Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
File:                     0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft (raw, json)
Hash identifier:          z+nZTceMRuZAUBJOWmR1T0A/6ufj8EmAnVqfNnxNi5A=
Subject key identifier:   20:10:2C:A5:A0:57:88:D7:0F:EC:A7:91:BF:EB:DA:58:09:CD:7D:80
Authority key identifier: D0:A1:09:44:70:4D:72:3C:8D:D9:CE:73:0C:AB:F9:6F:E2:6B:AB:25
Certificate issuer:       /CN=d0a10944704d723c8dd9ce730cabf96fe26bab25
Certificate serial:       01988B0ED8830802568DCB68D7512B1A7EA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
Manifest number:          0D2E
Signing time:             Fri 08 Aug 2025 19:01:02 +0000
Manifest this update:     Fri 08 Aug 2025 19:01:02 +0000
Manifest next update:     Sat 09 Aug 2025 19:01:02 +0000
Files and hashes:         1: 0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl (hash: ypN/zOFiTtu3T9wIVxIQyj/kpNfMHWBWWWr3HELBvqE=)
                          2: Ts2grdh3WhIBgvviR4SebdJHIVA.roa (hash: gCLhNsBpATqkGaeD3Tm7dpZpLjmibJqVgNt4Igote+Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:0e:d8:83:08:02:56:8d:cb:68:d7:51:2b:1a:7e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0a10944704d723c8dd9ce730cabf96fe26bab25
        Validity
            Not Before: Aug  8 19:01:02 2025 GMT
            Not After : Aug  9 19:01:02 2025 GMT
        Subject: CN=20102ca5a05788d70feca791bfebda5809cd7d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:dd:1e:a5:b6:43:b2:a9:9a:96:2f:2c:bf:28:
                    0f:64:fb:d6:37:34:7d:62:90:fb:47:94:b9:29:d8:
                    35:2b:b6:45:af:19:5d:4c:d2:2d:d0:74:be:47:bd:
                    52:8a:67:7b:d9:5f:59:73:6e:a0:73:0e:ed:42:e0:
                    a2:0c:f4:76:c0:5e:a2:cb:fd:ec:ae:85:7c:49:3d:
                    22:cf:00:9a:f4:85:17:0a:ab:d9:d6:be:ef:47:69:
                    d9:81:50:f6:fb:d2:94:07:75:ba:2a:81:a6:18:e0:
                    9f:c5:f0:68:36:1c:f0:0f:37:c3:35:b6:b2:7c:96:
                    6b:03:22:d2:2b:3f:86:0f:5f:15:67:7f:f8:b2:04:
                    b9:ed:69:c1:71:de:dc:ef:5c:76:b3:e0:af:ae:4a:
                    ab:7b:9d:d2:8d:1c:35:6e:fb:dc:ab:57:60:5c:91:
                    a2:6f:24:3b:41:9d:c0:a8:9d:72:17:c2:83:19:fa:
                    1b:dc:e7:1d:60:b3:3e:df:aa:d5:af:b1:5b:b8:d5:
                    5c:3f:58:d8:27:22:cb:23:34:0d:67:14:b0:6c:95:
                    1b:52:be:09:46:ee:ae:3c:9d:f9:51:21:f0:1a:a2:
                    47:ad:a6:5f:1f:5c:b4:5d:02:46:e9:c8:6b:28:04:
                    6c:40:6d:c2:66:d3:13:a0:49:39:a9:d4:41:f5:65:
                    d8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:10:2C:A5:A0:57:88:D7:0F:EC:A7:91:BF:EB:DA:58:09:CD:7D:80
            X509v3 Authority Key Identifier:
                keyid:D0:A1:09:44:70:4D:72:3C:8D:D9:CE:73:0C:AB:F9:6F:E2:6B:AB:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:42:3e:60:22:e5:e7:cd:f8:41:3b:14:3e:92:0c:bd:20:db:
         4c:da:7b:a9:45:a4:d4:ea:93:89:13:1d:e2:7d:e9:37:e2:81:
         4d:ce:06:9e:13:b8:16:90:e8:28:af:dd:bb:a5:c2:8b:d0:9f:
         4f:28:fe:e9:8b:af:c1:c7:bd:49:53:f8:0e:6f:66:a9:19:cd:
         11:8e:4a:95:a4:12:2e:50:15:2b:f7:83:68:b0:29:d1:90:f2:
         5f:58:53:2e:66:9b:ac:68:44:00:36:7d:05:37:77:3f:a2:df:
         07:3e:18:ed:b0:f0:69:89:bf:aa:4b:1d:2f:49:6b:4a:36:75:
         cd:33:3c:f8:c6:55:c6:0f:a1:c3:d9:34:7f:2c:98:68:5d:c0:
         5a:fb:80:30:79:6d:16:d1:71:1a:e1:cd:f2:9b:3d:57:dc:68:
         8c:f8:de:d1:bb:b8:b2:d5:79:63:9e:9b:19:8a:1b:ba:2f:a1:
         7e:69:da:52:70:11:97:00:ae:4a:ef:53:5a:f4:f0:37:6d:2f:
         9e:d6:9f:d5:a1:83:fe:fa:75:24:6f:e2:ef:5f:fa:a9:4c:3e:
         36:66:fd:df:7e:40:17:d1:6e:f9:61:56:75:74:98:8a:13:4a:
         06:02:82:99:b8:1e:61:12:1a:41:2c:c0:5a:61:f6:7d:73:01:
         2e:de:2e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:12:23 2025 by rpki-client