Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
File:                     95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft (raw, json)
Hash identifier:          cj6ZQj9YULnYLAI1bcn2YZSno5jPhv3nsw9SwqYOy+E=
Subject key identifier:   49:E4:7A:37:C7:4D:EB:35:4B:37:1A:26:78:82:7C:91:53:5D:1B:E9
Authority key identifier: F7:9C:7C:1A:1B:AE:D3:26:0D:95:0D:4C:FC:E9:A8:97:CC:97:FA:30
Certificate issuer:       /CN=f79c7c1a1baed3260d950d4cfce9a897cc97fa30
Certificate serial:       0197B6D75DD37285C39030EE74EED504110E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
Manifest number:          0760
Signing time:             Sat 28 Jun 2025 14:00:56 +0000
Manifest this update:     Sat 28 Jun 2025 14:00:56 +0000
Manifest next update:     Sun 29 Jun 2025 14:00:56 +0000
Files and hashes:         1: 95x8Ghuu0yYNlQ1M_Omol8yX-jA.crl (hash: bYtl9kmKTNvS8ICuHELtiQubpNP1ubWpGv5bntziak4=)
                          2: Mqsj_mYBdYcPJ5l_74z5bHNTr1k.roa (hash: +l1/GGdu0QqetRbkoCyavDfKTfdB+pfAVXCWByI+XBM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:5d:d3:72:85:c3:90:30:ee:74:ee:d5:04:11:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f79c7c1a1baed3260d950d4cfce9a897cc97fa30
        Validity
            Not Before: Jun 28 14:00:56 2025 GMT
            Not After : Jun 29 14:00:56 2025 GMT
        Subject: CN=49e47a37c74deb354b371a2678827c91535d1be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fc:e0:4b:34:83:61:d9:9d:93:c5:ab:13:fa:
                    c9:d2:9b:1d:7a:bc:dc:75:ab:27:45:7d:52:3b:4e:
                    8d:7d:c6:d3:7c:58:97:95:52:02:61:4d:d3:b4:ff:
                    00:6d:4d:a6:7d:48:a8:5c:4c:f3:e8:1a:a1:6d:62:
                    41:43:3a:a8:29:06:fa:4c:8d:20:76:d7:0a:84:9d:
                    b5:a9:fa:cb:c9:49:b5:0d:05:b4:43:68:33:da:cb:
                    63:d9:ef:2e:51:5e:9b:64:c5:ab:b2:c4:92:77:1b:
                    5e:b6:c1:0f:b5:64:c3:79:b9:af:22:4e:30:80:fa:
                    28:ff:d9:71:a6:53:bf:f0:13:4a:74:d3:b0:81:03:
                    f7:37:c6:02:74:29:be:1a:0a:c5:7e:2a:91:d4:aa:
                    a3:24:fe:35:2d:ee:7f:26:6f:aa:10:4f:6f:2f:0b:
                    fa:3f:eb:bd:00:85:8e:1c:72:a5:ea:be:bc:72:7c:
                    36:2d:52:dd:08:00:55:6a:4d:68:74:9e:57:75:3e:
                    ce:c1:ab:7c:1b:a4:d9:03:46:68:51:63:fe:1b:d1:
                    9e:b5:38:39:61:cb:29:ef:a8:a7:0e:ff:7c:7a:3b:
                    22:26:29:9b:18:29:60:e8:75:9e:e4:57:3f:f1:b3:
                    68:7f:4f:ca:be:f6:eb:1e:7f:a5:47:8e:77:a3:19:
                    93:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E4:7A:37:C7:4D:EB:35:4B:37:1A:26:78:82:7C:91:53:5D:1B:E9
            X509v3 Authority Key Identifier:
                keyid:F7:9C:7C:1A:1B:AE:D3:26:0D:95:0D:4C:FC:E9:A8:97:CC:97:FA:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:77:67:34:bb:71:3e:8f:6b:84:aa:1a:e2:c5:03:f4:36:ed:
         65:b2:31:46:42:78:dc:6a:fc:50:23:12:9b:99:95:bd:7d:fe:
         dd:4c:41:ca:49:ac:de:c5:77:4c:3a:1e:7d:f1:69:7d:56:d9:
         a2:89:8d:9d:9c:58:6c:21:b2:92:73:07:55:f9:da:94:0a:f9:
         d7:8f:d0:df:9b:fd:ac:8f:6f:32:0f:2a:f9:4a:34:1a:c0:12:
         4d:3c:ba:43:dd:c7:1b:6d:06:0d:35:23:91:91:76:cc:f0:ce:
         8c:ba:9f:69:a9:a3:76:08:10:fa:ca:70:26:fd:57:19:0a:f7:
         23:6e:62:9c:09:61:50:88:82:a8:14:f5:8d:97:4d:05:6c:65:
         6c:84:1f:3f:6e:da:0e:d7:04:7f:7a:a2:bf:8c:90:80:77:b5:
         16:ff:49:6d:c1:a1:9e:1e:b4:95:e0:04:bc:cd:ef:e5:2f:ef:
         3e:fa:da:98:22:98:0a:cc:43:87:c5:1c:9d:54:08:58:15:43:
         3d:21:1e:2f:91:3b:4e:5e:e1:ae:32:9f:a5:3e:c2:cb:76:47:
         46:85:7b:75:5a:ad:98:f3:cd:db:5d:c8:18:c3:90:ef:f5:62:
         6e:08:82:e0:ef:c4:d2:95:71:f4:99:7d:cc:3d:36:bc:e2:78:
         ff:19:95:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:17:13 2025 by rpki-client