Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft
File:                     dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft (raw, json)
Hash identifier:          3Bu28Y7d3hzoTsTVUSIhNonvdcYounTZe1olJXGqT7U=
Subject key identifier:   96:F9:1C:DA:6C:ED:39:BF:F7:3B:61:84:06:3C:4E:F0:26:29:BE:57
Authority key identifier: 76:16:24:DD:DC:5C:02:79:C7:F8:C9:FF:12:88:A4:D3:04:4C:08:47
Certificate issuer:       /CN=761624dddc5c0279c7f8c9ff1288a4d3044c0847
Certificate serial:       0198808B0BCD1382EC65531F214D56896B53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft
Manifest number:          028B
Signing time:             Wed 06 Aug 2025 18:00:52 +0000
Manifest this update:     Wed 06 Aug 2025 18:00:52 +0000
Manifest next update:     Thu 07 Aug 2025 18:00:52 +0000
Files and hashes:         1: dhYk3dxcAnnH-Mn_Eoik0wRMCEc.crl (hash: l+epvy3tiDx8zvKKsmf3WAxbvt+bTD5ocWLjpNXy8jU=)
                          2: uMFOgPoc2NWCSxPiOG6b1D8E-ZI.roa (hash: R/unw2gN5aPMxs/UeuzYe+LHJKBGKVUf8WbT/53nntg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:8b:0b:cd:13:82:ec:65:53:1f:21:4d:56:89:6b:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=761624dddc5c0279c7f8c9ff1288a4d3044c0847
        Validity
            Not Before: Aug  6 18:00:52 2025 GMT
            Not After : Aug  7 18:00:52 2025 GMT
        Subject: CN=96f91cda6ced39bff73b6184063c4ef02629be57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fc:85:10:9c:77:35:64:2c:ac:1b:5d:be:92:
                    6d:3d:d1:d4:a7:d7:3c:34:6b:be:13:49:c4:f4:8c:
                    73:0d:18:a9:1f:4f:ef:55:4c:a7:10:91:fe:33:f9:
                    ef:ed:fd:4b:04:9d:2f:84:e7:bd:65:06:ff:6b:b3:
                    5c:7b:cb:95:87:20:f1:28:0d:37:23:ca:e3:1f:29:
                    c6:13:40:ad:bc:46:0c:10:a4:eb:c9:21:19:58:20:
                    3e:0d:6a:01:93:c5:42:f1:4a:14:46:c7:c2:bc:19:
                    d9:ab:ab:19:67:2e:a4:4b:2e:0f:95:90:7d:e6:fd:
                    c2:dc:8b:62:14:36:f6:21:b4:d9:f1:de:26:14:ff:
                    f0:a3:80:bd:65:c6:9a:02:7b:e2:ff:4d:95:2d:dc:
                    1e:99:c3:7d:5d:ab:ca:f8:0c:2f:28:85:82:e8:97:
                    23:ce:91:b7:93:d0:c9:a1:2c:2f:c1:51:18:d6:47:
                    32:e7:a0:6d:c2:59:4b:81:9c:82:f3:a8:2b:f9:ba:
                    39:c2:34:36:69:98:19:7e:4f:17:02:b0:a3:2e:8c:
                    a7:ff:54:c9:25:c5:11:b3:30:ab:13:12:3d:5d:72:
                    de:8f:a6:c5:8a:84:02:2c:4b:c4:cd:a2:3a:db:aa:
                    eb:d1:fc:92:3f:df:6c:8a:dc:15:6c:bb:42:cb:44:
                    45:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F9:1C:DA:6C:ED:39:BF:F7:3B:61:84:06:3C:4E:F0:26:29:BE:57
            X509v3 Authority Key Identifier:
                keyid:76:16:24:DD:DC:5C:02:79:C7:F8:C9:FF:12:88:A4:D3:04:4C:08:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:9b:94:5c:80:e8:f2:c5:50:7e:0b:3f:51:25:31:dd:47:ef:
         9e:30:04:0b:f7:5f:e3:1e:1c:ce:ec:44:f5:fe:49:0e:0a:27:
         86:84:66:e5:6c:26:5b:d5:4e:8c:fc:f6:33:94:59:9f:86:0e:
         3e:26:50:f4:c8:31:0b:8c:1d:67:e5:e6:43:66:49:be:48:8b:
         f9:9b:d8:35:35:cf:73:3a:9d:fc:9d:e4:19:b3:34:a0:ea:5b:
         31:94:ab:2f:ea:d7:e8:9d:f4:7b:3e:5a:06:ec:f2:93:bd:1c:
         45:3b:57:46:24:0a:d7:5d:d0:42:f0:9d:48:f6:a1:21:56:f3:
         81:48:27:b0:7f:72:e9:d1:52:30:8a:0c:14:51:41:f3:9d:5a:
         c0:0c:de:94:79:ed:11:ff:66:a8:9e:d7:9b:86:98:93:a2:23:
         d7:df:3d:e4:04:87:97:84:d3:16:ec:28:7d:3c:5a:3e:f6:1a:
         1d:7c:ed:62:1a:e8:3a:84:50:ba:39:87:e8:34:6a:dc:fc:8b:
         7f:9b:3f:d2:8d:d1:34:71:4b:7e:8e:9d:56:5f:48:e8:6d:6b:
         68:b1:b2:31:31:f4:23:e2:db:6d:07:e0:01:76:58:d7:35:95:
         85:e7:24:7b:a8:15:f1:93:6b:15:7d:58:6c:14:8b:ea:fc:7b:
         d8:c1:03:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:06:54 2025 by rpki-client