Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft
File:                     dvkMwSPQ0gRp05xsNFXzHqYSP04.mft (raw, json)
Hash identifier:          SRDyaqgfPG8i53lo4Aph6IH8BgMTTM1yElNv0b6RnDo=
Subject key identifier:   DB:28:78:76:26:9B:F5:5A:31:10:B3:5C:35:03:C5:7E:A0:10:9E:D5
Authority key identifier: 76:F9:0C:C1:23:D0:D2:04:69:D3:9C:6C:34:55:F3:1E:A6:12:3F:4E
Certificate issuer:       /CN=76f90cc123d0d20469d39c6c3455f31ea6123f4e
Certificate serial:       01988EEB5183F87797CC77A45DCCC9D44F23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dvkMwSPQ0gRp05xsNFXzHqYSP04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft
Manifest number:          1624
Signing time:             Sat 09 Aug 2025 13:00:43 +0000
Manifest this update:     Sat 09 Aug 2025 13:00:43 +0000
Manifest next update:     Sun 10 Aug 2025 13:00:43 +0000
Files and hashes:         1: dvkMwSPQ0gRp05xsNFXzHqYSP04.crl (hash: BG9FoPwX6aTuZFDpSufKyQwT9S6/DLMzV5K7zmOF/2I=)
                          2: u3lxxc1lkavM0xc30bqZfpWxvHo.roa (hash: UHLRAbtjmSCDadx2fBrU+RDEoeooREQATwB2er11mzE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dvkMwSPQ0gRp05xsNFXzHqYSP04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8e:eb:51:83:f8:77:97:cc:77:a4:5d:cc:c9:d4:4f:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76f90cc123d0d20469d39c6c3455f31ea6123f4e
        Validity
            Not Before: Aug  9 13:00:43 2025 GMT
            Not After : Aug 10 13:00:43 2025 GMT
        Subject: CN=db287876269bf55a3110b35c3503c57ea0109ed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a2:cd:5a:18:e0:e9:f5:78:a0:06:29:ce:a8:
                    67:8a:81:52:e0:f5:28:ac:22:8d:77:51:9a:ab:d4:
                    ef:b7:ce:55:09:79:38:d4:ab:af:9e:be:6a:25:d3:
                    1a:1c:c2:b0:b0:93:db:db:93:7d:dc:46:7f:0b:0c:
                    ed:34:35:5a:09:30:27:17:96:26:58:8d:ad:79:3b:
                    5e:61:6e:c3:e3:8d:4c:6e:51:04:cb:a2:df:66:ec:
                    b4:22:c7:ea:6c:0c:ae:95:e2:a0:88:98:bc:a2:b8:
                    4c:78:13:df:57:91:bc:4e:77:4c:eb:67:f7:59:1e:
                    e1:e1:7e:9e:43:6b:ae:63:ef:4c:c6:10:a0:7a:a7:
                    29:17:95:b1:55:4f:d1:97:e4:cf:14:41:dc:67:35:
                    b8:36:86:af:4a:bc:51:ce:ed:29:5b:55:83:13:75:
                    f9:a0:1c:bc:74:fa:20:2d:94:82:25:04:57:fd:31:
                    8d:14:35:9e:15:c9:89:05:85:ce:50:12:65:4d:64:
                    f4:4f:22:dc:b5:39:e7:f2:03:ab:26:1d:07:bc:c3:
                    e1:4c:8e:38:1c:40:bc:25:75:e7:21:52:2f:39:ae:
                    08:83:58:f8:8e:3b:33:90:40:8e:e7:f2:31:2b:dd:
                    9e:ed:72:33:b3:9c:f7:e8:23:3c:46:d9:a5:1d:a4:
                    41:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:28:78:76:26:9B:F5:5A:31:10:B3:5C:35:03:C5:7E:A0:10:9E:D5
            X509v3 Authority Key Identifier:
                keyid:76:F9:0C:C1:23:D0:D2:04:69:D3:9C:6C:34:55:F3:1E:A6:12:3F:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dvkMwSPQ0gRp05xsNFXzHqYSP04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:50:f0:cc:cf:9e:16:db:8f:7b:65:2b:32:f9:1c:bc:65:d0:
         44:e9:c8:40:6a:ad:5d:52:db:c3:ac:f2:cf:5d:ca:88:7c:41:
         f8:52:bf:22:b8:26:01:9b:9b:37:47:34:9b:69:01:4e:15:ef:
         b4:f0:c7:4f:d5:10:11:a2:7d:74:d3:f4:35:9a:e6:e1:27:17:
         19:3c:ff:0f:02:38:11:66:bc:93:0f:03:bf:2e:37:e8:8a:1d:
         39:8f:cd:12:12:6c:44:8d:96:25:07:3a:c6:6f:ea:e1:b5:68:
         73:f2:46:d7:7b:26:9a:a3:63:5c:9c:ab:44:19:98:3a:55:cd:
         de:4f:b5:6e:1d:d5:de:21:8e:0b:c3:e3:5f:c6:89:71:a1:30:
         7c:e5:01:3d:36:6a:c4:9d:d6:21:66:74:95:12:30:34:61:bf:
         d4:af:5c:1b:c1:14:26:b0:71:50:9e:9a:fb:99:1b:74:93:8d:
         23:25:3c:34:51:d9:4f:37:ec:fa:a2:84:3e:4d:81:06:2b:95:
         f3:8b:48:6a:50:8f:33:91:1f:5b:cc:d2:2e:cc:44:ee:1f:78:
         d8:cd:a5:2b:51:5e:83:ae:a3:8c:76:23:ed:24:7f:50:d4:c5:
         22:2c:50:de:cc:7b:a1:1f:06:e1:55:14:a6:14:5f:96:d9:32:
         ab:d2:4c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:15:01 2025 by rpki-client