Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
File:                     dPgamLSHAgyYEF1jE7zWneUKwXs.mft (raw, json)
Hash identifier:          FISZx5rBb8UFFmKY+W8WYBMyyueD0atKJwsThX150sU=
Subject key identifier:   A5:A6:A8:9B:1F:A5:BA:16:9C:29:66:56:A0:1E:42:36:43:A6:84:7F
Authority key identifier: 74:F8:1A:98:B4:87:02:0C:98:10:5D:63:13:BC:D6:9D:E5:0A:C1:7B
Certificate issuer:       /CN=74f81a98b487020c98105d6313bcd69de50ac17b
Certificate serial:       0198D583CF597D8DCEA3F67CD196F07DC1C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
Manifest number:          0292
Signing time:             Sat 23 Aug 2025 06:00:41 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:41 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:41 +0000
Files and hashes:         1: 7-iGt4e7trCrvhjbqw5ailuotG8.roa (hash: cy0FH1gqtKBfDPhq2ot6+GUFGCM2/G1KgLpKIId8UGA=)
                          2: dPgamLSHAgyYEF1jE7zWneUKwXs.crl (hash: Cr5wQTucu/86+4SUqNNVj4oIJv83hu3YeulAofQgZNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:cf:59:7d:8d:ce:a3:f6:7c:d1:96:f0:7d:c1:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f81a98b487020c98105d6313bcd69de50ac17b
        Validity
            Not Before: Aug 23 06:00:41 2025 GMT
            Not After : Aug 24 06:00:41 2025 GMT
        Subject: CN=a5a6a89b1fa5ba169c296656a01e423643a6847f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2c:01:7f:47:47:1b:d8:51:cb:8a:6a:1c:6b:
                    92:f4:67:db:66:6c:8d:1d:3b:d8:a6:82:b1:45:99:
                    18:5b:79:04:92:56:92:de:2c:68:c3:da:93:9b:ae:
                    0e:02:22:03:18:c3:65:04:23:79:d5:bd:41:c2:35:
                    85:b3:0e:66:27:d4:dc:31:78:03:e4:5b:57:5b:1a:
                    ab:56:36:1c:67:bf:9c:29:59:28:66:ef:c5:6e:d4:
                    8b:30:be:74:a4:d4:cc:2a:da:18:8f:72:27:81:52:
                    47:45:ac:34:e6:67:df:40:35:6a:0f:80:d5:64:be:
                    38:e8:fe:47:ee:a2:f3:6c:32:3c:c2:39:75:6e:1b:
                    e0:e6:b6:48:ad:42:3d:8b:1d:6e:ea:eb:ed:41:df:
                    7c:3e:a6:c3:0a:98:27:8e:a9:53:c0:a6:00:93:16:
                    e5:65:f2:4f:25:e2:24:18:6e:2c:b5:91:a7:c0:7f:
                    32:0c:ba:ff:13:86:ba:a5:ad:d5:53:aa:db:b4:b2:
                    69:b5:b1:6d:a5:ac:83:ef:c0:ae:c7:95:f7:ed:a2:
                    c9:96:97:a9:fb:89:2c:84:35:ff:3a:d6:49:98:0d:
                    83:08:88:d5:e9:cb:13:02:4e:da:68:17:dc:1c:a9:
                    b5:d7:0c:f2:70:aa:ee:8e:8e:13:3c:61:fe:ef:51:
                    f4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A6:A8:9B:1F:A5:BA:16:9C:29:66:56:A0:1E:42:36:43:A6:84:7F
            X509v3 Authority Key Identifier:
                keyid:74:F8:1A:98:B4:87:02:0C:98:10:5D:63:13:BC:D6:9D:E5:0A:C1:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:40:f2:fc:ac:5d:79:66:94:40:d1:35:fc:2f:0f:16:d0:b2:
         73:2d:3e:20:08:2b:65:1d:d3:f1:37:69:08:ec:9c:c6:9e:ca:
         23:2a:5d:f8:9f:c3:64:0e:19:7a:8d:94:35:dd:b6:38:38:71:
         a8:2f:d3:5b:8a:b5:f7:1a:35:13:97:09:92:1b:0c:91:b8:54:
         cf:82:d0:ff:af:d5:6e:ca:ea:fd:37:34:03:27:c5:9d:06:f5:
         b6:4b:a8:f5:b0:0b:06:37:f2:5c:69:dd:d5:d3:a9:c2:18:dd:
         88:ce:4a:fa:ab:ef:d3:fc:51:ba:08:cd:1a:a3:8d:02:23:93:
         92:f4:6f:8d:fc:52:12:01:dc:bd:ea:24:ac:f2:e1:07:26:e5:
         45:d2:86:b0:dc:4c:f6:fd:52:f5:8e:90:2e:09:15:5f:a3:55:
         66:8a:f4:4a:92:43:15:8a:38:b8:46:a2:c5:b9:24:62:fa:64:
         31:33:d3:92:a1:37:89:f6:62:d8:77:5a:52:91:6d:ab:a7:6a:
         3b:bf:1e:ca:3d:04:d8:54:52:cc:b1:3a:e4:ed:74:3e:92:64:
         93:cd:ee:df:29:df:69:7b:37:44:5a:d3:c9:06:ef:98:bf:0d:
         da:2a:07:f1:8a:a1:1f:0a:eb:29:ea:17:89:54:04:68:59:82:
         44:53:1b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:56:19 2025 by rpki-client