Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
File:                     t6nDTT-EPNsDW3wws-hOIkElIsU.mft (raw, json)
Hash identifier:          Eoi2v35ACCueuXLLs/RC+krkQmoDIwqyFfTZ3cQESdA=
Subject key identifier:   55:02:2F:68:98:45:9E:14:46:AB:08:52:15:E0:61:73:1C:CA:D9:8A
Authority key identifier: B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
Certificate issuer:       /CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Certificate serial:       0197D2F3B2DF48610A3B29045B115182B138
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
Manifest number:          0E34
Signing time:             Fri 04 Jul 2025 01:01:15 +0000
Manifest this update:     Fri 04 Jul 2025 01:01:15 +0000
Manifest next update:     Sat 05 Jul 2025 01:01:15 +0000
Files and hashes:         1: StPgXcpmiy5JYaEeTseShVrOOPw.roa (hash: 2TP419yQVLSPbiDET0BATqZqoaVVJJbtbUq/1dj+vY4=)
                          2: t6nDTT-EPNsDW3wws-hOIkElIsU.crl (hash: MiSUNJMYVi+34Qme1Ln09QqI0mUAfxX7cBBV85RGV5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Jul 2025 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:d2:f3:b2:df:48:61:0a:3b:29:04:5b:11:51:82:b1:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
        Validity
            Not Before: Jul  4 01:01:15 2025 GMT
            Not After : Jul  5 01:01:15 2025 GMT
        Subject: CN=55022f6898459e1446ab085215e061731ccad98a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:25:dc:6e:e5:6c:05:d0:5b:34:71:cf:3d:a1:
                    0f:2c:8c:95:ba:05:55:75:9c:fb:55:91:e0:7e:22:
                    a8:c3:d5:6a:65:b0:a6:a6:86:c4:65:85:ff:3a:e3:
                    2c:06:1b:b0:8c:6b:38:87:ce:7c:b9:4e:78:de:a8:
                    07:7d:c9:02:d8:b8:1a:2f:ac:69:ba:a6:5b:cb:51:
                    32:f4:39:31:06:90:66:12:1c:dd:63:80:44:74:c3:
                    c4:b3:c1:f5:f8:1e:9f:60:6a:66:c0:9d:78:a5:0f:
                    7b:0a:a6:d0:7d:10:b7:50:f0:3d:47:0e:ce:11:83:
                    8c:04:79:79:9e:93:f1:db:ed:44:61:8c:0a:ce:21:
                    ba:4c:70:21:7f:61:01:a4:96:96:92:ee:65:b4:9a:
                    df:2c:7f:96:e6:12:ac:1c:6e:a2:03:2d:b7:83:82:
                    cc:8b:0f:b6:cd:f1:13:f0:e0:58:25:7e:1f:7b:ba:
                    b9:09:d0:1b:2b:9a:f8:e6:f5:3e:ef:80:c7:86:a9:
                    fa:33:e7:50:db:09:59:30:6a:34:27:f4:a5:2a:4a:
                    a4:98:3f:5b:32:2f:cf:7b:68:ba:b9:77:22:39:24:
                    b6:af:12:7f:b3:2c:8a:ab:4b:4f:c3:9b:e3:9d:58:
                    1e:75:58:7f:76:c9:ef:8b:58:97:65:d6:36:1f:cc:
                    b6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:02:2F:68:98:45:9E:14:46:AB:08:52:15:E0:61:73:1C:CA:D9:8A
            X509v3 Authority Key Identifier:
                keyid:B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:d1:02:75:43:41:dd:4f:5e:70:de:3d:0e:2a:58:90:25:d8:
         c8:91:c7:e2:89:c8:de:36:0a:34:cc:cb:69:5a:d8:3f:fd:35:
         d3:29:c1:9a:b3:b5:67:eb:54:63:0c:74:21:86:07:7e:4a:54:
         7d:ee:76:1a:05:28:bb:69:d0:d0:cc:28:59:4f:12:8f:5a:4d:
         66:19:59:eb:44:44:81:1b:d9:69:ed:1a:3f:8f:e0:a9:0c:a4:
         be:93:2c:67:93:b3:76:d6:65:92:49:0a:3d:0c:a7:ca:af:b0:
         97:b5:b1:08:e9:02:3d:92:a6:e2:6f:d1:f5:c9:ec:00:30:6f:
         59:72:59:8e:fb:26:3c:46:32:c9:3a:7a:9d:cd:45:28:dd:ac:
         ec:35:65:c3:e6:7f:1b:84:0a:e7:87:49:c1:e4:94:d5:44:3f:
         7e:c7:39:bd:14:73:d9:2c:69:f6:c7:dd:26:a6:5e:c4:13:59:
         8d:0d:ee:ec:e9:92:74:8f:f7:b4:72:22:2d:32:25:e6:e6:d4:
         03:fe:56:8f:ed:5b:c4:df:2c:ba:fb:ec:f7:b2:5f:5c:f7:1b:
         ec:82:56:2f:1c:31:4d:7e:f2:6d:f2:22:86:71:4c:4d:c3:79:
         a4:7b:ec:3b:39:66:1e:0e:b1:84:6d:3f:92:f1:42:e9:15:97:
         0b:77:77:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:54:36 2025 by rpki-client