Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
File:                     06v49M34ljoYLaDN-QjDhEf6egk.mft (raw, json)
Hash identifier:          8t59S3l2CuVzlybdK1ByiBokN7HscCtfXLkVl30Drok=
Subject key identifier:   32:D4:37:AC:7E:C0:3C:3B:CB:1B:92:6B:CD:16:88:95:C0:8F:B0:3E
Authority key identifier: D3:AB:F8:F4:CD:F8:96:3A:18:2D:A0:CD:F9:08:C3:84:47:FA:7A:09
Certificate issuer:       /CN=d3abf8f4cdf8963a182da0cdf908c38447fa7a09
Certificate serial:       01984965BB7814E71F70C78FD5E97E66F855
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
Manifest number:          03F0
Signing time:             Sun 27 Jul 2025 01:01:00 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:00 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:00 +0000
Files and hashes:         1: 06v49M34ljoYLaDN-QjDhEf6egk.crl (hash: S0PHViN7zGg7OV3N25/33b2oWl1vfqx1PnORjWDZQc4=)
                          2: ln1hG2A3PkzWQchjBBkclFQPY1M.roa (hash: uND8iuD27tJ0rLXwCSCHqKAMUP/WcV9IOKDwPBaujsw=)
                          3: oT2LDF85PY5HdbBLwhoxl8tjz8s.roa (hash: 1EymL80SjeM7RupyG8pGED+B/g9jGLElUsA1V765L5Y=)
                          4: vGKjbeI63RzXbx2moMgZ88gkL0o.roa (hash: 78K41RNch9PgQsEO5vrAtY0Bw9PWHwlD6lBB0OVTon8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:bb:78:14:e7:1f:70:c7:8f:d5:e9:7e:66:f8:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3abf8f4cdf8963a182da0cdf908c38447fa7a09
        Validity
            Not Before: Jul 27 01:01:00 2025 GMT
            Not After : Jul 28 01:01:00 2025 GMT
        Subject: CN=32d437ac7ec03c3bcb1b926bcd168895c08fb03e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7f:dd:3b:69:fa:0e:31:51:3f:88:d5:aa:91:
                    77:75:62:27:11:37:0b:b9:32:b6:a5:cb:47:0f:70:
                    e8:29:46:ab:6f:6d:ec:74:6e:fa:d6:5c:3d:82:00:
                    3f:47:32:3a:06:24:78:54:c7:dc:37:d3:11:40:6e:
                    6c:5d:90:5a:bf:a0:2a:7b:2d:a6:aa:a5:6e:e7:07:
                    97:3b:c0:24:d2:78:32:3b:4c:5f:2b:f6:bc:9b:8d:
                    5d:ef:34:21:27:18:ff:78:ca:3b:2b:cf:d3:ef:0a:
                    a6:c1:04:c0:00:d1:c0:ff:0a:fd:98:40:54:50:fd:
                    51:e5:c8:47:4a:70:14:a2:1a:57:cf:ba:f5:6c:8e:
                    26:da:32:bd:0c:d8:dd:14:4e:40:c4:71:c1:c7:cf:
                    7b:85:69:fa:c5:03:e4:ee:2e:b1:58:c7:b4:54:1a:
                    56:67:85:11:45:5f:7e:bf:e5:0d:1b:30:95:92:fe:
                    34:b5:a7:ca:90:13:da:8a:61:fc:b5:e5:79:f6:a7:
                    f3:b9:ca:a2:16:e2:34:f1:68:03:d7:b5:bd:a6:21:
                    50:bd:f6:2d:6d:09:41:dd:10:8a:09:d0:0e:7a:f0:
                    1b:0e:f9:05:53:05:e8:f6:f7:db:5c:7f:b8:ac:ce:
                    d4:ae:d1:31:12:1b:98:23:1a:8b:85:d6:d4:d6:ec:
                    a6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D4:37:AC:7E:C0:3C:3B:CB:1B:92:6B:CD:16:88:95:C0:8F:B0:3E
            X509v3 Authority Key Identifier:
                keyid:D3:AB:F8:F4:CD:F8:96:3A:18:2D:A0:CD:F9:08:C3:84:47:FA:7A:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:a4:d8:51:46:91:3a:6e:ef:e8:3a:9e:dd:42:b2:a9:a5:63:
         68:e8:bb:60:78:79:27:3d:0d:bc:5a:97:db:65:71:7f:54:03:
         fd:2b:55:f8:f0:05:05:70:c6:3f:fc:af:17:1e:a7:a5:d6:b4:
         a3:89:cf:ce:a4:4a:10:09:e3:db:2a:66:a2:3f:d5:ee:1c:72:
         8c:16:4b:b5:0e:d6:1e:07:30:36:df:ed:ee:39:4d:2e:18:6d:
         8f:a4:58:6e:a6:7e:46:34:8f:bc:33:3b:9d:5d:82:6a:36:eb:
         1c:c1:7e:80:ac:d2:30:be:47:61:46:5b:81:54:10:33:40:cc:
         36:c6:5c:c8:a3:c3:62:51:66:70:85:7e:40:f9:c4:73:c3:2d:
         4e:eb:41:28:41:53:dc:c1:cf:6a:68:c5:6f:77:49:ca:67:fb:
         35:b3:fa:50:51:24:49:9f:a2:8f:e2:69:a3:39:d8:f8:68:71:
         69:d1:c7:c7:da:fa:35:84:41:fe:48:5f:2c:15:70:4a:40:45:
         b4:0c:dc:fd:4c:bb:7d:45:56:fc:1e:0d:18:ba:ad:4b:f2:e2:
         e8:bc:b7:10:c3:ea:2d:9c:55:89:18:2f:c5:91:96:3c:64:e9:
         55:33:ef:56:3b:80:75:b6:65:7a:72:be:59:f7:4a:aa:18:8c:
         8b:ca:73:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:05:16 2025 by rpki-client