Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft
File:                     RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft (raw, json)
Hash identifier:          pNdPYPnP5XaAXYdCicynRqwnSp1svjYqLRCFjhqLH9A=
Subject key identifier:   62:C6:02:10:0F:0A:8B:A5:DC:98:B7:99:DC:FB:40:FD:7F:6D:B0:3E
Authority key identifier: 45:76:70:54:D1:93:A3:B8:D6:C2:C0:09:F5:9C:F6:43:E1:49:E3:9F
Certificate issuer:       /CN=45767054d193a3b8d6c2c009f59cf643e149e39f
Certificate serial:       019923D5B53F61FDC577288495C149DA1EE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft
Manifest number:          106D
Signing time:             Sun 07 Sep 2025 11:00:32 +0000
Manifest this update:     Sun 07 Sep 2025 11:00:32 +0000
Manifest next update:     Mon 08 Sep 2025 11:00:32 +0000
Files and hashes:         1: RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.crl (hash: ZZUhtRMZJs5YPkvQezYyrNbs5SABDgpcEFh1XtkqmPE=)
                          2: kpeNUrCjwD-bH5D8QQPXuEqA70c.roa (hash: /GB93CH2vpBaaqYNdlIMujujZ/LFvmv11CaA0a79OcU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:d5:b5:3f:61:fd:c5:77:28:84:95:c1:49:da:1e:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45767054d193a3b8d6c2c009f59cf643e149e39f
        Validity
            Not Before: Sep  7 11:00:32 2025 GMT
            Not After : Sep  8 11:00:32 2025 GMT
        Subject: CN=62c602100f0a8ba5dc98b799dcfb40fd7f6db03e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d5:6e:1a:de:f1:4f:7f:56:75:61:32:8b:0a:
                    c2:74:c5:14:df:69:a1:1b:9a:3f:36:fb:b1:f1:cc:
                    55:9c:ef:46:67:0e:a0:3c:4c:cc:fc:06:a8:60:30:
                    31:02:7f:1f:7a:92:d7:dc:7e:e3:49:a2:fe:5b:0e:
                    08:dd:f3:48:0d:43:9f:15:6a:0a:ef:77:3d:d7:15:
                    ce:b6:10:c0:7c:54:4f:08:ce:39:49:a3:92:8c:e7:
                    14:9b:81:8d:70:e0:9c:8f:ae:d5:33:df:cd:67:76:
                    71:5a:ef:ce:6c:a4:bf:08:eb:e8:d3:fc:96:9a:60:
                    c5:64:72:74:4e:3a:7a:d3:23:5e:87:33:48:d1:c4:
                    a4:50:51:a0:1c:0c:e5:da:19:e4:45:cc:92:be:53:
                    f5:b0:5e:ae:5a:64:55:d9:74:1d:34:9d:e8:b5:6b:
                    69:ef:57:2b:04:ab:c6:80:50:84:cb:b3:ee:6a:23:
                    c5:9e:71:e1:b3:94:5d:99:67:9c:18:9e:9e:ff:10:
                    31:ea:4d:be:14:97:78:6e:4b:a0:8f:3f:8a:01:83:
                    4c:7f:5a:5e:48:39:46:a8:f5:45:7a:c6:0a:25:e8:
                    fa:55:83:bc:06:10:8c:72:d3:f2:06:81:da:6f:09:
                    74:a8:43:27:81:cd:fd:7a:a3:25:36:e6:b5:cc:a0:
                    66:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C6:02:10:0F:0A:8B:A5:DC:98:B7:99:DC:FB:40:FD:7F:6D:B0:3E
            X509v3 Authority Key Identifier:
                keyid:45:76:70:54:D1:93:A3:B8:D6:C2:C0:09:F5:9C:F6:43:E1:49:E3:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:c6:2c:a6:ad:d7:8d:4a:52:4e:93:63:b8:35:fd:a2:f1:42:
         53:72:d3:d1:40:5a:53:67:98:f0:d1:30:5a:2b:27:9a:0c:99:
         d5:fe:c8:14:bf:2e:ec:0e:71:a1:52:92:91:c4:46:a6:05:1f:
         e0:15:b1:47:3b:64:de:ab:ca:45:d5:c1:44:2e:95:26:7d:e1:
         2f:4b:56:3a:88:99:14:9c:2d:e0:96:3d:a2:7a:a3:2c:d7:5a:
         da:b6:22:a1:16:97:3f:57:c3:cf:63:44:b7:79:f1:74:eb:01:
         f0:98:92:b9:6e:d2:23:31:e2:f9:e0:5d:ba:97:9b:3c:30:56:
         89:72:49:98:fd:17:91:3d:88:74:c8:bb:41:58:74:2b:49:45:
         a8:67:54:39:db:00:9a:21:cd:87:82:2c:33:d1:00:de:57:01:
         36:f7:b4:6d:e8:99:39:07:c2:e5:89:38:dc:11:fe:ce:35:61:
         7a:22:04:a3:3a:de:d2:f8:2a:fb:8f:23:01:30:cd:a7:2c:12:
         ff:dc:49:de:fa:0d:f6:ac:3b:f3:21:18:a6:c0:b7:19:de:9f:
         79:c6:fe:9e:40:f7:3c:13:df:f2:36:88:e5:02:55:c8:cd:dd:
         76:83:2c:6e:e0:a0:7c:60:ad:9c:42:89:e7:8a:77:b6:84:13:
         55:28:29:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:22 2025 by rpki-client