9r1uYXNwcvEQVZCci6nqFAbGm9X9wv8JUg9I5naM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 22:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cd:28:b9:83:d7:e5:87:b9:3e:35:b9:d4:5d:94:00:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74864f5023ec6263ef9f16f90187f5f28061d115
        Validity
            Not Before: Jul  2 22:01:27 2025 GMT
            Not After : Jul  3 22:01:27 2025 GMT
        Subject: CN=39593a7c8a77932769c8b801878d8a20e7fc5b9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:67:96:3c:15:34:bc:4a:4c:ad:4b:db:7d:cc:
                    2a:9e:9c:a4:6e:31:44:2b:a2:cc:34:1a:31:74:29:
                    a2:44:1d:3d:13:0a:a5:e8:03:df:4b:bd:04:95:0c:
                    6f:58:7e:14:3e:f4:1f:9c:5b:96:58:2a:e6:50:c2:
                    04:51:0d:d0:d4:ee:26:a5:20:50:86:04:a5:aa:87:
                    0d:6c:dc:43:16:7b:27:21:6e:0c:de:90:8d:b3:88:
                    b5:11:b5:75:9f:96:78:38:16:08:48:00:ce:c9:c6:
                    67:c8:49:e9:08:75:8b:81:85:f2:24:97:a2:ac:e1:
                    7f:1d:57:9e:b6:7c:0e:25:7d:5a:97:37:e9:1c:d8:
                    aa:1b:55:83:88:4b:4e:a2:c4:41:56:79:9d:6b:9d:
                    4c:fe:1b:07:ef:11:af:0d:55:dd:50:50:7c:00:ef:
                    07:aa:95:e8:f2:97:13:79:41:87:2f:e6:b6:b5:91:
                    96:a7:41:b7:b1:62:77:ef:39:ce:fb:86:46:cb:c9:
                    ce:ce:f3:a2:ec:33:82:c1:23:e6:6a:f9:f6:f6:76:
                    ab:b2:73:25:1c:29:32:cf:7b:a4:4d:e8:09:b7:2e:
                    4b:4a:fc:e3:c0:7a:3e:7e:e6:47:a3:5e:cf:28:bf:
                    53:41:49:f6:45:17:c6:20:ea:a1:b6:c2:fa:a8:29:
                    18:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:59:3A:7C:8A:77:93:27:69:C8:B8:01:87:8D:8A:20:E7:FC:5B:9E
            X509v3 Authority Key Identifier:
                keyid:74:86:4F:50:23:EC:62:63:EF:9F:16:F9:01:87:F5:F2:80:61:D1:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:9c:22:79:aa:20:fd:12:a2:42:6c:06:ce:54:50:8f:a8:10:
         29:77:70:c1:c4:d0:3c:87:41:f9:0e:68:29:35:bd:ee:92:d1:
         a0:57:6f:f8:be:57:bf:c5:35:ea:b9:f6:d5:59:78:ae:30:62:
         29:c7:52:36:31:14:79:4c:94:f9:b8:92:bc:cd:99:c6:98:e7:
         72:2b:00:e8:81:11:24:b8:ec:71:d6:98:e7:41:72:d5:57:da:
         83:50:6a:4c:36:1b:c1:07:a2:f6:0f:2d:71:58:ab:39:ab:60:
         6f:e4:8d:14:f1:c4:a8:20:34:0b:ab:44:88:b2:ce:73:22:8e:
         c8:d2:c0:36:e0:40:53:f3:1f:c5:ee:99:b4:9b:e8:b0:f7:e7:
         09:c9:36:71:7a:be:f1:86:63:20:d3:c3:c8:99:95:38:57:73:
         86:f1:bb:bf:a9:31:6f:72:e4:87:a6:fc:01:68:15:4d:58:26:
         0a:a3:4a:a0:bf:63:9f:e3:7c:18:52:5e:30:23:ab:9f:98:6c:
         75:8e:41:80:00:d6:91:32:6c:fb:f3:67:ef:30:f7:64:77:bc:
         b3:b4:10:70:32:77:f5:1e:9d:72:21:0f:79:2e:3a:9d:12:49:
         67:3d:b6:fa:da:4a:e0:4f:80:b6:5c:f8:d4:61:35:31:36:41:
         0f:b9:f3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:57:19 2025 by rpki-client