Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
File:                     DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft (raw, json)
Hash identifier:          SaBM34uQs+i9lXAXhHUWgfKo0/54+HKuCU+NsgW58WE=
Subject key identifier:   80:C0:AB:89:6F:E8:53:B1:41:CC:4C:AF:95:72:42:A8:BF:9E:D7:DD
Authority key identifier: 0D:F1:0C:8A:58:05:43:F9:2D:19:FD:5F:8F:56:4B:EE:AA:48:CA:1E
Certificate issuer:       /CN=0df10c8a580543f92d19fd5f8f564beeaa48ca1e
Certificate serial:       01988B7C62539D3D0E38B61C793A76E79D87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
Manifest number:          046E
Signing time:             Fri 08 Aug 2025 21:00:41 +0000
Manifest this update:     Fri 08 Aug 2025 21:00:41 +0000
Manifest next update:     Sat 09 Aug 2025 21:00:41 +0000
Files and hashes:         1: DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl (hash: R1HrZw16ku4DXDXgop8UYVwWNHKk570Xd5tenlzsUzQ=)
                          2: YO9Rv4O7mqZvQ72FaV8J_c91SqM.roa (hash: 2QIlFXVhcWVwoyEM0B/+slqeXVtc2ygy29IyQzPmBpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:7c:62:53:9d:3d:0e:38:b6:1c:79:3a:76:e7:9d:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0df10c8a580543f92d19fd5f8f564beeaa48ca1e
        Validity
            Not Before: Aug  8 21:00:41 2025 GMT
            Not After : Aug  9 21:00:41 2025 GMT
        Subject: CN=80c0ab896fe853b141cc4caf957242a8bf9ed7dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:73:8e:0d:0c:bf:5f:8d:2c:ea:08:9a:4a:3b:
                    d8:d9:61:da:0e:06:e1:dc:97:29:f6:bd:2c:5f:71:
                    cd:57:fb:40:5b:07:d5:83:ba:df:cc:b9:22:0a:1e:
                    fd:c4:ba:9e:e6:f7:91:04:51:82:11:b0:e5:b5:82:
                    44:05:a3:36:a5:66:cf:33:8f:11:20:13:ea:d6:6b:
                    ae:58:92:1c:01:03:9c:21:9e:54:7b:c0:c2:34:73:
                    f7:a8:61:d0:7e:2d:33:19:2f:c1:b5:40:4d:6f:cd:
                    51:e0:54:ab:b2:bd:13:99:6f:1b:da:65:a8:d3:d6:
                    06:d6:c7:a0:1c:e1:c3:69:69:92:90:1d:e0:92:0f:
                    ce:ff:52:90:26:3c:76:30:d2:ad:16:d2:18:c7:64:
                    9e:b7:3a:65:13:26:33:8d:3a:e1:1b:f7:96:44:cc:
                    a7:8f:ae:8f:12:f7:ef:4c:b9:ea:b8:dc:2e:a5:fb:
                    bf:ad:da:20:f4:e2:17:94:a1:23:b5:c3:68:e1:aa:
                    7c:9e:16:c8:1d:c7:6a:c1:e2:aa:6b:89:d3:50:e3:
                    88:a8:36:c9:9b:51:6d:a0:6a:ff:00:34:6e:b0:d0:
                    08:c1:39:75:c2:97:91:81:24:91:9e:fd:ac:f5:79:
                    55:7d:81:4b:1f:38:22:62:0e:51:04:29:02:d5:98:
                    3d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C0:AB:89:6F:E8:53:B1:41:CC:4C:AF:95:72:42:A8:BF:9E:D7:DD
            X509v3 Authority Key Identifier:
                keyid:0D:F1:0C:8A:58:05:43:F9:2D:19:FD:5F:8F:56:4B:EE:AA:48:CA:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:fb:ab:f4:37:6a:7d:f9:39:27:5b:60:05:e7:69:f6:d2:46:
         2a:ff:b4:c9:c5:84:54:9c:74:28:05:28:96:0b:e9:99:21:3c:
         51:18:e6:c1:78:8c:04:7f:e0:e6:f5:bc:23:50:83:88:e1:11:
         31:3a:d1:67:d1:9e:d4:65:42:35:f5:60:2b:48:d9:ef:82:83:
         80:f7:32:81:80:26:e0:95:81:ad:b0:8b:59:ef:37:84:56:88:
         b6:33:69:e6:db:d3:d0:eb:4c:d7:54:91:ed:4c:c5:08:5e:eb:
         77:e8:14:18:3e:17:2c:6a:3f:9a:2d:00:25:77:69:ac:ac:3f:
         dc:76:f4:1c:f3:a6:a7:89:52:96:c2:5a:55:03:62:fd:14:83:
         11:80:da:61:b9:ec:f0:ab:be:40:79:01:fd:43:6e:7e:cc:aa:
         61:cf:a9:e3:6c:93:82:1e:56:5f:4a:b5:95:d3:ec:4c:45:39:
         55:75:ea:93:ef:dc:d1:11:10:a0:37:4f:b8:df:50:65:3f:68:
         33:f3:ce:b4:91:75:71:26:2a:05:7c:8a:33:a5:c2:cd:4b:d8:
         0e:be:58:a1:d8:c9:74:5e:18:d5:f7:73:65:f2:9c:7e:98:9e:
         df:f9:ef:35:c6:3f:92:bd:cf:48:6c:85:7a:96:0c:38:00:ad:
         e9:95:99:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:38 2025 by rpki-client