Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft
File:                     _gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft (raw, json)
Hash identifier:          5iEH/QInA+8LI/Ye+Y0g2AmIDAWz0z4zRXsjIlAco3o=
Subject key identifier:   2C:0A:1A:4E:FC:AA:5B:13:4E:2C:88:DA:D6:B4:17:3E:C5:A9:83:2A
Authority key identifier: FE:0C:14:A0:BD:C1:19:F1:ED:49:62:02:D8:9B:E4:FD:26:59:FF:01
Certificate issuer:       /CN=fe0c14a0bdc119f1ed496202d89be4fd2659ff01
Certificate serial:       019848F76887F093342B6B69CDC94332FC38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft
Manifest number:          06EB
Signing time:             Sat 26 Jul 2025 23:00:30 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:30 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:30 +0000
Files and hashes:         1: _gwUoL3BGfHtSWIC2Jvk_SZZ_wE.crl (hash: fTNRf9JKgVBlpotmEGPTfoTTIWytzVf1mO2D+1gw/xs=)
                          2: oYPmCSWvS8EzeEC8QLUq6x_eYrI.roa (hash: 1A9wNN6kYL22cNZ71fS4DQFjU5QHCoE6jNJ2g/Xtw44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:68:87:f0:93:34:2b:6b:69:cd:c9:43:32:fc:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe0c14a0bdc119f1ed496202d89be4fd2659ff01
        Validity
            Not Before: Jul 26 23:00:30 2025 GMT
            Not After : Jul 27 23:00:30 2025 GMT
        Subject: CN=2c0a1a4efcaa5b134e2c88dad6b4173ec5a9832a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:47:44:e6:82:f6:95:fb:56:0f:a3:64:1b:eb:
                    22:12:14:75:29:b4:54:49:65:9c:70:a6:6a:1c:17:
                    55:e0:37:13:8d:76:66:6c:da:55:ab:b7:46:20:0b:
                    35:11:79:14:03:df:67:2e:a2:22:69:01:93:0d:5f:
                    cd:5a:02:13:41:d1:c9:c8:98:33:56:92:36:27:07:
                    86:23:f2:90:36:46:ec:6d:5a:9b:ab:6f:45:39:01:
                    d5:db:97:bc:53:66:f5:ed:b6:e2:d8:bd:99:ba:26:
                    fd:81:0a:b2:ee:d6:1d:d7:dc:93:e6:3b:56:05:12:
                    20:7a:a4:a4:71:83:de:4d:3b:0b:25:30:a5:fd:7e:
                    45:c9:ae:42:cb:f2:a5:b2:4d:ac:5c:9b:a1:48:5f:
                    ff:4c:5b:57:d9:2b:6f:1f:98:12:40:ca:af:74:ad:
                    e4:65:cc:f9:bd:3d:1a:86:f3:41:f4:ea:79:c0:d1:
                    54:5a:4b:57:25:47:c0:30:c1:a0:38:03:a4:2d:fe:
                    0a:27:0a:ae:b8:46:d1:08:97:30:66:f2:55:ec:8e:
                    23:85:28:45:8e:2c:56:17:14:dc:fa:49:33:81:29:
                    48:4f:b1:b0:0c:a3:0a:84:31:ee:0e:84:81:cf:d2:
                    84:6a:49:3b:2d:ad:eb:30:64:0b:c3:d2:15:4d:e3:
                    1d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:0A:1A:4E:FC:AA:5B:13:4E:2C:88:DA:D6:B4:17:3E:C5:A9:83:2A
            X509v3 Authority Key Identifier:
                keyid:FE:0C:14:A0:BD:C1:19:F1:ED:49:62:02:D8:9B:E4:FD:26:59:FF:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:9f:fd:3c:77:26:5c:de:66:5f:03:1a:3a:a5:cf:a5:c7:78:
         b8:8f:65:16:50:39:0f:6f:a2:0c:36:7b:15:e6:bc:4d:28:43:
         fa:69:20:43:12:3d:77:86:db:7b:b8:8f:8a:f9:7a:b5:ff:4a:
         bb:88:e5:58:34:7d:9c:0d:76:94:ed:e8:01:44:b3:d2:eb:02:
         27:33:ae:d8:98:05:d3:fb:2b:85:ca:45:cc:89:fa:55:ff:74:
         3f:d1:5f:6d:61:2b:0d:8e:37:24:47:e2:99:16:ae:9a:30:87:
         59:70:7a:05:71:54:b3:d3:a0:b9:fd:e7:5e:23:f6:7e:91:80:
         61:6b:68:6e:4c:4a:c4:a4:f4:71:7d:02:44:ea:f8:7c:a5:61:
         ef:73:74:22:01:e7:d4:88:ff:73:90:ee:e5:68:f2:88:b5:ef:
         cf:ff:da:ef:73:4a:97:7b:d5:61:a7:57:df:cf:9b:04:ce:e1:
         78:9a:7e:85:d8:1b:01:0d:87:d2:85:17:19:70:99:f0:20:9c:
         01:73:93:20:24:be:cc:8d:c8:9a:60:b6:a0:83:9c:9b:47:7d:
         1f:e1:53:c0:c2:59:b3:51:a1:46:d8:f6:e1:08:82:c1:bf:11:
         05:a6:cc:35:5e:80:0e:cb:b9:d8:95:35:6e:cb:87:2d:b9:72:
         45:ec:7e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:32:26 2025 by rpki-client