Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft
File:                     RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft (raw, json)
Hash identifier:          njx+rsBTvXaP/TqfoZ3yTyXBTm4luN7yn1o7VVoNQ0M=
Subject key identifier:   0A:55:E6:34:73:2E:17:C7:CA:E9:67:8D:89:6C:3E:AF:84:07:6C:35
Authority key identifier: 45:76:70:54:D1:93:A3:B8:D6:C2:C0:09:F5:9C:F6:43:E1:49:E3:9F
Certificate issuer:       /CN=45767054d193a3b8d6c2c009f59cf643e149e39f
Certificate serial:       0197CA271884D71EAC0A07CD9BADCD65CE2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft
Manifest number:          0FBA
Signing time:             Wed 02 Jul 2025 08:00:49 +0000
Manifest this update:     Wed 02 Jul 2025 08:00:49 +0000
Manifest next update:     Thu 03 Jul 2025 08:00:49 +0000
Files and hashes:         1: RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.crl (hash: 0arSdBM0oxW0zfYFFTHyHB64Kg21dLsZKHFit8ktflQ=)
                          2: kpeNUrCjwD-bH5D8QQPXuEqA70c.roa (hash: /GB93CH2vpBaaqYNdlIMujujZ/LFvmv11CaA0a79OcU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 08:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ca:27:18:84:d7:1e:ac:0a:07:cd:9b:ad:cd:65:ce:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45767054d193a3b8d6c2c009f59cf643e149e39f
        Validity
            Not Before: Jul  2 08:00:49 2025 GMT
            Not After : Jul  3 08:00:49 2025 GMT
        Subject: CN=0a55e634732e17c7cae9678d896c3eaf84076c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ed:77:33:2f:dd:e6:88:03:79:6a:09:8e:f3:
                    54:8f:6d:91:25:e6:ed:84:4c:36:3f:a9:17:ab:92:
                    63:cf:f9:3e:32:e9:5a:cf:0c:3c:d6:68:d1:64:64:
                    25:52:6b:5b:c2:66:94:c0:e6:79:91:c7:fb:b4:25:
                    ab:a9:ff:c6:8d:fb:19:91:74:7d:d9:12:c2:db:1a:
                    eb:84:a4:1e:df:e5:84:98:5c:9c:90:a0:94:74:b8:
                    6c:06:77:e3:42:e1:f8:d9:65:08:46:1b:bf:36:9c:
                    b5:e9:14:f3:96:92:b7:ae:2e:b0:16:2b:2a:18:8b:
                    cd:a9:28:b7:2c:96:05:d1:33:b4:0a:00:3b:36:f3:
                    3a:36:20:e4:16:1b:04:bc:8b:71:08:2e:e4:9d:9b:
                    bf:93:a7:c5:d0:bb:e8:eb:ef:11:51:48:f0:7e:63:
                    e5:34:b4:b0:2a:89:3f:4b:a6:4e:66:bc:aa:04:52:
                    4f:dc:03:fa:55:3d:5b:d1:19:aa:1e:e2:c3:13:4a:
                    45:af:8c:ad:a4:cd:09:6a:dc:76:71:79:cb:0a:2b:
                    83:33:ec:40:d6:36:8e:c6:b1:4f:b9:1f:27:1d:1b:
                    0f:28:fe:5f:98:40:26:3e:34:38:26:1c:49:12:7d:
                    e3:c5:68:34:1d:ae:39:89:f1:8f:e5:be:42:55:f3:
                    8d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:55:E6:34:73:2E:17:C7:CA:E9:67:8D:89:6C:3E:AF:84:07:6C:35
            X509v3 Authority Key Identifier:
                keyid:45:76:70:54:D1:93:A3:B8:D6:C2:C0:09:F5:9C:F6:43:E1:49:E3:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:98:0c:ab:d1:9d:5b:1c:d7:cd:57:62:33:96:e1:31:77:df:
         60:30:a5:89:a1:55:c7:ee:0f:49:68:f4:ca:65:11:f4:55:89:
         b6:e0:d9:15:e2:9d:dd:5a:aa:54:7a:0a:08:72:28:79:69:5a:
         be:72:d3:15:33:3a:06:db:5c:84:cd:4a:6d:4e:52:9c:4a:39:
         3c:fa:c8:75:c9:dd:00:cb:b8:74:2f:ce:1f:6e:18:1c:04:2d:
         79:39:c2:c5:53:f3:37:bc:f4:3f:7a:2b:83:fa:c9:28:26:5f:
         09:9b:c5:da:19:4f:a4:00:3e:6c:04:7a:dd:48:0c:a1:6f:4b:
         e1:03:fc:ca:14:54:24:e4:97:a3:10:de:53:cd:44:64:ee:b8:
         61:3d:33:53:0e:63:fe:28:d0:e0:46:c3:70:d2:2d:18:bf:46:
         eb:a2:9e:fc:d8:08:9c:97:71:90:4f:4c:fe:34:ea:43:1a:45:
         2b:c8:7d:25:83:9c:18:9d:66:ab:66:83:56:52:f4:7a:50:40:
         6b:6f:6b:35:ac:9e:10:11:ad:39:32:b0:6f:c4:57:93:73:f0:
         c6:61:13:79:98:03:e7:93:2d:4a:d8:4e:8e:20:88:8d:0f:a8:
         6e:c7:81:81:fa:5a:af:26:68:9e:a1:7c:b5:84:89:18:e6:a1:
         61:54:a4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:38:16 2025 by rpki-client