Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
File:                     IDHrupQ_rRxUh1QOAQXhnCMs95w.mft (raw, json)
Hash identifier:          z0YR0sCFuM269gE2Ve0kq6vqFdhKRJfB8b2taU9VYvA=
Subject key identifier:   DE:EB:9A:A4:16:7C:47:CF:A6:27:7A:48:42:5D:F8:DE:1E:C1:6F:C8
Authority key identifier: 20:31:EB:BA:94:3F:AD:1C:54:87:54:0E:01:05:E1:9C:23:2C:F7:9C
Certificate issuer:       /CN=2031ebba943fad1c5487540e0105e19c232cf79c
Certificate serial:       0197B96AAEC6F4592C7F29E6D314BF357BF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
Manifest number:          0774
Signing time:             Sun 29 Jun 2025 02:01:05 +0000
Manifest this update:     Sun 29 Jun 2025 02:01:05 +0000
Manifest next update:     Mon 30 Jun 2025 02:01:05 +0000
Files and hashes:         1: IDHrupQ_rRxUh1QOAQXhnCMs95w.crl (hash: ZeSlkp0wvEto50JlKzQTaT+OVo8ptg7Dtums91YyQI4=)
                          2: tKV7ZxqGnJTtEa2_ye8Y1d8JNh0.roa (hash: 8oiml4GgGUwThCKHUcnZfuIG0l8a7ZiiCuW4RZzZ3cA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:6a:ae:c6:f4:59:2c:7f:29:e6:d3:14:bf:35:7b:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2031ebba943fad1c5487540e0105e19c232cf79c
        Validity
            Not Before: Jun 29 02:01:05 2025 GMT
            Not After : Jun 30 02:01:05 2025 GMT
        Subject: CN=deeb9aa4167c47cfa6277a48425df8de1ec16fc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:14:c6:97:1b:81:da:3d:01:ee:dc:ea:60:19:
                    fd:f3:f3:f0:4a:39:f7:f4:2d:2c:2f:9d:dc:e4:e2:
                    72:41:c9:b1:43:fe:41:43:71:8d:1b:5d:b3:ca:d3:
                    a8:f4:51:9c:6a:4b:07:58:7a:ea:aa:d6:ac:65:98:
                    8d:da:9f:9a:8e:10:37:34:77:3d:64:c1:d5:d0:53:
                    fe:93:c4:87:85:9a:0a:12:55:29:9c:20:64:7c:f2:
                    11:54:64:97:60:68:3e:2f:56:d4:ba:e0:60:24:2a:
                    d5:0c:45:c6:54:c1:fc:93:47:ea:0a:74:d6:81:03:
                    4a:fc:83:ca:42:da:63:de:ff:46:cf:f3:87:b2:c3:
                    7f:6c:7d:17:aa:12:78:b8:d3:6c:c9:cf:14:77:18:
                    a2:14:38:ec:ba:89:4f:dd:55:f1:41:ce:25:9a:20:
                    8a:a6:95:4f:3e:99:a6:c1:ba:34:f1:2c:8c:b4:b6:
                    66:70:64:a7:34:cd:ba:4d:db:84:f1:4a:80:2e:37:
                    fa:68:bb:a8:8c:6c:2b:ca:2c:4b:05:6f:b7:5d:90:
                    5c:92:3b:89:62:7b:32:c8:d8:5b:c2:35:e1:47:34:
                    0e:1f:c9:3c:74:35:f8:c7:c8:4a:78:b0:40:f8:83:
                    db:d7:cb:ff:56:4c:6b:0f:60:ee:92:ff:d6:c8:4e:
                    02:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:EB:9A:A4:16:7C:47:CF:A6:27:7A:48:42:5D:F8:DE:1E:C1:6F:C8
            X509v3 Authority Key Identifier:
                keyid:20:31:EB:BA:94:3F:AD:1C:54:87:54:0E:01:05:E1:9C:23:2C:F7:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:bb:06:a4:27:24:a2:4f:d0:03:7a:4c:dc:94:89:9d:72:0c:
         70:ba:5f:24:b0:5f:b7:e0:ba:d2:f4:c9:21:22:62:1a:fc:a3:
         2f:0a:5a:4a:a1:37:2e:93:37:d4:72:01:c5:38:fb:2e:72:15:
         01:53:15:30:a8:b9:a7:79:f9:7e:1e:ad:44:30:27:2d:31:5b:
         4a:36:44:68:54:a5:b7:56:64:b8:eb:32:28:7a:b9:c3:8c:54:
         6b:fc:62:d0:1c:a6:c4:74:e9:52:04:af:33:a1:bb:20:b6:40:
         b7:c2:0c:37:56:c1:07:f0:87:6f:4e:c1:15:18:c8:eb:5f:ae:
         c8:c1:ce:59:bf:55:e5:c1:08:09:24:32:08:69:eb:aa:07:03:
         5b:09:2c:34:a3:1f:9b:4a:a8:61:cb:dc:5a:04:24:6b:73:6e:
         4b:ca:49:bd:81:cf:83:39:86:e3:d6:94:78:d3:5f:a3:5e:4c:
         1c:5f:b9:99:6e:db:d8:a8:7a:72:66:67:9e:2f:5e:30:ce:99:
         5c:42:bf:9d:22:5e:f6:82:55:a9:bf:d0:9a:35:32:3a:39:d6:
         5a:01:a3:9c:be:71:b6:97:fc:04:3d:33:d7:9c:77:2a:98:03:
         e0:67:0d:3e:da:66:6b:a6:ad:2a:2d:d1:73:10:2d:a4:b3:58:
         b6:a8:8a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:38:49 2025 by rpki-client