Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft
File:                     Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft (raw, json)
Hash identifier:          X7LvH2Oz7WOQZEWNPMrApmwTuj2P+6bWnVY/AYDU100=
Subject key identifier:   B2:4B:5C:BF:3B:92:FB:2C:5F:94:69:40:11:9E:C9:54:99:C3:F2:57
Authority key identifier: 0A:FE:9D:66:65:5B:5F:D2:7B:2C:17:CA:96:85:65:0D:53:F3:BB:0A
Certificate issuer:       /CN=0afe9d66655b5fd27b2c17ca9685650d53f3bb0a
Certificate serial:       0197B6A1DB49D2A0010E53F26FD1A9773C00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cv6dZmVbX9J7LBfKloVlDVPzuwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft
Manifest number:          0A49
Signing time:             Sat 28 Jun 2025 13:02:30 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:30 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:30 +0000
Files and hashes:         1: Cv6dZmVbX9J7LBfKloVlDVPzuwo.crl (hash: BmjkW1WevEoTxR9wZLNGn0LZSRWpOqhknQOVnp9xdyY=)
                          2: bscorJtE41igLaTAQbtgAQqBxz0.roa (hash: sGg8Ckzp0oPzFQ9Hy7BsC5B5QG6ZfSY1AxKv6j6SlLk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cv6dZmVbX9J7LBfKloVlDVPzuwo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:db:49:d2:a0:01:0e:53:f2:6f:d1:a9:77:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0afe9d66655b5fd27b2c17ca9685650d53f3bb0a
        Validity
            Not Before: Jun 28 13:02:30 2025 GMT
            Not After : Jun 29 13:02:30 2025 GMT
        Subject: CN=b24b5cbf3b92fb2c5f946940119ec95499c3f257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4c:6f:e5:94:36:e6:54:c8:e2:12:87:52:24:
                    b8:0f:56:af:41:85:87:24:8a:13:a6:9b:9d:cf:b8:
                    6c:1d:fd:48:45:ab:c5:0e:1a:22:2e:06:50:b7:e7:
                    21:ce:1c:9d:0b:8e:d8:9b:42:01:1c:02:80:eb:a6:
                    31:2f:75:ee:7e:15:09:a6:89:39:52:7a:d3:8c:19:
                    60:67:8a:4f:39:36:73:02:d6:8a:04:de:9a:70:b3:
                    8a:6e:1d:0d:80:ca:40:2d:0b:10:78:6d:46:4e:0b:
                    8c:a8:38:fa:de:ac:16:e3:8e:d2:f3:37:4a:f8:28:
                    6e:87:d8:f7:33:ce:a7:bf:a8:a6:04:1e:c7:ed:2e:
                    77:00:35:83:b9:45:f6:70:71:6c:30:f4:2c:69:4f:
                    46:02:73:54:70:b3:03:ac:11:bd:20:8c:d8:09:de:
                    14:e1:99:d2:e2:d4:07:fd:bb:0b:34:3f:43:4c:6e:
                    96:1f:50:c1:a7:49:79:7f:fb:e2:ea:a3:ef:ff:03:
                    cd:48:74:29:d9:76:e8:51:f0:18:b1:65:07:5a:b6:
                    f1:52:b9:11:52:33:ca:c6:07:b4:0d:9a:b6:bb:72:
                    ef:c2:25:76:b0:f6:8f:69:5b:0d:d3:8e:96:20:53:
                    7d:36:5c:3d:db:3d:66:a1:fe:62:6f:c8:ba:88:6d:
                    85:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:4B:5C:BF:3B:92:FB:2C:5F:94:69:40:11:9E:C9:54:99:C3:F2:57
            X509v3 Authority Key Identifier:
                keyid:0A:FE:9D:66:65:5B:5F:D2:7B:2C:17:CA:96:85:65:0D:53:F3:BB:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cv6dZmVbX9J7LBfKloVlDVPzuwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:fe:7e:05:b1:9a:60:77:a1:f3:9b:3b:e5:11:7b:79:f5:dc:
         72:df:e7:48:77:98:6f:53:51:ea:dc:6d:8b:f2:dd:6f:0f:67:
         df:5b:67:d3:b5:f8:ce:4f:b7:f8:69:29:0f:3b:3d:4c:9d:d1:
         f4:22:0a:bb:2f:99:c1:a9:76:a8:14:ff:e5:d4:fe:0e:e7:c6:
         d5:15:f3:97:08:45:a3:60:de:4c:d6:5c:8f:7d:57:cc:df:c3:
         b1:b0:96:aa:54:ca:71:7e:cc:b4:6f:89:33:70:c9:5c:ab:ba:
         63:80:39:24:cc:0d:02:f8:b6:4f:d0:20:fb:9e:40:5e:68:fb:
         59:7d:49:df:c6:80:a5:45:a7:f7:7b:d0:c0:9a:ac:b0:07:33:
         40:42:4b:5f:84:52:ef:d4:5b:f0:b6:38:32:e3:98:95:8d:5d:
         a2:87:d2:d2:f3:5f:e0:57:e1:10:dd:18:64:a1:f9:a0:d7:c8:
         83:9e:c6:00:ea:c3:d7:99:03:94:e7:c6:b1:9d:03:47:48:41:
         19:2e:dc:96:68:73:1d:88:a0:02:e4:5e:1c:19:0f:f9:13:95:
         a3:b1:42:b8:71:36:70:72:9d:97:47:58:37:d5:12:b1:3b:56:
         d4:9d:c0:60:3a:8f:9e:fd:22:ed:98:db:d5:cc:02:83:92:68:
         48:49:33:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:39 2025 by rpki-client