Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
File:                     _0zNsS_CLrhX-GxWWovFFR0FMrA.mft (raw, json)
Hash identifier:          Awl0TA7IcdKzkZr64okGPJu/yNo7UbBaYYOeBO5idVs=
Subject key identifier:   D0:3B:26:44:81:47:40:C0:53:DB:DB:B6:4C:F8:B0:E5:B4:1D:CE:5C
Authority key identifier: FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0
Certificate issuer:       /CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0
Certificate serial:       01987418BCA421D18C3E7227650396866B4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
Manifest number:          069E
Signing time:             Mon 04 Aug 2025 08:00:34 +0000
Manifest this update:     Mon 04 Aug 2025 08:00:34 +0000
Manifest next update:     Tue 05 Aug 2025 08:00:34 +0000
Files and hashes:         1: T-Yw2cTI2wr-Y-TJOoMJXVh3bJU.roa (hash: 0NqJgy30YTXcCM9pl9HQ+jtoeVufCCiGR0QgwmWh8es=)
                          2: _0zNsS_CLrhX-GxWWovFFR0FMrA.crl (hash: b1QLY4FAxwsO2rZ+Km95anssyBBs5swkwTt/2nIf3wQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:18:bc:a4:21:d1:8c:3e:72:27:65:03:96:86:6b:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0
        Validity
            Not Before: Aug  4 08:00:34 2025 GMT
            Not After : Aug  5 08:00:34 2025 GMT
        Subject: CN=d03b2644814740c053dbdbb64cf8b0e5b41dce5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a8:9b:5c:97:ec:67:49:ce:26:63:e1:1c:02:
                    c3:8c:66:64:51:aa:30:38:6b:19:81:1a:7d:14:fe:
                    c9:21:c7:98:66:77:eb:fc:d6:c4:9e:7a:60:21:2f:
                    2b:cb:2b:0d:bb:0c:c1:ab:86:fa:ee:26:57:b3:85:
                    4d:5e:36:93:0f:1d:b7:80:24:b0:cf:9e:98:19:57:
                    23:5d:da:db:3e:12:b5:f9:97:d0:06:cd:8c:0f:cd:
                    07:d1:7f:3f:8d:f7:92:b8:7a:a1:85:c1:b4:d6:da:
                    f7:13:52:a1:b9:f4:93:ea:6d:92:b8:1f:4b:3e:d6:
                    d7:49:09:b8:f0:27:74:6c:4f:0a:5c:78:20:12:cf:
                    82:24:25:8f:45:b1:2d:f4:ef:de:00:31:df:03:34:
                    90:9f:2d:bb:62:0b:d8:64:a1:2b:e0:5f:47:31:b2:
                    d5:5b:79:0d:51:d2:b1:cf:6c:37:f0:8b:55:52:8c:
                    7f:3b:97:4a:95:0a:66:5a:a9:38:4d:67:5c:59:e5:
                    41:a9:19:cd:62:90:24:6e:ae:a6:b0:85:c0:b6:18:
                    05:c7:5b:33:c6:97:60:02:60:dd:5c:80:1a:b6:27:
                    99:88:63:60:1a:05:26:da:3c:2c:a2:bc:76:0c:14:
                    24:c5:9d:4a:c9:2f:39:38:99:e5:fb:a7:8a:6c:d1:
                    04:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:3B:26:44:81:47:40:C0:53:DB:DB:B6:4C:F8:B0:E5:B4:1D:CE:5C
            X509v3 Authority Key Identifier:
                keyid:FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:a4:19:fe:4a:be:ec:61:6f:f3:ca:06:ab:55:e0:bd:06:3e:
         63:e8:96:45:0f:e8:ff:3f:39:e0:05:cf:d8:ae:d0:55:01:1d:
         5c:49:76:ea:89:c6:f0:a1:7c:11:28:7c:0e:23:ec:61:79:1d:
         64:ce:fd:fd:cb:15:46:d0:d9:dd:75:cb:3e:0d:3e:39:20:6d:
         1b:a2:ff:cc:56:a1:7c:a8:8a:72:e1:94:c6:ae:c0:9e:e3:d4:
         0c:41:eb:45:12:6b:58:1f:0a:38:0f:90:d3:0d:8d:fb:dc:66:
         6b:f1:fd:ec:ee:be:bd:eb:bb:30:16:dd:1b:6b:f5:a1:b6:24:
         d6:be:50:77:9b:84:7c:04:d6:cc:a2:be:f6:2e:20:b2:55:52:
         3d:7e:f8:b2:47:e3:9d:8e:e2:86:b6:01:49:fa:99:3f:f2:5e:
         cd:9a:3e:da:fd:6f:9f:21:83:6e:ff:28:86:b0:f4:9b:35:61:
         9e:26:34:7b:8a:a0:18:9d:e4:27:5a:b4:f3:bb:36:0b:ce:87:
         ca:f0:9f:47:74:42:d8:6d:a8:11:96:fa:2a:75:fc:2e:0a:9f:
         cd:d7:10:4f:48:0b:ba:a5:15:5e:6f:25:8a:91:be:9e:7f:30:
         93:3f:30:43:5a:44:26:26:49:bf:8a:98:67:bc:bf:19:de:4c:
         52:a6:b9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:41 2025 by rpki-client