Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft
File:                     DoVoAb747TroEOfmejH9AStE0ww.mft (raw, json)
Hash identifier:          Ccj5LqLtIeEqIu4KEswB7ffsD3kybaWw43v8OWqXEfs=
Subject key identifier:   47:24:F2:A1:8D:C1:82:EB:F8:DD:96:77:D7:12:C0:B2:A4:66:30:89
Authority key identifier: 0E:85:68:01:BE:F8:ED:3A:E8:10:E7:E6:7A:31:FD:01:2B:44:D3:0C
Certificate issuer:       /CN=0e856801bef8ed3ae810e7e67a31fd012b44d30c
Certificate serial:       0197B6A13619DCA5328AD033B67520848BA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DoVoAb747TroEOfmejH9AStE0ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft
Manifest number:          1506
Signing time:             Sat 28 Jun 2025 13:01:47 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:47 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:47 +0000
Files and hashes:         1: DoVoAb747TroEOfmejH9AStE0ww.crl (hash: jucaCmvRCfs7fCYQ7ccIZaKrF8CvL3X3r6jF7YI1hNI=)
                          2: zD8lanFfCKcjzXb5ZLkO_uI8Eww.roa (hash: FP/b4ehPHpPPt6ISCHNjh4J5r42QMToe0aZbLviIqX8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DoVoAb747TroEOfmejH9AStE0ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:36:19:dc:a5:32:8a:d0:33:b6:75:20:84:8b:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e856801bef8ed3ae810e7e67a31fd012b44d30c
        Validity
            Not Before: Jun 28 13:01:47 2025 GMT
            Not After : Jun 29 13:01:47 2025 GMT
        Subject: CN=4724f2a18dc182ebf8dd9677d712c0b2a4663089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:5b:63:57:61:e5:9f:b7:64:da:9a:60:07:29:
                    47:e8:08:ff:6c:2f:e9:54:e3:4a:93:8f:16:9b:14:
                    1d:59:02:eb:af:53:91:85:f0:f3:78:99:22:16:c3:
                    70:03:d4:5e:25:11:d4:89:30:ff:fd:af:36:8d:b9:
                    71:66:79:c8:74:75:82:d5:7e:d8:b8:3a:46:95:11:
                    2f:d7:69:c0:95:df:ae:0e:24:95:9e:34:44:1c:bb:
                    08:6a:9b:17:dc:6a:e7:1a:6b:21:1a:65:d4:57:7b:
                    51:9d:f7:87:22:05:85:9a:d9:a7:a4:9c:26:33:36:
                    18:f0:d8:e5:76:a1:7d:38:f0:45:b9:dd:ec:9c:0f:
                    39:bf:92:84:ca:19:e5:32:0c:db:3c:11:bf:04:10:
                    0d:0a:84:18:84:b2:aa:50:d3:47:9b:86:63:ae:6c:
                    fd:29:5c:f9:c2:3a:5f:ce:11:36:da:08:50:54:d0:
                    c8:2d:c6:1d:53:d4:81:ea:9e:e6:08:52:21:a6:dc:
                    1d:1c:f9:9b:ba:a8:07:99:08:4b:66:df:58:60:11:
                    e8:55:4e:90:a6:51:6a:64:93:35:6f:28:cd:af:69:
                    c1:83:e2:1b:1f:34:27:7b:b9:cb:79:48:1b:b6:d3:
                    ed:68:6a:db:ae:ed:62:88:a1:ff:2c:79:80:bc:de:
                    de:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:24:F2:A1:8D:C1:82:EB:F8:DD:96:77:D7:12:C0:B2:A4:66:30:89
            X509v3 Authority Key Identifier:
                keyid:0E:85:68:01:BE:F8:ED:3A:E8:10:E7:E6:7A:31:FD:01:2B:44:D3:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DoVoAb747TroEOfmejH9AStE0ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:4a:e4:50:82:34:58:56:c5:c0:1f:bf:92:ec:df:83:0f:35:
         ec:c1:96:a5:b7:84:22:1e:4a:6a:28:4f:5a:5b:f6:bc:92:d8:
         d0:fa:1b:fa:95:02:c9:c2:92:f3:9c:45:38:9d:5e:f7:fb:45:
         32:d5:5a:35:b9:5c:0f:a6:97:ad:f3:66:3e:5c:fe:b9:4e:4c:
         fc:86:c1:e7:b9:c9:25:de:d7:f3:ee:e3:cd:4f:9e:81:1f:72:
         8b:ee:d1:f2:93:8d:42:b9:2d:20:dd:11:be:41:bc:aa:23:a8:
         68:1c:68:4c:49:86:eb:fe:46:fb:89:0d:cc:9f:3f:ed:af:ff:
         96:81:2e:6c:9f:16:54:8c:47:fe:da:ee:73:6f:82:61:b3:36:
         88:68:ae:c4:42:93:9d:af:ec:b6:cc:b8:ea:99:ef:5c:9f:f6:
         08:f2:fa:fc:92:64:54:0d:80:00:cf:85:4d:1e:6b:3b:ed:97:
         78:54:e4:2d:79:2f:91:ed:63:a6:95:aa:03:53:81:19:f4:91:
         c2:7a:9e:42:f6:c0:b9:de:7b:71:6a:7f:4a:dc:95:f2:21:ae:
         80:22:6e:5b:96:63:44:74:4a:0e:43:51:89:ab:e9:aa:54:f2:
         b7:52:ee:e5:1a:9b:ab:e8:51:8d:e1:78:75:e8:05:61:c6:9f:
         ad:7f:6e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:14 2025 by rpki-client