Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
File:                     D97nlErE2jERKV2B4p3roAwWOpY.mft (raw, json)
Hash identifier:          j74G5lJ7I12gteuQ1JGKi5S/9neHVzkV/YwLYcNDXwg=
Subject key identifier:   BF:D6:C8:D6:A9:3A:E5:1F:98:90:AE:7D:47:A1:47:49:10:E0:B1:AE
Authority key identifier: 0F:DE:E7:94:4A:C4:DA:31:11:29:5D:81:E2:9D:EB:A0:0C:16:3A:96
Certificate issuer:       /CN=0fdee7944ac4da3111295d81e29deba00c163a96
Certificate serial:       019849D3B78CB1668D3264E9B6EE269E64E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
Manifest number:          0FFC
Signing time:             Sun 27 Jul 2025 03:01:08 +0000
Manifest this update:     Sun 27 Jul 2025 03:01:08 +0000
Manifest next update:     Mon 28 Jul 2025 03:01:08 +0000
Files and hashes:         1: D97nlErE2jERKV2B4p3roAwWOpY.crl (hash: FpxjwvLQwXRDs5QY1y2p6YytvkJ0kcXgEbKZDi1P6sE=)
                          2: Fe73gwKx3TfChZQCePRdIEAemH0.roa (hash: qBzf7ILpA60OZzhZbHEoimpJXoZWWGpm51oGlU43AdU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:b7:8c:b1:66:8d:32:64:e9:b6:ee:26:9e:64:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fdee7944ac4da3111295d81e29deba00c163a96
        Validity
            Not Before: Jul 27 03:01:08 2025 GMT
            Not After : Jul 28 03:01:08 2025 GMT
        Subject: CN=bfd6c8d6a93ae51f9890ae7d47a1474910e0b1ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7b:5c:d7:e1:45:c1:e2:56:6a:88:81:21:ee:
                    36:24:35:98:9e:be:73:00:e0:c2:29:f4:4d:96:da:
                    f8:aa:a0:b7:ae:2f:cf:67:5d:f2:81:bd:4d:8a:63:
                    12:56:1f:8c:86:92:aa:7e:73:45:65:38:00:4a:8d:
                    00:7e:f0:06:87:a4:60:45:44:44:07:e6:f6:f3:54:
                    a9:bc:b2:27:22:61:b9:69:e3:5c:3f:4a:68:cc:e7:
                    cb:69:35:0c:31:c1:ef:dc:27:12:ea:b2:d9:d8:a5:
                    7a:f8:f8:21:74:47:f5:4b:df:d8:ba:dd:19:f9:39:
                    6d:73:0e:ab:0d:bd:66:59:a2:70:6a:ce:1c:43:e2:
                    cb:2f:10:b5:2f:8b:3a:c3:9a:d1:e4:a1:1b:ec:4c:
                    c0:c3:28:a6:e8:82:2f:24:66:48:36:6f:5e:1d:ef:
                    e2:19:eb:92:65:a5:3e:98:f5:98:30:14:93:87:da:
                    fe:b4:c4:77:0c:64:52:55:84:ae:95:fc:04:62:f1:
                    b7:5c:1b:10:9b:3e:9d:3b:36:ec:7c:ba:23:e0:05:
                    23:55:89:54:24:71:86:85:fb:96:18:69:2d:6c:8f:
                    ca:04:09:d2:53:f8:79:31:e6:9c:92:82:3a:1b:81:
                    e4:d9:67:13:74:d8:41:3e:3a:0a:b1:3a:71:6e:96:
                    23:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D6:C8:D6:A9:3A:E5:1F:98:90:AE:7D:47:A1:47:49:10:E0:B1:AE
            X509v3 Authority Key Identifier:
                keyid:0F:DE:E7:94:4A:C4:DA:31:11:29:5D:81:E2:9D:EB:A0:0C:16:3A:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:c8:92:84:71:13:8e:c1:cf:50:ef:3e:fb:85:db:23:76:c7:
         42:bb:c3:3e:b9:5b:ab:a6:d2:ac:d8:6e:3f:da:f9:0b:35:70:
         50:d7:53:aa:1f:81:ef:74:55:5f:79:46:df:0c:88:75:90:6b:
         fd:33:29:26:00:a3:0c:bc:7b:c4:30:f4:dd:c9:b0:c1:99:ee:
         fe:e8:7a:27:ee:2e:09:5f:4f:83:8b:93:7f:67:9e:02:ec:4d:
         1c:57:19:04:71:b9:25:70:fc:52:5d:c3:a7:fb:7f:1c:43:7a:
         c5:5e:b2:57:86:72:ba:fb:55:76:e0:b1:10:71:10:ab:ec:c9:
         a7:42:69:8e:14:95:1f:6a:3e:da:d9:11:f1:9c:e1:d4:94:e9:
         8f:ce:29:96:cc:98:98:50:5f:1a:ef:cf:5b:28:54:47:c3:fc:
         f2:0d:dc:72:98:04:13:b1:f9:23:fa:93:da:93:2e:6f:75:83:
         ce:e9:99:dd:2d:2a:6c:cd:38:33:9d:83:d9:a2:00:bf:26:d4:
         89:f5:37:94:d8:2c:e7:dd:eb:8a:18:18:83:d1:61:b5:e3:1f:
         ee:4c:ad:99:71:1e:b6:7c:da:16:f8:21:bb:16:94:6b:53:02:
         9b:af:72:f5:65:68:7e:b7:86:cb:bf:a3:55:b3:e7:fa:ab:42:
         09:24:80:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:40:39 2025 by rpki-client