Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.mft
File:                     MryjKc1OJWX_DRPoNVpuxMwXlOE.mft (raw, json)
Hash identifier:          33pO+28ASmp69T0AD1qQMbxXm0yDqinQ3j1Ws0pYr5Q=
Subject key identifier:   61:7A:7F:84:3C:EA:2C:BA:CB:6B:E2:40:9B:B4:61:7B:D7:12:CB:7E
Authority key identifier: 32:BC:A3:29:CD:4E:25:65:FF:0D:13:E8:35:5A:6E:C4:CC:17:94:E1
Certificate issuer:       /CN=32bca329cd4e2565ff0d13e8355a6ec4cc1794e1
Certificate serial:       01984776EC090EF67513C7BB4E5C02A13049
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MryjKc1OJWX_DRPoNVpuxMwXlOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.mft
Manifest number:          0CB3
Signing time:             Sat 26 Jul 2025 16:00:32 +0000
Manifest this update:     Sat 26 Jul 2025 16:00:32 +0000
Manifest next update:     Sun 27 Jul 2025 16:00:32 +0000
Files and hashes:         1: EY9B7xHMl-Tku1EaPiHTMSJd4UY.roa (hash: fngf8eQs7Bwu0pM4j6i0WPj4gj/7hDrn6NltGJxnSqw=)
                          2: MryjKc1OJWX_DRPoNVpuxMwXlOE.crl (hash: RAhF+CODdjCPJE7upmfuW5bX6IraNDSAd0JVEtXKGPI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MryjKc1OJWX_DRPoNVpuxMwXlOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 16:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:76:ec:09:0e:f6:75:13:c7:bb:4e:5c:02:a1:30:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32bca329cd4e2565ff0d13e8355a6ec4cc1794e1
        Validity
            Not Before: Jul 26 16:00:32 2025 GMT
            Not After : Jul 27 16:00:32 2025 GMT
        Subject: CN=617a7f843cea2cbacb6be2409bb4617bd712cb7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:15:45:76:35:79:1a:fc:2e:72:94:d0:9e:d0:
                    45:56:43:75:a4:31:fe:4f:1a:4e:a2:c0:d7:76:d6:
                    a9:43:5a:a5:d9:61:9a:a0:78:5d:47:5a:ad:47:08:
                    69:e2:ca:28:c0:ad:42:f9:d5:f9:32:ea:f2:b1:b7:
                    30:25:9a:8a:7d:d2:52:57:91:51:5c:82:80:05:c2:
                    db:80:4e:06:19:3b:ad:85:09:58:2b:4d:3e:38:c6:
                    ae:b8:b8:b6:df:45:25:81:2b:d7:1c:8c:e9:fe:d1:
                    98:fd:88:df:02:00:9d:e9:b3:58:9c:ce:60:e5:a8:
                    85:6b:6e:66:65:dd:75:0d:aa:63:32:b0:a8:b1:a5:
                    e1:e2:bf:ad:65:14:2f:fb:dc:22:cb:5d:78:95:be:
                    fd:f3:22:b3:a7:24:89:e7:66:5a:df:33:27:01:79:
                    b2:f2:48:c8:35:90:1f:f5:1a:54:1a:df:0c:be:7a:
                    42:3c:90:28:ac:e3:78:86:b4:50:68:8f:c0:b4:8e:
                    c3:f7:62:f4:32:28:c9:86:ce:71:16:df:d8:c0:f2:
                    a5:9d:a5:32:34:44:3c:ba:67:0d:ac:a6:59:ec:65:
                    71:7f:1e:c5:2b:bb:73:21:db:b6:00:44:e6:b9:5f:
                    f3:28:79:69:3d:49:d6:27:05:50:95:d0:62:ce:09:
                    9b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:7A:7F:84:3C:EA:2C:BA:CB:6B:E2:40:9B:B4:61:7B:D7:12:CB:7E
            X509v3 Authority Key Identifier:
                keyid:32:BC:A3:29:CD:4E:25:65:FF:0D:13:E8:35:5A:6E:C4:CC:17:94:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MryjKc1OJWX_DRPoNVpuxMwXlOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:7c:91:1b:3e:c0:6e:6f:5a:e4:89:df:6b:b1:2b:f4:d2:ab:
         20:f3:88:79:49:fd:ba:61:1c:cd:8d:e0:41:eb:0a:39:3f:01:
         15:85:a7:fd:ac:d1:f4:89:fa:a2:ea:00:63:32:82:4b:98:0a:
         ba:80:fe:5d:2e:27:6a:92:77:23:0c:7a:eb:2e:a5:f8:3d:55:
         4e:e9:2a:3f:7a:0f:5a:61:1e:21:bf:ea:05:1a:62:58:37:3c:
         fc:cf:3d:b7:b5:a5:45:bf:64:96:5f:77:60:1f:20:f0:8c:e2:
         6b:eb:bb:a8:9d:d2:a2:34:6b:19:9d:1f:94:0e:4e:9e:12:7d:
         ba:ce:83:48:3a:c1:42:d3:84:a1:27:23:b3:e0:1b:46:c0:94:
         fa:3c:39:75:fd:7f:fb:97:25:dc:06:f8:f6:55:0d:fb:c3:ef:
         be:72:ac:31:4d:9f:64:c6:59:1f:5b:78:65:d5:60:2b:9e:61:
         58:ae:18:24:51:79:b5:0b:a1:2c:e3:8a:78:eb:4d:e7:76:62:
         f1:94:c6:b5:73:e7:00:11:b1:5a:1b:ba:51:a6:e0:aa:03:96:
         af:54:42:14:6e:d7:f5:51:a6:94:14:43:8b:df:0a:1f:47:78:
         91:ec:8c:0d:10:43:94:7f:9e:7c:61:88:af:52:50:b3:6e:83:
         15:f2:c5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:43:48 2025 by rpki-client