Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft
File:                     Dw-fBE4rkph410fF_7uArRDj1r0.mft (raw, json)
Hash identifier:          5zhNAEgBRihiwv5LuLNP+zhP2zjhcWwtspBrgdhL6ig=
Subject key identifier:   A4:96:3B:CA:B9:F8:34:38:74:39:EB:A1:3E:E6:46:E3:CD:F6:12:90
Authority key identifier: 0F:0F:9F:04:4E:2B:92:98:78:D7:47:C5:FF:BB:80:AD:10:E3:D6:BD
Certificate issuer:       /CN=0f0f9f044e2b929878d747c5ffbb80ad10e3d6bd
Certificate serial:       0197B7EA16EE7E8B6ECAC8171F221FA41857
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft
Manifest number:          0A4D
Signing time:             Sat 28 Jun 2025 19:01:01 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:01 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:01 +0000
Files and hashes:         1: Dw-fBE4rkph410fF_7uArRDj1r0.crl (hash: 9saC+9RmZs7lRXeSbLvy58JmXDppu3qnhCuSK2FoY2c=)
                          2: tnIMWehV7-s3YFdByca6v2OZEG0.roa (hash: NWfOiZrn7Md8Y/fglpHdXuMUMsLmCrcIFNvYQcevZ/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:16:ee:7e:8b:6e:ca:c8:17:1f:22:1f:a4:18:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f0f9f044e2b929878d747c5ffbb80ad10e3d6bd
        Validity
            Not Before: Jun 28 19:01:01 2025 GMT
            Not After : Jun 29 19:01:01 2025 GMT
        Subject: CN=a4963bcab9f834387439eba13ee646e3cdf61290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ce:63:b8:cb:89:9d:d0:a4:85:ad:22:91:16:
                    83:68:23:24:48:62:0c:30:a0:25:48:92:6b:76:23:
                    c7:00:fa:4f:a4:0e:a5:69:f9:cb:d6:57:e5:63:13:
                    c6:93:6a:32:d8:b0:25:f9:a2:4e:96:e2:7e:2f:7c:
                    ce:2c:3f:19:9c:72:9b:4e:90:c8:12:db:65:e8:28:
                    f2:3a:67:a6:e0:d4:32:83:28:34:49:1e:fb:5f:d3:
                    9a:34:9a:88:93:39:32:b2:38:52:45:bf:53:31:e8:
                    9c:20:df:e6:55:25:a1:f8:f4:69:19:97:58:33:f5:
                    39:3f:0b:42:8f:f1:08:db:e7:da:82:dc:5d:5c:a6:
                    6c:3c:c9:9b:6d:f6:1e:2a:b9:ec:05:15:2c:f0:9b:
                    18:cf:93:0e:04:f7:cd:67:33:99:e3:ab:7a:18:4d:
                    b1:6f:7a:4a:90:b4:56:28:cd:b5:37:9b:ae:6a:55:
                    0e:3a:bf:db:d7:95:3e:a3:79:50:bf:ad:b7:e0:6e:
                    18:71:ba:68:7f:bd:68:4c:6a:86:4a:ce:59:d1:1f:
                    c5:05:45:04:86:40:79:b6:ce:74:d5:69:ba:fb:7a:
                    40:f5:b7:f9:9b:7e:38:ba:7d:60:2f:85:7e:3c:4a:
                    04:e1:63:46:45:0a:70:7b:d6:6c:50:67:b2:b4:85:
                    c0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:96:3B:CA:B9:F8:34:38:74:39:EB:A1:3E:E6:46:E3:CD:F6:12:90
            X509v3 Authority Key Identifier:
                keyid:0F:0F:9F:04:4E:2B:92:98:78:D7:47:C5:FF:BB:80:AD:10:E3:D6:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:da:af:34:4a:2f:38:ea:7b:82:d3:6c:8d:cd:04:50:4c:37:
         1e:67:1c:b4:6d:22:b4:c4:ad:27:60:fd:a9:6e:4a:c0:ac:46:
         b8:72:36:fd:60:15:66:1a:3c:70:05:61:a7:f7:18:6f:67:1f:
         35:2a:d4:6e:76:06:cd:39:72:94:ea:a9:51:94:ee:2b:bd:df:
         46:8b:92:42:06:f6:ba:08:ca:8f:58:22:7e:ea:80:8a:c1:83:
         97:74:78:51:3e:6a:02:cf:bd:15:04:04:23:6d:fb:16:9e:e8:
         11:3a:d5:e8:4a:b2:ff:e9:bd:b3:94:e9:f6:d3:99:a7:16:9c:
         11:ed:01:81:06:3d:39:d6:ef:f6:1e:fc:52:1d:f6:32:c4:2d:
         e9:5e:76:07:08:32:39:80:ed:bb:e8:11:a2:ec:09:fb:17:ad:
         fe:f4:28:17:2c:10:5e:de:2b:02:00:e0:bf:fe:cb:f7:4b:1a:
         4e:03:ed:42:25:4b:93:6b:d6:ec:73:a1:ff:3f:f0:ba:b0:a3:
         e5:22:04:b0:61:fd:59:1e:82:52:81:55:d4:ef:13:9e:b6:6c:
         e8:8f:51:cb:8d:86:75:6f:05:05:ec:96:72:2a:65:fa:b7:db:
         f3:24:40:a1:21:7d:e0:87:4d:04:67:fc:69:4a:94:4d:b8:a6:
         37:c6:0c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:30:02 2025 by rpki-client