Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft
File:                     76vFwTMKPwsDGbsWxENIzRuBnkQ.mft (raw, json)
Hash identifier:          HIH/ysZxNqPGs2c24dgTz9sD/R9mfRkNho2BOa1nePU=
Subject key identifier:   45:83:1E:73:48:4F:C3:55:D9:D1:D9:E9:C3:12:80:00:2C:7B:E3:E7
Authority key identifier: EF:AB:C5:C1:33:0A:3F:0B:03:19:BB:16:C4:43:48:CD:1B:81:9E:44
Certificate issuer:       /CN=efabc5c1330a3f0b0319bb16c44348cd1b819e44
Certificate serial:       0197B6D736CC2C777C167860B44899929F7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/76vFwTMKPwsDGbsWxENIzRuBnkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft
Manifest number:          02A9
Signing time:             Sat 28 Jun 2025 14:00:46 +0000
Manifest this update:     Sat 28 Jun 2025 14:00:46 +0000
Manifest next update:     Sun 29 Jun 2025 14:00:46 +0000
Files and hashes:         1: 76vFwTMKPwsDGbsWxENIzRuBnkQ.crl (hash: k4XiP5784M4/H3Rg/UH52R719JZbvUc/S1pO5uyIQfs=)
                          2: dBK2n6sqJnACc6nNUBD4YcMJy3M.roa (hash: 6/oNoXCw6JLnpiYitp94ZlHhwO6+BX8OUUoI7ijZoek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/76vFwTMKPwsDGbsWxENIzRuBnkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:36:cc:2c:77:7c:16:78:60:b4:48:99:92:9f:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efabc5c1330a3f0b0319bb16c44348cd1b819e44
        Validity
            Not Before: Jun 28 14:00:46 2025 GMT
            Not After : Jun 29 14:00:46 2025 GMT
        Subject: CN=45831e73484fc355d9d1d9e9c31280002c7be3e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ae:7e:48:49:ca:ac:45:42:6f:04:e4:f6:21:
                    a3:ea:86:5b:8a:e7:09:67:bb:62:43:03:22:cf:a4:
                    46:bb:3b:9a:1d:9a:89:cd:5f:54:ef:11:f8:87:9c:
                    db:f2:e2:a5:02:cd:a6:ab:00:2d:d7:b2:93:e2:99:
                    44:9c:76:72:4b:2e:c9:a1:85:cf:44:e0:72:de:f8:
                    d5:29:62:30:a4:c9:94:a8:df:a4:e6:a3:e7:81:2d:
                    c6:9f:22:5d:a2:e2:45:90:cb:87:83:b9:ef:be:6d:
                    a9:5c:cf:c2:9b:2b:70:ef:f1:5b:46:05:70:4a:08:
                    e6:64:29:03:9e:e9:3b:fd:a3:53:c5:37:fd:68:5c:
                    2f:d3:1e:90:08:fa:43:73:e8:5b:9b:8b:c6:5e:48:
                    26:dd:9f:23:fc:56:93:24:d6:c9:73:16:48:ba:f4:
                    93:b2:f0:d2:0a:d1:cf:46:92:58:31:14:cf:3f:c2:
                    f0:9b:89:d7:77:14:f2:49:c7:c3:e0:67:2e:71:78:
                    60:32:77:22:af:5f:9e:b5:bf:66:a7:bb:c0:74:52:
                    62:dd:47:c5:fa:fa:e4:cd:c6:1f:61:4b:c5:8e:ea:
                    87:0d:77:35:5c:46:04:44:63:c6:c4:7e:39:00:1d:
                    f6:7e:50:ee:a3:e4:27:ce:1b:ef:24:a1:2d:a6:a5:
                    bb:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:83:1E:73:48:4F:C3:55:D9:D1:D9:E9:C3:12:80:00:2C:7B:E3:E7
            X509v3 Authority Key Identifier:
                keyid:EF:AB:C5:C1:33:0A:3F:0B:03:19:BB:16:C4:43:48:CD:1B:81:9E:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76vFwTMKPwsDGbsWxENIzRuBnkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:f1:60:40:a2:90:59:95:30:37:81:51:71:7c:07:2c:e1:3e:
         12:c5:42:52:70:a4:ad:07:f0:bb:15:4f:16:e9:4b:72:85:6d:
         8f:e7:d8:68:2c:4e:8e:5a:32:d4:3b:5e:4d:33:f8:2c:38:45:
         94:3a:a3:3c:d3:7f:dd:7a:0e:d6:da:a5:9b:a0:03:71:63:18:
         62:7f:9c:69:fa:55:d6:a0:78:36:20:72:42:d2:96:61:5c:53:
         4f:32:3f:2f:c2:27:40:b1:4b:d5:68:3c:a6:59:25:c2:0a:97:
         2f:bc:90:56:27:03:7c:63:47:1a:78:82:ae:70:54:b7:c2:69:
         d7:bd:56:46:2b:54:93:26:10:43:99:63:a2:88:9c:7e:19:31:
         e8:24:dd:f4:ca:c0:c5:c7:28:5c:e9:c0:55:a3:95:c5:e5:4c:
         f5:04:0a:e8:17:19:ca:cc:8c:68:8b:b1:48:75:9b:24:16:85:
         c1:dc:b5:52:72:f0:23:f0:54:1c:94:2e:bb:5d:fd:c4:94:2c:
         de:93:20:88:a0:59:00:36:1a:46:3c:5c:ad:03:d6:3b:15:71:
         4b:52:c5:17:cb:7c:4b:47:82:25:61:1b:e5:06:c7:2f:cd:72:
         b2:d6:33:55:33:c2:36:18:c2:28:84:d7:5d:c4:0e:58:fb:81:
         d9:20:40:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:38 2025 by rpki-client