Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft
File:                     dbvImtBCDee1vC3TL-o7l5-t4Cc.mft (raw, json)
Hash identifier:          kUcP6F1IgSu0VhOP3vzSCp2U0+A+fYdxWeVRuEXCZfY=
Subject key identifier:   AC:A0:DD:B5:67:00:20:95:52:1F:EE:1F:73:8B:D7:24:78:89:5A:11
Authority key identifier: 75:BB:C8:9A:D0:42:0D:E7:B5:BC:2D:D3:2F:EA:3B:97:9F:AD:E0:27
Certificate issuer:       /CN=75bbc89ad0420de7b5bc2dd32fea3b979fade027
Certificate serial:       0197B7B3530499E9DB643B55CD96CB46FCAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft
Manifest number:          0C46
Signing time:             Sat 28 Jun 2025 18:01:12 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:12 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:12 +0000
Files and hashes:         1: dNIjhcgOmJl_uqUY3ufEirea4-I.roa (hash: gkwMMNbP4H2f7PZtpLojDcOWvuhbyLZWIbK4WgzSXOU=)
                          2: dbvImtBCDee1vC3TL-o7l5-t4Cc.crl (hash: izVZPwDOAIABnoT1IFDZ3WBPudKDRYy5945qyOfNEuk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:53:04:99:e9:db:64:3b:55:cd:96:cb:46:fc:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75bbc89ad0420de7b5bc2dd32fea3b979fade027
        Validity
            Not Before: Jun 28 18:01:12 2025 GMT
            Not After : Jun 29 18:01:12 2025 GMT
        Subject: CN=aca0ddb567002095521fee1f738bd72478895a11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ae:f0:90:ae:a8:6b:a1:f1:44:dd:7f:67:63:
                    cc:ac:68:94:38:46:3c:a5:9c:0e:32:31:b0:2d:ce:
                    a7:8c:12:72:4a:e1:22:57:6c:37:75:29:36:4f:86:
                    93:40:c1:27:d0:48:18:59:4d:fa:a0:f9:7a:53:31:
                    fb:e9:70:ab:f0:2e:c7:91:d0:be:3f:43:0b:a7:05:
                    31:cd:59:13:e9:b2:09:41:55:51:4e:c3:39:de:e8:
                    bd:81:10:aa:0c:f7:e9:61:1e:20:7b:45:d3:52:da:
                    fc:38:58:47:1e:6b:06:2d:15:4f:cd:f4:d7:1c:9a:
                    58:6a:12:83:c3:f9:97:0d:23:76:45:53:df:b7:ac:
                    63:1e:98:46:d3:60:ae:18:42:21:e4:b5:9f:ca:99:
                    3b:10:33:b5:6d:0e:f3:e9:40:5d:23:9e:fd:56:1c:
                    f1:3b:7f:09:75:4c:85:a4:e2:ad:6b:76:c8:2e:cf:
                    4a:c0:06:39:36:7e:a7:30:03:c0:ea:b5:26:ec:1c:
                    9f:be:d3:83:cb:24:a9:b8:fa:f6:02:a0:7d:c1:14:
                    90:3a:88:da:70:b8:82:a0:cb:82:c1:44:b2:ab:9d:
                    9d:2a:fc:95:ad:8a:f8:97:b7:8b:b0:5a:96:10:0a:
                    b7:ce:ba:6c:66:47:81:57:ca:c8:9e:b8:f1:cf:9d:
                    34:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A0:DD:B5:67:00:20:95:52:1F:EE:1F:73:8B:D7:24:78:89:5A:11
            X509v3 Authority Key Identifier:
                keyid:75:BB:C8:9A:D0:42:0D:E7:B5:BC:2D:D3:2F:EA:3B:97:9F:AD:E0:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:16:7c:3d:f5:07:88:5a:e1:d3:81:31:fd:73:cc:0a:8f:b2:
         b3:6a:9c:51:bc:9a:99:da:52:0c:43:5a:b0:26:a7:8a:17:3d:
         6b:c0:dd:8f:b1:f7:7b:2a:89:91:89:e7:74:17:98:88:29:a3:
         7a:92:69:ff:ba:ca:6f:5c:9b:79:ff:45:ae:7c:51:41:7a:45:
         84:23:89:64:a6:53:49:8c:3c:f2:d9:54:1a:87:d9:a8:db:70:
         bf:56:40:a7:b8:d6:25:57:5c:30:ac:87:1b:6a:e9:b5:09:c8:
         d1:0f:02:12:ec:97:ce:28:97:10:6a:a9:d4:6f:15:0c:bf:0a:
         08:d0:e2:9a:4f:63:b0:23:72:62:87:b9:b0:7b:f9:13:06:a4:
         fd:c3:44:da:62:9e:4d:4a:4d:84:22:a7:30:91:dd:12:80:fc:
         49:15:fc:11:ae:6d:34:3c:13:a4:b6:6e:99:3c:d0:7c:1d:ec:
         ee:8a:d2:95:bf:59:2d:7f:cc:26:d6:d6:01:44:a5:4d:36:4f:
         14:ea:a8:f0:a7:14:95:92:97:9d:35:a3:76:e8:67:19:4b:89:
         2a:86:63:c3:d3:7f:97:07:fb:67:67:b0:ba:9f:f9:7f:07:94:
         b4:cd:d2:73:f4:cf:df:14:fe:17:6d:f4:e8:13:d0:00:d7:0a:
         40:eb:94:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:26:56 2025 by rpki-client