Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft
File:                     d1XNi-ceKectlpDHzUCHtfJhFvA.mft (raw, json)
Hash identifier:          gS00xqdo6bmbtbUCBmjO69H7JhIcbp0tRNnbHAf5xW8=
Subject key identifier:   C3:51:16:8F:68:CC:86:AE:CC:57:93:B8:65:90:D8:C6:41:CD:60:3E
Authority key identifier: 77:55:CD:8B:E7:1E:29:E7:2D:96:90:C7:CD:40:87:B5:F2:61:16:F0
Certificate issuer:       /CN=7755cd8be71e29e72d9690c7cd4087b5f26116f0
Certificate serial:       0197C6EFD98B424A500C492251DA25120A15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft
Manifest number:          05E4
Signing time:             Tue 01 Jul 2025 17:01:36 +0000
Manifest this update:     Tue 01 Jul 2025 17:01:36 +0000
Manifest next update:     Wed 02 Jul 2025 17:01:36 +0000
Files and hashes:         1: B36LiC0OjqZ3wtH6qzPHL39SDVM.roa (hash: lC3icrS9H534ILHm12EWgHNj+HzhQRDu9zX1M9oOdqc=)
                          2: d1XNi-ceKectlpDHzUCHtfJhFvA.crl (hash: fYxDrTONByEiDPHV/i2drztOAOTXf37zSDcfEV8I5BA=)
                          3: e38yhLWXEVmqzpexT39CAVvzz0Q.roa (hash: BPXva5k8oXj/MP9PbA9GSzPiSKc5f6Z2a5jmXbL4TDQ=)
                          4: orSDHxnHGA47DQXY7GCuv1ViUKY.roa (hash: LnjrGG6bbrDuTNmUNlD7ds05Ph4J1TnAuWMrinaUcFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c6:ef:d9:8b:42:4a:50:0c:49:22:51:da:25:12:0a:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7755cd8be71e29e72d9690c7cd4087b5f26116f0
        Validity
            Not Before: Jul  1 17:01:36 2025 GMT
            Not After : Jul  2 17:01:36 2025 GMT
        Subject: CN=c351168f68cc86aecc5793b86590d8c641cd603e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:02:b4:03:5e:64:c2:58:42:49:c0:93:9f:5d:
                    6c:d8:38:f9:5d:06:1e:5d:d6:cd:df:54:76:64:64:
                    b3:43:1c:5b:91:f8:c9:10:f0:bb:b6:b2:92:c8:f6:
                    f6:57:b9:b3:de:a5:e7:3c:b2:85:b0:7a:c9:e5:b5:
                    b7:9a:34:80:81:7b:3c:99:fc:55:c2:8c:22:fb:72:
                    e6:12:a0:0e:6a:c9:68:8b:5c:48:bb:4d:23:68:d4:
                    8a:60:e0:a1:4a:9b:af:61:72:78:c6:51:64:69:e4:
                    4e:8f:97:91:69:4a:ab:ac:c6:36:ff:f5:77:9e:a6:
                    45:56:a7:dc:1e:c1:2e:c2:a4:18:8e:b1:72:ba:22:
                    fc:97:96:2c:3e:9a:18:54:44:df:21:84:12:76:10:
                    5f:af:b7:b9:46:13:8d:ab:83:2d:79:16:d1:56:6f:
                    9e:2a:4c:16:27:ed:55:00:7e:bd:84:6e:b7:fb:97:
                    55:3a:76:28:66:d0:cc:ff:0c:26:a3:c2:55:37:2c:
                    3c:73:bf:ef:c7:be:61:4a:7f:ef:59:58:69:69:f8:
                    df:2a:31:36:ea:74:5f:bc:a5:09:c3:61:1f:c1:91:
                    5d:09:0b:34:d1:a5:ca:0d:25:da:6a:36:34:4e:e2:
                    03:39:6b:4a:c6:73:01:bf:71:a7:0e:95:cd:02:b8:
                    15:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:51:16:8F:68:CC:86:AE:CC:57:93:B8:65:90:D8:C6:41:CD:60:3E
            X509v3 Authority Key Identifier:
                keyid:77:55:CD:8B:E7:1E:29:E7:2D:96:90:C7:CD:40:87:B5:F2:61:16:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:81:84:61:79:8f:3d:de:7a:2f:5b:ae:f5:77:87:20:fd:a1:
         dc:67:71:8b:23:3a:f0:d9:71:f2:68:4f:4e:f4:6f:66:e8:90:
         e7:11:a5:53:37:0d:86:59:9a:3a:d7:1c:d7:c5:60:3c:0d:90:
         a3:83:72:ea:38:b0:02:50:04:09:54:12:91:c0:ca:59:4a:22:
         fd:33:de:53:f3:21:a7:59:d2:58:d7:fd:c0:99:ca:0d:a9:da:
         7d:c7:ee:fb:a6:98:9c:85:3b:99:a0:f5:a3:47:65:0c:83:62:
         62:0e:1a:1e:fe:9e:94:0d:18:8e:63:e1:74:a6:ee:b4:b3:08:
         ce:e2:08:cf:88:2b:28:8c:1d:60:87:7c:e1:d9:c7:39:4c:95:
         59:f3:7d:97:b7:5d:c5:ad:b8:59:20:38:fb:4b:d8:b8:a9:00:
         c1:07:03:28:cc:bc:13:15:8b:6f:62:e7:99:b7:f6:53:ee:a4:
         e7:aa:d9:db:95:b4:db:c8:1b:82:34:57:7b:5f:d6:5f:27:eb:
         e8:fd:66:88:5e:5d:2c:64:0d:56:c0:0c:aa:26:69:f3:c7:91:
         b6:57:b1:b1:b7:74:af:dd:48:8e:16:d9:42:01:6a:73:dd:54:
         fb:84:06:03:51:ba:6d:c1:7c:d0:6f:6b:78:16:03:16:95:49:
         4e:ec:fe:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:44:33 2025 by rpki-client