Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
File:                     C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft (raw, json)
Hash identifier:          L1gFGn5hN05aop02INgxAkVgXQN1q5ry//5PlvAvUyU=
Subject key identifier:   31:B8:E1:09:7D:E7:AA:E4:D1:6F:F8:0D:DA:4E:C0:78:7C:C2:A4:3A
Authority key identifier: 0B:80:E7:BC:B4:2B:CC:B8:09:2A:E2:8A:41:AE:D9:28:EE:A4:D6:35
Certificate issuer:       /CN=0b80e7bcb42bccb8092ae28a41aed928eea4d635
Certificate serial:       01975234D21B5774537968420292EEF537DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
Manifest number:          0C50
Signing time:             Mon 09 Jun 2025 01:01:22 +0000
Manifest this update:     Mon 09 Jun 2025 01:01:22 +0000
Manifest next update:     Tue 10 Jun 2025 01:01:22 +0000
Files and hashes:         1: 6soF94B982IoR0MOFM1SH9uV6Tg.roa (hash: 7pQjtbHBxvyD21W+9nIDqr4CT80Xm33u4f484yzhbsM=)
                          2: C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl (hash: tqvrJFntlqGbTSKnI4zqzMysUwLMz6X/ddGIMt9gjf8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 01:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:52:34:d2:1b:57:74:53:79:68:42:02:92:ee:f5:37:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b80e7bcb42bccb8092ae28a41aed928eea4d635
        Validity
            Not Before: Jun  9 01:01:22 2025 GMT
            Not After : Jun 10 01:01:22 2025 GMT
        Subject: CN=31b8e1097de7aae4d16ff80dda4ec0787cc2a43a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:48:cc:f0:07:40:ce:b9:e4:0c:50:81:e1:5e:
                    26:4c:b1:30:d1:0f:78:a9:27:28:6e:4a:ff:c7:85:
                    c1:28:7d:74:19:78:e1:c3:08:58:00:b0:9a:f1:3a:
                    60:b0:ce:6e:0f:82:48:ab:a4:13:e7:29:a0:44:5f:
                    0f:c3:82:38:19:6c:2b:ef:f3:43:6c:45:8d:da:14:
                    4a:e8:5a:4c:ba:31:e3:60:d0:6a:58:a0:04:84:d4:
                    42:39:e8:0f:b8:b9:96:ee:82:b8:6d:57:45:e5:7b:
                    3e:3f:c5:26:b7:b5:f9:7e:30:c4:56:34:f0:22:e8:
                    ef:45:9f:07:14:d8:5c:ba:89:ae:2e:ea:fd:ca:41:
                    6c:bd:10:fd:e6:cf:ae:a1:f3:7a:c4:80:1e:53:94:
                    e1:e7:4c:94:45:be:b5:c3:b3:21:a5:53:9b:4d:0e:
                    ba:dd:42:92:6d:de:6e:ed:7d:a7:41:4f:64:2b:7f:
                    ea:76:d1:57:d3:e8:56:6a:8a:a4:6f:49:99:63:c2:
                    54:7e:d0:4f:97:77:9f:34:b7:7a:86:7a:f8:05:c6:
                    82:bb:c1:95:03:70:ea:82:64:03:3d:b4:40:3d:77:
                    7a:f5:ff:2e:6f:75:cd:ba:89:87:ec:22:5e:00:5d:
                    44:1c:8b:1a:16:4b:64:af:98:12:6a:85:ac:40:51:
                    dc:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B8:E1:09:7D:E7:AA:E4:D1:6F:F8:0D:DA:4E:C0:78:7C:C2:A4:3A
            X509v3 Authority Key Identifier:
                keyid:0B:80:E7:BC:B4:2B:CC:B8:09:2A:E2:8A:41:AE:D9:28:EE:A4:D6:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:b5:66:4e:79:78:83:c9:f9:0b:96:2e:16:ea:8c:fa:12:41:
         d5:a2:30:0f:36:e4:84:a3:2f:58:08:68:a7:2e:f8:c0:98:bd:
         34:ba:41:f3:13:0c:2e:7e:5f:24:eb:5f:41:34:a5:33:17:b9:
         cf:06:15:0e:82:6f:99:9f:18:e1:bc:16:37:d3:d2:6e:e2:62:
         0c:57:e3:63:92:4a:dd:42:34:5e:29:a4:7a:b4:aa:6b:1e:7f:
         b5:17:8f:e6:91:58:52:7f:61:1d:8f:16:c1:00:8c:dd:87:63:
         92:8f:2b:53:fe:3f:5c:aa:4c:60:9c:1c:ba:b7:82:ed:ea:4b:
         c2:8e:0a:17:64:88:0b:11:86:ff:49:53:0c:55:8e:2e:b6:87:
         2c:9a:18:71:e0:c8:36:63:d3:78:5f:a1:25:25:b8:ea:ba:a9:
         8a:ec:1b:98:d6:eb:22:2d:08:5a:d9:f0:9a:d4:1a:a2:0a:05:
         1b:b4:b0:25:ca:56:70:7f:23:d6:14:d7:49:95:fe:91:ca:dd:
         4b:b0:4e:bf:eb:9b:16:f1:a0:f3:82:4a:52:44:f2:d2:5d:91:
         fe:bd:17:8c:3a:a2:4a:3b:95:70:b1:42:0c:17:9e:ad:7c:b5:
         36:e5:9f:9c:dd:1d:06:32:bb:76:35:ba:8a:8e:a8:bf:56:92:
         a4:72:a7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:03:46 2025 by rpki-client