Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
File:                     g60oliGDPa6G_dpi5LmwningeKA.mft (raw, json)
Hash identifier:          ZwDYTFhSr0FHB1bH+D6//hqhmV4RB1gPnwHSU0bcr8Q=
Subject key identifier:   EE:69:30:E5:1D:50:B5:21:9C:87:55:BB:BC:95:56:8C:F5:5B:E0:A0
Authority key identifier: 83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0
Certificate issuer:       /CN=83ad289621833dae86fdda62e4b9b09e29e078a0
Certificate serial:       0198D6CDBFC08098C9FDD5A0832464041560
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
Manifest number:          0F63
Signing time:             Sat 23 Aug 2025 12:01:04 +0000
Manifest this update:     Sat 23 Aug 2025 12:01:04 +0000
Manifest next update:     Sun 24 Aug 2025 12:01:04 +0000
Files and hashes:         1: WFi05y69wJK8xYZ7djgxRMe4JdI.roa (hash: 38NfaEez2rHkQbLDVIDAczBWslMXi/gwh/We3R8xbaw=)
                          2: g60oliGDPa6G_dpi5LmwningeKA.crl (hash: p+EXVPAWxjXlmgVYQ4QdOYJ1FlLtaUQvFVd7bzPRgVI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:bf:c0:80:98:c9:fd:d5:a0:83:24:64:04:15:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83ad289621833dae86fdda62e4b9b09e29e078a0
        Validity
            Not Before: Aug 23 12:01:04 2025 GMT
            Not After : Aug 24 12:01:04 2025 GMT
        Subject: CN=ee6930e51d50b5219c8755bbbc95568cf55be0a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1d:0c:59:25:66:ec:42:04:65:08:11:48:ff:
                    26:4d:60:7a:9f:a6:b8:c1:ad:26:52:e8:92:94:85:
                    6f:86:20:11:9c:76:a9:61:ce:f1:90:d9:83:ce:d0:
                    80:99:aa:08:33:83:39:bd:ac:e8:8a:15:f7:0c:6f:
                    35:f8:c9:04:2f:6f:44:8c:1b:7b:83:6e:e8:de:85:
                    01:ff:47:dc:bb:96:2a:60:3a:68:c3:e4:57:cb:87:
                    44:0a:c4:39:31:48:6b:82:e1:db:fb:5e:12:cf:ae:
                    d4:2d:a4:3c:3d:54:50:28:56:d8:2e:61:f0:61:5e:
                    1c:ab:70:48:ff:30:34:e0:77:7f:e2:b9:14:c3:1e:
                    c8:da:e8:12:60:58:a0:43:82:82:29:bb:5c:d1:1d:
                    b0:e1:c1:45:05:3a:f8:e5:d9:b6:79:37:39:40:d4:
                    0f:60:46:57:7c:e3:37:77:e0:b2:92:11:18:a0:5b:
                    fb:ba:ff:69:2a:0b:13:23:22:2c:82:26:de:ed:c6:
                    64:47:4c:41:de:f9:9e:bd:00:cb:cc:e8:0b:74:19:
                    61:78:c3:c4:50:3a:15:6b:cd:0d:f9:17:b1:a6:3f:
                    d9:e3:63:71:fa:05:58:57:fc:06:4a:ef:0b:03:19:
                    02:02:7f:ca:3f:7f:9d:7b:df:23:33:db:33:af:44:
                    0d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:69:30:E5:1D:50:B5:21:9C:87:55:BB:BC:95:56:8C:F5:5B:E0:A0
            X509v3 Authority Key Identifier:
                keyid:83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:ac:d7:59:94:da:28:c6:2a:25:38:60:94:1c:00:a1:7c:20:
         59:76:54:93:dc:13:b8:c6:4b:c3:5e:6d:c6:3d:88:c0:2d:98:
         40:5d:bd:b1:40:d8:b4:0d:98:71:46:04:bf:f3:cf:03:b9:87:
         ce:48:97:e2:2d:19:70:aa:54:87:ee:b1:a3:29:bb:7f:74:c5:
         f9:bf:37:95:9a:d6:cb:f5:37:b0:64:31:10:97:79:98:df:cb:
         30:ce:52:79:cd:27:8c:4c:b2:31:c7:13:53:8b:77:a7:ad:18:
         30:32:b5:58:6c:62:78:2c:42:43:9d:88:46:94:84:3b:9f:06:
         b5:51:59:73:28:13:50:8a:6f:34:05:af:f1:45:27:05:4c:97:
         0c:5c:1b:80:ee:df:e8:e6:63:6f:9b:23:b6:20:46:1b:82:c5:
         c7:1f:3a:3d:71:fe:10:9e:21:70:53:a1:59:8c:7d:66:cc:f1:
         bc:1a:d3:cb:78:ac:67:83:11:e9:33:43:49:69:7e:04:e2:87:
         3d:5b:de:b8:e9:2a:52:68:bd:94:8b:e0:49:fd:2e:b3:b2:6d:
         34:3f:ff:21:2a:92:18:a5:90:bf:bb:70:3d:3a:ad:aa:75:80:
         8b:e1:3f:47:29:ea:0b:18:39:61:06:6e:65:05:3e:3b:c2:5e:
         9a:2c:a9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:06:09 2025 by rpki-client