Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.mft
File:                     dXkMfs8k0ovi4T_gaRGM7ifVgAI.mft (raw, json)
Hash identifier:          mhqgTCsyqj5eGBRbh3F0IakLI/FJq/GH4t2Dp8ZyuIQ=
Subject key identifier:   6C:88:81:9D:AD:FF:D1:30:4A:57:F4:6A:8B:10:44:C3:A2:7A:02:AD
Authority key identifier: 75:79:0C:7E:CF:24:D2:8B:E2:E1:3F:E0:69:11:8C:EE:27:D5:80:02
Certificate issuer:       /CN=75790c7ecf24d28be2e13fe069118cee27d58002
Certificate serial:       0197B74575BD21768CBC70D6651F0A1DEF4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.mft
Manifest number:          15D0
Signing time:             Sat 28 Jun 2025 16:01:12 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:12 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:12 +0000
Files and hashes:         1: 71ShF1BCLjj0zaSeXk0AMT8blX8.roa (hash: e2hez6w1xM1fmLGyeGjPMPTWmBAzD8pwvbWMd9Ngygs=)
                          2: OP-qluzkX5DpP--tqOyTqe3xHcQ.roa (hash: jbnp8pZaghnbGo5f+Z7LlRrvT6qH4dxP9RPLOACmte4=)
                          3: dXkMfs8k0ovi4T_gaRGM7ifVgAI.crl (hash: QLlltGNzJEL1B+1k2so+d1RGSXr9+m4N+/2WAuVd1gs=)
                          4: kPZEIQD00f54ZqT4l8jT3U6aQnM.roa (hash: +0mivRqNtYBY/xMUeXXOLBAXk2BX+gr2q/xuFmdEA2w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:75:bd:21:76:8c:bc:70:d6:65:1f:0a:1d:ef:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75790c7ecf24d28be2e13fe069118cee27d58002
        Validity
            Not Before: Jun 28 16:01:12 2025 GMT
            Not After : Jun 29 16:01:12 2025 GMT
        Subject: CN=6c88819dadffd1304a57f46a8b1044c3a27a02ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6d:aa:dc:ad:16:57:08:00:ad:9e:8d:7b:db:
                    fa:0e:43:07:1b:b9:94:c0:1f:af:ec:71:fd:c7:1d:
                    69:3d:82:a7:db:e8:dc:cf:1b:c7:35:86:f4:58:da:
                    9b:19:53:7a:f6:fe:e6:ca:16:b5:28:c5:54:1e:25:
                    e7:4b:0e:eb:ab:36:57:91:5d:74:44:d9:0f:41:39:
                    24:fc:30:3d:39:df:87:85:5c:05:6d:ee:9c:df:96:
                    9b:f5:3a:5d:fa:79:ed:17:d4:a5:77:19:f9:fa:f6:
                    71:d5:7c:da:8a:e6:02:86:68:7c:f7:fd:33:0e:ca:
                    64:84:f1:ba:fe:90:db:52:40:87:40:40:89:f5:a7:
                    f7:2e:0f:e1:03:f5:5a:73:01:8f:e5:c1:71:fc:76:
                    68:e2:8a:5d:17:a4:1a:cd:ca:ce:49:d0:3e:91:ef:
                    2d:05:c0:fb:1b:b7:c3:bd:70:c5:ca:a5:56:ec:a0:
                    01:25:14:cc:db:ef:16:ca:9b:f3:cd:d8:29:6d:af:
                    aa:35:01:27:07:9a:4c:d2:c6:d1:ff:d9:f5:d6:71:
                    0b:03:dc:26:81:03:d4:12:7d:18:85:11:c6:3e:92:
                    0f:9f:39:b2:3b:52:41:4e:a5:ea:cb:e5:e7:fd:00:
                    d4:18:1a:ec:49:76:4e:8b:63:4c:64:cf:6f:31:10:
                    0c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:88:81:9D:AD:FF:D1:30:4A:57:F4:6A:8B:10:44:C3:A2:7A:02:AD
            X509v3 Authority Key Identifier:
                keyid:75:79:0C:7E:CF:24:D2:8B:E2:E1:3F:E0:69:11:8C:EE:27:D5:80:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:37:13:68:24:21:30:52:8b:8c:80:2a:7a:73:a9:aa:0f:bc:
         c1:a2:8b:c5:9c:13:e2:6a:cb:d0:93:8b:0f:83:f7:43:84:3d:
         c6:90:63:10:70:90:27:5f:f6:a4:7c:ba:48:eb:a3:2f:5a:ae:
         89:2b:a1:68:ce:d5:eb:04:ec:1f:7a:42:77:d3:96:47:8d:ea:
         97:ef:da:fb:91:49:fa:72:94:ec:51:06:04:96:76:34:54:c8:
         11:c6:94:64:de:c0:e9:8b:f5:56:f1:b4:03:d9:b9:c1:60:98:
         ba:de:4b:f6:4e:83:06:74:7e:69:53:47:91:22:e8:8a:1d:1f:
         d8:e2:ea:ad:a6:64:76:cf:dd:7c:1b:fd:3a:6b:97:4e:cb:95:
         99:8b:9f:76:97:6b:76:43:47:7f:73:b7:9a:bd:67:65:3e:df:
         17:32:f3:32:a4:f3:af:e2:91:43:a6:a1:9a:7b:cc:06:fe:eb:
         1f:76:ad:9f:23:90:7a:c1:be:72:d9:a7:7c:6f:74:72:55:72:
         0c:05:08:4f:3d:1d:d6:e7:65:74:7a:0e:6c:27:d0:73:77:6e:
         a1:1d:0c:6a:5f:16:de:4f:7f:56:ec:30:61:54:00:eb:ea:21:
         ed:73:b2:d7:4e:83:e4:f3:2d:00:68:b2:37:a1:33:62:07:79:
         50:cf:7b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:31:07 2025 by rpki-client