Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft
File:                     0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft (raw, json)
Hash identifier:          EJ1L1retBsJ9eHkJla3x902h0vBFSHir0d9Jo9uMKl4=
Subject key identifier:   06:6B:B3:24:F8:4A:F7:FF:B6:50:4E:A2:7C:BE:C0:E0:04:0F:D4:C7
Authority key identifier: D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F
Certificate issuer:       /CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f
Certificate serial:       01983FBDBC3FE5FC6E384E2FE52FA114258E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft
Manifest number:          110C
Signing time:             Fri 25 Jul 2025 04:00:55 +0000
Manifest this update:     Fri 25 Jul 2025 04:00:55 +0000
Manifest next update:     Sat 26 Jul 2025 04:00:55 +0000
Files and hashes:         1: 0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl (hash: Q5ax6z1cokEH7zQNh+S+TNAwHQvYItjXEhmz5Yv3mak=)
                          2: GzhIxob9bA8Czihl63s_AVDH8xs.roa (hash: WxcqeaBj1wEhDd9uj+K5AOhKzURT0h/j4LhtZQ31WLU=)
                          3: PrNsEHrQUTWeS8bV_A8Fg8DVjqo.roa (hash: usR3Xps8iALKamgQOqDuPMkcsTbDs9FVlCIAfdu28Yg=)
                          4: RA-miC4KaEWvGjUqoItCz1hzspU.roa (hash: DKcOTeAksEASWtQOJrZNTefUx03eFEufr+NTo/mhLcw=)
                          5: RYqwCne0Subns8-y8iVavkOq2Qk.roa (hash: Z+d4X06SrKehtMK8KmBcdyINkP+XRfxB7bKH0XKqtgs=)
                          6: aAjiTGjBvK-qa1UvGqne8OL4KrA.roa (hash: BjZaYz009qatAltLmOSug4n6bf9uQdN4teDrrkkHNbw=)
                          7: fe1oOTHUFPkwFLaBhSJgtXk18K0.roa (hash: fkkgIxypjSY0trqrdH7vDswC8HMHlpDfymztaFU8S48=)
                          8: xSBLAUIBkAaXVfG28KwmA-ZeLjA.roa (hash: +GtT6G/GYlmVcKLK3ncI4uHy4NjU73KHg0yKe98N+yQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 22:13:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3f:bd:bc:3f:e5:fc:6e:38:4e:2f:e5:2f:a1:14:25:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f
        Validity
            Not Before: Jul 25 04:00:55 2025 GMT
            Not After : Jul 26 04:00:55 2025 GMT
        Subject: CN=066bb324f84af7ffb6504ea27cbec0e0040fd4c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:db:fa:fd:f8:1e:a9:ce:59:61:c5:09:a5:14:
                    70:cf:15:fc:02:44:2c:36:35:12:27:81:bd:fc:30:
                    83:e0:df:1b:4c:f5:62:54:00:e7:cc:f0:01:b2:f1:
                    9d:69:27:2b:14:ae:06:76:3e:b0:da:f1:82:44:79:
                    49:f9:fe:b8:c6:71:58:11:6b:cf:80:fa:a6:1d:28:
                    30:ce:b2:91:ee:2e:f8:bf:41:b3:9f:ba:9a:6e:d3:
                    37:5b:c7:95:ac:14:c3:24:75:ce:4e:de:fa:89:93:
                    60:a0:99:9f:5d:7b:46:27:5f:1a:32:c9:99:36:46:
                    98:dd:a2:4b:70:77:c5:d2:39:79:76:29:28:33:c2:
                    6c:16:40:4a:14:8e:e6:2f:44:08:b3:b2:54:22:84:
                    2d:e1:28:63:47:72:0a:0e:4a:ed:e5:c9:c1:96:c3:
                    43:99:f8:df:dc:78:42:11:0a:fa:57:87:fc:e3:c5:
                    e2:ad:e7:3c:45:4d:bf:7c:de:77:d4:a4:6e:d4:cd:
                    52:19:00:94:1f:bc:94:22:da:34:10:b7:e9:b6:96:
                    6a:16:11:c4:2f:cd:00:aa:ee:67:46:88:c7:f2:24:
                    71:be:8b:c7:52:ac:80:89:b0:11:4f:ed:66:24:b9:
                    7a:25:72:30:6e:49:59:03:8b:bc:2e:a5:08:ab:34:
                    2f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6B:B3:24:F8:4A:F7:FF:B6:50:4E:A2:7C:BE:C0:E0:04:0F:D4:C7
            X509v3 Authority Key Identifier:
                keyid:D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:dd:65:36:7c:b0:8f:57:14:2e:6b:3d:70:13:90:c8:5d:e6:
         6d:65:9e:e0:0a:7a:f8:74:86:33:c0:e1:8e:d1:61:60:ca:7b:
         d0:70:58:79:ae:f6:f7:28:1f:28:a7:82:a8:2c:90:68:ef:7e:
         ef:ed:20:07:ea:d3:8f:f6:49:33:89:77:e5:8d:28:08:ef:7a:
         47:7b:99:09:09:65:bd:06:32:d2:9a:a7:e2:0a:0e:7c:9c:f3:
         5a:79:63:c3:50:2d:c2:2d:73:83:14:af:27:08:30:f3:33:9e:
         d0:7b:ce:1b:44:74:54:ef:61:58:49:c6:41:b9:8e:8e:6f:51:
         4d:b3:4b:4f:8f:ee:69:9c:ed:4b:7a:42:1a:02:f6:3c:14:81:
         26:a8:f1:73:d2:6b:22:1a:18:f2:43:c6:78:aa:d0:c7:7f:1f:
         dd:bf:9c:56:c9:15:eb:d7:6c:57:e0:9b:6c:10:88:ee:4a:6f:
         77:40:0f:3d:33:c3:1a:33:fc:81:05:94:01:73:67:f9:ae:85:
         c0:75:c0:3c:f9:80:54:99:72:41:6c:ee:6e:d6:0e:7b:4d:e0:
         61:d9:04:c9:b5:71:d6:f8:63:a8:47:8a:4c:f8:66:75:3a:59:
         c1:db:73:26:df:4a:90:91:6f:1f:67:5b:2b:cd:ad:47:47:09:
         62:82:e2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 06:56:55 2025 by rpki-client