Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft
File:                     0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft (raw, json)
Hash identifier:          B2XXtLAnR18N8g67jHVVnU9F59Qtsfc7JYE3nMT8VMM=
Subject key identifier:   E8:A7:57:55:2C:B2:54:F3:A6:2A:E1:21:40:90:D7:ED:8E:B9:45:2D
Authority key identifier: D3:25:63:ED:99:64:E4:26:81:A1:C5:D2:95:B0:C6:14:86:06:E7:3D
Certificate issuer:       /CN=d32563ed9964e42681a1c5d295b0c6148606e73d
Certificate serial:       01976F2BE3A0A2629B4679A18788D364DDEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0yVj7Zlk5CaBocXSlbDGFIYG5z0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft
Manifest number:          08FA
Signing time:             Sat 14 Jun 2025 16:00:36 +0000
Manifest this update:     Sat 14 Jun 2025 16:00:36 +0000
Manifest next update:     Sun 15 Jun 2025 16:00:36 +0000
Files and hashes:         1: 0yVj7Zlk5CaBocXSlbDGFIYG5z0.crl (hash: 5XMOhGFsPPx70IiQ27yuzG4VmwAqiiEoqk0vInz9gX0=)
                          2: FAudlpGk_kDfTVYbbohSs3--fwY.roa (hash: s6Wsa14pBQYCdq/M2UXC/KMh/WJZHtqOr4iUBFGtM4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0yVj7Zlk5CaBocXSlbDGFIYG5z0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2b:e3:a0:a2:62:9b:46:79:a1:87:88:d3:64:dd:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d32563ed9964e42681a1c5d295b0c6148606e73d
        Validity
            Not Before: Jun 14 16:00:36 2025 GMT
            Not After : Jun 15 16:00:36 2025 GMT
        Subject: CN=e8a757552cb254f3a62ae1214090d7ed8eb9452d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:53:58:42:0e:e3:54:0d:5e:2a:39:4d:89:d3:
                    8e:a9:9f:59:cb:b0:1f:bb:30:3c:4d:79:87:a9:60:
                    aa:62:57:62:4f:a7:b6:aa:1b:70:e4:5f:6c:1c:b9:
                    88:4e:81:7a:ff:3e:12:90:9f:1d:39:a7:52:e8:af:
                    92:86:4a:06:97:b3:01:ce:8c:bc:0f:a1:de:06:17:
                    fd:7d:7b:ff:9d:74:39:65:de:82:5d:3d:24:01:c2:
                    b5:ef:c7:3a:62:88:46:bb:a5:e4:c8:63:30:d5:89:
                    5f:29:dd:1a:59:06:1c:1b:f8:43:d4:f7:d4:a4:57:
                    17:da:dc:25:08:26:0c:47:e2:d5:9d:e5:77:84:6d:
                    dd:19:7a:55:5f:51:a8:7c:10:56:bc:f8:a3:18:cb:
                    24:1f:4a:fa:66:43:e7:17:b3:3e:16:41:10:3d:37:
                    88:09:1c:98:4e:09:27:3f:70:c7:b2:4d:2d:bd:19:
                    79:22:fb:8d:72:4b:90:05:dd:24:81:e5:7c:c5:55:
                    e5:8d:94:1c:76:0b:41:12:94:2d:bb:81:d1:88:9b:
                    26:f3:ce:f2:68:a7:15:1e:de:e1:e9:a0:90:c8:ee:
                    27:5d:e2:f2:81:0c:d7:b8:40:e1:3e:35:e8:37:f1:
                    66:ac:87:5a:19:bd:4f:96:b9:d6:a0:bd:2b:4a:8d:
                    8c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A7:57:55:2C:B2:54:F3:A6:2A:E1:21:40:90:D7:ED:8E:B9:45:2D
            X509v3 Authority Key Identifier:
                keyid:D3:25:63:ED:99:64:E4:26:81:A1:C5:D2:95:B0:C6:14:86:06:E7:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yVj7Zlk5CaBocXSlbDGFIYG5z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:b7:0b:86:32:ef:ff:90:e6:2e:43:10:82:2e:59:29:23:4d:
         9c:3c:56:b3:0a:55:63:80:d8:20:bf:07:47:01:73:36:83:9a:
         72:7a:47:3e:73:b0:4b:3f:f2:90:14:c5:e3:eb:4c:c2:2e:23:
         f6:d9:ab:75:ae:ee:cc:75:28:2e:80:53:c6:c9:69:f2:3d:84:
         0a:be:57:00:a5:25:1c:89:1e:b3:02:58:2e:70:5d:6e:97:6e:
         8b:09:58:06:cf:14:13:b1:8d:d3:88:e7:74:9a:9f:60:d3:64:
         e0:5e:e4:34:3e:23:36:98:3d:44:2c:9b:cb:37:32:d8:8f:7c:
         a4:6b:84:79:03:b4:36:89:3c:46:9b:02:cf:d2:96:da:95:04:
         7d:38:69:cc:0d:51:3d:7a:34:a0:b9:9b:19:d2:54:c7:19:3b:
         98:1e:dd:42:98:55:96:78:86:ba:84:76:91:35:e6:12:16:36:
         08:9b:e2:16:81:4d:2e:f8:ff:68:08:43:df:fd:90:92:98:c6:
         c4:20:dd:f3:b4:7a:dc:68:58:0a:b6:07:32:be:11:18:bb:dd:
         42:7e:8a:4c:d0:a9:f9:9f:80:b0:62:ca:7e:c5:fd:15:08:76:
         1d:a0:dc:ba:d4:89:6d:45:2a:1c:5f:aa:90:dc:47:63:f2:ad:
         92:ec:bb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:16:33 2025 by rpki-client