Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
File:                     Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft (raw, json)
Hash identifier:          nBJu9NyAvsSTOj7gUgufN+pYL26747xWj3ecgXC1+jE=
Subject key identifier:   96:9C:C6:0F:32:AD:A6:62:67:26:CD:13:EA:4C:AF:00:31:44:55:D6
Authority key identifier: 0F:0D:94:EE:63:C7:0A:73:36:63:BB:C4:B5:B5:76:DE:60:7E:19:ED
Certificate issuer:       /CN=0f0d94ee63c70a733663bbc4b5b576de607e19ed
Certificate serial:       01976E871EBB64E4942A3A671509178CE2CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
Manifest number:          06C0
Signing time:             Sat 14 Jun 2025 13:00:38 +0000
Manifest this update:     Sat 14 Jun 2025 13:00:38 +0000
Manifest next update:     Sun 15 Jun 2025 13:00:38 +0000
Files and hashes:         1: Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl (hash: MvRfw2E8BlBTxCq44cIp8wnayhISvAXtNY1m/OF04yc=)
                          2: HNrCdJFr8Rfx0QNo8n5aDjy6J1M.roa (hash: gUK0hPbdwoGfL6nF9RbnOReZ1s6L9tQ32o9aBdmxdu0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:87:1e:bb:64:e4:94:2a:3a:67:15:09:17:8c:e2:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f0d94ee63c70a733663bbc4b5b576de607e19ed
        Validity
            Not Before: Jun 14 13:00:38 2025 GMT
            Not After : Jun 15 13:00:38 2025 GMT
        Subject: CN=969cc60f32ada6626726cd13ea4caf00314455d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:be:dd:59:f4:5b:b4:23:4e:39:a5:a5:5d:41:
                    8d:d5:f1:95:fa:01:ec:81:23:3e:79:3f:75:2e:9e:
                    01:33:c2:3e:10:bd:1d:21:1e:1a:1d:71:fd:4c:3a:
                    33:d0:5f:8c:45:93:35:01:1e:f0:76:09:dc:0b:c6:
                    ad:6a:e6:2c:4f:43:01:32:8d:66:76:d8:0f:22:0c:
                    fd:a3:73:3d:c1:18:6f:9b:45:41:c6:9e:4e:14:89:
                    9a:5b:33:5a:90:8c:8d:ef:cb:88:f8:21:7d:04:be:
                    43:9b:30:0e:c3:62:32:91:d4:45:60:06:13:1a:21:
                    ff:0c:f3:d3:13:ed:1c:a6:d7:8d:c9:ef:08:64:ae:
                    09:ba:76:45:fd:3f:fb:38:ab:12:ab:5d:ff:d6:95:
                    6c:8d:4f:6e:28:ce:29:e3:3b:06:17:87:4f:26:c6:
                    62:65:5b:c0:93:6a:d9:90:07:8d:62:93:92:37:7b:
                    32:81:00:a0:30:2b:86:a1:e8:40:69:41:17:5c:13:
                    41:18:ae:b7:77:fb:ff:a1:0d:64:f2:ee:58:f8:38:
                    d0:04:1d:39:94:86:ce:6f:9d:d9:8c:0d:68:47:af:
                    17:fc:73:e5:ac:3b:d9:c3:4f:d1:51:77:6b:76:3b:
                    30:ec:09:82:d4:b4:cc:8c:dd:c3:04:1b:14:5a:be:
                    2b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:9C:C6:0F:32:AD:A6:62:67:26:CD:13:EA:4C:AF:00:31:44:55:D6
            X509v3 Authority Key Identifier:
                keyid:0F:0D:94:EE:63:C7:0A:73:36:63:BB:C4:B5:B5:76:DE:60:7E:19:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:12:eb:36:2f:d0:4f:36:49:eb:67:5b:c5:94:d1:4c:ce:b0:
         ce:0f:da:84:ce:62:b7:49:9e:65:d2:10:ad:b4:a8:a9:02:fc:
         7f:0c:d6:e7:00:4e:7f:9b:cc:be:22:4c:9c:65:6a:5a:e5:fa:
         1e:99:17:5d:59:ed:56:da:b2:00:4f:0d:5f:7b:dc:7c:18:20:
         ca:5d:c4:79:bb:0f:1f:5e:04:72:98:cb:08:4d:eb:08:51:12:
         ec:0a:d1:56:6d:ab:c4:dc:a8:b0:60:37:8e:56:71:3c:f6:f5:
         d4:d3:27:c4:b2:2b:39:77:ce:2c:2d:53:f5:0d:0f:e1:97:93:
         fa:f5:9f:87:7d:32:04:c9:4f:cc:79:91:67:6c:c4:5a:c3:16:
         89:48:2d:6e:6f:49:90:78:5f:4f:fa:b7:7d:09:d0:c4:00:b7:
         6d:40:4b:fe:51:57:74:1c:49:d1:46:e0:43:95:07:f8:c6:ec:
         08:6d:bc:2c:49:90:f8:bd:d2:e3:95:c3:6f:98:85:8c:5d:24:
         e5:36:98:82:c5:7f:27:20:ed:8c:fb:81:b5:2d:e6:78:c5:6a:
         98:95:a0:7a:d8:88:fe:5c:50:6e:66:fc:ec:46:d6:95:8c:8c:
         0c:45:96:29:a7:63:df:a3:d4:60:62:65:6b:ab:58:8d:24:f5:
         0d:b2:fd:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:46:02 2025 by rpki-client