Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/da5e3b-ca0b-4fce-b1e2-5dd336f38060/1/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.mft
File:                     0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.mft (raw, json)
Hash identifier:          dSf+fsiwRQjms/pnERwDJQQCEqw7gBheLu3nreOm8Ds=
Subject key identifier:   52:2B:2C:48:0F:EC:1C:06:B4:9F:18:84:D5:EF:2E:F8:1D:8E:8A:8B
Authority key identifier: D0:C3:D3:58:81:2E:60:B6:80:E4:E1:16:32:F1:39:56:0B:F5:25:FB
Certificate issuer:       /CN=d0c3d358812e60b680e4e11632f139560bf525fb
Certificate serial:       01974967E39FCE13162757F0498860F0A327
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/da5e3b-ca0b-4fce-b1e2-5dd336f38060/1/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.mft
Manifest number:          0D03
Signing time:             Sat 07 Jun 2025 08:00:34 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:34 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:34 +0000
Files and hashes:         1: 0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.crl (hash: DoBgrJ14VOzulbsZy4oonfQNLiGG/tqIj9PVFNnFK/s=)
                          2: HME8zGcc-HAVtbr4sZdbeNLJU5A.roa (hash: TPPi4et5FVDHl+8Hye2r4DlU6tqPyGa2KXSYWnxyrpk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/da5e3b-ca0b-4fce-b1e2-5dd336f38060/1/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/da5e3b-ca0b-4fce-b1e2-5dd336f38060/1/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:67:e3:9f:ce:13:16:27:57:f0:49:88:60:f0:a3:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0c3d358812e60b680e4e11632f139560bf525fb
        Validity
            Not Before: Jun  7 08:00:34 2025 GMT
            Not After : Jun  8 08:00:34 2025 GMT
        Subject: CN=522b2c480fec1c06b49f1884d5ef2ef81d8e8a8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f0:8c:99:96:c9:f3:8a:1c:38:e1:c8:0e:6c:
                    96:b5:c1:2a:9c:83:72:e5:c1:cf:02:8e:08:18:8f:
                    65:a3:b9:87:13:ef:21:b9:86:78:1b:af:b1:3f:67:
                    e0:2d:3b:b7:44:12:36:74:ac:a2:c3:29:39:ac:3e:
                    6e:31:7f:0c:cd:e5:3b:42:8c:08:0c:a7:81:9e:df:
                    cf:f9:ab:6f:9f:53:ed:1a:f1:bf:fa:d8:dc:73:5d:
                    a0:d2:77:32:a0:5d:e1:40:a3:88:57:3a:4e:06:5b:
                    28:d6:61:b2:8f:07:ce:db:ee:94:61:8d:c1:46:74:
                    3d:03:e8:40:91:39:6a:da:cc:49:f0:5a:30:c7:57:
                    09:74:55:a2:d7:d7:f0:31:7f:be:6a:28:3f:90:0e:
                    51:c5:e7:a8:be:3f:76:12:d8:53:33:ee:ab:e0:19:
                    8d:42:4a:af:1d:98:7e:06:88:dd:ea:6d:8c:0f:f2:
                    3b:e6:41:94:77:6c:41:b3:eb:6c:5e:a7:93:c6:6c:
                    89:58:90:be:b3:af:18:28:0b:62:a7:86:a6:fd:f0:
                    95:40:50:38:24:8a:19:4d:bc:63:ae:76:b7:11:b9:
                    2f:c1:d4:d9:62:2c:79:8c:01:02:2d:e8:4a:68:e9:
                    70:f4:d7:97:c9:0d:be:b2:a2:a1:99:6c:22:eb:9c:
                    c9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:2B:2C:48:0F:EC:1C:06:B4:9F:18:84:D5:EF:2E:F8:1D:8E:8A:8B
            X509v3 Authority Key Identifier:
                keyid:D0:C3:D3:58:81:2E:60:B6:80:E4:E1:16:32:F1:39:56:0B:F5:25:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/da5e3b-ca0b-4fce-b1e2-5dd336f38060/1/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/da5e3b-ca0b-4fce-b1e2-5dd336f38060/1/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:ef:1a:9a:7c:af:69:fc:2b:fb:c3:6c:b2:39:2d:20:a3:56:
         d8:59:09:ad:47:be:b3:bc:95:2a:b2:1d:9c:29:08:90:ef:82:
         d0:ef:c4:38:50:56:d6:b6:1b:a9:78:d7:d3:ee:37:f3:d8:a6:
         92:ca:d6:5f:e9:da:80:69:b5:cc:7a:03:0c:f3:90:f6:85:ad:
         5c:f5:87:fa:68:df:8f:1b:ce:16:d9:13:f1:7c:78:b7:88:4e:
         d1:37:95:da:eb:b3:ab:e5:6f:d6:b7:df:96:66:b9:49:cd:ce:
         54:cc:b8:21:f0:1d:a9:41:bb:31:36:70:57:6b:ad:1f:87:07:
         9f:9e:97:c7:01:f5:1f:b9:fa:60:bb:bd:b9:b0:6b:b8:5a:12:
         8c:f1:25:28:4b:71:77:82:5a:92:2e:08:50:5d:d9:11:d3:4a:
         f8:00:36:5d:8a:74:7a:5f:5c:d2:ec:dd:54:3a:6a:0e:7c:1f:
         a1:a5:2d:8f:fe:73:80:f5:98:7e:0b:72:1a:19:2c:25:36:e6:
         77:99:ae:b4:41:06:46:6e:d7:4c:20:be:63:96:c3:d7:72:d2:
         c3:52:0e:a3:e2:ce:3f:8b:01:e9:d0:8b:09:df:ce:9e:d2:b1:
         a3:47:53:33:26:f1:6b:56:72:b2:39:8f:c8:fe:6b:48:84:33:
         c4:0b:fc:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:49:01 2025 by rpki-client