Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft
File:                     0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft (raw, json)
Hash identifier:          ZQCI2HanuGclWSpKdooReYZFXYwaET3IFMbkVrK2qp4=
Subject key identifier:   99:A0:EF:13:19:89:B0:77:1C:E9:A7:B4:83:D5:AA:23:32:47:32:80
Authority key identifier: D3:2D:00:03:68:C1:D5:4F:08:A7:78:2C:07:67:3B:68:A9:3E:DF:C5
Certificate issuer:       /CN=d32d000368c1d54f08a7782c07673b68a93edfc5
Certificate serial:       019768855E1E11535229B578C282FB550E9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0y0AA2jB1U8Ip3gsB2c7aKk-38U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft
Manifest number:          1196
Signing time:             Fri 13 Jun 2025 09:01:00 +0000
Manifest this update:     Fri 13 Jun 2025 09:01:00 +0000
Manifest next update:     Sat 14 Jun 2025 09:01:00 +0000
Files and hashes:         1: 0y0AA2jB1U8Ip3gsB2c7aKk-38U.crl (hash: b5KVR69xjIsIC1CNEAS/VWyzhMD9rsvkKt0istRb9VA=)
                          2: jQ4CExkfR5inS0zDHfJTtnlJ6V8.roa (hash: GXyBOWfkGPF9vLeodoo4anr9TA244Yte3dkyFGm9PtM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0y0AA2jB1U8Ip3gsB2c7aKk-38U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 09:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:85:5e:1e:11:53:52:29:b5:78:c2:82:fb:55:0e:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d32d000368c1d54f08a7782c07673b68a93edfc5
        Validity
            Not Before: Jun 13 09:01:00 2025 GMT
            Not After : Jun 14 09:01:00 2025 GMT
        Subject: CN=99a0ef131989b0771ce9a7b483d5aa2332473280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7b:f9:fc:3f:ab:5e:f6:f3:b1:08:fc:c8:34:
                    bf:84:dd:22:a7:58:cd:6b:2f:88:f9:56:de:52:ce:
                    96:f6:f4:a2:69:45:30:3a:71:f0:9f:44:ba:f3:ee:
                    58:46:86:15:92:33:62:6c:04:c4:5a:a3:5d:be:16:
                    f9:0d:dc:60:a5:2d:f5:c0:27:42:bd:62:d1:be:6e:
                    57:cb:14:b9:b3:95:e0:c6:19:46:34:5a:57:2e:fc:
                    2b:30:d0:5c:8d:73:3a:c7:e7:bd:e2:4b:46:ba:e6:
                    af:94:20:eb:99:75:db:b6:aa:3c:0b:d2:3e:61:9d:
                    d1:da:70:fd:75:63:3a:41:8b:a7:0f:47:e4:4f:6c:
                    f2:a0:75:c9:d7:4b:67:17:da:40:b7:fa:09:b7:8c:
                    ad:c6:b4:a2:d4:66:7e:4f:79:83:67:87:fe:cd:ed:
                    f1:05:97:5a:ce:f8:14:ad:c3:88:50:4e:22:1d:1a:
                    ac:b1:9a:a2:51:c2:8a:38:7e:d7:4a:df:2f:20:4c:
                    ab:a1:60:00:18:7a:49:72:cb:33:93:99:35:1e:50:
                    7e:57:f7:ae:9a:3e:77:1d:7a:da:f3:12:18:15:dc:
                    1f:7c:44:aa:5e:be:d8:07:23:19:31:70:b0:e7:dc:
                    28:5c:4f:1b:b7:d8:56:a3:bd:3e:4e:e4:cc:a9:0a:
                    0f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A0:EF:13:19:89:B0:77:1C:E9:A7:B4:83:D5:AA:23:32:47:32:80
            X509v3 Authority Key Identifier:
                keyid:D3:2D:00:03:68:C1:D5:4F:08:A7:78:2C:07:67:3B:68:A9:3E:DF:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y0AA2jB1U8Ip3gsB2c7aKk-38U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:0a:b3:b7:6d:c6:50:33:21:04:8f:0f:b6:41:f4:61:aa:97:
         34:33:b0:db:e4:f7:cd:d9:83:63:ac:db:3a:5e:77:b3:2f:49:
         89:04:ea:90:12:7b:f8:07:33:e2:d2:65:92:87:95:6f:48:ff:
         9d:01:c0:31:19:ac:99:78:d7:f4:15:50:af:c1:a8:b5:17:ad:
         9e:ad:8a:d2:9c:7c:2b:cc:0e:9d:0f:ca:b6:e3:29:0b:f3:a0:
         1c:0e:5a:55:86:22:0b:28:1e:be:84:03:64:c1:79:a3:32:84:
         cc:2c:01:b4:68:79:95:bb:d2:ab:9d:72:0d:ef:35:16:98:cd:
         1c:40:d6:4b:57:c2:51:a1:19:88:a0:eb:73:f6:d0:10:7f:5e:
         60:46:a9:10:94:89:d5:ea:02:e5:a3:d1:5b:13:c2:94:2c:46:
         7b:21:ad:6d:5e:6d:a8:31:83:42:c5:ec:ef:08:6a:8e:22:a3:
         0a:47:d6:e4:51:8b:be:a7:e9:86:30:0a:61:41:e5:7e:8f:9f:
         91:f8:fc:25:55:13:71:bb:a4:a6:57:f1:2d:f2:96:76:56:53:
         92:67:78:2d:19:e3:03:14:13:12:c4:a7:98:d2:94:4f:11:d4:
         b5:d3:2d:c4:2e:40:cd:e0:71:31:d6:4d:8a:b5:7b:1b:d7:1f:
         d8:56:72:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:22:31 2025 by rpki-client