Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft
File:                     dXzv42s_zGikLAr_gdFEmA8yd38.mft (raw, json)
Hash identifier:          +ENgCVXRqipyryW1SJIXZKurUsp+FcmEeOWHsQoudNU=
Subject key identifier:   F6:02:8B:C8:6C:5D:0F:D4:78:BD:BC:AD:7C:1E:AD:07:8A:88:57:43
Authority key identifier: 75:7C:EF:E3:6B:3F:CC:68:A4:2C:0A:FF:81:D1:44:98:0F:32:77:7F
Certificate issuer:       /CN=757cefe36b3fcc68a42c0aff81d144980f32777f
Certificate serial:       0197733F8F4CA510350D7DB9686F09B5FA70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft
Manifest number:          0CC2
Signing time:             Sun 15 Jun 2025 11:00:34 +0000
Manifest this update:     Sun 15 Jun 2025 11:00:34 +0000
Manifest next update:     Mon 16 Jun 2025 11:00:34 +0000
Files and hashes:         1: N1rTidaACgh8Wl5J2g45GZumvQs.roa (hash: btCaFx/Jws6uzlXHydN6cLSWM9L6FDcS4ymcYrWP048=)
                          2: Nss2kO7vwED_lH6zuq8RSrb2rfE.roa (hash: 1BGYAn5SxYs9ABF+oBM6hfDnitlaPkyQv+8E/VsOmZ4=)
                          3: XsLjp43XqVLOf-UiZTsjZx3E54g.roa (hash: xErYg38+N/tFwn9w696LSX/zjDpD0mxUiTuXvg0H92I=)
                          4: dXzv42s_zGikLAr_gdFEmA8yd38.crl (hash: mgga6vrn1PHFIDaTZ3aaQL8lFaLlVGE/LFfLVhjgjBY=)
                          5: wUhuDMSsBwbclPWnAiFhijhk7qY.roa (hash: q7eZn2UzqXEGHVmt/34LCyZFoshnRxuQaC2DK2NKxpI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 11:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:73:3f:8f:4c:a5:10:35:0d:7d:b9:68:6f:09:b5:fa:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=757cefe36b3fcc68a42c0aff81d144980f32777f
        Validity
            Not Before: Jun 15 11:00:34 2025 GMT
            Not After : Jun 16 11:00:34 2025 GMT
        Subject: CN=f6028bc86c5d0fd478bdbcad7c1ead078a885743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d7:b7:a7:3f:c1:07:5e:10:83:f6:9f:05:95:
                    9c:c7:1d:4d:09:32:22:b0:df:bb:79:f9:e2:69:c4:
                    6f:c6:e8:48:7d:13:9a:97:d8:49:a6:31:4a:b7:dd:
                    8a:7b:b4:cb:d6:40:1b:93:b0:db:8e:50:89:77:0b:
                    e2:5c:13:9c:02:ef:22:84:31:a4:33:39:a2:24:d9:
                    aa:85:c9:04:d5:7d:25:9a:90:8c:b2:35:0d:e0:24:
                    ff:2b:7f:89:71:b1:29:87:eb:90:e0:4c:77:e8:53:
                    42:cd:c0:94:d2:e6:58:8a:20:fb:df:2a:ac:3e:a5:
                    1f:f9:75:7c:57:dc:39:d5:ad:90:ff:d8:02:09:e5:
                    25:11:99:9b:e1:2b:74:a9:24:b8:ad:a3:4b:ca:a1:
                    83:ca:c1:cb:5c:cf:2d:8a:6e:3c:23:8a:60:66:7d:
                    49:3a:38:7b:cc:92:4e:bb:ee:65:f6:67:fb:98:ad:
                    95:4f:ce:29:f8:ef:d3:b9:58:36:e1:0a:f8:74:c1:
                    bc:64:4f:3d:e7:c7:c3:a3:b0:6f:ce:d3:2e:98:7f:
                    6b:f7:94:29:5b:a4:13:dd:4f:da:f5:2a:24:36:5f:
                    91:2f:46:14:77:b4:46:68:c8:a7:a6:b0:c9:cf:e7:
                    e7:51:6e:80:e0:19:02:80:36:ec:87:e1:a8:4c:75:
                    00:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:02:8B:C8:6C:5D:0F:D4:78:BD:BC:AD:7C:1E:AD:07:8A:88:57:43
            X509v3 Authority Key Identifier:
                keyid:75:7C:EF:E3:6B:3F:CC:68:A4:2C:0A:FF:81:D1:44:98:0F:32:77:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:c0:b9:e9:01:bb:5a:74:d2:2a:21:2c:71:14:77:2b:4c:28:
         56:a1:d9:5f:ef:c0:41:ac:b9:7d:2e:9d:42:ad:2e:65:dd:b4:
         68:7e:e3:34:33:06:8a:31:dc:28:aa:66:5c:53:b8:5d:3b:27:
         b1:1c:37:f1:28:60:7d:7e:92:e9:0b:98:d0:f3:2a:d5:51:b0:
         4b:03:73:48:6f:5b:cf:b1:b9:6c:9d:43:a7:63:cf:e4:52:19:
         54:68:f6:49:fa:7f:08:7d:8f:55:44:ce:0e:e6:e9:78:50:5d:
         8b:e2:76:88:81:67:8f:7b:3f:a9:c2:64:ae:ff:3f:6c:7c:ed:
         88:5c:f8:dd:0a:a0:1e:8c:bb:07:fc:14:c8:55:6b:50:96:64:
         18:9a:54:96:21:26:ca:a7:d4:68:52:3f:60:16:2e:78:52:fd:
         8b:7e:83:08:bf:f4:8b:7c:31:7b:ce:d3:26:9d:a0:87:fc:5c:
         6a:8b:5d:3f:d8:64:34:d8:64:5d:ee:2f:45:d8:c0:13:29:4c:
         e4:61:3f:60:cd:62:3e:eb:12:b3:69:57:5f:f0:9e:88:1a:66:
         06:29:fb:9c:ec:8f:72:54:19:1c:9e:71:73:34:34:09:50:eb:
         3f:2e:5c:f9:ea:b1:ec:80:05:09:7a:ad:38:38:6a:15:d2:40:
         6a:3d:fd:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:36:57 2025 by rpki-client