Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
File:                     mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft (raw, json)
Hash identifier:          DKCyfcO3baWbot45NDzqRCkNuvlKSTOcGT9RSmcRTAY=
Subject key identifier:   39:6E:B4:1E:48:51:0C:F7:D9:60:F9:13:CC:7A:05:FC:01:67:F5:11
Authority key identifier: 9A:62:0E:69:1D:95:AA:CE:B3:26:2D:BD:FC:B0:CA:50:99:EE:24:44
Certificate issuer:       /CN=9a620e691d95aaceb3262dbdfcb0ca5099ee2444
Certificate serial:       019847782A954B02A2A33670392ECE805EEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
Manifest number:          0D61
Signing time:             Sat 26 Jul 2025 16:01:54 +0000
Manifest this update:     Sat 26 Jul 2025 16:01:54 +0000
Manifest next update:     Sun 27 Jul 2025 16:01:54 +0000
Files and hashes:         1: 0qrwU3AHf3uhnYK1JVGdBCRu6z8.roa (hash: /kYhLDLgGmD/nuK1uy52fNBM98m/fU6G1KeanfyrJjY=)
                          2: mmIOaR2Vqs6zJi29_LDKUJnuJEQ.crl (hash: /BJT0sFv/X4IH5zmmRc52H8i4TRt9N0WeDIIcLFxAE0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:78:2a:95:4b:02:a2:a3:36:70:39:2e:ce:80:5e:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a620e691d95aaceb3262dbdfcb0ca5099ee2444
        Validity
            Not Before: Jul 26 16:01:54 2025 GMT
            Not After : Jul 27 16:01:54 2025 GMT
        Subject: CN=396eb41e48510cf7d960f913cc7a05fc0167f511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fa:02:da:0f:11:e5:19:79:0f:94:28:2f:2a:
                    2f:fd:ca:ce:b9:35:5c:5e:a8:41:c5:70:5d:29:15:
                    cd:86:26:ff:85:ad:34:87:75:e6:a1:a3:0d:7a:af:
                    61:66:6b:d2:55:ec:02:d5:e9:76:99:e0:a9:8b:30:
                    19:29:a2:94:1e:31:2e:bb:60:58:71:79:3a:e6:e4:
                    55:4a:11:5b:8d:02:41:8a:99:4a:37:70:b2:f5:9b:
                    06:2e:bd:21:e0:8a:9f:ea:2f:2c:16:83:32:f4:58:
                    06:9d:58:cd:92:b6:e4:23:8b:e0:7b:2d:2c:7f:78:
                    00:db:2e:f6:63:b6:7c:e9:61:ff:4c:a8:51:45:f5:
                    aa:60:ef:56:f4:a8:21:74:db:ea:1c:4d:0e:72:c4:
                    2c:84:31:6e:44:df:1f:4b:a2:fd:0f:07:99:ea:ca:
                    7b:a2:73:cb:d8:c1:82:d8:dd:ad:08:78:52:e6:08:
                    0c:60:aa:05:50:3c:17:24:9d:ca:09:07:e9:71:37:
                    16:e4:ff:eb:5d:05:b3:47:41:c9:d1:ff:a3:5d:23:
                    b5:4c:0c:b8:da:bf:05:6f:3e:20:b4:fa:62:39:7f:
                    24:03:83:d1:d6:da:ad:9b:a4:07:ab:c5:a0:da:68:
                    2b:ae:80:e9:16:9e:cd:ae:06:be:82:81:f4:59:ff:
                    38:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6E:B4:1E:48:51:0C:F7:D9:60:F9:13:CC:7A:05:FC:01:67:F5:11
            X509v3 Authority Key Identifier:
                keyid:9A:62:0E:69:1D:95:AA:CE:B3:26:2D:BD:FC:B0:CA:50:99:EE:24:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:af:8e:4b:38:fc:ad:0a:a6:c0:20:fb:e1:d8:6e:18:2a:6c:
         1d:51:df:7f:ea:99:3f:92:c7:1a:7d:89:ac:79:d8:5d:3c:b8:
         7d:2f:60:61:5f:00:46:89:8b:2a:06:e5:5f:43:41:92:1f:f5:
         49:9f:78:cf:96:f0:98:be:b6:10:e2:85:74:f1:9a:b9:1a:69:
         67:5e:54:e1:a3:f3:b7:82:62:51:41:77:ba:95:2d:a3:79:1e:
         3e:71:f4:88:6e:69:9f:a9:b5:07:90:34:b1:6c:30:08:d1:3b:
         a6:2b:f1:42:6e:15:55:a1:7e:de:23:f8:de:85:3c:28:e7:c1:
         84:24:dc:be:1d:2a:bb:85:c2:3a:7c:12:7b:8e:04:68:20:26:
         5e:45:fc:77:13:69:f6:a0:04:e4:36:dc:7b:ee:01:cd:d6:50:
         a8:bf:c2:d2:bf:7c:ed:d4:60:2f:dc:84:57:7e:25:3a:42:f8:
         1c:fe:5a:5f:c1:2f:75:a7:bb:fe:9e:f9:c7:0e:00:42:cf:b0:
         2d:e8:68:fc:7a:39:cd:fd:68:65:aa:0d:ab:d3:94:08:67:cb:
         76:e2:25:fc:5f:b2:80:8e:b2:a9:ef:17:55:ca:a4:cb:c4:2d:
         ea:8f:69:39:5a:08:5b:18:77:33:af:d2:3a:ab:bd:49:8a:7d:
         8f:7d:a3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:02:18 2025 by rpki-client