Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
File:                     DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft (raw, json)
Hash identifier:          kXa4V+daLdom3eEbqZyuGsdqGAgkVC9X1thKaIC+w00=
Subject key identifier:   A0:52:D2:A5:94:61:0E:88:21:A5:69:C6:DB:E5:72:FF:72:FD:DD:ED
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Certificate issuer:       /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial:       019827B56BB483ADA95FDCB07826E21536C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
Manifest number:          0EE3
Signing time:             Sun 20 Jul 2025 12:00:57 +0000
Manifest this update:     Sun 20 Jul 2025 12:00:57 +0000
Manifest next update:     Mon 21 Jul 2025 12:00:57 +0000
Files and hashes:         1: 0-YPkmULAfXnz-x8O4HjpPXrRgc.roa (hash: 4hkO4QjkvJDhiXFvv5DxoiJEgtCK4O1iDNeqMzaTU3Y=)
                          2: 1-_faHefIQXiAFnH3LNhBjrPU09I.roa (hash: 7InTaPWZ/MJFW8mHuJCEltHrQe/oJd/TwCKtlJ9uvvg=)
                          3: 2TU9zRlg4BupLvfFfZ7nbqZ_3fY.roa (hash: Q+LzT1EBZiXr+my5xIMRRPF6wrKo64s9mQmOfTnOJXc=)
                          4: 3cmiag-OFPHODxLb1KMirqc2FN4.roa (hash: di5HoeNyYyjDjq7zRaZtas9CEUZ0AIaTVNE5BqvZ7NU=)
                          5: 3r_fS2iqTHTpqVrmAdmmLy8h5Uo.roa (hash: 0H+5GAjDMQaP4P2zWWWPVnZ5P/dbumJ+SDOD0JaXOts=)
                          6: BSzGMTPMq-wN-qGAx5X2D1S9LyA.roa (hash: BvSVSe8mZx3zsVFBrO0OJZXXGEEERCM53ZjLPIwFvwo=)
                          7: CTV38ZT_kPdUbW8ChEbSmJ6D_xY.roa (hash: yntCphEUvGZYiNPfiCzzcsgLL+fxDyvsgRdAxblWwLU=)
                          8: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl (hash: Q/iuFgXEQPyy1xwIhNDxRHvCrI1mKo0yrZ0O2IA43dc=)
                          9: FWQETtkN_oL4od4Al2G3UDgEL5c.roa (hash: xaM2HH/7hc4DXnOzRecNa3benIQdBaCSuVr3xBWruxw=)
                          10: I3HMzg_QmJAYWZSbsxJu7-jY00E.roa (hash: GSyQIbiBxY1fX31ira1MjHAesY8aGG/De+BRbgOx2qc=)
                          11: J1hhtf3gTs8cmUIBfj_g7V7c5qk.roa (hash: Str6Vmr/NRskfnPMQpbp4pXOuly0BQP6BEJAk+C3Jm4=)
                          12: NmY3Cr2hTmLmrJ4cFR4Mbk6O2f8.roa (hash: 3vnVC3SAIOmJWTDh9HP/nluckKtdf1CaP0omwy3IFuI=)
                          13: OKEgLmB_4ei0G0uw28caa8G3iPw.roa (hash: w8AbZTm+uTbT/9sxDIvDozMxX1t2Mfifb772t5Mh9zE=)
                          14: R10kzlmrHw9WAyAvK8-iRqbaBaA.roa (hash: XqcsBbYv+/IKS1qiI7jigpCKSJFXUkDBvTdSLdA8/XI=)
                          15: Y8BxdOG4E83LClpFnmkd0iyca1M.roa (hash: Ho2liFzRTVRlfVeCSm6qtB/bpgcQQigB8GNzfsMibJM=)
                          16: a2k-bxYcmm3kHfce2aU5FLKv-4E.roa (hash: Idu0EAICE2kNK56b/YbhSusdo/ak8Y2nDki9I5fmt4o=)
                          17: c_BvljorzCC91xKN9SXmWQ8PZtY.roa (hash: tm7MMwTrRhcL2zqzjy3kf+lPaC41oVQy/y652O4EMmQ=)
                          18: dfRwLnd7H7w_OVSLP8kz-J08HvU.roa (hash: FPuBb8+13HSQLJU9CpclAE8hKmqwuolZDcDf1PJudFQ=)
                          19: dtKVxUHGrAkfKqCobm6KXtRp0E8.roa (hash: 83vvkJxmaytP0GLHWBg53bMWqx3mr1WoGbL8xTTfoKE=)
                          20: eobitmCPSS93nZyZrt6H4tzwfb0.roa (hash: LnX7b8s+/yLhrNscuvO3jZ4nog0puSgY6ARRzJz2m78=)
                          21: ivaRRc1DWzJYCrjzmD7SPHajmck.roa (hash: fbqrU3gLkOHm9Lw9w1LVFyGxETrg/SyMnPOPP5yhyR0=)
                          22: jI6_drTo1PWnufC4oiNHSu223XA.roa (hash: Ni1IeOuPqg+nIvkmnYu+vOs52S50BNNNPDhfXtty6xU=)
                          23: mGwtUKTp1lrZYeXsHRygkPmeOjs.roa (hash: IXq7ynhykZbaN/EO7syj+TvBCLuqP/D/GJNTwgfgRF4=)
                          24: sbxNn528r3_zzXNbv7r2uOHDqfE.roa (hash: qSGnUn/ItuImBIisLX01AnYKn5TPmOvO3e69Iv0XU/o=)
                          25: t1LshJm8xEx-87XbFhNq7UZM0do.roa (hash: qxpyfe2Q7y0I+2bbmEdIUUqvN7x6u3MnxvZPf3Uv5NQ=)
                          26: tYTCXjdd6a-Lr6S2LTPv_OpkXmc.roa (hash: GHmsgW330iSp8of0BZELcAg4KzkX+Jd8lu+4iluVCwo=)
                          27: xNs_MXSsSqQhb7POy7D96jrbBfE.roa (hash: Kqde4DiWfgPpGL5KKhrxdr3e5I5JwanO0Au/BQUqUf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 12:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:27:b5:6b:b4:83:ad:a9:5f:dc:b0:78:26:e2:15:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
        Validity
            Not Before: Jul 20 12:00:57 2025 GMT
            Not After : Jul 21 12:00:57 2025 GMT
        Subject: CN=a052d2a594610e8821a569c6dbe572ff72fddded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:71:39:13:b5:ea:77:12:71:01:09:91:6b:52:
                    d0:c9:a9:42:f6:17:d1:26:f0:93:9e:46:de:8c:04:
                    6a:09:8a:a2:b2:b1:2c:d0:4c:7c:a6:54:95:0b:00:
                    12:23:29:b8:18:e9:a1:3a:96:bf:7f:f8:d1:55:9d:
                    fe:87:9a:5a:ba:59:17:53:c8:50:bf:c3:98:ea:12:
                    c8:0d:09:33:d1:40:8b:cf:6e:a5:d6:91:08:1e:c2:
                    e9:ab:23:91:22:bd:8d:52:e8:bd:ef:51:d7:31:f4:
                    ef:d5:7c:94:00:14:83:fe:1f:f0:5e:32:fa:40:00:
                    7d:fc:f5:24:6d:a5:a2:11:ad:0a:a9:bc:e5:16:a1:
                    5a:28:19:ff:73:73:d4:91:5c:cd:cf:55:fe:38:c9:
                    f2:8f:53:bf:01:26:12:e5:c4:0b:60:c7:a5:9e:de:
                    38:29:3f:6c:df:ca:0f:ce:e2:af:b6:42:ee:f6:26:
                    c9:57:06:a7:21:b7:3f:1a:85:63:c7:71:0d:69:d0:
                    f9:51:bb:9e:31:b3:9e:b3:9f:0d:4f:0a:ae:a1:d0:
                    e8:f2:cc:53:f6:86:33:af:d7:d4:0e:56:d3:54:a8:
                    1a:ac:e1:6a:7d:b2:44:3f:b6:4e:b2:9a:e7:ae:12:
                    77:9e:93:15:ea:88:f0:54:5d:96:80:62:03:25:90:
                    e1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:52:D2:A5:94:61:0E:88:21:A5:69:C6:DB:E5:72:FF:72:FD:DD:ED
            X509v3 Authority Key Identifier:
                keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:e7:28:4c:1d:06:98:c4:55:ef:8a:b9:38:b4:24:68:ea:45:
         7b:b9:7b:14:3a:d0:00:b2:fb:cc:99:fb:ea:db:54:5c:7f:83:
         ba:47:d4:af:e1:cb:00:80:fa:db:17:72:7b:ca:53:fa:fa:cf:
         71:3c:37:59:93:80:b1:91:ec:5b:56:7d:38:a1:6b:64:75:e0:
         db:83:4f:07:44:58:35:fd:c4:35:b8:65:ff:00:b1:7d:88:fc:
         36:b4:7e:66:9b:ee:1d:b5:17:5c:e0:5c:4a:dc:8a:bb:04:3a:
         5a:a0:42:d1:ed:0c:17:8a:3b:07:9e:91:c0:c0:ee:35:9e:14:
         55:1e:ec:2b:2b:41:97:05:11:3d:b8:30:7e:c3:66:b0:64:8f:
         fe:25:9d:8e:34:e1:1e:2c:b4:a7:63:fa:b8:c5:3f:20:c7:81:
         95:6b:1c:13:d2:ed:c7:ee:23:b7:3c:ba:70:1f:44:89:01:dd:
         73:d8:81:33:df:00:23:ca:f5:5d:cd:04:88:9e:0c:69:8d:bd:
         fe:91:8c:39:a8:c8:74:5b:fc:97:5e:d4:f8:81:87:8c:57:87:
         67:27:c8:cc:79:51:ee:d6:85:41:b5:be:64:76:0a:fe:64:ba:
         7f:1e:38:7f:6c:db:5c:bb:07:c4:55:7f:7e:bf:3a:80:65:2c:
         97:a0:a0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:27:18 2025 by rpki-client