Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.mft
File:                     RowmemR0_LfMSc8yXQ6dzF_o0g0.mft (raw, json)
Hash identifier:          5Wx7+cVoLOp9+PSwBZgmPr3hxCBdOY+C8J2FrTypRC4=
Subject key identifier:   89:11:97:B1:EC:D8:C6:45:EA:AF:B5:5D:67:A4:CF:C0:8B:DC:59:78
Authority key identifier: 46:8C:26:7A:64:74:FC:B7:CC:49:CF:32:5D:0E:9D:CC:5F:E8:D2:0D
Certificate issuer:       /CN=468c267a6474fcb7cc49cf325d0e9dcc5fe8d20d
Certificate serial:       0197B6A13004B2D878D5CEC8AE755AEB5833
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RowmemR0_LfMSc8yXQ6dzF_o0g0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.mft
Manifest number:          0FDC
Signing time:             Sat 28 Jun 2025 13:01:46 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:46 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:46 +0000
Files and hashes:         1: MZGQkRnrBwu3EiDQXovi1EtOEeQ.roa (hash: emZiRG679KNDGOj4cCA2StKFReSvhFA5nV/8wQXC5Cw=)
                          2: RowmemR0_LfMSc8yXQ6dzF_o0g0.crl (hash: 9E1slKRQSh2idgsA+JH/vJccA4WuZEbRcpBJJ8WENes=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RowmemR0_LfMSc8yXQ6dzF_o0g0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:30:04:b2:d8:78:d5:ce:c8:ae:75:5a:eb:58:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=468c267a6474fcb7cc49cf325d0e9dcc5fe8d20d
        Validity
            Not Before: Jun 28 13:01:46 2025 GMT
            Not After : Jun 29 13:01:46 2025 GMT
        Subject: CN=891197b1ecd8c645eaafb55d67a4cfc08bdc5978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bb:19:88:11:84:39:dc:01:b8:c7:dc:82:67:
                    f8:ff:82:f3:0f:cf:cc:98:1c:47:f1:90:e6:ec:dd:
                    c3:1a:74:61:51:08:f0:4f:9e:cb:4f:59:4e:4d:fe:
                    e6:84:87:1b:f8:c0:5a:57:21:94:a0:87:04:58:84:
                    27:30:60:d2:14:0f:b6:ca:cf:97:51:39:52:eb:79:
                    25:b4:0c:1a:09:25:69:c7:2a:d5:da:9c:5e:e6:8c:
                    e1:6b:5a:ac:54:f1:e5:ba:34:67:b3:ad:b6:ab:12:
                    1e:84:88:96:e9:21:f7:dd:a4:3c:84:a0:2d:ff:57:
                    ec:61:d6:ee:16:a3:64:ab:40:8a:b2:74:54:1e:0c:
                    b4:8f:0c:5a:4f:18:40:af:0e:06:75:7b:fe:61:e6:
                    d9:34:c5:b3:e8:3f:38:37:e2:2c:11:27:d8:02:e4:
                    5f:05:33:51:02:fb:6e:9a:b8:d4:b5:25:bb:58:c2:
                    9f:9b:61:6b:ca:9d:6c:bc:ba:5d:a1:71:09:16:1e:
                    0a:e2:54:3f:b8:ac:5a:ac:b6:a2:07:b6:4e:9f:1c:
                    d2:82:61:36:bb:81:9e:5f:6a:9c:60:d9:56:04:ff:
                    e3:10:e3:95:02:a6:79:9c:48:95:ce:5d:22:ad:5c:
                    94:32:ba:9d:c5:e9:de:35:52:74:5d:b0:54:88:b4:
                    b7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:11:97:B1:EC:D8:C6:45:EA:AF:B5:5D:67:A4:CF:C0:8B:DC:59:78
            X509v3 Authority Key Identifier:
                keyid:46:8C:26:7A:64:74:FC:B7:CC:49:CF:32:5D:0E:9D:CC:5F:E8:D2:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RowmemR0_LfMSc8yXQ6dzF_o0g0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:ed:36:fd:75:bd:50:86:97:01:31:7f:5d:96:3a:b5:4b:86:
         14:ad:2e:c7:29:69:2a:e0:f4:9f:d4:41:1b:ad:a4:de:42:c4:
         04:63:12:f7:03:fd:5a:d6:13:71:4d:29:37:c2:36:38:80:b0:
         37:b7:e6:ce:e6:75:3a:0b:32:f1:a0:05:67:d6:ee:8d:2d:a6:
         a3:f9:7d:7d:27:7c:d3:f0:9d:86:e6:37:cc:33:5e:e8:21:a4:
         19:3c:84:aa:70:bf:04:3b:40:13:83:bd:ba:ec:dc:29:1d:8b:
         43:fa:77:f3:cd:7d:08:29:42:60:10:8f:c1:45:8b:42:2b:cf:
         63:27:e8:af:9a:8e:2a:9a:70:6b:66:93:c1:e1:af:b3:ef:6e:
         eb:d7:89:6a:bf:a3:2d:02:2d:81:0e:af:80:80:9d:0a:55:ba:
         fe:4c:ba:20:b7:9e:4d:03:11:94:97:d7:3e:99:19:6d:15:98:
         fd:37:04:6e:a6:f3:a4:61:f1:9d:c7:89:f1:27:72:45:a8:3f:
         cb:0c:06:26:e1:e7:12:a8:9e:99:8d:c7:a9:5c:f7:85:53:dd:
         e8:a9:a6:b1:66:50:73:7b:4d:03:44:57:9c:31:5a:87:a6:ad:
         e8:28:e8:a6:3c:0c:ae:56:f1:25:cc:67:37:e3:bb:71:be:df:
         20:de:bb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:37:23 2025 by rpki-client