Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft
File:                     Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft (raw, json)
Hash identifier:          E3li1mpdY0j2U2IuOsOC/8yqOMvtqneX5udMn1SwbmU=
Subject key identifier:   E0:BF:93:AD:9F:51:05:45:64:19:70:C3:AF:5C:D3:2B:98:0A:36:AE
Authority key identifier: 0A:FE:9D:66:65:5B:5F:D2:7B:2C:17:CA:96:85:65:0D:53:F3:BB:0A
Certificate issuer:       /CN=0afe9d66655b5fd27b2c17ca9685650d53f3bb0a
Certificate serial:       019849658624383A13E6828CB08BCAD62BC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cv6dZmVbX9J7LBfKloVlDVPzuwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft
Manifest number:          0A95
Signing time:             Sun 27 Jul 2025 01:00:46 +0000
Manifest this update:     Sun 27 Jul 2025 01:00:46 +0000
Manifest next update:     Mon 28 Jul 2025 01:00:46 +0000
Files and hashes:         1: Cv6dZmVbX9J7LBfKloVlDVPzuwo.crl (hash: 0IJWGMoXYvdGQ6dRyVq8iX6fT7PWLb6q6C5rTk6EmxQ=)
                          2: bscorJtE41igLaTAQbtgAQqBxz0.roa (hash: sGg8Ckzp0oPzFQ9Hy7BsC5B5QG6ZfSY1AxKv6j6SlLk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cv6dZmVbX9J7LBfKloVlDVPzuwo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:86:24:38:3a:13:e6:82:8c:b0:8b:ca:d6:2b:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0afe9d66655b5fd27b2c17ca9685650d53f3bb0a
        Validity
            Not Before: Jul 27 01:00:46 2025 GMT
            Not After : Jul 28 01:00:46 2025 GMT
        Subject: CN=e0bf93ad9f510545641970c3af5cd32b980a36ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1b:f5:0b:1d:7b:34:63:f8:19:81:6d:77:f9:
                    99:04:33:09:e6:87:f6:41:8f:b2:94:fe:85:9a:9c:
                    89:76:18:a1:a9:9f:d9:58:55:74:bd:a6:d9:ee:cb:
                    80:02:4e:77:7d:95:8d:0f:89:1b:d7:f4:1a:e3:d9:
                    a7:c2:56:ba:ff:dc:8a:86:37:f1:c7:a4:ae:1f:8a:
                    54:8d:ff:55:b3:3c:1e:0d:02:f9:e2:af:67:e9:b5:
                    58:f6:15:58:92:1b:1d:b0:18:53:76:d0:66:0a:f0:
                    44:c6:2a:12:d5:c8:56:de:c3:a5:00:ca:b8:6d:f0:
                    42:e0:c4:0b:8a:3b:16:c2:df:91:64:38:67:81:1b:
                    f7:f6:f5:37:c2:d7:9a:49:27:fb:f9:34:bd:80:b6:
                    e5:c4:53:c2:cf:fe:e7:d7:a2:2b:93:13:c8:17:b1:
                    0f:34:18:84:34:02:14:af:58:40:8c:03:6d:b5:de:
                    4d:78:d7:29:9f:48:65:c7:38:94:13:fa:fa:ab:10:
                    f6:31:86:c7:4f:84:3e:85:d2:99:ef:95:44:00:4b:
                    23:00:37:78:41:6b:e1:52:cc:8c:14:b0:2f:9c:32:
                    47:76:61:3e:79:5e:ba:c1:08:56:f6:14:b7:2e:ba:
                    87:eb:7a:81:11:d1:d1:ca:b6:98:18:6b:a8:76:6d:
                    9a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:BF:93:AD:9F:51:05:45:64:19:70:C3:AF:5C:D3:2B:98:0A:36:AE
            X509v3 Authority Key Identifier:
                keyid:0A:FE:9D:66:65:5B:5F:D2:7B:2C:17:CA:96:85:65:0D:53:F3:BB:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cv6dZmVbX9J7LBfKloVlDVPzuwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:3c:30:26:cd:b3:c9:19:bf:8c:8c:55:bf:25:3a:43:4c:35:
         e2:86:db:94:41:dd:e2:e9:e7:50:8d:df:a0:60:d8:25:c3:17:
         19:c8:1e:fe:f6:27:d3:33:b9:17:9b:7a:fd:89:18:95:b9:30:
         64:b4:74:d9:4f:f7:79:df:fc:69:d0:45:3e:e8:06:c6:93:61:
         6b:1a:97:43:ee:71:26:de:68:83:9e:c0:23:df:76:bc:af:44:
         e9:90:77:b5:c8:1c:92:b7:5b:b3:6a:91:73:d7:50:bf:d7:49:
         29:ff:c0:1d:54:16:7b:e4:82:38:83:94:25:f2:eb:9f:66:bc:
         a6:ab:01:e1:6b:9e:1d:22:36:46:56:ad:30:2f:b9:32:88:1a:
         13:fb:21:34:13:90:13:f1:22:98:90:6f:b2:7d:29:4d:1d:70:
         a4:4e:af:f6:52:21:62:b8:1e:5d:ee:a5:d0:be:8d:f6:ed:b2:
         8b:9e:0c:1b:e6:bd:bf:9c:c0:25:ac:62:56:44:68:f2:02:e9:
         0b:66:85:d7:e1:e1:85:4d:28:e3:26:83:18:6e:2e:73:af:a0:
         ff:eb:fb:40:82:04:a4:27:88:36:55:5f:f7:1e:f4:2d:30:65:
         09:b2:af:90:2b:64:8f:13:e9:d7:a9:2d:c5:9c:3d:2f:f8:ef:
         f0:d7:ba:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:19:13 2025 by rpki-client