Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
File:                     dim08aCQrAe-F2LewzjmoP412X4.mft (raw, json)
Hash identifier:          cFlK9xmpKbhuAavQa94oJWTWOs5Z0d5/8Uj5nissCfQ=
Subject key identifier:   47:B0:F4:6A:0D:E8:2A:0C:E4:17:A1:69:7E:98:35:B0:BA:08:CB:FB
Authority key identifier: 76:29:B4:F1:A0:90:AC:07:BE:17:62:DE:C3:38:E6:A0:FE:35:D9:7E
Certificate issuer:       /CN=7629b4f1a090ac07be1762dec338e6a0fe35d97e
Certificate serial:       01988544EC0BA4EE9E62ED345291AF0801C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
Manifest number:          05F3
Signing time:             Thu 07 Aug 2025 16:02:23 +0000
Manifest this update:     Thu 07 Aug 2025 16:02:23 +0000
Manifest next update:     Fri 08 Aug 2025 16:02:23 +0000
Files and hashes:         1: 5YMm7iUmf7YXCbeTMsZ2gbUF8Mc.roa (hash: IgoqrrmJPuGzGpT+UcpwCttOwj7BjxbDg3tOXCDKJe8=)
                          2: dim08aCQrAe-F2LewzjmoP412X4.crl (hash: l2acdvtrCTOFn5oqOsHzDNnapJqgJ3xpaTP2Gxg8fec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 16:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:85:44:ec:0b:a4:ee:9e:62:ed:34:52:91:af:08:01:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7629b4f1a090ac07be1762dec338e6a0fe35d97e
        Validity
            Not Before: Aug  7 16:02:23 2025 GMT
            Not After : Aug  8 16:02:23 2025 GMT
        Subject: CN=47b0f46a0de82a0ce417a1697e9835b0ba08cbfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:19:d8:9e:6f:8b:bb:c4:7e:a5:a4:d6:42:92:
                    6a:23:8e:97:66:5e:3c:d3:ad:f7:dd:ba:3a:3e:a7:
                    00:74:0f:76:bb:a9:d9:83:7f:c2:c0:d3:65:1d:6a:
                    7e:6f:d4:7b:2b:09:7a:94:62:a0:2b:f6:a9:d3:80:
                    88:ec:ad:0c:13:e7:e8:df:16:0d:02:ce:f7:24:00:
                    51:83:f2:82:7b:53:54:cd:25:0f:8f:1d:61:16:75:
                    82:ff:25:b8:6b:1a:4d:c0:a8:5c:6a:73:76:99:01:
                    cf:d6:6b:97:88:f4:ac:a6:ad:b0:c3:c7:fd:c5:78:
                    e8:70:f3:23:40:03:58:e5:b5:34:e9:40:9a:76:b8:
                    ee:da:a9:7e:cf:d0:20:3d:35:24:13:70:a8:80:96:
                    07:d9:80:24:4c:2a:e9:c9:16:a0:cb:c2:78:f7:98:
                    02:98:c7:97:60:3e:1d:e8:42:0b:6b:a3:a4:8a:a7:
                    b2:1c:1c:8e:b8:13:3c:c6:f7:ce:e4:e7:57:0f:b7:
                    4e:e9:ef:f7:1b:5a:63:ce:8a:87:62:95:52:bc:34:
                    15:2e:74:6f:db:e7:ae:c0:ab:4f:5f:bd:d8:4d:c7:
                    eb:cd:f4:22:d4:6c:e7:b6:7d:57:2c:4a:45:1a:e0:
                    e0:b3:37:59:61:7a:53:de:f1:0f:29:e6:d5:fc:9e:
                    75:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B0:F4:6A:0D:E8:2A:0C:E4:17:A1:69:7E:98:35:B0:BA:08:CB:FB
            X509v3 Authority Key Identifier:
                keyid:76:29:B4:F1:A0:90:AC:07:BE:17:62:DE:C3:38:E6:A0:FE:35:D9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:98:00:63:e8:eb:2e:ae:c5:47:12:26:94:6b:05:c8:72:07:
         92:72:67:d4:8f:6a:5e:b6:22:ce:82:2e:35:37:51:9a:b4:c7:
         a1:6f:b2:a8:86:3d:b4:c2:91:90:1e:21:07:f0:9c:51:cb:98:
         5d:8c:85:ee:e6:87:7e:7a:f0:0d:24:94:2e:1a:68:16:57:5c:
         50:cf:f4:b9:6e:17:7c:12:13:83:c9:bd:6b:07:80:46:0c:24:
         07:a0:95:4a:cb:83:ab:27:70:1d:94:2c:99:5c:45:28:b8:e3:
         14:f7:66:a2:45:4b:d8:c6:d4:e8:4c:f9:bb:03:65:3a:cf:f7:
         ee:b5:33:5f:6c:68:1a:93:fb:aa:7e:d0:8b:c4:1d:21:06:2b:
         67:a4:6b:20:0d:66:d4:a9:b1:ca:62:4f:b7:df:7d:a5:34:b3:
         ef:d8:35:f6:8c:9f:c6:7e:22:f2:2b:a9:72:64:ec:6f:89:8d:
         24:dc:8e:85:cd:0b:18:c9:65:3a:f8:1b:46:07:af:a2:e6:c3:
         1c:0a:16:8a:46:1f:82:c0:44:fc:07:7e:48:56:f4:0f:22:53:
         5c:ad:71:03:09:5f:0a:90:0b:c7:60:08:f5:83:82:ba:92:9e:
         5a:12:bb:c2:95:05:d6:42:9b:2e:a0:e8:6a:18:f1:a3:75:dc:
         93:55:7b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:47:21 2025 by rpki-client