Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
File:                     DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft (raw, json)
Hash identifier:          xY61YBhzbbhoJtJIh6H09TkMK3mAFoJE5KGsEiC0efo=
Subject key identifier:   47:12:EF:D9:A3:50:8B:C7:7E:49:60:61:C4:13:92:F6:2B:22:4E:B1
Authority key identifier: 0E:51:51:67:67:D9:A8:50:8C:6E:14:D5:8D:EE:FF:BF:AB:80:80:DD
Certificate issuer:       /CN=0e51516767d9a8508c6e14d58deeffbfab8080dd
Certificate serial:       019873E3C881590CBD50E351934BE1C96CFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
Manifest number:          083C
Signing time:             Mon 04 Aug 2025 07:02:44 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:44 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:44 +0000
Files and hashes:         1: DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl (hash: wWqattlsO+udNQ4by3GjI/uZyXkPU258JB2wU1hdgi4=)
                          2: vyoLOYF7hsLBOGjck5t3unLW39g.roa (hash: zHMbGWldBzia3+X0+26y7vhQZZJp5fFWFDYQyTykG6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 07:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:c8:81:59:0c:bd:50:e3:51:93:4b:e1:c9:6c:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e51516767d9a8508c6e14d58deeffbfab8080dd
        Validity
            Not Before: Aug  4 07:02:44 2025 GMT
            Not After : Aug  5 07:02:44 2025 GMT
        Subject: CN=4712efd9a3508bc77e496061c41392f62b224eb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:54:72:c3:51:32:a1:d5:73:14:b9:e3:f5:d1:
                    bf:f3:35:cb:53:ac:f6:03:61:67:e4:e0:c3:fe:44:
                    87:52:3e:5d:09:32:f2:75:66:e3:b2:06:23:9e:ef:
                    4e:99:ad:96:52:7c:46:00:d9:a7:11:7a:53:a5:88:
                    00:be:26:7d:04:f2:71:5a:86:77:e5:24:80:fa:19:
                    39:3b:54:7c:2d:a1:40:fe:a4:66:77:c6:3f:f2:ff:
                    40:b9:15:20:a9:7d:cf:e2:05:23:86:0b:d9:29:37:
                    c2:61:11:d4:56:f6:02:bb:38:e5:f8:76:f2:af:7b:
                    e5:1a:c3:37:17:54:bd:96:c6:93:b0:2d:7b:26:9d:
                    96:ee:3e:5f:04:b9:ec:d8:de:d1:c5:2a:9e:7f:de:
                    d3:4e:48:88:12:ae:96:73:6f:4a:b6:96:97:64:6a:
                    07:5d:62:dd:93:ec:9f:de:8b:e7:f2:4a:38:8c:ad:
                    93:3e:db:8e:9f:15:9d:84:d1:8b:fc:e3:14:ef:00:
                    7c:ab:75:6b:3d:0a:95:93:c1:de:62:fe:67:df:71:
                    84:c9:a4:fa:33:6b:1e:e0:da:08:3c:a2:73:a4:cf:
                    b1:6f:5d:2c:b3:48:fe:04:6e:00:c7:b2:6e:60:b4:
                    62:03:ce:26:39:c0:e1:78:31:de:c0:92:e5:70:0b:
                    f0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:12:EF:D9:A3:50:8B:C7:7E:49:60:61:C4:13:92:F6:2B:22:4E:B1
            X509v3 Authority Key Identifier:
                keyid:0E:51:51:67:67:D9:A8:50:8C:6E:14:D5:8D:EE:FF:BF:AB:80:80:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:3c:b2:68:a3:ec:4c:0b:b3:ac:59:9d:46:1b:dd:c4:b9:e4:
         29:86:25:38:3f:2a:52:86:d3:0d:54:c8:b6:25:25:46:d5:ea:
         9a:83:76:8e:0f:f7:90:e4:7a:6d:2a:73:1e:eb:e6:87:41:ec:
         c1:63:57:de:eb:bb:5e:1e:9a:79:66:3f:30:ed:f1:5e:bb:e4:
         8c:8e:b1:37:a0:01:14:f9:a6:f6:52:e9:13:5f:bf:87:b3:34:
         ec:a2:7a:8f:a6:ca:a6:73:a0:e3:4e:f5:a8:64:57:9d:4e:26:
         0e:fb:70:80:e1:60:c1:1f:21:7d:50:99:78:e7:df:d9:98:28:
         03:47:ae:cb:c8:10:76:38:e1:f5:32:b9:e9:9f:3a:af:48:6c:
         1a:52:ae:71:63:6a:f1:7d:63:0e:67:5c:c8:e3:06:d4:7c:a1:
         56:66:be:ba:30:67:9a:ef:72:5f:be:59:a0:a8:20:13:74:7d:
         04:99:17:25:85:04:dd:85:cf:e9:11:64:c5:02:df:db:26:3f:
         b7:01:ed:f6:a7:5f:7a:5e:de:12:6c:21:26:49:1b:d3:88:21:
         d8:41:81:3a:bb:53:0b:e4:43:3f:4a:d1:39:28:d6:12:c1:c9:
         29:77:d5:83:77:fa:8a:08:5f:c1:fc:da:6b:19:76:a5:f8:0b:
         b8:e3:c1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:11:15 2025 by rpki-client