Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/11ugWU0GWrciRlz6MF7_jUFhf6g.mft
File:                     11ugWU0GWrciRlz6MF7_jUFhf6g.mft (raw, json)
Hash identifier:          OfWgJy2Ce29f6MNGzglKbhoDrpxB6ynbcTg3lJ8Ll/o=
Subject key identifier:   64:87:4C:0A:56:ED:9F:0A:1F:13:52:14:AB:69:91:F8:8F:BB:A9:6F
Authority key identifier: D7:5B:A0:59:4D:06:5A:B7:22:46:5C:FA:30:5E:FF:8D:41:61:7F:A8
Certificate issuer:       /CN=d75ba0594d065ab722465cfa305eff8d41617fa8
Certificate serial:       01987FE62DEDEE95A61C0B6A6BB44D9292DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/11ugWU0GWrciRlz6MF7_jUFhf6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/11ugWU0GWrciRlz6MF7_jUFhf6g.mft
Manifest number:          0CD3
Signing time:             Wed 06 Aug 2025 15:00:48 +0000
Manifest this update:     Wed 06 Aug 2025 15:00:48 +0000
Manifest next update:     Thu 07 Aug 2025 15:00:48 +0000
Files and hashes:         1: 11ugWU0GWrciRlz6MF7_jUFhf6g.crl (hash: 71QcICsWuvUxmECzKZAysh+29Uoe5ELegY3fitiSgN8=)
                          2: BZIfQV280o1RO6UXQb7qG3btz5c.roa (hash: yjsFnIbhow6GJJcPdKVr4HkLXwHEMiYNE9BzFU3IEyo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/11ugWU0GWrciRlz6MF7_jUFhf6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/11ugWU0GWrciRlz6MF7_jUFhf6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/11ugWU0GWrciRlz6MF7_jUFhf6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 14:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7f:e6:2d:ed:ee:95:a6:1c:0b:6a:6b:b4:4d:92:92:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d75ba0594d065ab722465cfa305eff8d41617fa8
        Validity
            Not Before: Aug  6 15:00:48 2025 GMT
            Not After : Aug  7 15:00:48 2025 GMT
        Subject: CN=64874c0a56ed9f0a1f135214ab6991f88fbba96f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:86:f1:fd:b3:a2:75:b4:58:3e:95:d1:ef:e7:
                    05:9d:5a:f0:a7:9b:ff:4b:36:b5:f8:97:af:82:f9:
                    37:12:81:0a:01:f1:0e:9a:ae:02:fa:47:74:ba:dc:
                    b0:54:41:74:cb:75:62:d8:3d:c1:99:45:ab:91:1b:
                    e3:f0:76:88:07:ec:12:50:09:6f:c1:11:75:89:5e:
                    8b:5c:ff:40:05:43:2a:0f:2c:b0:06:21:2e:5e:0c:
                    f4:dc:d4:9c:43:10:2c:46:df:18:94:ed:79:90:e7:
                    ee:61:25:79:46:81:d2:32:d4:df:f8:27:7e:bf:80:
                    12:40:ce:fe:ca:11:c4:9a:de:e5:83:cb:b6:9f:48:
                    49:fb:cd:56:03:9e:5b:68:c9:b9:07:24:48:7f:fa:
                    9d:bf:29:4c:bf:03:ab:7d:5a:01:8e:db:22:ca:3c:
                    b4:f0:4c:26:20:be:41:02:4a:06:ab:60:f8:fd:c3:
                    56:e8:bf:8b:43:a9:a2:83:88:36:2e:5b:b0:e1:a4:
                    6b:11:93:15:b3:db:16:7e:cf:57:56:9e:c2:e6:9b:
                    80:ca:6c:7a:37:60:13:94:68:43:76:9c:d4:51:3b:
                    c6:67:c0:ab:e0:db:df:1b:3a:89:ad:ca:4e:dd:78:
                    cb:4f:5a:91:be:dc:33:66:6b:9a:37:a2:13:c3:76:
                    a8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:87:4C:0A:56:ED:9F:0A:1F:13:52:14:AB:69:91:F8:8F:BB:A9:6F
            X509v3 Authority Key Identifier:
                keyid:D7:5B:A0:59:4D:06:5A:B7:22:46:5C:FA:30:5E:FF:8D:41:61:7F:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11ugWU0GWrciRlz6MF7_jUFhf6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/11ugWU0GWrciRlz6MF7_jUFhf6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/11ugWU0GWrciRlz6MF7_jUFhf6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:4a:d3:5e:ee:41:aa:d8:ba:3e:44:9a:31:26:52:71:a5:04:
         66:00:1f:50:9e:df:f3:c9:99:53:ba:e6:a7:d7:1f:24:6d:e2:
         1b:bd:ca:1a:1b:12:ad:c5:03:24:54:4d:b7:ae:13:5d:99:12:
         fd:4c:bf:d2:79:be:41:ef:6f:6f:ae:f2:04:41:35:96:21:65:
         8d:2d:14:4b:50:9c:ca:a6:23:fc:e8:57:d5:e5:56:fa:c2:88:
         6c:80:95:c9:39:10:c2:67:d3:5f:63:04:9f:a9:62:c1:f7:8d:
         ca:65:27:e7:97:ee:aa:24:02:4a:09:0c:ca:de:57:bd:07:3a:
         c8:b3:04:21:53:96:2c:a3:f4:b0:bb:95:5a:5d:43:78:cd:4d:
         e8:f9:e5:2c:4d:58:97:98:e3:39:c1:1f:9b:1c:ca:89:90:44:
         64:a8:8d:23:9b:bd:da:1d:0c:b5:38:72:6b:ac:f5:2e:72:66:
         e7:b2:9b:ee:fb:ae:79:0d:a9:1f:fe:a4:aa:0c:0a:ca:66:69:
         c4:3a:fc:27:c4:ca:e3:ca:ad:85:a1:46:dd:0b:a8:3e:6b:bb:
         6c:09:00:51:e5:45:4e:a1:73:1f:02:19:1f:55:cb:33:85:d3:
         67:89:ab:c2:c6:08:56:5d:ce:cb:3d:e0:40:6f:06:67:0b:db:
         59:98:73:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:27:00 2025 by rpki-client