Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
File:                     CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft (raw, json)
Hash identifier:          97i68aUKIS2s5PZNoe7w5GWFEImeOB85bpLKVaeC/ec=
Subject key identifier:   AC:F3:09:CD:47:26:CA:E4:38:DD:15:41:FC:3F:88:E4:FE:A8:B5:16
Authority key identifier: 0B:0A:94:0C:FD:2E:EF:E8:2F:57:0F:AF:C4:FD:C5:BD:07:94:1A:06
Certificate issuer:       /CN=0b0a940cfd2eefe82f570fafc4fdc5bd07941a06
Certificate serial:       0197B745856C1A03CFD82A5389235A3A825F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
Manifest number:          0842
Signing time:             Sat 28 Jun 2025 16:01:15 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:15 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:15 +0000
Files and hashes:         1: CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl (hash: v5ZkIniuvI1YfNBh38EQhWarBMA6ai4CMUKPW6SaEVw=)
                          2: Lh4J1VP02-oTK-HxM-W2DuWref8.roa (hash: W28vw4gwp9YROhgcttiVHyEse6JN5PCY1Q1d5LlTtlY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:85:6c:1a:03:cf:d8:2a:53:89:23:5a:3a:82:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b0a940cfd2eefe82f570fafc4fdc5bd07941a06
        Validity
            Not Before: Jun 28 16:01:15 2025 GMT
            Not After : Jun 29 16:01:15 2025 GMT
        Subject: CN=acf309cd4726cae438dd1541fc3f88e4fea8b516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1b:d6:2d:99:46:1a:68:9d:b6:fd:ce:fc:5c:
                    0a:17:00:1b:49:3f:02:fa:5e:1f:7b:44:ee:19:20:
                    63:85:cd:c3:24:c3:db:b9:a9:fc:8e:a8:24:80:df:
                    ca:de:fe:44:e7:e1:eb:41:0d:49:cb:e1:49:1e:9f:
                    b5:5b:65:0a:1a:4d:f7:24:a5:ea:89:4c:92:f4:85:
                    ed:4a:ad:e8:4b:a8:c4:11:a9:f2:c8:99:c0:68:0d:
                    5e:99:7e:4a:9d:6e:99:b1:bd:4c:5e:a2:fe:9f:eb:
                    57:9e:70:3b:fd:2e:11:9c:c4:13:62:e3:05:1b:78:
                    60:8c:08:8d:69:68:86:d9:77:15:69:03:c7:c3:93:
                    69:7b:83:75:03:f5:3c:c5:28:92:82:29:8f:2d:3b:
                    7d:47:ed:13:84:81:9e:fb:73:7a:94:22:d8:63:6b:
                    ef:93:77:22:6d:f8:59:c6:70:95:88:7d:7e:73:2a:
                    3d:14:b5:a8:29:6a:e8:d3:97:1e:ab:0a:74:24:28:
                    de:27:48:12:20:c8:b6:89:00:61:b7:df:4d:6f:4c:
                    be:15:48:b4:6e:0c:0a:59:dd:f5:f2:b1:53:23:bd:
                    cc:dc:0d:ce:3f:d4:fe:5f:bf:43:f1:20:f6:6a:f7:
                    88:3e:5f:4e:25:1d:3a:f2:cd:8b:f6:17:97:80:1d:
                    11:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F3:09:CD:47:26:CA:E4:38:DD:15:41:FC:3F:88:E4:FE:A8:B5:16
            X509v3 Authority Key Identifier:
                keyid:0B:0A:94:0C:FD:2E:EF:E8:2F:57:0F:AF:C4:FD:C5:BD:07:94:1A:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:2d:30:e9:11:ee:9c:82:9c:4d:c3:3b:6c:c8:30:c1:05:42:
         b3:f1:3a:65:59:e9:bd:51:0d:68:52:dd:a8:05:6b:66:ee:6a:
         28:d8:d5:b8:e2:ca:66:ad:16:85:11:14:b4:4d:64:b2:82:ef:
         70:07:43:46:28:9e:06:4d:d4:ed:e7:82:cb:70:ff:5d:2f:2f:
         22:d7:70:6a:c0:ab:a7:19:c9:f5:51:da:db:4e:35:15:c3:de:
         be:03:fc:24:da:69:f7:91:fc:fb:76:af:b4:21:63:39:14:c7:
         85:8b:06:29:94:5b:42:72:63:90:b6:a7:61:a3:d4:c9:40:fa:
         77:e4:7d:1c:18:d3:41:cd:a3:e3:f7:32:2f:ad:40:be:d9:f2:
         91:e3:a5:13:52:0d:a5:1b:1a:b7:21:ac:29:64:73:2d:85:26:
         51:c0:a7:e3:75:dc:30:96:20:1e:f7:40:a5:94:07:74:cd:5d:
         30:b5:ed:46:7b:d9:80:e8:38:f8:53:3c:33:44:03:7c:57:30:
         97:49:e3:54:79:8a:97:bf:8b:e8:20:f8:de:c3:f6:27:8c:ef:
         ad:d8:28:47:ef:c7:2c:0b:38:61:f3:3c:69:e7:1b:13:72:f8:
         64:ae:8f:ad:63:19:42:76:b0:04:b7:2d:97:b7:ad:2a:28:55:
         28:d0:c2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:07:36 2025 by rpki-client