Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
File:                     dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft (raw, json)
Hash identifier:          2/Fk0vM4H93IID5KyZvkSGJYjON4o2UVtFj4EYkpRlM=
Subject key identifier:   FD:57:49:79:DB:FA:2E:32:26:5D:04:59:DA:10:55:F9:57:E8:6E:53
Authority key identifier: 75:B3:45:56:2D:57:18:B6:C4:B2:06:B1:AE:30:4F:C6:84:36:AD:B2
Certificate issuer:       /CN=75b345562d5718b6c4b206b1ae304fc68436adb2
Certificate serial:       01976F6302C96DFBF4B7194BE92205EBE4CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
Manifest number:          1592
Signing time:             Sat 14 Jun 2025 17:00:49 +0000
Manifest this update:     Sat 14 Jun 2025 17:00:49 +0000
Manifest next update:     Sun 15 Jun 2025 17:00:49 +0000
Files and hashes:         1: dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl (hash: FUt6Tyct/s7mHh3im8nHDTBAnrNQe8EAqKLZMXjU+Uk=)
                          2: tP4Nr3k13Af3UtlucGdOvIgy7uY.roa (hash: ofrFnG5ByBdxFiFLthIkeYVusoIIsNMbVNLs6rFZMMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:63:02:c9:6d:fb:f4:b7:19:4b:e9:22:05:eb:e4:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b345562d5718b6c4b206b1ae304fc68436adb2
        Validity
            Not Before: Jun 14 17:00:49 2025 GMT
            Not After : Jun 15 17:00:49 2025 GMT
        Subject: CN=fd574979dbfa2e32265d0459da1055f957e86e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:30:df:89:99:4b:11:02:04:b8:5a:79:74:ec:
                    5c:86:db:1f:0b:02:a3:5b:26:ec:3d:b8:76:bf:9b:
                    af:44:cf:d5:1b:80:55:09:3d:19:93:cf:14:72:a1:
                    f2:07:79:aa:a3:70:fc:9f:10:4a:7a:e8:a7:95:c8:
                    96:b4:31:1a:0c:0e:dd:3e:21:77:61:56:ec:e5:ee:
                    62:74:a3:90:00:24:8a:02:06:f0:75:a5:b7:f4:1d:
                    eb:99:e4:0b:1a:72:82:e4:56:d8:4b:34:08:52:07:
                    46:88:9b:9b:62:c3:ce:15:4e:90:6c:29:37:87:2f:
                    78:30:c7:17:a3:a2:05:08:ef:27:53:45:2c:2b:b2:
                    b6:6a:b9:ea:5b:ad:34:41:0f:df:13:2a:f0:fe:ee:
                    34:95:29:e5:df:e9:ff:1b:8b:d5:87:ba:a1:8d:b5:
                    46:4b:df:09:eb:90:21:0f:89:81:46:f6:33:3f:56:
                    5f:44:96:41:c7:f6:6c:16:90:49:c0:1a:84:2e:b9:
                    fc:a5:dd:98:7b:46:9f:66:94:c5:da:d5:ab:d2:a5:
                    7f:51:d7:f3:d9:7a:62:59:7f:c1:1c:2a:3c:1b:ee:
                    d7:42:d9:8f:83:28:32:8e:ba:bb:f9:33:ef:aa:81:
                    bd:05:fa:af:62:6e:35:04:7b:12:22:e8:5a:55:33:
                    a0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:57:49:79:DB:FA:2E:32:26:5D:04:59:DA:10:55:F9:57:E8:6E:53
            X509v3 Authority Key Identifier:
                keyid:75:B3:45:56:2D:57:18:B6:C4:B2:06:B1:AE:30:4F:C6:84:36:AD:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:66:63:ce:6a:e0:9c:e1:14:3f:ec:45:07:1d:53:66:43:9d:
         35:95:a2:49:5a:f5:9d:d8:3b:e2:62:ac:c2:a1:40:e7:16:59:
         2c:f5:72:e8:7c:cc:8b:f5:09:32:d1:1b:00:d3:d6:4d:36:5e:
         f2:b9:19:49:51:b6:af:13:ca:70:ab:53:9d:af:36:ab:a9:fa:
         6c:9a:02:ea:c9:de:c5:d0:4a:df:f4:1b:a7:9b:03:fc:92:14:
         d0:fd:84:7d:4e:22:71:84:b8:2d:f9:d9:3c:72:c4:67:1f:bb:
         8b:71:61:db:40:0f:88:62:6f:53:e3:f4:19:3c:5f:fb:dc:8a:
         e4:a2:cb:e8:b3:f5:98:59:ec:d5:4a:3e:c1:0d:5b:75:bb:99:
         11:41:0c:31:17:ad:2a:8a:45:bc:3e:f6:ac:44:ca:66:43:bb:
         8b:5a:93:ea:ff:e5:9c:ce:a6:34:bd:84:7f:04:4c:86:4a:b8:
         fe:c4:8f:26:a9:29:bd:f0:44:eb:b8:61:de:67:12:fd:0e:aa:
         51:ca:df:90:4b:d3:89:db:6b:bf:90:28:31:90:e0:19:ee:ea:
         6e:43:15:a1:00:a7:99:dd:d1:d4:1e:76:63:2f:8a:3a:96:a3:
         3e:f7:39:48:4d:c7:c9:7c:f6:12:c5:c4:46:6b:f8:d9:a7:5f:
         2a:ff:06:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:51:22 2025 by rpki-client