Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
File:                     dFtsPJq97bluse8_f3-nAFdSLH8.mft (raw, json)
Hash identifier:          BcRG3m2C6uCHN3+GqTqbP94qnwc3HClgGSuHT4+p+Kw=
Subject key identifier:   4C:61:C4:E8:9A:78:53:4E:03:19:2A:FC:A6:05:85:16:EC:41:E7:97
Authority key identifier: 74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F
Certificate issuer:       /CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f
Certificate serial:       019776E53B846DB2A4C36E3A68F411F686BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
Manifest number:          0B94
Signing time:             Mon 16 Jun 2025 04:00:23 +0000
Manifest this update:     Mon 16 Jun 2025 04:00:23 +0000
Manifest next update:     Tue 17 Jun 2025 04:00:23 +0000
Files and hashes:         1: XVHW13An0H4R0lwafXi_5n-GjRQ.roa (hash: avC9Et5bzaaQctHEh7eFVRP1BlhGCdMVJW4eggq0SuY=)
                          2: dFtsPJq97bluse8_f3-nAFdSLH8.crl (hash: LTBJET0J6EjBR+O0FOQe7tqRw8gj9HQ2VEUeH+BgMck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 04:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:76:e5:3b:84:6d:b2:a4:c3:6e:3a:68:f4:11:f6:86:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f
        Validity
            Not Before: Jun 16 04:00:23 2025 GMT
            Not After : Jun 17 04:00:23 2025 GMT
        Subject: CN=4c61c4e89a78534e03192afca6058516ec41e797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c4:51:c3:3a:b6:bc:20:8d:63:64:49:1c:aa:
                    12:8f:43:2d:1f:90:7d:07:5a:1b:05:bd:f3:43:e3:
                    5e:9c:5e:7b:d0:34:cf:62:14:7e:5c:98:fd:38:33:
                    b7:65:ed:08:3e:e4:67:f6:38:3b:ee:3e:29:1c:bf:
                    fd:c7:0c:0d:1d:88:5d:90:08:7d:7d:a8:17:c8:31:
                    86:54:01:db:f4:b8:0e:8c:de:19:76:27:a1:1f:fe:
                    cf:3e:be:e5:96:d5:83:f2:36:57:7d:49:c0:b3:39:
                    08:c5:2d:0a:29:7e:80:36:2e:71:56:1b:b1:4f:45:
                    b6:d6:02:f6:15:c2:3c:e0:90:41:71:4a:e5:60:0f:
                    bd:00:44:f8:d6:65:35:d3:bc:ec:1d:bf:04:ed:7c:
                    d8:cf:ef:b8:73:ba:04:23:fb:e6:6c:84:c6:4c:77:
                    bf:f9:3c:46:77:5e:2d:8a:bc:04:58:5e:4c:49:fe:
                    ea:a9:c2:30:56:6a:c1:59:07:92:a5:52:2f:b9:73:
                    2a:e0:af:5d:57:48:6d:30:79:b4:68:53:d0:38:a0:
                    65:35:a2:2b:25:71:9f:7e:c0:3b:ab:17:9b:fd:9a:
                    5d:9a:80:41:1a:1e:5a:60:20:72:76:53:f8:6f:fa:
                    78:b4:88:35:1e:c4:39:65:0d:ac:9a:6f:62:9e:0f:
                    37:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:61:C4:E8:9A:78:53:4E:03:19:2A:FC:A6:05:85:16:EC:41:E7:97
            X509v3 Authority Key Identifier:
                keyid:74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:53:74:4f:f9:d4:bd:3a:48:6d:7f:ee:51:e2:2d:d9:a8:cb:
         7a:78:32:7d:1b:ed:6d:df:1f:c7:b5:a2:9e:7f:5c:40:38:f3:
         e3:eb:8d:32:eb:d4:08:fb:4e:0a:9e:49:e1:a4:e0:4d:f5:a6:
         3d:4c:86:80:5b:4e:d8:ac:ff:05:99:d7:e8:9b:a9:cb:ee:54:
         7a:39:70:8b:d4:45:d7:5d:0e:d5:9b:f9:cb:7a:04:a6:f3:ac:
         c6:51:3d:bd:8b:06:21:32:b9:eb:32:75:36:c2:92:b2:7a:79:
         fe:4d:e3:64:0c:f2:3d:da:3c:61:86:44:5c:19:2f:59:93:69:
         20:d1:d9:d5:fc:18:d9:ed:ac:7b:1d:df:a7:d3:04:43:aa:b5:
         15:2a:d1:c2:c4:7d:82:29:9b:ba:60:db:7b:73:20:34:39:e5:
         6f:98:a8:39:5e:9f:1e:cc:7b:ee:10:bc:ad:61:ce:53:7c:0f:
         e3:9c:3c:5d:d9:13:01:6e:bb:5f:8a:13:84:01:01:d2:1c:be:
         d4:8a:b6:56:f7:06:ec:58:b8:b2:6c:75:53:b8:0c:a0:e0:1e:
         54:ed:83:cf:b5:bc:99:54:8c:8b:4f:13:fa:6c:d5:ff:ea:f6:
         15:be:41:28:89:a8:f8:6e:4d:c4:95:0b:09:95:05:8b:65:e6:
         72:10:48:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:41:58 2025 by rpki-client