Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
File:                     0pigcUzBvyWsfH8c9sKIbIxhkqM.mft (raw, json)
Hash identifier:          gRIcdGUCpceKM4+ej/+LNJINEeLiHD5Xdbud0Ie50ZE=
Subject key identifier:   F0:99:66:CF:B7:E5:31:CB:BD:35:E4:01:0F:FC:32:94:40:3A:1C:8E
Authority key identifier: D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3
Certificate issuer:       /CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3
Certificate serial:       01975FEFC7E3685A1F941F43D9CC43EBE633
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
Manifest number:          0303
Signing time:             Wed 11 Jun 2025 17:00:39 +0000
Manifest this update:     Wed 11 Jun 2025 17:00:39 +0000
Manifest next update:     Thu 12 Jun 2025 17:00:39 +0000
Files and hashes:         1: 0pigcUzBvyWsfH8c9sKIbIxhkqM.crl (hash: KgmAK2eA0k/+2397VqY8PC+0wrxJuxQL863TKVXtnF8=)
                          2: eBrn60Df7uG_ub_L-IV105lzs58.roa (hash: O8+G2XvuPwR1yEXnK+zmEZeJLzoyxFForxI59j5WNAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 15:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5f:ef:c7:e3:68:5a:1f:94:1f:43:d9:cc:43:eb:e6:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3
        Validity
            Not Before: Jun 11 17:00:39 2025 GMT
            Not After : Jun 12 17:00:39 2025 GMT
        Subject: CN=f09966cfb7e531cbbd35e4010ffc3294403a1c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fd:28:39:bf:b9:ad:c0:a5:d3:fd:b1:1c:66:
                    66:83:3a:ec:48:d1:6f:dc:3b:d7:93:f7:96:56:c7:
                    6a:64:47:3a:c3:05:11:36:2c:6b:60:d7:77:27:82:
                    97:e3:51:62:3e:bb:f5:18:e4:98:a5:8a:3d:22:b4:
                    84:ec:4a:1a:02:cf:bd:55:4c:19:a4:99:9c:bf:83:
                    05:3c:f7:b8:be:79:59:12:24:62:6f:5c:78:78:39:
                    b7:b4:9e:4b:a7:b8:9a:87:a6:06:75:78:c0:5e:c6:
                    77:53:d3:a3:eb:5e:44:52:d6:cf:ca:7e:94:85:a2:
                    9c:cf:af:00:b7:99:ed:5f:43:44:f1:67:c9:23:45:
                    9a:ba:4d:02:32:46:7b:42:7d:72:91:84:b2:30:a4:
                    4a:35:8b:f9:6b:e6:75:75:c0:00:9f:bf:5d:8b:f0:
                    ab:93:eb:bd:f7:b2:44:41:4a:9f:12:d8:85:2b:04:
                    39:8e:08:68:95:11:b2:6c:a4:d7:28:9d:12:81:a5:
                    8b:cb:4d:c3:5f:ce:3e:74:50:8d:0d:47:70:9e:14:
                    86:6d:8f:f4:7f:56:fc:5c:10:09:0e:42:bb:9b:cc:
                    f9:04:33:2f:31:c0:71:19:a9:83:51:eb:d5:08:8c:
                    94:47:ff:f3:ff:d9:d5:6d:90:63:ca:f9:29:f4:ce:
                    11:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:99:66:CF:B7:E5:31:CB:BD:35:E4:01:0F:FC:32:94:40:3A:1C:8E
            X509v3 Authority Key Identifier:
                keyid:D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:7d:43:67:8b:ec:ae:07:6a:f1:49:f8:77:74:3b:e4:6f:2c:
         ad:78:80:30:84:b6:32:c1:63:97:34:d4:83:5f:93:92:28:68:
         e4:83:43:50:5a:30:f2:b6:cf:89:bd:84:c1:d8:7d:12:e8:ed:
         b9:36:e1:d5:59:f1:27:72:f6:75:a9:76:65:3d:be:0c:2f:39:
         c2:25:54:d1:e6:12:6c:0e:4b:89:eb:7f:7b:19:00:8e:e8:57:
         fa:8f:3c:6c:6e:a0:7a:63:f7:5a:e9:25:5e:ff:a4:cc:ee:68:
         b0:50:2a:c8:08:aa:cc:b0:02:48:92:06:f5:ae:2a:49:0e:6a:
         1d:8b:2e:ed:e5:04:d6:f7:64:bd:21:25:9a:60:89:4b:5d:08:
         7d:6b:2e:b2:13:3c:8d:22:c4:06:4b:71:79:3b:be:42:d0:69:
         37:00:77:0e:42:c1:05:43:79:e7:93:5c:82:8f:38:2c:e7:c9:
         71:d0:4a:35:94:d1:ab:c9:de:0a:c8:cd:a5:a9:b5:5c:69:e7:
         95:ae:91:7b:ee:e1:02:4d:f7:9c:6d:eb:e9:97:0a:8c:32:fe:
         39:67:1a:75:7d:95:3f:d1:63:b6:8b:01:30:94:63:fe:bd:36:
         48:1e:56:94:76:79:2e:6d:7d:1a:ae:44:f7:78:60:68:7a:01:
         6c:e8:c2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:42:27 2025 by rpki-client