Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
File:                     Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft (raw, json)
Hash identifier:          mWQmGe2urHu6f6VnK7uIodpdvLsnALZYDpwRnwTPEk0=
Subject key identifier:   7D:F5:C5:EF:C5:A0:F9:07:39:57:36:9C:09:84:EB:7E:5C:0E:AC:AC
Authority key identifier: 0E:36:AA:D7:33:5F:34:E4:CD:82:94:23:BE:B0:89:C4:E0:A4:E8:74
Certificate issuer:       /CN=0e36aad7335f34e4cd829423beb089c4e0a4e874
Certificate serial:       0198816718B4BD4013D11C2997CB23C08A97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
Manifest number:          161F
Signing time:             Wed 06 Aug 2025 22:01:14 +0000
Manifest this update:     Wed 06 Aug 2025 22:01:14 +0000
Manifest next update:     Thu 07 Aug 2025 22:01:14 +0000
Files and hashes:         1: 8o1O-t_WKzJXOkGFsMQUN6blBp0.roa (hash: KBCGb1hk/sBmmTgro2o9IaPB/nx00oBvONm6CxD0Y2w=)
                          2: Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl (hash: GJIi2aJtH2GnUog4aX+PJb6XOCnh3TcpYa/QzhVKfUg=)
                          3: aW93vIod8bw9akpUiGgWH-EgLiE.roa (hash: qyblENK3boODcPRYexEWYW0qmMFYuF1Qh/Vo8m2KhS0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:67:18:b4:bd:40:13:d1:1c:29:97:cb:23:c0:8a:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e36aad7335f34e4cd829423beb089c4e0a4e874
        Validity
            Not Before: Aug  6 22:01:14 2025 GMT
            Not After : Aug  7 22:01:14 2025 GMT
        Subject: CN=7df5c5efc5a0f9073957369c0984eb7e5c0eacac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f6:fb:b2:ed:5a:8d:cd:d3:3c:07:01:20:4a:
                    af:42:95:7b:6b:b9:82:e3:68:a8:d0:3e:cb:29:d8:
                    12:11:54:a0:d7:de:68:21:e4:35:1f:e6:aa:8e:86:
                    73:63:57:cc:65:9c:12:f1:26:cf:bd:a5:0e:2a:1f:
                    20:5e:d1:fe:52:69:f5:a7:9f:52:6f:7f:e2:88:83:
                    cb:d2:21:9e:df:1d:0e:76:36:8c:c9:f1:c6:30:7f:
                    62:94:51:d4:90:3c:aa:f4:d1:c5:f0:4c:86:32:20:
                    63:57:26:da:f5:b0:64:de:28:3a:02:5d:90:59:61:
                    22:a9:20:71:7a:c3:ff:c2:24:43:da:b1:0b:ce:10:
                    00:99:c6:13:56:fd:93:f4:24:d5:7d:df:e1:a5:70:
                    05:3c:0e:8a:b1:7f:12:94:c0:39:93:6d:67:c1:98:
                    11:50:da:75:e6:a8:fa:37:ce:d5:fd:27:09:fa:fe:
                    4c:7c:09:ba:1e:2a:a1:3b:af:f0:ea:cd:66:f5:5c:
                    28:75:c8:7d:be:d3:fb:d6:4a:fe:12:e3:e2:59:98:
                    3a:1b:00:37:9e:7f:cf:e2:0d:55:f2:1c:6b:a3:8c:
                    81:86:8f:67:9a:36:f5:42:94:42:5e:60:cd:05:50:
                    10:7b:be:80:a0:32:c6:a5:2d:e3:16:49:ce:2b:7a:
                    a5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F5:C5:EF:C5:A0:F9:07:39:57:36:9C:09:84:EB:7E:5C:0E:AC:AC
            X509v3 Authority Key Identifier:
                keyid:0E:36:AA:D7:33:5F:34:E4:CD:82:94:23:BE:B0:89:C4:E0:A4:E8:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:c8:da:96:4a:c1:cd:d7:40:f3:7b:10:1c:c8:28:1b:93:79:
         61:f1:81:bc:79:11:5e:e5:e2:21:b3:3b:0f:e3:4e:e8:20:60:
         1f:4d:2f:1a:93:85:97:62:77:db:d9:4a:b3:f9:60:fb:78:ed:
         19:d4:89:39:b1:83:6b:9b:75:64:90:72:15:78:6f:bf:75:58:
         76:36:0c:7e:0b:2d:4d:eb:91:ea:72:0a:86:49:21:02:e8:c4:
         ad:05:04:5b:4b:73:4a:8f:25:fc:d4:f9:e2:eb:f2:41:68:6a:
         1d:62:b5:7f:96:16:c5:8d:e5:49:72:86:07:ee:c2:ce:07:ef:
         67:82:13:7d:d4:74:59:d4:9f:ad:70:ca:df:fb:1d:43:fb:40:
         da:73:d9:32:a4:9b:9c:d0:7a:55:38:29:e8:42:e5:50:66:2a:
         8c:c7:4e:ab:0c:66:d9:7a:aa:88:bc:2b:8b:34:c6:a6:f5:1b:
         31:90:0a:39:55:1b:f5:7a:4b:22:91:fb:b6:ef:c0:d6:45:08:
         52:6c:f7:60:8f:6e:c1:4b:11:8a:c9:a4:36:16:64:96:92:be:
         1e:23:83:e0:3c:b1:60:b3:99:27:2b:29:ef:71:40:4b:31:c4:
         e8:b3:fa:9d:33:fd:3b:2c:9a:9b:13:8e:ca:89:f5:9f:47:27:
         7f:f8:ad:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:59:45 2025 by rpki-client