Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
File:                     C155jbbo9XxfSkRRUJAd7oqW1eU.mft (raw, json)
Hash identifier:          dmeQvSYr+n3moU/VAi/yF0F9HOYmxVsiHJngR0L5d3o=
Subject key identifier:   4E:BD:6B:28:45:EE:A3:1A:6D:2E:E5:C5:81:22:23:29:7E:6A:BE:F3
Authority key identifier: 0B:5E:79:8D:B6:E8:F5:7C:5F:4A:44:51:50:90:1D:EE:8A:96:D5:E5
Certificate issuer:       /CN=0b5e798db6e8f57c5f4a445150901dee8a96d5e5
Certificate serial:       019771889E60A82803E1B73E1DDB3E661A8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
Manifest number:          0B7F
Signing time:             Sun 15 Jun 2025 03:01:08 +0000
Manifest this update:     Sun 15 Jun 2025 03:01:08 +0000
Manifest next update:     Mon 16 Jun 2025 03:01:08 +0000
Files and hashes:         1: C155jbbo9XxfSkRRUJAd7oqW1eU.crl (hash: VmOf9mPLtbOYCzJEauHVafpJXyGlJiv1kpOhls0Zjck=)
                          2: c7WoeWfnIdPF1gkZ7r90pN58Y2c.roa (hash: wpEquj9Ig8LsCQE7Y+MbSVtYeoDlqqJ8cepm+207hA8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 03:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:88:9e:60:a8:28:03:e1:b7:3e:1d:db:3e:66:1a:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5e798db6e8f57c5f4a445150901dee8a96d5e5
        Validity
            Not Before: Jun 15 03:01:08 2025 GMT
            Not After : Jun 16 03:01:08 2025 GMT
        Subject: CN=4ebd6b2845eea31a6d2ee5c5812223297e6abef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6f:dc:31:6b:16:7e:72:87:97:04:08:8f:2b:
                    05:b8:e5:95:05:e9:44:cb:f6:46:65:b4:7c:ff:88:
                    75:eb:0e:b0:e6:89:0c:37:fc:65:7b:b7:60:c6:ef:
                    60:3a:ff:6b:a0:db:ed:60:cf:75:fb:b4:85:91:d9:
                    ce:bd:95:6b:bb:52:8c:1a:f7:fc:5c:79:b2:f5:ee:
                    8b:0b:b4:1f:e7:41:a6:78:91:95:59:7b:fb:0f:b4:
                    2e:c0:47:69:aa:68:12:e9:2f:31:1a:14:94:49:32:
                    22:24:e1:ce:61:04:e4:50:79:87:03:92:f7:6b:f1:
                    70:02:de:14:00:b8:c6:8f:5e:05:a2:07:45:a7:81:
                    9f:25:77:3a:02:36:37:73:97:8c:86:89:22:f0:ed:
                    c7:91:0c:13:2f:5b:91:03:da:a9:cf:b3:cd:f5:10:
                    28:b0:7b:b8:0e:55:9e:55:48:20:2a:94:c6:82:3b:
                    01:16:bd:a8:94:32:77:1e:1e:d0:d8:0d:0e:15:a2:
                    09:2c:23:58:ea:94:1e:c3:a1:6b:20:a4:b8:b3:e3:
                    cb:42:43:20:d2:71:93:e0:67:e1:ec:39:36:df:f7:
                    a5:6c:b3:44:32:1a:89:83:51:b1:48:76:9c:80:75:
                    bf:ad:5c:5b:b8:34:24:9c:5b:3f:3b:95:8b:1d:dd:
                    a8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:BD:6B:28:45:EE:A3:1A:6D:2E:E5:C5:81:22:23:29:7E:6A:BE:F3
            X509v3 Authority Key Identifier:
                keyid:0B:5E:79:8D:B6:E8:F5:7C:5F:4A:44:51:50:90:1D:EE:8A:96:D5:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:56:a0:76:f1:2f:3c:08:1b:fe:82:15:90:0b:2b:fb:64:89:
         03:d8:b0:c3:c7:78:bd:18:2c:19:c6:9d:87:8b:0b:31:48:71:
         9d:d3:65:31:f0:d9:7e:fa:28:6b:c7:9c:0e:97:ca:be:6b:80:
         c8:bc:c6:1d:8d:9e:71:72:2a:66:de:30:1d:3e:36:60:6f:f2:
         62:8b:c1:cc:1d:f2:97:35:1c:86:4c:c0:11:4a:e3:db:e1:e8:
         d0:16:b9:b1:cd:6c:85:ca:34:fc:7a:83:43:3f:d3:64:5d:04:
         7f:81:c9:04:2a:44:0a:74:62:37:b9:7e:87:16:dd:93:c0:32:
         dd:03:d9:c7:51:3c:f1:ae:cd:21:19:82:ae:77:62:ba:a7:15:
         94:5c:2c:95:93:f0:25:8a:db:8c:dd:d3:a2:91:d4:94:5e:c8:
         33:9a:97:99:6d:30:27:9a:41:4f:e1:e4:01:53:22:cb:e6:3c:
         8e:f3:a6:65:eb:aa:a9:e1:ba:c9:8f:68:1a:c7:0a:68:25:d9:
         01:ed:2b:ae:69:e5:2b:a7:96:be:16:a8:83:b4:b7:f2:6c:ba:
         61:8a:76:81:ed:32:c8:56:1f:39:cf:72:e9:df:3c:9d:40:ae:
         25:41:33:41:8a:8c:10:b6:de:32:65:e3:89:42:99:3f:b2:d2:
         20:1e:10:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:23:09 2025 by rpki-client