Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
File:                     dkL9PzNs5u6Z5h-pdwSabGqSPko.mft (raw, json)
Hash identifier:          Yx4Ia1oUJP9JxAtlzIEkxe4P6cXsOUEwHXFAoNdOoRw=
Subject key identifier:   69:12:82:D0:2F:1F:24:58:1D:2E:33:0A:05:4F:DC:AE:6A:B8:51:A6
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Certificate issuer:       /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial:       01987D8B2C891075BFA5986FB43C5BDAB1F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
Manifest number:          16A0
Signing time:             Wed 06 Aug 2025 04:02:09 +0000
Manifest this update:     Wed 06 Aug 2025 04:02:09 +0000
Manifest next update:     Thu 07 Aug 2025 04:02:09 +0000
Files and hashes:         1: ILTLOyoWPc07Zu5uedVl9OoSM7g.roa (hash: rrMZtSbTq6ORLNPo8ZtTEklQIan0rtyS360P6d5+a8w=)
                          2: dkL9PzNs5u6Z5h-pdwSabGqSPko.crl (hash: sHO1J48RPHuqzrAWBxUXmnKCaTAGS+vs879bVVqmgMI=)
                          3: pygSYveYfJ18y88VT99Py8VI8Ck.roa (hash: oWrjqJqkXBJagZmzia7A5lPs/2l0PT9MnEzwS9nzSRc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 04:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:8b:2c:89:10:75:bf:a5:98:6f:b4:3c:5b:da:b1:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
        Validity
            Not Before: Aug  6 04:02:09 2025 GMT
            Not After : Aug  7 04:02:09 2025 GMT
        Subject: CN=691282d02f1f24581d2e330a054fdcae6ab851a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1f:2e:0d:9b:f8:e2:2f:58:b2:ce:77:1a:cb:
                    2e:ff:ea:ef:82:6b:b2:7b:ea:dc:d9:13:89:ae:71:
                    06:cc:d3:c7:1a:e7:87:09:4d:f9:e7:6e:7d:0f:a6:
                    44:20:f5:ef:41:7a:f7:e2:55:14:57:3a:72:e7:f3:
                    79:12:00:e6:42:c9:15:4b:3a:73:92:90:82:51:c0:
                    cb:a8:80:39:f4:db:d9:af:6c:82:02:b9:68:f5:c7:
                    87:e4:ff:a5:75:12:8c:66:b8:d9:c2:81:cb:b9:1c:
                    e3:27:c6:3e:4a:c8:84:15:b6:df:d4:90:55:b2:5b:
                    4a:3d:bd:f0:09:6b:b1:dc:8e:7f:5b:86:72:e9:f8:
                    66:89:11:2c:20:50:07:2f:c1:0c:c4:2e:0b:9d:45:
                    cd:e2:66:10:cc:77:50:a8:66:80:f8:34:54:50:73:
                    86:ef:2f:8d:06:42:8e:36:f3:e8:97:60:1d:b0:0f:
                    e9:b5:ce:6e:5b:00:a6:12:49:5a:cd:31:ef:bd:0e:
                    b9:e1:ee:c5:81:bb:a6:7a:9f:32:e2:50:4c:1c:d4:
                    ca:4d:a6:d5:6f:e7:72:28:9a:5d:34:51:99:61:8a:
                    f5:2f:9a:43:21:3a:7a:3f:49:5e:1a:df:9e:83:80:
                    6c:9f:c0:27:53:61:52:0e:18:14:e7:44:4a:79:45:
                    4e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:12:82:D0:2F:1F:24:58:1D:2E:33:0A:05:4F:DC:AE:6A:B8:51:A6
            X509v3 Authority Key Identifier:
                keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:ca:1f:8a:b7:46:01:1a:90:e4:bd:b4:cc:bf:6d:53:f8:5f:
         d6:88:d9:da:66:19:4b:79:1b:9d:e0:16:c9:f4:a1:12:ed:c3:
         8a:66:18:bd:0c:6e:59:81:84:3e:79:74:11:47:6e:f4:e0:8e:
         e4:c2:e0:9b:60:3d:0f:42:4b:82:02:bb:18:19:0c:00:94:23:
         62:a6:15:f9:33:a4:f5:4a:69:88:66:f3:5c:1d:69:43:dd:94:
         f2:50:27:3c:d9:44:45:b1:28:7b:e6:7b:94:b4:a5:db:87:a5:
         72:33:56:48:e2:db:4c:7e:a6:82:3a:b5:87:dc:51:0f:06:ac:
         61:f8:62:f8:64:ba:08:61:4c:c2:86:f2:91:7c:d7:3e:27:be:
         6b:56:6c:0e:e9:74:de:4f:6f:5d:24:21:19:7c:c3:5c:4a:f8:
         c1:71:46:e5:32:0c:9e:44:f5:99:58:26:82:72:ab:5f:3c:b5:
         26:73:db:c7:59:41:31:82:9f:95:50:06:7e:7f:2a:64:c6:07:
         fb:fe:ed:3d:cf:9b:7c:9f:82:98:13:3b:48:b1:ea:09:86:61:
         bf:8a:48:47:26:6b:05:11:85:4a:83:7e:50:70:5b:06:22:81:
         a0:1a:b4:26:a6:ad:5c:76:bb:93:5c:d9:d4:6b:7c:70:34:b8:
         43:2f:de:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:14:51 2025 by rpki-client