Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
File:                     0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft (raw, json)
Hash identifier:          PeXYRKOK6YRYZUdmf11sOlxnEqwaHZ8h8ZlFb1AA/0Q=
Subject key identifier:   53:DB:1A:05:5B:24:FD:38:0D:77:F5:D8:51:82:4F:CA:9F:E2:52:C1
Authority key identifier: D1:6B:DF:54:38:1F:63:07:4A:DF:9A:1B:D9:77:78:77:A7:20:04:6C
Certificate issuer:       /CN=d16bdf54381f63074adf9a1bd9777877a720046c
Certificate serial:       019768173DFD24BB89D89468973E69810E16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
Manifest number:          0281
Signing time:             Fri 13 Jun 2025 07:00:43 +0000
Manifest this update:     Fri 13 Jun 2025 07:00:43 +0000
Manifest next update:     Sat 14 Jun 2025 07:00:43 +0000
Files and hashes:         1: 0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl (hash: gcdI+E3uBxgWh0atYxcoVOfjACeDoHWWvkjGJzIGOTw=)
                          2: fMqs9FskGDIW9ZbaQwk0qUEC3ks.roa (hash: CtgaQ4J8AgrMFT4kVvGV6ADv6GPEnX8MMv9l/y32iWU=)
                          3: idiMTHuxguw5KJd3P5FoGJbinyo.roa (hash: n+9BnqU/yI6WzHcfhLc6mXo8IOBS4JMkN/uhkjIXEGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:17:3d:fd:24:bb:89:d8:94:68:97:3e:69:81:0e:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d16bdf54381f63074adf9a1bd9777877a720046c
        Validity
            Not Before: Jun 13 07:00:43 2025 GMT
            Not After : Jun 14 07:00:43 2025 GMT
        Subject: CN=53db1a055b24fd380d77f5d851824fca9fe252c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ca:0e:b3:6a:98:97:0c:26:6a:9c:96:5c:3a:
                    91:4c:07:a6:4a:d2:54:b3:9c:0b:23:19:3d:92:47:
                    39:9b:6d:c8:eb:de:12:1d:bb:f4:13:e7:e5:17:58:
                    66:f0:56:7b:3c:aa:6e:2c:f7:df:97:c0:f3:b5:b5:
                    1c:d0:63:72:37:0b:9d:30:ee:06:7c:96:55:23:3c:
                    43:2b:5d:6b:9e:62:ba:be:a2:81:a0:e9:79:62:d1:
                    22:93:58:01:91:cd:c3:9e:72:36:2d:06:08:7a:84:
                    62:f5:2b:28:57:e7:fa:09:4c:f0:0c:24:a0:ad:c7:
                    30:21:dc:e5:d4:ec:c3:60:80:ea:fe:9c:4b:ae:45:
                    39:83:53:b3:02:cd:d4:6f:38:b5:6d:5f:34:65:37:
                    57:8d:fc:35:84:0d:a3:0e:54:dd:34:e8:32:3b:29:
                    0d:76:cd:3b:71:a9:5c:48:53:fb:e2:26:e3:f1:41:
                    ac:7a:b4:97:16:d2:85:11:1b:b0:17:75:8f:f8:d9:
                    a1:dc:88:2f:b0:2c:74:ec:5e:1f:8f:f5:02:20:a6:
                    96:9f:56:57:e4:96:fd:44:b5:e9:54:06:e6:32:e9:
                    0b:3f:62:e4:2e:4a:c6:a8:c9:8e:f9:26:02:fe:d0:
                    77:e6:3f:3d:58:55:cb:18:93:7f:27:f1:3e:8b:13:
                    3c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:DB:1A:05:5B:24:FD:38:0D:77:F5:D8:51:82:4F:CA:9F:E2:52:C1
            X509v3 Authority Key Identifier:
                keyid:D1:6B:DF:54:38:1F:63:07:4A:DF:9A:1B:D9:77:78:77:A7:20:04:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:11:8f:75:49:66:97:55:86:e2:8d:86:d5:06:4c:54:f8:7a:
         c0:8f:8c:63:1b:fc:54:52:fa:66:c2:0b:fe:cd:a8:91:47:dc:
         31:49:83:ca:44:19:f9:4d:88:36:10:97:ac:f8:3c:84:c9:10:
         d7:f5:fd:60:ec:c2:9b:af:f1:44:27:2f:3e:0a:ee:9b:84:ba:
         3c:ec:4c:d6:60:ff:58:50:e7:38:3a:73:27:44:0a:c6:74:89:
         2f:56:43:ff:bb:a8:df:aa:54:d6:68:f4:19:b7:17:db:03:15:
         a8:ec:0b:82:61:57:0f:fd:78:f3:e4:17:4c:a3:bc:42:a6:86:
         e4:e8:91:a7:22:16:2f:ae:74:53:22:56:41:33:43:48:98:e4:
         74:5c:15:51:4d:01:42:42:39:d7:1b:ea:17:82:f3:da:12:bf:
         0b:b6:3e:2d:af:2b:ba:ba:92:1a:96:56:c2:d5:17:d1:9d:ac:
         4c:ea:b8:f3:47:31:7b:7e:a3:ba:61:b3:4c:13:84:41:5a:d7:
         6a:d6:7e:e5:f0:28:2b:61:72:01:08:e4:46:c4:22:2d:94:13:
         84:59:d3:50:f4:59:80:1d:61:97:89:95:0a:8f:2e:70:81:17:
         c6:f6:0a:f0:b9:2d:f8:07:b4:eb:7c:65:a9:6d:8a:10:3e:59:
         b1:8d:b8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 13:03:17 2025 by rpki-client