Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
File:                     0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft (raw, json)
Hash identifier:          9iIIrDAnISFVRzJFq1q6A1yZo0oAEclld1NdvN6bILw=
Subject key identifier:   6F:0E:36:D5:7A:6A:3C:94:C0:F9:11:ED:60:15:AA:F7:1A:E5:75:FD
Authority key identifier: D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08
Certificate issuer:       /CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
Certificate serial:       01987306C1D5EE7AABB3AF6CB43E79382F43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
Manifest number:          13CA
Signing time:             Mon 04 Aug 2025 03:01:19 +0000
Manifest this update:     Mon 04 Aug 2025 03:01:19 +0000
Manifest next update:     Tue 05 Aug 2025 03:01:19 +0000
Files and hashes:         1: 0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl (hash: +Ija8MItk10qnnNw1yJPkirsSDa19BFFUKhe9C5XwHE=)
                          2: vHnKRxUajbywNAqL6nOx-jDQRUM.roa (hash: 9L1D0lkWg2QABU5Zj6IAqZoeAKA6O0lNRb8Xz0hsQns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:06:c1:d5:ee:7a:ab:b3:af:6c:b4:3e:79:38:2f:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
        Validity
            Not Before: Aug  4 03:01:19 2025 GMT
            Not After : Aug  5 03:01:19 2025 GMT
        Subject: CN=6f0e36d57a6a3c94c0f911ed6015aaf71ae575fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ef:13:32:49:de:a2:77:f4:2a:ab:65:9d:35:
                    b0:b1:61:c3:dc:4d:72:16:0c:4d:2d:47:68:c0:d2:
                    69:26:32:02:33:5a:06:6b:16:a1:60:01:7b:72:86:
                    0c:3b:35:9c:2b:b5:74:dc:73:10:9d:48:33:8d:1e:
                    fc:12:ea:f9:ba:d9:ee:81:8e:40:68:50:87:4a:cf:
                    8d:ae:20:08:de:9c:3c:a8:72:c7:04:f6:80:27:a2:
                    56:02:6d:a2:ce:6c:be:b1:74:ac:a9:cf:0a:76:e7:
                    bc:cd:bb:71:38:77:91:d0:43:7e:f1:70:58:ae:ef:
                    b6:2f:53:bc:c1:6c:3d:b6:94:15:8a:14:bf:43:06:
                    6f:11:e9:3b:25:3b:24:5e:33:1c:fb:1b:9d:59:51:
                    1f:f9:91:0a:23:31:2b:9a:12:62:a4:7b:ed:e8:f1:
                    50:95:2b:fd:e3:56:ff:a6:7a:55:d9:de:6d:58:f7:
                    a6:86:83:36:e5:c5:8d:d4:79:92:bd:ab:38:24:0e:
                    2c:7f:be:62:61:60:b0:0c:6f:fc:e8:e2:d5:21:a4:
                    00:a5:ff:b2:af:6a:8a:46:40:fb:02:b3:49:ca:c6:
                    30:fb:22:f8:af:df:1f:8c:27:ce:6d:72:d0:09:ae:
                    b7:a7:01:73:b0:89:07:3f:d2:05:9e:7e:25:ef:22:
                    27:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:0E:36:D5:7A:6A:3C:94:C0:F9:11:ED:60:15:AA:F7:1A:E5:75:FD
            X509v3 Authority Key Identifier:
                keyid:D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:40:1f:55:9b:13:8b:76:e3:27:51:2c:fa:59:78:4e:ae:6d:
         96:d5:73:db:18:4a:ab:50:b5:6b:80:f1:d5:33:0f:f3:47:37:
         52:f5:a3:bf:e9:44:0d:7a:71:ef:96:2b:50:fc:79:72:45:8f:
         50:c1:48:eb:05:3e:8f:93:1e:41:3e:9a:e7:72:86:ee:55:b4:
         e8:3d:a9:5c:3f:de:0e:df:f2:9d:0e:27:f6:a9:b0:4d:7e:0c:
         ee:4c:f8:05:23:88:cd:7c:5d:2e:2f:19:86:4a:a5:b5:07:2c:
         42:a6:fd:e6:24:82:5c:1e:c4:c3:2e:a6:c5:93:58:15:af:72:
         29:d7:4c:86:cc:e8:04:77:2e:74:aa:b0:ea:f8:05:39:d2:72:
         b6:9c:30:8d:75:ed:01:96:05:1e:64:39:18:2e:46:f9:b5:32:
         ce:0a:ae:c1:13:89:62:e5:e1:63:0a:7e:8e:55:14:de:36:05:
         d4:10:4e:b5:38:bb:62:b2:25:5e:f9:34:a0:05:25:04:87:3f:
         40:e2:f7:c6:6e:06:70:99:82:db:b2:e7:25:3d:68:04:ea:81:
         b9:90:44:e4:70:8e:36:26:e1:50:ef:62:59:01:f5:aa:1e:c5:
         f5:c7:75:24:c2:9c:5d:6a:dc:7d:c2:ba:4f:0a:14:80:4f:c9:
         fa:9d:74:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:55 2025 by rpki-client