Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft
File:                     DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft (raw, json)
Hash identifier:          GRduy7a/yBfJWxJmlbUz1sX6oDI/ftMGj4a64hcit5s=
Subject key identifier:   05:22:24:A8:77:9E:59:EC:8B:56:10:C3:6B:65:19:8F:3C:15:BF:C8
Authority key identifier: 0E:A5:46:39:31:6F:5C:D5:28:7F:84:1D:7F:8C:FF:16:52:1D:05:76
Certificate issuer:       /CN=0ea54639316f5cd5287f841d7f8cff16521d0576
Certificate serial:       0198D92B4E8FCFA2E2602DFA9BD0420B6A1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DqVGOTFvXNUof4Qdf4z_FlIdBXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft
Manifest number:          037F
Signing time:             Sat 23 Aug 2025 23:02:30 +0000
Manifest this update:     Sat 23 Aug 2025 23:02:30 +0000
Manifest next update:     Sun 24 Aug 2025 23:02:30 +0000
Files and hashes:         1: DqVGOTFvXNUof4Qdf4z_FlIdBXY.crl (hash: yL2zhBpDgVsf+6Hx9MTleaOY36re8SUG4n+/wYpCFqI=)
                          2: abGEnkiRCC-QdoOIOJ74wLOfNK4.roa (hash: xQuRCd3BN/tXelIZ1CEEcNjDIYPDQbZRMsaEZajsFYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DqVGOTFvXNUof4Qdf4z_FlIdBXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 23:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d9:2b:4e:8f:cf:a2:e2:60:2d:fa:9b:d0:42:0b:6a:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ea54639316f5cd5287f841d7f8cff16521d0576
        Validity
            Not Before: Aug 23 23:02:30 2025 GMT
            Not After : Aug 24 23:02:30 2025 GMT
        Subject: CN=052224a8779e59ec8b5610c36b65198f3c15bfc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:63:17:2b:5e:39:33:cc:dd:16:1a:0a:c4:de:
                    f8:9c:6c:15:43:85:74:7a:da:a4:fc:b0:15:c0:b7:
                    01:cf:e0:9a:82:a6:92:a9:6e:0a:f4:0f:91:af:fe:
                    33:63:db:b5:8b:ac:c4:02:b1:b5:1f:ae:11:f6:6f:
                    ac:96:8a:b7:44:89:79:69:77:f7:84:b5:c2:5b:2a:
                    be:1b:70:ff:87:02:11:0e:8a:e3:12:2f:d1:49:3a:
                    42:b7:05:ff:0b:ed:59:94:0f:ff:39:8a:f9:94:b6:
                    6b:c0:b3:5e:26:8f:91:5f:bd:04:bd:1f:d8:17:45:
                    8f:91:bd:5d:cb:19:1d:8a:4f:c0:be:0e:fd:81:9b:
                    2b:28:02:58:81:23:74:ef:1e:f1:f3:3c:8f:8c:c4:
                    7b:70:a3:57:a5:62:d8:0a:ad:e5:13:c0:ac:07:b9:
                    db:ea:84:9f:6f:33:a6:6f:0d:1b:27:7f:d8:e9:dc:
                    65:ef:19:fb:47:66:ff:96:73:d9:b3:e4:8d:0a:da:
                    28:f0:e6:42:66:2d:60:cf:cb:69:ad:f2:00:93:62:
                    2d:6b:45:32:fd:dc:f1:6b:a0:52:f0:b4:f3:35:78:
                    1a:00:4b:03:f1:b7:2b:fe:a5:06:09:37:6b:2e:a8:
                    ba:ba:cc:be:0d:6f:e8:9c:37:e2:da:b6:68:e2:95:
                    49:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:22:24:A8:77:9E:59:EC:8B:56:10:C3:6B:65:19:8F:3C:15:BF:C8
            X509v3 Authority Key Identifier:
                keyid:0E:A5:46:39:31:6F:5C:D5:28:7F:84:1D:7F:8C:FF:16:52:1D:05:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqVGOTFvXNUof4Qdf4z_FlIdBXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:8b:9b:cd:06:0a:33:2b:fe:e4:e5:7b:1b:6c:10:10:45:04:
         4a:2b:f4:2b:dc:f7:f0:79:70:0f:23:fa:f5:61:f3:67:e3:96:
         20:6c:f3:cd:d7:44:6b:61:7c:15:cb:21:c3:41:45:45:dd:f6:
         ca:89:32:56:36:34:b1:d4:6b:57:88:51:56:31:39:82:e5:8d:
         29:78:4e:fc:f4:15:12:2a:5d:0d:44:8b:b1:20:dd:03:09:5c:
         d0:ed:02:f0:9d:e5:7f:d8:e8:14:5c:b9:b6:d0:64:ff:16:05:
         83:06:a4:d8:7b:f1:21:10:de:7b:51:c7:02:af:c4:30:7d:9d:
         c7:a7:cd:04:d0:03:b8:58:93:cb:cc:86:8e:da:c3:40:ea:63:
         ad:69:83:f4:e4:14:4d:38:c9:de:39:eb:fd:7b:b4:fb:53:26:
         5a:ad:98:8a:56:76:b9:2c:da:ba:08:b9:1e:cd:63:72:e5:37:
         ea:19:c4:54:a6:f3:83:2d:df:f7:28:7a:37:25:fc:2c:8f:50:
         e4:ba:03:b6:38:83:4b:2a:d4:9d:ce:6a:f4:3b:2d:ab:44:f7:
         27:d1:2c:74:63:6f:68:1b:9a:33:02:db:d4:84:bc:ed:b2:a1:
         54:ae:21:c4:b2:45:59:cb:57:34:77:61:0d:95:6d:b4:20:29:
         71:e6:08:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:42:57 2025 by rpki-client