Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft
File:                     0PMTtkDG3nU1uB7GjEDubsmf_00.mft (raw, json)
Hash identifier:          ZGmv0ZX/mnsNYGmcuUb5iBZK2rQpWv3BwYTqgEU3Sdk=
Subject key identifier:   12:59:CD:4C:F4:69:44:F1:29:D6:44:A9:D4:AB:66:A1:17:A8:E4:65
Authority key identifier: D0:F3:13:B6:40:C6:DE:75:35:B8:1E:C6:8C:40:EE:6E:C9:9F:FF:4D
Certificate issuer:       /CN=d0f313b640c6de7535b81ec68c40ee6ec99fff4d
Certificate serial:       01974B1FD229F6A250AA9B47F9F212A6DFF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0PMTtkDG3nU1uB7GjEDubsmf_00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft
Manifest number:          06AE
Signing time:             Sat 07 Jun 2025 16:01:05 +0000
Manifest this update:     Sat 07 Jun 2025 16:01:05 +0000
Manifest next update:     Sun 08 Jun 2025 16:01:05 +0000
Files and hashes:         1: 0PMTtkDG3nU1uB7GjEDubsmf_00.crl (hash: kojUtK+6Qf+VeJdu0VYrnsmDzUgbF2aahtQBs7keUsw=)
                          2: _tDyQl_V4oGcaoTQCOv_1tAVV5w.roa (hash: NfAtzjH7XpKV/Nx/c7iUxK0arZdAcmbSlWPMtQY58/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0PMTtkDG3nU1uB7GjEDubsmf_00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 16:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:1f:d2:29:f6:a2:50:aa:9b:47:f9:f2:12:a6:df:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f313b640c6de7535b81ec68c40ee6ec99fff4d
        Validity
            Not Before: Jun  7 16:01:05 2025 GMT
            Not After : Jun  8 16:01:05 2025 GMT
        Subject: CN=1259cd4cf46944f129d644a9d4ab66a117a8e465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cb:5e:e8:32:b8:27:2f:51:82:6b:60:94:fd:
                    02:53:dc:a6:59:37:72:73:0e:c1:84:54:84:f0:26:
                    d8:af:26:67:8a:bf:58:56:76:cd:b7:bc:10:2f:13:
                    8e:75:4d:18:37:fb:8d:4d:dc:6f:81:a5:30:8d:5d:
                    f8:f6:50:a5:42:3c:62:0e:0d:23:63:68:d3:3b:55:
                    05:ca:28:19:b1:7e:62:02:da:0f:4e:28:68:92:82:
                    f2:76:14:e7:8a:96:b5:b4:cc:ff:df:8f:d5:29:25:
                    2e:c6:00:8f:a3:0a:ce:13:da:75:41:65:e5:6f:f3:
                    8a:2e:fc:17:70:a1:58:8a:38:fa:08:ff:99:6a:8a:
                    bc:8d:e3:85:b2:31:0e:ec:8c:69:d9:cb:3d:c4:36:
                    69:15:b9:f7:f1:a8:6f:5b:3f:d4:e0:92:8b:4e:97:
                    1f:f6:17:8f:ce:e2:da:7b:57:9b:ee:cb:20:67:69:
                    bf:de:85:71:57:21:14:45:eb:00:b5:4e:ac:6d:c0:
                    b1:b5:36:d4:9d:f6:e3:4f:a8:7e:3b:ef:59:12:ca:
                    c7:e2:54:75:cc:f4:64:e2:35:79:15:d6:2c:3d:14:
                    64:43:e2:33:8f:10:9a:4b:eb:6f:4c:d2:9d:91:ce:
                    b5:ff:cc:3d:44:35:98:12:66:cd:d0:54:2e:d9:82:
                    3b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:59:CD:4C:F4:69:44:F1:29:D6:44:A9:D4:AB:66:A1:17:A8:E4:65
            X509v3 Authority Key Identifier:
                keyid:D0:F3:13:B6:40:C6:DE:75:35:B8:1E:C6:8C:40:EE:6E:C9:9F:FF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PMTtkDG3nU1uB7GjEDubsmf_00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:30:5f:f9:b5:d2:8a:93:20:65:a3:85:fe:db:1b:cf:53:f5:
         6c:e8:14:2e:d9:a6:5f:16:58:a2:58:bc:6e:b6:97:62:e0:02:
         9d:d9:a4:e7:22:10:fd:d4:a5:71:02:18:ca:74:1f:90:85:fc:
         9a:44:0a:28:08:06:03:7f:bf:de:e0:05:2f:b0:ce:8e:ab:71:
         6b:2e:c4:3c:5e:1d:3c:b0:fd:6e:13:83:0b:8f:16:b3:ca:4f:
         cf:e2:e7:3d:99:ce:99:5e:5a:0e:70:d8:90:21:d4:8a:d4:fa:
         a6:3b:96:dc:3c:81:a8:65:a5:df:79:87:cc:b5:22:de:26:7f:
         a1:20:85:b1:a6:1f:c4:66:d6:f5:b9:e7:55:10:46:3f:c5:19:
         3e:2e:6d:2a:db:08:fc:89:2c:f0:cd:e6:db:b3:1e:c6:7f:7e:
         13:b2:c7:5c:69:47:a1:91:38:e1:06:c5:d3:08:34:ed:72:8d:
         d1:35:f6:92:ce:5b:1b:53:d4:54:9a:70:84:8d:d8:12:31:35:
         7b:ff:da:9f:66:c6:7f:65:1d:63:dd:95:d8:ed:e7:24:7a:6b:
         70:78:87:21:98:09:d2:03:97:e3:37:8b:1f:39:49:07:53:c1:
         9c:c1:3e:3a:92:c6:6a:05:17:db:dd:bf:66:82:67:5e:91:15:
         bd:b2:bd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:17:19 2025 by rpki-client