Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
File:                     DIZmK3UsijvnLoVEOU_5JvaPv34.mft (raw, json)
Hash identifier:          dtLNVMCTX8KQ8JPzOgZXzfuzGhAPlp6NnM87bRdhWbs=
Subject key identifier:   0B:8D:DE:04:B2:7A:8D:DD:43:AA:A5:AF:71:E9:17:12:5F:A1:81:3C
Authority key identifier: 0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
Certificate issuer:       /CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Certificate serial:       0197B7457D32914E4A42ABD08F4214A946CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
Manifest number:          1549
Signing time:             Sat 28 Jun 2025 16:01:13 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:13 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:13 +0000
Files and hashes:         1: DIZmK3UsijvnLoVEOU_5JvaPv34.crl (hash: yarlVx1pQ4+pxNpYMB4UHhrARvjbnkM9AWfHQj5k02I=)
                          2: OKYG51ny4JzR_NLTt0NMC5jjs5w.roa (hash: q7wWYvvmDZVEwvT4mSRrL9j7EyJqRlFav3ZfehvFtAs=)
                          3: ZQQ0gAGZL_jGDDuR_dzAPHQgjqs.roa (hash: 1IkjnF/CrXtM+w2XOvbsVxbee7zsKOEnEqn8FcXAMF8=)
                          4: qLpskkGdWMp75uesslOqcJ0MWnE.roa (hash: X4MuNwdwba0DvT/WVM9tY1i1XGTLnQOuEconDao1Nw4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:7d:32:91:4e:4a:42:ab:d0:8f:42:14:a9:46:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
        Validity
            Not Before: Jun 28 16:01:13 2025 GMT
            Not After : Jun 29 16:01:13 2025 GMT
        Subject: CN=0b8dde04b27a8ddd43aaa5af71e917125fa1813c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ca:cd:77:ac:42:30:bf:7f:24:36:40:06:af:
                    a5:b8:ed:eb:e6:b5:36:51:7a:bd:93:b5:e0:d3:a5:
                    6d:36:75:35:e8:b3:63:de:1e:2d:21:70:ed:eb:bc:
                    2d:92:cb:31:36:b4:a3:7b:bc:83:47:dc:67:b9:6b:
                    7c:ac:52:99:99:35:26:ce:3c:74:4e:be:53:47:d8:
                    fe:d1:cc:c4:10:6b:89:b4:7e:8e:7a:2c:3c:4c:89:
                    44:a4:63:5c:3e:56:37:ad:56:89:5c:05:b3:8b:bf:
                    f3:aa:19:5d:10:5d:b5:f3:97:46:92:ca:07:bd:0e:
                    a5:11:a4:b8:46:34:9f:b8:b0:6e:51:6e:24:60:a9:
                    85:b9:34:36:74:ae:90:7e:70:8d:36:fe:91:4f:b7:
                    92:96:26:c4:42:cc:03:d0:19:c1:6f:0e:1e:1d:74:
                    30:a3:86:ec:7c:bd:e3:bb:0b:34:1c:02:98:a2:24:
                    dd:23:af:25:7b:91:9b:74:89:b5:8c:ea:45:ca:ad:
                    4a:f1:00:e4:92:2a:e4:e2:fc:93:7e:45:6a:f9:35:
                    a7:a8:e4:97:c7:b9:17:2d:52:20:e5:44:fb:47:64:
                    3c:2a:fe:f9:94:d5:97:21:89:8e:31:fb:9b:82:f5:
                    c1:c8:df:66:0b:2e:53:51:ef:29:ac:7b:b5:67:d4:
                    4b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8D:DE:04:B2:7A:8D:DD:43:AA:A5:AF:71:E9:17:12:5F:A1:81:3C
            X509v3 Authority Key Identifier:
                keyid:0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:6f:3a:3a:a0:26:a2:60:d8:34:1e:45:2c:44:68:9a:ee:6f:
         c8:a5:3f:d5:25:cb:68:dd:9a:c2:e1:44:57:88:56:6c:97:4b:
         36:9f:9a:99:80:bf:26:9f:41:3c:02:0e:c7:b5:20:5f:cb:e8:
         70:4a:ba:f2:34:67:6d:2d:e3:5c:c3:74:6b:9d:4b:16:a7:12:
         03:f0:ae:db:9b:7b:52:6b:98:88:cb:dd:e8:0e:e3:f9:f8:36:
         8d:b0:75:ca:bb:88:d9:a6:0d:ac:a4:6b:23:c8:cd:25:7e:f1:
         ad:8d:a5:a1:dd:ca:d3:e2:cb:36:82:1f:6c:61:c4:08:5c:c6:
         ca:5d:c4:c6:63:77:9d:5b:9f:1b:ef:5a:aa:b1:4a:c9:bf:a4:
         2a:2c:23:8b:25:09:da:a7:67:b8:c5:c5:68:db:12:4d:fd:5c:
         4e:55:43:32:9e:e4:5d:6f:d7:2d:a2:61:57:0f:6e:a0:bb:fd:
         57:c1:5a:40:86:b7:5a:29:34:8d:78:6e:a9:23:d5:c0:dd:bf:
         0f:eb:e1:75:6d:f7:4c:60:32:5f:e9:b4:d5:8d:51:3e:b7:c6:
         69:cd:65:14:d0:c6:23:93:e4:fa:0e:f2:19:a6:06:72:8d:92:
         b9:a6:96:63:d9:86:76:04:c0:d5:41:a2:f0:09:ff:cf:33:fe:
         50:14:86:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:49:14 2025 by rpki-client