Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
File:                     D1IdJpUmx67jjk-yRUsvCH9p_rc.mft (raw, json)
Hash identifier:          EQgRWE8gASNd3GHw9R8vGrlo+SdczfR9UmI+SKm3ris=
Subject key identifier:   03:A7:6A:F1:C1:99:C0:FB:D4:08:DF:5A:4F:56:75:B0:DC:83:A7:79
Authority key identifier: 0F:52:1D:26:95:26:C7:AE:E3:8E:4F:B2:45:4B:2F:08:7F:69:FE:B7
Certificate issuer:       /CN=0f521d269526c7aee38e4fb2454b2f087f69feb7
Certificate serial:       0197733FB53FAB37AD6C1C574AF4249FFCDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
Manifest number:          057C
Signing time:             Sun 15 Jun 2025 11:00:44 +0000
Manifest this update:     Sun 15 Jun 2025 11:00:44 +0000
Manifest next update:     Mon 16 Jun 2025 11:00:44 +0000
Files and hashes:         1: D1IdJpUmx67jjk-yRUsvCH9p_rc.crl (hash: Z1nvXR25zO/hJkpkyasAZP+3MaNqnmJF1Evh0sIVyMY=)
                          2: LlemLUDCd84kXEFGKBA1pEcpzVU.roa (hash: JfcpiQRrDVeOVEeINVti/ZaYZkfMnqCLAWmq46zuOoM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 11:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:73:3f:b5:3f:ab:37:ad:6c:1c:57:4a:f4:24:9f:fc:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f521d269526c7aee38e4fb2454b2f087f69feb7
        Validity
            Not Before: Jun 15 11:00:44 2025 GMT
            Not After : Jun 16 11:00:44 2025 GMT
        Subject: CN=03a76af1c199c0fbd408df5a4f5675b0dc83a779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:19:c5:cf:88:c6:18:39:0e:85:11:f9:fd:33:
                    58:50:2e:d6:51:98:8f:92:a0:fc:2b:b1:d2:43:c4:
                    8f:fa:9f:e4:95:72:fb:6d:38:5d:c9:e5:b4:ba:db:
                    02:2f:2d:db:b0:61:26:89:d7:74:3f:8d:57:a3:b3:
                    22:58:22:c6:bf:4d:53:a7:2e:4a:66:c3:8e:ad:99:
                    93:43:bc:79:ee:54:e3:59:82:8e:56:26:a1:38:d6:
                    31:48:57:73:f3:8e:a9:7e:1c:a3:f1:e5:1e:b3:ec:
                    55:f2:81:ab:d3:a5:e5:c9:c4:bc:2e:3d:fc:e3:89:
                    99:00:fe:02:27:db:84:e6:15:48:36:7c:59:44:c0:
                    05:1a:79:ab:5b:cc:fa:e0:07:fd:42:fd:72:ef:79:
                    05:26:50:e8:df:a5:7a:c2:59:96:f2:b3:8b:11:4f:
                    91:81:f5:d9:8d:6d:5f:8d:f9:02:0a:21:16:51:9b:
                    31:a6:03:7e:22:2e:2a:18:ef:ee:8c:ba:b2:27:df:
                    2c:a3:bb:f1:c1:ee:de:cd:06:76:2f:56:04:ac:46:
                    f9:17:a5:21:3b:30:7e:b4:35:27:b1:9c:84:f5:e6:
                    2f:5a:98:23:6b:03:69:7c:c9:1a:c4:ec:19:f4:63:
                    c1:bb:a8:11:b0:bf:33:ee:50:79:ba:bf:77:ee:47:
                    79:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A7:6A:F1:C1:99:C0:FB:D4:08:DF:5A:4F:56:75:B0:DC:83:A7:79
            X509v3 Authority Key Identifier:
                keyid:0F:52:1D:26:95:26:C7:AE:E3:8E:4F:B2:45:4B:2F:08:7F:69:FE:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:f1:27:01:19:de:15:cf:e5:18:fe:22:41:35:8c:f0:a0:da:
         66:15:e0:37:2b:cf:89:09:1f:53:39:d9:ec:61:1e:3e:22:ed:
         b5:e3:af:f9:26:9c:eb:d6:8c:c0:ea:a8:9e:90:98:27:f3:02:
         44:0f:68:71:1c:d9:8e:31:03:26:97:59:f0:5c:77:3c:fa:89:
         2f:60:28:e1:9f:da:91:d8:98:0c:66:ac:87:9b:29:5f:86:5f:
         6e:7c:3e:46:c3:7c:ca:6b:ae:ef:b6:9b:63:51:f7:8a:ea:dc:
         cb:3e:50:82:11:5a:15:1a:d1:6d:c5:6c:c7:27:50:bc:55:63:
         1a:f6:8f:d8:2d:3e:31:cf:74:2b:6b:4f:e5:83:89:3f:e0:6e:
         0c:2d:da:49:d4:f3:cd:8b:6d:52:f9:f3:08:88:6b:34:6c:70:
         96:57:2a:67:da:02:4f:c3:cf:b8:cb:68:c8:e4:47:68:b8:1a:
         01:e8:89:64:ff:6a:d7:90:a6:cb:fc:b6:6f:03:be:58:17:05:
         dc:30:11:21:2b:5f:4a:ad:15:79:eb:93:da:af:3f:e6:a7:4e:
         8d:ad:ed:6b:51:f8:f4:b0:c5:53:e4:37:fa:28:67:e1:7e:cf:
         42:5d:a1:b9:93:d0:c5:9d:f1:5e:46:6c:da:27:08:f2:5a:61:
         df:03:e9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:02:05 2025 by rpki-client