Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
File:                     ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft (raw, json)
Hash identifier:          iCa+cBpZvBBm6iZz+Ym8919hwl88725+swY0ERznons=
Subject key identifier:   30:97:E7:0D:78:14:0D:D2:47:C2:72:02:2E:A5:A4:78:DB:2E:2C:3C
Authority key identifier: 75:D0:EB:D8:F5:66:E3:FA:B7:E2:35:4B:71:40:60:C6:FA:47:E2:54
Certificate issuer:       /CN=75d0ebd8f566e3fab7e2354b714060c6fa47e254
Certificate serial:       0198D472DBF04EA3CC2BD8340F095102E02D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
Manifest number:          154D
Signing time:             Sat 23 Aug 2025 01:02:33 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:33 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:33 +0000
Files and hashes:         1: dWLI-JznOJ2ROywILKaV2DifrkA.roa (hash: FYPcczPE3YMqGw2fpVs6YnauPQ0hzS+hgfhTmOmRVG8=)
                          2: ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl (hash: v1hdOyUNw8usZSPWpUueI/GH+dXntNHaxAw8ouYJPIA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:db:f0:4e:a3:cc:2b:d8:34:0f:09:51:02:e0:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75d0ebd8f566e3fab7e2354b714060c6fa47e254
        Validity
            Not Before: Aug 23 01:02:33 2025 GMT
            Not After : Aug 24 01:02:33 2025 GMT
        Subject: CN=3097e70d78140dd247c272022ea5a478db2e2c3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:68:64:74:dc:00:0b:90:a5:da:83:c2:63:46:
                    05:a9:74:e0:b3:b7:c1:87:56:69:46:9a:44:2a:18:
                    71:2a:ae:f4:f8:eb:3c:6f:2f:72:d3:6a:92:53:14:
                    a9:c5:e3:60:e3:08:44:c6:ea:91:b4:da:89:db:f8:
                    37:ee:4e:52:81:47:0b:a9:57:7b:4f:42:c7:79:2b:
                    7d:fe:66:6f:f3:53:90:81:e7:ce:4f:a5:58:c4:a4:
                    21:10:b9:bb:6f:04:f8:75:95:56:59:1f:1d:83:cd:
                    83:0d:f6:e2:d5:e0:4a:1b:03:a4:2e:90:6f:ef:01:
                    b2:7a:07:57:a5:f7:05:85:fa:87:aa:aa:a5:4b:68:
                    af:53:f2:90:36:bb:46:c5:10:cd:65:d2:50:ba:fa:
                    94:89:16:b3:f5:53:f4:cc:06:a3:b2:1b:83:f7:4a:
                    4d:72:38:c7:b3:30:84:51:76:93:42:da:a8:83:b8:
                    a7:f6:f8:46:6b:19:5c:9e:34:dc:6b:5b:56:4a:a8:
                    bb:45:24:44:8a:56:93:0b:80:5d:37:46:d1:ed:91:
                    79:43:1c:4d:56:f0:cb:33:94:9d:95:9b:81:34:64:
                    df:10:49:b7:63:e8:96:3a:cb:45:29:4e:db:a4:97:
                    1c:3f:8c:46:11:14:d4:28:17:b3:fb:ac:2a:ae:10:
                    39:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:97:E7:0D:78:14:0D:D2:47:C2:72:02:2E:A5:A4:78:DB:2E:2C:3C
            X509v3 Authority Key Identifier:
                keyid:75:D0:EB:D8:F5:66:E3:FA:B7:E2:35:4B:71:40:60:C6:FA:47:E2:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:5c:9d:d1:cf:33:6f:ba:b9:34:63:9b:46:d6:0d:2a:0a:33:
         49:1d:86:0b:a6:70:d9:f3:1b:79:c4:39:93:6b:20:c8:32:91:
         18:db:f0:54:d3:ee:9f:b3:ff:a2:8a:61:47:0c:ea:02:ee:19:
         d5:02:e5:28:c8:3d:d1:8c:7e:75:03:ba:dc:ac:97:dd:29:a8:
         31:e3:5f:e4:50:04:6c:b5:cf:36:1e:b9:70:79:18:53:a7:3b:
         2c:01:08:e7:3d:5e:e2:ef:22:f0:8d:41:59:fb:e3:25:4b:06:
         06:10:11:7d:9d:54:18:69:db:9c:0b:89:fb:b5:90:25:73:6c:
         cf:7d:52:3e:3e:6a:25:60:f2:71:34:9e:d5:b0:94:af:e8:32:
         f4:19:e6:4b:e6:e9:bd:6e:7a:81:15:98:05:f2:15:b4:ad:08:
         db:c6:1e:f0:ae:42:61:ca:a7:73:22:1f:10:ed:82:52:5c:2f:
         b3:6f:1d:6d:88:09:c2:7c:76:af:80:52:9e:3a:f5:a8:67:08:
         7b:71:c3:34:37:2c:79:d1:a6:58:97:b9:c8:84:3b:23:fd:59:
         67:8d:40:d2:03:51:35:ba:9d:03:b3:30:0d:cc:52:34:d5:d3:
         46:73:69:af:2f:e2:a1:66:84:53:30:67:49:14:de:19:a1:18:
         75:e3:2c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:47 2025 by rpki-client