Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
File:                     dE3LcujLR4z8SyWusfA7QGJmN1w.mft (raw, json)
Hash identifier:          9dZp+OABX9WjLaeH4bv9Y+f7jwuZk3SqEFZ3/KwduGY=
Subject key identifier:   11:C5:72:6F:9C:17:A1:6B:C1:EC:A0:FB:DC:8C:B0:FF:15:B3:6F:2F
Authority key identifier: 74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C
Certificate issuer:       /CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
Certificate serial:       01976E5046CE50B6B439BD8A12EE5C504010
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
Manifest number:          09DD
Signing time:             Sat 14 Jun 2025 12:00:44 +0000
Manifest this update:     Sat 14 Jun 2025 12:00:44 +0000
Manifest next update:     Sun 15 Jun 2025 12:00:44 +0000
Files and hashes:         1: 8cafwJu77pkBukQtIkYtwta4vzE.roa (hash: 5ZeO0GQQRhcOKBhez5TUCQIoMyl73wJ5RRHIFaIhJkM=)
                          2: dE3LcujLR4z8SyWusfA7QGJmN1w.crl (hash: rLpcmNW9uueU3D5l1HzUfEoBr7zemdn5ppG4c1XPwGg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:50:46:ce:50:b6:b4:39:bd:8a:12:ee:5c:50:40:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
        Validity
            Not Before: Jun 14 12:00:44 2025 GMT
            Not After : Jun 15 12:00:44 2025 GMT
        Subject: CN=11c5726f9c17a16bc1eca0fbdc8cb0ff15b36f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:61:20:6c:8a:6a:cb:92:19:f7:42:9e:b9:42:
                    67:59:e7:bb:40:8b:9f:bd:56:85:96:5f:9b:8f:e3:
                    79:3f:d4:c1:df:5f:43:ff:01:f5:2c:e5:9b:54:c7:
                    2b:80:86:18:45:12:92:0a:c1:e2:6d:d7:43:85:be:
                    33:87:7e:25:bf:77:ef:fa:aa:bf:cd:dc:80:67:14:
                    87:74:83:d2:4c:15:fd:b7:90:e6:77:79:82:d8:63:
                    a7:29:6b:14:6e:92:63:95:32:4f:8c:6c:c8:f9:94:
                    54:55:c0:1b:5e:c6:6d:6d:ef:af:ad:37:7b:14:e8:
                    29:3d:f9:77:33:77:74:3a:53:9d:f3:a8:da:8a:1f:
                    ee:34:ea:17:e8:95:29:13:80:e7:3e:7f:9b:2f:af:
                    19:46:b6:fd:ea:95:cf:71:c1:4c:8f:73:76:e3:02:
                    90:a8:bf:1f:3a:f6:23:f4:82:d5:23:5d:cc:6c:ec:
                    2b:3a:be:c6:07:f5:9d:60:eb:cd:b1:fc:28:08:7c:
                    ee:99:5d:1e:c8:29:89:af:db:d3:75:75:16:41:7b:
                    bf:bd:10:db:c7:e9:d9:60:ed:43:6f:3d:0a:34:da:
                    81:9d:da:82:a0:63:4b:b4:04:0d:77:b3:6d:f5:b8:
                    79:07:16:78:ad:c5:3d:d7:23:f1:a3:5b:50:1d:11:
                    21:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C5:72:6F:9C:17:A1:6B:C1:EC:A0:FB:DC:8C:B0:FF:15:B3:6F:2F
            X509v3 Authority Key Identifier:
                keyid:74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:44:d9:91:d3:59:9e:35:b7:1c:a4:84:8c:a7:1d:cc:15:78:
         b4:98:02:57:03:74:69:2e:c8:56:3e:f4:f3:74:ef:30:30:eb:
         b0:e4:18:eb:fa:8c:5c:d1:61:e1:1b:22:90:e5:10:2f:cc:51:
         bf:ab:2f:32:be:e0:34:6e:f8:18:bc:d7:95:e5:9d:b9:79:80:
         ea:74:18:8c:2a:d9:88:92:29:04:65:6c:91:be:96:ce:ce:b5:
         f8:6c:00:b2:64:26:90:c0:f1:c5:aa:84:e3:78:71:33:fd:0d:
         ee:65:4a:9e:f7:18:1f:a9:5b:1f:46:68:d3:cd:54:a9:63:19:
         dc:04:68:34:36:8a:0e:11:7f:d0:2c:e4:ae:c8:79:3b:87:7a:
         1d:68:67:65:e1:31:49:40:1d:cb:84:6f:65:d5:10:74:90:80:
         b8:eb:08:e2:2a:ed:10:93:4f:95:9f:af:d9:82:43:7f:8f:11:
         0a:8e:0a:54:45:65:8c:68:ba:7a:7b:08:75:48:d7:d8:c5:57:
         15:9b:04:a9:42:51:1a:43:95:7e:77:bc:62:e0:a4:32:bf:6d:
         ea:5f:cf:9f:c2:ee:c3:1c:ea:1d:e9:a6:5e:24:77:34:c0:4c:
         56:fe:a4:dd:f5:62:bc:3b:48:85:f2:a8:4f:3c:a9:61:75:33:
         86:b3:8a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:34:53 2025 by rpki-client