Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
File:                     CWmio5Y1t5dHbx8WM66PJ78ztTM.mft (raw, json)
Hash identifier:          6LmsBzhZGE/tppjc0QVAZX+XD1KFXI6KPsesFjDoXQ8=
Subject key identifier:   FD:CB:4C:B9:85:82:83:D6:FB:22:3B:34:0C:52:0E:2F:0E:49:AB:5B
Authority key identifier: 09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33
Certificate issuer:       /CN=0969a2a39635b797476f1f1633ae8f27bf33b533
Certificate serial:       0197B88F5825F59FB4E1143776122992E675
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
Manifest number:          0712
Signing time:             Sat 28 Jun 2025 22:01:31 +0000
Manifest this update:     Sat 28 Jun 2025 22:01:31 +0000
Manifest next update:     Sun 29 Jun 2025 22:01:31 +0000
Files and hashes:         1: CWmio5Y1t5dHbx8WM66PJ78ztTM.crl (hash: B2XCq7ZA3hNHxMx0jEj9kzsZIUf43iqKESy0SZnTap8=)
                          2: IQXTtVHze1IXoXyJqdh9nwPWeHs.roa (hash: siOcI04XjEZl0t1nX+KyiRbWYR5EN6LmCvslwid92wA=)
                          3: NsSedmTQW8OnTTsqv3X8CBZy-xU.roa (hash: WFkKh3bAC4MDDNtqyFfpo7GUVyreugPfu/r7LcM/fN4=)
                          4: TeB088r0q83Xt0BxDsUFRJ09n_w.roa (hash: G48KXbKrX68pg0VWA7DNE58/xU413WQGSqX5xHVo4rY=)
                          5: eZ1oRKw2ZmvD0_NWa-kdmh2g-eo.roa (hash: 2jAE9EFeYAI0mBmHLdLHHE90HLI9cIG+7iKSbXwklN4=)
                          6: l5LQQJ1hscP11M9PGOZJoYipJjA.roa (hash: 1Qefj38Zjj0ROOLLrKtBW86/Osz3b9lr4tBY77Lptdo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:8f:58:25:f5:9f:b4:e1:14:37:76:12:29:92:e6:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0969a2a39635b797476f1f1633ae8f27bf33b533
        Validity
            Not Before: Jun 28 22:01:31 2025 GMT
            Not After : Jun 29 22:01:31 2025 GMT
        Subject: CN=fdcb4cb9858283d6fb223b340c520e2f0e49ab5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ea:99:f3:13:c1:8c:ed:20:8d:61:76:6d:83:
                    07:68:1c:13:e5:7a:5e:de:f7:f8:7e:26:ae:bb:eb:
                    5b:e0:c9:e0:08:11:01:57:e3:11:68:68:8d:3c:51:
                    78:6e:c9:f4:8b:08:02:4f:66:b6:ab:09:d5:c3:80:
                    ae:fc:b9:0f:9a:d2:72:e7:da:94:81:00:b7:69:c1:
                    52:07:35:aa:ba:46:84:e9:16:9b:16:51:1b:a4:3c:
                    e2:d4:85:27:87:40:5a:07:67:df:49:87:54:4b:13:
                    81:d1:33:79:b6:09:50:99:ee:19:5d:03:ac:4f:a1:
                    af:72:ef:78:e3:08:11:20:eb:4f:e7:91:5b:9c:70:
                    a6:b6:1a:36:9d:9f:a7:6c:b6:82:5b:4a:ed:b7:ec:
                    ff:ce:0a:d3:4f:27:85:ef:85:a7:46:5a:be:fc:b3:
                    f6:f2:66:52:68:06:ed:a8:49:d2:a6:15:1c:45:cf:
                    49:5b:3e:44:24:53:73:af:7d:3d:07:a7:62:d7:bc:
                    b5:43:70:f0:14:68:df:c2:46:f5:37:45:c4:c2:7c:
                    ff:fd:3d:23:52:56:30:2a:4f:f7:1a:b9:f2:4f:bf:
                    96:80:a0:04:f6:d4:06:ec:df:3c:39:6d:a7:24:bc:
                    ae:ca:b5:6c:a7:8f:6d:a2:6f:85:f1:38:32:51:6e:
                    ca:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:CB:4C:B9:85:82:83:D6:FB:22:3B:34:0C:52:0E:2F:0E:49:AB:5B
            X509v3 Authority Key Identifier:
                keyid:09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:0b:9e:82:6b:ae:0a:06:c2:5b:59:93:59:29:d4:da:14:61:
         c8:1c:9a:c2:4e:41:a3:c5:cc:30:1f:1a:03:08:26:4d:6e:e7:
         38:25:f6:b4:cd:1b:d2:6f:b6:fc:7a:9c:47:12:de:7d:dc:6d:
         7e:1b:a2:28:03:91:e4:04:df:53:0f:df:a0:f8:ea:d5:30:0a:
         cb:16:fe:98:bc:db:4b:a1:88:79:9a:01:61:fc:67:52:f8:d7:
         2b:75:b8:36:81:9a:e9:1b:38:97:d5:92:de:38:b2:82:47:e4:
         e8:27:39:1e:8b:b5:45:1d:a0:df:36:07:e3:a0:5b:82:cd:66:
         26:7a:49:14:c4:0c:d2:15:c4:a5:cb:15:71:48:12:e5:47:34:
         73:a7:70:2d:9b:0e:0e:c6:a9:7f:46:99:a2:4d:b1:ad:e3:0b:
         7d:2f:66:8b:4b:d5:42:20:61:20:58:54:21:23:4b:47:d4:59:
         63:b9:3f:45:ca:84:e8:9f:96:0f:31:cb:7d:98:a1:cd:ab:86:
         a5:b2:c6:35:7b:d0:75:44:5b:d1:5d:e7:77:1c:d4:fc:70:d8:
         84:4c:08:63:85:c3:06:1f:40:7f:46:89:b2:bb:7a:c9:e3:ab:
         4b:8e:98:58:d7:0e:6d:31:89:a5:2c:3f:d2:8d:3c:22:84:bf:
         81:15:70:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:32 2025 by rpki-client