Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft
File:                     DpgibNz3QdzIpCplmos94hmBiPk.mft (raw, json)
Hash identifier:          Nr73fAJZJRYmE72m5bqWZPTTulMGSOG1upOLkeCNTuI=
Subject key identifier:   5D:58:3C:40:75:A1:0B:71:1B:F6:C4:CE:48:80:7A:3D:E6:11:8C:A0
Authority key identifier: 0E:98:22:6C:DC:F7:41:DC:C8:A4:2A:65:9A:8B:3D:E2:19:81:88:F9
Certificate issuer:       /CN=0e98226cdcf741dcc8a42a659a8b3de2198188f9
Certificate serial:       0197684E037D106C23AF8CE87760C95F6C47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DpgibNz3QdzIpCplmos94hmBiPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft
Manifest number:          1290
Signing time:             Fri 13 Jun 2025 08:00:32 +0000
Manifest this update:     Fri 13 Jun 2025 08:00:32 +0000
Manifest next update:     Sat 14 Jun 2025 08:00:32 +0000
Files and hashes:         1: C9YabYyYTwF76KS0OdJKS7svqe8.roa (hash: OaSH1c1TCgLCLOEvTQ5fN3rE7i93/Zx2eO7IyYukR98=)
                          2: DpgibNz3QdzIpCplmos94hmBiPk.crl (hash: 7U4h2d8iRP2pmFaf5Fwc/ObWLzP5D2IgLwumNbOKLVs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DpgibNz3QdzIpCplmos94hmBiPk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 08:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:4e:03:7d:10:6c:23:af:8c:e8:77:60:c9:5f:6c:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e98226cdcf741dcc8a42a659a8b3de2198188f9
        Validity
            Not Before: Jun 13 08:00:32 2025 GMT
            Not After : Jun 14 08:00:32 2025 GMT
        Subject: CN=5d583c4075a10b711bf6c4ce48807a3de6118ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1f:15:fb:ba:32:a4:de:53:58:42:91:a3:38:
                    5c:66:2e:de:df:96:6b:b8:aa:7f:e8:d5:8f:61:bd:
                    18:91:56:35:3e:03:4c:33:fa:fd:f4:e3:59:d1:19:
                    f2:37:aa:ef:62:74:39:aa:04:8a:e0:32:21:db:0a:
                    c2:58:51:23:27:2b:5a:d1:b8:cd:a5:85:f1:3a:b3:
                    5e:48:e4:eb:70:ea:f3:24:24:c2:67:3d:14:f1:8e:
                    59:9e:06:d7:0b:bf:74:4e:4f:fb:eb:dc:b6:da:02:
                    cb:41:7d:3f:2f:eb:d3:99:7c:07:9b:8d:cb:ec:60:
                    b8:dd:b8:18:0e:c0:3f:97:25:57:a7:e6:ae:73:de:
                    40:03:03:1e:3a:a2:60:9d:17:90:02:45:d3:20:51:
                    7f:24:71:da:03:4a:6e:fe:69:d3:eb:f0:04:c4:f4:
                    3b:07:84:d1:0d:a8:58:47:13:c4:05:5d:28:bf:f9:
                    80:79:aa:f5:83:ad:a9:dc:9d:d7:5d:c6:d5:23:29:
                    0e:b8:54:8c:77:a7:9d:43:64:c4:ab:df:54:d9:4d:
                    8b:6a:5a:b6:26:57:f7:a5:c3:87:5d:c3:8c:b8:0a:
                    60:eb:a6:46:0e:f0:72:be:01:b7:6e:23:40:e2:c8:
                    f8:62:b8:87:08:67:5c:8f:12:cb:dd:ca:20:27:86:
                    c0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:58:3C:40:75:A1:0B:71:1B:F6:C4:CE:48:80:7A:3D:E6:11:8C:A0
            X509v3 Authority Key Identifier:
                keyid:0E:98:22:6C:DC:F7:41:DC:C8:A4:2A:65:9A:8B:3D:E2:19:81:88:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpgibNz3QdzIpCplmos94hmBiPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:b6:2a:db:b1:1a:8f:66:a0:2e:c1:a9:3e:2d:36:ed:0f:93:
         ca:1e:11:5a:1c:c0:c2:a2:ab:64:41:c7:26:7d:e2:6f:10:ee:
         e7:f5:98:e4:3f:29:99:69:d5:39:d3:f3:18:03:4b:da:63:49:
         6c:55:22:77:17:8c:28:26:ab:10:ba:f7:62:a9:92:ea:e6:7a:
         41:da:c4:d2:73:de:65:8a:eb:af:ef:b1:91:a0:f9:87:a2:cd:
         8d:85:73:a9:f5:9a:19:9a:41:82:64:a6:64:e8:8f:73:8b:ef:
         c4:dc:24:b6:c6:90:90:ae:b9:23:80:99:ef:7e:e4:19:24:71:
         e4:94:c1:f6:03:39:06:2a:af:72:84:a9:8f:4e:51:fd:16:b2:
         73:67:96:46:39:8a:42:52:67:1e:ef:bd:05:1a:75:a6:d4:20:
         aa:f0:17:bd:8e:18:b3:e4:5c:2a:3c:79:f9:d5:53:34:25:a6:
         de:f7:19:98:6d:f5:64:fb:13:95:9d:32:7a:f3:e1:d7:d7:b3:
         aa:eb:96:3a:c6:d0:89:f0:87:a0:13:bc:71:3c:8e:52:e0:4c:
         af:c5:cd:da:37:d8:a3:39:7d:de:00:0e:c6:d2:f1:3a:f8:8d:
         34:fa:42:81:fe:c4:6f:77:1a:61:52:f6:3d:f5:48:0a:cf:78:
         bd:bc:e3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:18:04 2025 by rpki-client