Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
File:                     C155jbbo9XxfSkRRUJAd7oqW1eU.mft (raw, json)
Hash identifier:          ck4e+ZyRWTT1IeQ0kIEutW5Xr4Y6pvsKMT5CBmryQqk=
Subject key identifier:   79:FC:E1:B6:AE:F4:B2:C5:12:AC:D9:14:90:08:92:67:38:34:BF:90
Authority key identifier: 0B:5E:79:8D:B6:E8:F5:7C:5F:4A:44:51:50:90:1D:EE:8A:96:D5:E5
Certificate issuer:       /CN=0b5e798db6e8f57c5f4a445150901dee8a96d5e5
Certificate serial:       0197B70EBC060F3402E4F03F61BB513C1E54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
Manifest number:          0BA3
Signing time:             Sat 28 Jun 2025 15:01:25 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:25 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:25 +0000
Files and hashes:         1: C155jbbo9XxfSkRRUJAd7oqW1eU.crl (hash: a1KO4GcdxW9Az9dt4lg5iKd4bY/AJG7dajQlh5v8w24=)
                          2: c7WoeWfnIdPF1gkZ7r90pN58Y2c.roa (hash: wpEquj9Ig8LsCQE7Y+MbSVtYeoDlqqJ8cepm+207hA8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:bc:06:0f:34:02:e4:f0:3f:61:bb:51:3c:1e:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5e798db6e8f57c5f4a445150901dee8a96d5e5
        Validity
            Not Before: Jun 28 15:01:25 2025 GMT
            Not After : Jun 29 15:01:25 2025 GMT
        Subject: CN=79fce1b6aef4b2c512acd914900892673834bf90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ed:f6:71:82:1a:60:37:f0:9f:46:03:b6:0f:
                    07:55:66:5b:5e:d7:f9:36:44:84:36:03:f1:4d:e0:
                    68:6f:a5:14:c3:0d:b6:d4:ab:5f:33:0a:94:65:52:
                    94:6a:0a:2a:ea:c4:be:87:d1:25:c5:4d:fd:d7:3b:
                    c3:e1:d8:f7:6f:fb:29:42:05:f6:e9:7b:a8:77:da:
                    e4:02:ce:53:c4:d2:79:21:26:e7:79:0b:0c:94:11:
                    c1:ea:a3:b4:ec:3a:42:12:69:08:5c:05:49:57:c1:
                    a0:e9:56:60:0c:6c:32:57:67:f8:94:83:c3:6f:c4:
                    f0:09:7a:2b:74:72:3a:ce:95:27:0b:44:21:d8:02:
                    2f:40:f5:3a:02:e4:dd:d3:a3:35:7f:54:21:07:44:
                    12:fe:f9:8e:ed:7f:e6:07:fa:2f:ea:7a:f9:d8:8d:
                    34:cd:e1:6b:7f:63:ec:98:f8:71:11:99:b4:8e:cb:
                    b8:d6:0f:8a:3e:c8:43:b8:6a:a5:b4:18:05:46:9b:
                    8e:15:62:9b:6d:5f:3c:8f:88:0b:36:14:32:d0:84:
                    7a:90:19:24:a6:b0:bf:80:88:c3:aa:d5:7c:84:a7:
                    4d:b1:24:5c:23:a7:dd:ce:a3:8f:92:bd:26:2a:2a:
                    3e:d4:b2:04:6f:1e:f0:e8:6e:f1:60:0e:a5:02:d0:
                    09:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FC:E1:B6:AE:F4:B2:C5:12:AC:D9:14:90:08:92:67:38:34:BF:90
            X509v3 Authority Key Identifier:
                keyid:0B:5E:79:8D:B6:E8:F5:7C:5F:4A:44:51:50:90:1D:EE:8A:96:D5:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:fb:89:f7:b3:1b:ff:c5:6a:be:4e:7b:d4:75:86:82:8e:27:
         2b:e0:4e:8d:b9:0b:60:79:d2:44:a4:e1:34:5f:8b:b5:af:4c:
         8e:80:ad:ff:cc:89:b3:31:6d:9a:aa:a9:f7:ee:f4:9f:a0:a1:
         10:6e:07:98:eb:38:c4:59:ce:29:0d:68:4e:38:46:d6:0b:d0:
         fe:13:d1:90:27:03:15:e9:19:99:5c:2c:07:1b:7d:c0:da:c3:
         80:ec:6f:a4:71:6f:0f:e5:3d:bc:b9:d4:a3:48:b1:52:3e:46:
         b2:99:45:2a:56:2f:3e:7f:0e:bf:bb:7e:c0:cb:f1:8a:86:58:
         5e:ce:3e:e4:29:a2:24:f7:ee:f4:66:3b:f1:42:7c:87:dc:b7:
         cf:1a:25:3e:91:b3:34:49:d5:c1:c6:e0:b9:1d:bf:89:eb:66:
         57:24:e3:ea:7b:b2:1b:ef:22:cf:50:1d:ab:7c:c0:da:a2:30:
         d5:08:7b:89:7f:c2:40:a3:74:85:40:99:ad:e3:32:83:8f:ac:
         f2:20:70:74:87:7f:9c:c5:40:51:4f:16:3c:ea:b5:bb:26:20:
         51:4d:e3:70:29:4f:b2:55:2b:b2:e6:f6:94:57:ac:21:e1:60:
         46:45:d9:60:2c:64:63:8c:56:7e:3d:3b:82:ad:e9:81:8b:da:
         a0:a8:d6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:29 2025 by rpki-client