Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft
File:                     rdJhytDf8tm7L4x60Nsm7Vcw090.mft (raw, json)
Hash identifier:          Tk7lk50DkM/vK3JzX0GF9dB+FlvSQEug71lktvGN74c=
Subject key identifier:   C6:AF:63:CC:31:77:97:86:D5:2B:21:22:AB:5B:17:C5:AD:38:8A:5B
Authority key identifier: AD:D2:61:CA:D0:DF:F2:D9:BB:2F:8C:7A:D0:DB:26:ED:57:30:D3:DD
Certificate issuer:       /CN=add261cad0dff2d9bb2f8c7ad0db26ed5730d3dd
Certificate serial:       0196B6D94E25A9314920844EB80DF34D671E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rdJhytDf8tm7L4x60Nsm7Vcw090.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft
Manifest number:          0C02
Signing time:             Fri 09 May 2025 21:00:16 +0000
Manifest this update:     Fri 09 May 2025 21:00:16 +0000
Manifest next update:     Sat 10 May 2025 21:00:16 +0000
Files and hashes:         1: rdJhytDf8tm7L4x60Nsm7Vcw090.crl (hash: 5GjPp3G2oLEa5cZyr+ns/YxHB8qljJDdZ+BQ89HcdXw=)
                          2: tNraF_vYfkVNYT3rk3dbIhzsa14.roa (hash: Cyq1XU96xKn0Vjeuoq5f1b6ik1hGAwtTzIf0Tu199FY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rdJhytDf8tm7L4x60Nsm7Vcw090.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b6:d9:4e:25:a9:31:49:20:84:4e:b8:0d:f3:4d:67:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=add261cad0dff2d9bb2f8c7ad0db26ed5730d3dd
        Validity
            Not Before: May  9 21:00:16 2025 GMT
            Not After : May 10 21:00:16 2025 GMT
        Subject: CN=c6af63cc31779786d52b2122ab5b17c5ad388a5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:03:a4:44:9c:11:cc:e3:3e:be:db:b0:ef:9a:
                    54:30:fb:9a:8d:bc:4f:f6:79:6c:83:2f:22:a5:fd:
                    76:f7:db:23:b5:d8:c3:67:04:2e:f8:62:e3:d7:ed:
                    b6:d4:0b:95:bc:31:56:c4:47:ee:8d:10:a2:c1:4a:
                    74:ac:b8:d6:7d:83:1c:37:c3:32:02:11:0e:e2:28:
                    dd:63:f2:46:f2:aa:12:fb:fd:32:be:5c:f1:2d:44:
                    ac:d2:d3:5c:d3:1a:35:19:a7:22:af:69:0f:27:d1:
                    39:34:a1:26:78:16:a8:70:bd:2d:5a:2e:8a:f5:d5:
                    61:f0:83:64:7e:cc:08:8f:3a:d3:2e:a5:aa:78:cf:
                    71:bc:84:50:22:7a:b4:2e:f3:51:f7:37:8c:d8:5e:
                    f8:2b:03:7b:96:d8:1a:2f:ce:dd:a3:f6:8d:ec:f3:
                    6b:4e:89:e7:96:03:b2:26:e3:07:bc:68:85:76:bd:
                    8a:e5:82:d3:0e:1d:cf:0d:8a:75:4b:e8:e0:2b:8e:
                    a6:72:05:c7:9f:91:fe:d9:63:0f:a1:82:c0:b0:e6:
                    6f:b4:ec:9f:66:9b:9b:48:ee:56:62:31:d5:a3:aa:
                    69:27:72:d3:79:e3:67:a0:0c:a3:59:be:c7:5b:30:
                    00:93:35:d5:b6:7e:e8:5c:b7:4f:dd:c1:d2:4a:12:
                    17:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:AF:63:CC:31:77:97:86:D5:2B:21:22:AB:5B:17:C5:AD:38:8A:5B
            X509v3 Authority Key Identifier:
                keyid:AD:D2:61:CA:D0:DF:F2:D9:BB:2F:8C:7A:D0:DB:26:ED:57:30:D3:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdJhytDf8tm7L4x60Nsm7Vcw090.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:4f:48:01:85:1e:0e:6d:04:6a:72:43:48:74:1b:cf:b7:12:
         3d:46:bf:23:06:07:83:a2:7f:93:0e:33:ed:ac:bd:f3:6b:82:
         cb:a8:81:35:00:37:1c:2e:24:fb:21:82:73:40:3e:5c:91:c6:
         2f:59:7b:ad:e5:5f:89:b5:fc:ba:6a:ad:d3:bc:65:85:97:19:
         50:9a:aa:82:36:28:53:96:68:e7:28:83:65:40:58:22:98:3a:
         2f:fd:04:48:cd:06:cd:11:10:6d:e5:4d:65:c3:19:e8:b0:3c:
         98:ba:1d:50:1e:ee:53:e0:da:a4:76:0b:4c:22:45:ba:8a:f4:
         8f:59:74:0e:15:04:eb:2f:4e:3c:a8:f3:50:2a:90:9b:d2:f3:
         32:b2:ff:11:e9:48:00:b0:6d:b8:36:3e:75:71:08:68:85:26:
         d1:b1:b6:dc:ee:63:dc:2c:2f:a3:8f:ae:48:7e:32:05:f9:1f:
         6e:3f:15:82:25:03:c9:b0:cb:78:21:bc:1a:35:31:f9:3f:97:
         48:08:aa:aa:9a:a1:dd:64:52:2a:f7:8b:00:e4:b7:a7:5e:b9:
         41:38:5f:15:43:56:c0:d8:2d:57:1e:66:7e:9d:c4:06:0d:22:
         e0:56:e2:57:01:10:04:b6:13:eb:57:c2:ad:56:2d:ac:8d:c5:
         02:d9:04:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:34:43 2025 by rpki-client