Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
File:                     DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft (raw, json)
Hash identifier:          VBSI8PJiOvnGPDaY8f6DT2hCBvFJx9n2liCRZVPKOV8=
Subject key identifier:   FE:F8:D6:E6:05:84:4E:A9:27:E2:3E:8A:F2:B4:50:1F:D5:B1:0E:C7
Authority key identifier: 0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
Certificate issuer:       /CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Certificate serial:       019A56AD85B04AB4C8A4D7544FB3B43A7CD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
Manifest number:          1713
Signing time:             Thu 06 Nov 2025 01:00:03 +0000
Manifest this update:     Thu 06 Nov 2025 01:00:03 +0000
Manifest next update:     Fri 07 Nov 2025 01:00:03 +0000
Files and hashes:         1: DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl (hash: nTEbU1nyCszOEh1GVkIKmN5OW9G5LQbpav2ZUhQsr0k=)
                          2: YWrqOkxE4kuwAHt0esRIKza-z2w.roa (hash: Q4zyDjmDnvDWNfDLHpwpAtywKuNbvOWbOIgdLd25txk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 21:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:56:ad:85:b0:4a:b4:c8:a4:d7:54:4f:b3:b4:3a:7c:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c323eec94edd0e748616150e00d06a2d6690ff2
        Validity
            Not Before: Nov  6 01:00:03 2025 GMT
            Not After : Nov  7 01:00:03 2025 GMT
        Subject: CN=fef8d6e605844ea927e23e8af2b4501fd5b10ec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a2:a3:8a:3d:7f:37:8a:7a:4b:9b:8d:17:e8:
                    fc:d6:fa:be:1e:51:43:56:58:73:e5:1c:00:f3:37:
                    4f:4d:17:d0:25:79:e9:7f:bc:e8:4d:53:07:dd:e1:
                    b7:19:bf:f2:ce:f5:9b:89:10:e1:23:2c:be:ea:86:
                    48:48:25:b5:21:eb:d6:1b:09:a9:ff:45:8c:32:24:
                    81:bf:31:2e:d0:e3:78:78:a8:b9:27:9b:79:4d:bf:
                    16:57:0d:1f:48:31:6e:ac:d3:64:dc:8e:3c:c3:eb:
                    f9:df:ac:ac:06:fd:92:44:0b:cb:11:28:95:dc:9f:
                    68:df:90:43:c3:bb:49:00:44:b2:2c:fb:73:48:98:
                    3d:c1:29:ab:16:f2:fa:b6:05:45:88:4d:ad:b9:ef:
                    de:54:e9:0e:e2:24:b6:22:04:4d:b6:05:ef:69:a2:
                    d8:08:38:5a:ba:d1:d2:cb:b4:30:9e:42:0d:66:cf:
                    37:78:df:0a:9a:24:b5:70:41:e7:d5:84:f3:39:dd:
                    81:06:aa:02:a8:1e:15:8c:b8:90:2b:b5:d8:95:27:
                    4a:c3:67:38:3f:a2:fa:6f:8a:d9:b6:2b:91:9f:24:
                    ab:77:71:2f:1b:2f:34:bc:e6:07:0c:33:cc:ed:52:
                    24:63:a0:53:d4:6a:e0:90:26:3d:25:b9:5b:50:d5:
                    97:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F8:D6:E6:05:84:4E:A9:27:E2:3E:8A:F2:B4:50:1F:D5:B1:0E:C7
            X509v3 Authority Key Identifier:
                keyid:0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:e7:97:87:4b:93:c6:89:2f:48:47:7c:92:f7:b4:1f:96:85:
         cb:65:f7:78:07:24:ff:ed:3a:3a:38:91:2d:c0:53:2f:a7:60:
         10:a2:ed:c1:a6:fb:7f:5d:0f:b0:8d:49:9d:3b:d1:f2:d0:09:
         f8:54:3d:c7:ac:be:f9:1f:ae:1f:9a:c5:a7:1a:52:d9:ea:11:
         f3:08:01:a9:c5:e7:0d:d9:f5:b1:bd:b7:d4:2c:c1:ec:41:f7:
         5c:bf:a2:02:7d:85:f8:08:5a:da:7e:c3:9b:7e:c8:f5:a7:ea:
         ad:69:01:cd:0a:a6:4d:12:9c:5f:75:47:92:fd:f3:e3:48:04:
         42:75:6a:eb:64:77:d3:63:e8:b2:d2:47:f0:e3:44:1f:8b:f2:
         74:1c:ef:87:2a:93:d9:43:a9:66:ed:d7:bb:4a:42:e5:49:35:
         c3:69:79:f9:bb:48:71:78:eb:8f:05:70:0e:65:99:f9:f2:06:
         69:72:ba:24:8f:81:39:10:d2:0c:68:0a:3f:b0:19:f6:cb:fb:
         83:2e:66:24:7f:44:58:23:90:5b:31:b9:9d:d0:a6:fc:a3:b6:
         75:c0:09:9c:24:f1:ad:a3:fd:d5:b6:df:ab:62:fd:6e:b7:4f:
         03:55:0b:c7:3e:35:70:7e:19:94:d2:c2:6a:c7:ae:81:88:8c:
         32:49:81:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 05:53:47 2025 by rpki-client