Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft
File:                     dIZPUCPsYmPvnxb5AYf18oBh0RU.mft (raw, json)
Hash identifier:          1TK6VEO7ue66hWBiXRHAeQvj/DWMXPZabHoWEngNRY4=
Subject key identifier:   F6:27:34:9E:A3:18:BB:AA:5E:21:E7:70:4C:E0:42:A1:E9:53:14:41
Authority key identifier: 74:86:4F:50:23:EC:62:63:EF:9F:16:F9:01:87:F5:F2:80:61:D1:15
Certificate issuer:       /CN=74864f5023ec6263ef9f16f90187f5f28061d115
Certificate serial:       01975F13C7B925D3412136D3190ED42B87E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft
Manifest number:          0B75
Signing time:             Wed 11 Jun 2025 13:00:21 +0000
Manifest this update:     Wed 11 Jun 2025 13:00:21 +0000
Manifest next update:     Thu 12 Jun 2025 13:00:21 +0000
Files and hashes:         1: dIZPUCPsYmPvnxb5AYf18oBh0RU.crl (hash: /b9mC6Rjmm4B2TD74flZiIPhrAsJeAwrPQtfaolu3BQ=)
                          2: vj_VJ7c4UiwkU_5yyGsly7O6qIk.roa (hash: RoD9r1uYXNwcvEQVZCci6nqFAbGm9X9wv8JUg9I5naM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 13:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5f:13:c7:b9:25:d3:41:21:36:d3:19:0e:d4:2b:87:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74864f5023ec6263ef9f16f90187f5f28061d115
        Validity
            Not Before: Jun 11 13:00:21 2025 GMT
            Not After : Jun 12 13:00:21 2025 GMT
        Subject: CN=f627349ea318bbaa5e21e7704ce042a1e9531441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e4:ac:6a:28:57:8e:f6:19:9a:7e:e9:08:94:
                    e0:16:2c:6c:c3:71:ef:11:8d:55:66:bc:66:7a:db:
                    d9:83:d1:ac:e7:7a:c3:dd:c4:01:c4:c4:00:56:e1:
                    a0:ef:1b:de:95:2e:7b:68:79:9c:15:e3:82:a9:61:
                    54:b8:66:a9:41:14:b2:f8:53:4e:be:f8:65:c7:3b:
                    6b:f9:5a:20:a1:eb:60:c7:13:97:32:72:bf:c8:b9:
                    4c:6a:cb:00:a2:4f:06:ac:1a:38:d2:9f:57:aa:11:
                    12:fe:f3:ac:6a:72:ac:27:1e:cf:24:16:3b:77:49:
                    70:14:05:10:15:dd:4e:eb:48:06:42:49:42:a8:4f:
                    54:96:30:a3:fb:c4:f9:7f:80:3c:22:af:27:7f:cc:
                    b8:e1:ad:3f:2c:63:6c:f2:6f:e8:cd:a3:f6:cc:13:
                    20:17:25:b4:fa:3e:05:14:83:41:5f:70:10:6f:80:
                    ff:f1:8f:11:8c:83:8d:da:c1:a6:f3:ad:db:a1:b1:
                    dd:97:fc:8a:c8:02:5f:73:b4:02:30:3b:56:52:ba:
                    4a:6e:7f:85:d2:74:f7:f7:56:79:7f:25:12:6d:6f:
                    d8:1d:ca:b6:e1:85:1e:90:48:e6:27:94:3a:a8:85:
                    b3:20:8d:c0:7d:e2:c2:65:b2:a5:e7:ca:dc:3c:ee:
                    8d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:27:34:9E:A3:18:BB:AA:5E:21:E7:70:4C:E0:42:A1:E9:53:14:41
            X509v3 Authority Key Identifier:
                keyid:74:86:4F:50:23:EC:62:63:EF:9F:16:F9:01:87:F5:F2:80:61:D1:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:c4:a0:5b:13:e6:fc:27:95:f7:bc:ec:e5:cc:e6:86:cc:15:
         63:e0:c2:40:8e:de:d8:7c:27:e0:98:31:48:80:53:97:72:95:
         46:b5:1e:55:eb:ec:ae:ae:e2:b4:7f:0d:b0:b0:12:13:b9:d6:
         7c:ec:e1:2b:4b:12:b3:05:82:fa:ee:3f:fd:af:ac:1d:34:fd:
         80:fd:24:72:3e:5e:3e:8e:60:55:5f:6f:60:87:8d:50:28:67:
         c0:88:ac:a3:8b:a1:78:e8:f6:e6:6d:e9:79:07:4a:7c:0c:85:
         86:00:f7:3d:4b:75:8b:80:a5:64:a1:4d:9c:54:b2:ae:a6:f7:
         a4:05:f7:67:2e:d9:df:9a:cb:98:12:e3:12:bb:33:04:54:8b:
         92:c6:fb:59:6e:cb:49:37:7d:6e:80:5e:f9:d3:e9:09:3b:b2:
         40:b1:f4:5f:b4:ec:51:92:40:46:f2:13:87:9b:b9:34:f5:3e:
         12:3f:f4:25:b1:04:e7:4f:5d:5b:db:58:71:e5:bc:ed:95:e7:
         a9:db:c7:49:b7:01:40:7c:c2:41:b4:ca:d4:e6:8a:91:20:3f:
         56:d7:e6:90:fe:b1:2f:48:15:03:59:ac:9a:9d:58:4c:9e:9a:
         8a:0d:67:06:32:0c:b7:eb:76:fd:dc:b6:20:34:f1:54:e9:46:
         35:39:1b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 22:35:56 2025 by rpki-client