Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
File:                     DLXT6N3PUkwgwyOH7TED1MvypWo.mft (raw, json)
Hash identifier:          xTrermnapUrfmO3qbo3hqWDmI+2ZIsWOkqReESmw8ko=
Subject key identifier:   0E:20:F9:EC:1D:87:94:86:09:84:2B:54:B0:9A:E7:31:52:7C:79:84
Authority key identifier: 0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A
Certificate issuer:       /CN=0cb5d3e8ddcf524c20c32387ed3103d4cbf2a56a
Certificate serial:       0198936CC34611FA42ECBB1DA25580BF2D35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
Manifest number:          162C
Signing time:             Sun 10 Aug 2025 10:00:35 +0000
Manifest this update:     Sun 10 Aug 2025 10:00:35 +0000
Manifest next update:     Mon 11 Aug 2025 10:00:35 +0000
Files and hashes:         1: DLXT6N3PUkwgwyOH7TED1MvypWo.crl (hash: SFkSQO1XVT3FG05+oc1lgIzdkl1dbAS/310GaxZPHDI=)
                          2: NmPkoiKmzvfxr2tE8qV8-CIZnCo.roa (hash: RU6vCeDfFthQ1YTFt3fi6pe99JectXQZEPhaEuKEkus=)
                          3: gIGqiCK0bC1pGcI5YkcQP3gBY1g.roa (hash: AYt4mi1gsvIajU9NsR145mbQ/0eGQGt615cxYTa3ACY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 10:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:93:6c:c3:46:11:fa:42:ec:bb:1d:a2:55:80:bf:2d:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cb5d3e8ddcf524c20c32387ed3103d4cbf2a56a
        Validity
            Not Before: Aug 10 10:00:35 2025 GMT
            Not After : Aug 11 10:00:35 2025 GMT
        Subject: CN=0e20f9ec1d87948609842b54b09ae731527c7984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:75:fe:94:a0:2b:40:34:4f:4d:42:9d:16:53:
                    99:e1:e7:e5:66:ce:c2:ff:5e:d2:bd:17:72:af:6e:
                    e1:f2:90:1b:81:a4:45:ef:bb:fb:d0:a5:70:ee:45:
                    e9:fb:f0:ec:8d:5e:ad:7d:69:fe:84:52:a0:46:37:
                    30:1d:ea:5e:c7:b8:69:c3:5a:30:35:20:7b:19:2d:
                    99:4b:f6:e8:0b:0c:11:3c:71:97:26:90:85:40:87:
                    fa:cf:a2:9b:ac:92:30:e1:13:49:3c:fd:b9:95:e0:
                    dc:9e:a1:10:23:f7:4e:cc:3a:84:0d:e1:b5:c2:05:
                    c4:43:e0:70:82:cf:22:2a:3c:bb:f2:d0:2d:d8:9f:
                    e2:18:49:5f:b4:7d:c7:0a:2c:ca:11:e5:61:df:01:
                    1d:9b:b5:4f:58:14:f3:d8:b4:13:da:a6:c2:fb:7d:
                    dc:f5:f3:c8:2e:26:bb:d1:db:8c:24:c4:dd:67:61:
                    f9:a6:fe:41:e3:3d:65:18:4f:b9:fb:a2:28:90:e9:
                    61:4f:a9:45:42:e0:8f:08:ec:ac:b6:58:e5:07:bd:
                    d3:1d:af:a8:7e:3e:d1:a2:98:e5:54:39:30:02:79:
                    80:a4:0f:30:80:fb:ab:ce:3d:f2:3a:45:8d:af:3a:
                    12:2c:2a:b7:cc:f5:cd:87:0b:aa:38:3f:ca:11:2e:
                    9f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:20:F9:EC:1D:87:94:86:09:84:2B:54:B0:9A:E7:31:52:7C:79:84
            X509v3 Authority Key Identifier:
                keyid:0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:19:e3:f7:0f:5b:83:04:73:6b:30:9a:1d:59:0a:0e:c9:80:
         b2:41:a9:11:46:59:fc:73:56:4a:40:f6:18:93:ad:0b:27:f0:
         34:42:fb:87:78:1f:1d:21:22:8c:90:b3:f6:f4:6d:e3:83:7e:
         d0:e8:f7:b0:34:9d:b3:7c:20:46:ba:a7:6e:c8:0b:a4:66:e8:
         ac:43:36:91:6f:73:9d:99:ed:3a:5d:69:79:97:a4:14:61:a1:
         0e:e6:67:c7:1c:be:c4:8d:61:40:9e:ba:db:c2:49:4c:46:ef:
         32:5b:d4:f4:90:b2:8a:b7:7e:4b:6c:20:d7:95:9f:ec:90:81:
         40:df:07:ac:85:46:a2:08:81:06:92:32:d3:e4:62:a7:f1:39:
         e7:7d:3b:a3:e9:ff:9d:6b:39:71:22:d5:99:e0:ef:cb:c7:8b:
         28:59:8e:ca:b5:af:78:ca:4e:64:5f:2f:9b:7a:e0:52:1e:16:
         0f:d7:80:f3:28:46:99:5a:bc:1b:1d:80:9f:63:9e:b2:3e:91:
         03:8e:d2:cb:24:8b:6e:c4:b4:00:02:ca:0d:26:34:93:04:b5:
         cd:cd:6c:93:d2:1f:5e:d6:12:26:5a:40:72:a8:19:b1:74:16:
         3d:d8:92:ae:88:e7:db:fb:66:5b:a5:30:f7:67:e4:11:f1:04:
         12:aa:55:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:52 2025 by rpki-client