Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.mft
File:                     DNwH_ab01Vt8gYLJKaPErDwKgv0.mft (raw, json)
Hash identifier:          NNF8IIt3H0lN68k3GWAFh7g4fh7AftKtJgR5IqcPm9E=
Subject key identifier:   91:15:DA:7B:19:AC:BC:8C:13:01:A2:A5:6B:F3:E4:75:80:91:C0:3B
Authority key identifier: 0C:DC:07:FD:A6:F4:D5:5B:7C:81:82:C9:29:A3:C4:AC:3C:0A:82:FD
Certificate issuer:       /CN=0cdc07fda6f4d55b7c8182c929a3c4ac3c0a82fd
Certificate serial:       0196470E2C059F1CC4408A741ADE575C593F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DNwH_ab01Vt8gYLJKaPErDwKgv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.mft
Manifest number:          1229
Signing time:             Fri 18 Apr 2025 04:00:32 +0000
Manifest this update:     Fri 18 Apr 2025 04:00:32 +0000
Manifest next update:     Sat 19 Apr 2025 04:00:32 +0000
Files and hashes:         1: DNwH_ab01Vt8gYLJKaPErDwKgv0.crl (hash: R9EwKtlTeELdWeQuABq6IZlhkAjtLYZ2uFXQS5oXoco=)
                          2: p1mXcIQxL77L_jQGXA_KIyns_RU.roa (hash: z0OqGXTq8kuCQJixhA0eSGU0mlbhHaHOLMCmElSbQgI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DNwH_ab01Vt8gYLJKaPErDwKgv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 04:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:47:0e:2c:05:9f:1c:c4:40:8a:74:1a:de:57:5c:59:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cdc07fda6f4d55b7c8182c929a3c4ac3c0a82fd
        Validity
            Not Before: Apr 18 04:00:32 2025 GMT
            Not After : Apr 19 04:00:32 2025 GMT
        Subject: CN=9115da7b19acbc8c1301a2a56bf3e4758091c03b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:14:10:fd:3a:b6:a4:fd:57:27:bf:23:86:bc:
                    9c:96:68:85:e0:ab:79:70:9a:98:55:7f:4e:b5:4b:
                    a2:ea:8e:40:4e:13:a2:b9:68:88:b5:3b:6e:8d:4d:
                    5d:ac:21:44:df:d4:ce:f2:13:05:14:f2:96:99:94:
                    fb:43:d1:e6:77:7f:91:65:14:23:bb:b6:0b:d0:75:
                    cd:26:f5:cb:9f:0a:f9:70:8e:05:92:18:a8:a9:4f:
                    5e:9c:aa:6a:37:40:42:b9:fe:e8:07:ab:6c:e3:77:
                    39:7f:3e:ae:fb:5e:d9:8b:7f:f8:18:85:40:c9:04:
                    17:d5:3d:68:1f:b8:a0:c8:b9:1c:b9:e2:77:70:a9:
                    11:ea:a2:86:1c:63:9e:e3:52:71:99:2f:7f:4b:36:
                    f0:ab:a0:20:75:e5:5e:e6:b1:36:ed:19:14:17:7f:
                    37:35:1c:92:08:17:fc:e8:85:9a:ec:4b:23:75:b9:
                    fc:b1:93:70:d7:23:78:3a:9d:3f:88:ec:92:c1:cc:
                    7a:42:fe:17:4f:d5:05:39:f6:a6:ca:82:c2:ce:0e:
                    af:8c:1e:71:ef:74:5b:2c:d0:c0:6c:30:75:21:c4:
                    b5:dc:a5:02:f6:e2:98:56:b8:e2:17:52:ca:65:25:
                    09:ed:c5:d4:2a:0e:97:3e:d5:a3:78:db:6f:ef:d4:
                    2a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:15:DA:7B:19:AC:BC:8C:13:01:A2:A5:6B:F3:E4:75:80:91:C0:3B
            X509v3 Authority Key Identifier:
                keyid:0C:DC:07:FD:A6:F4:D5:5B:7C:81:82:C9:29:A3:C4:AC:3C:0A:82:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNwH_ab01Vt8gYLJKaPErDwKgv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:69:bb:cd:47:49:9c:8a:38:36:26:b6:b3:0e:fe:b3:cf:a4:
         d2:b5:6a:02:ff:b1:6b:2c:49:ea:12:db:08:04:80:52:b4:8c:
         aa:fb:ce:09:d3:68:2e:5a:3c:08:6a:8e:3b:0a:56:f0:a0:75:
         18:53:2a:d7:14:9b:0e:bb:ea:8f:86:c9:73:33:3b:07:8d:4e:
         41:56:7e:f5:6d:93:cd:e7:6b:67:d8:f7:7a:03:19:30:2c:b5:
         9f:ee:e2:e3:f9:dd:4a:04:dc:c0:4f:2e:2b:3b:d6:28:bc:cd:
         a3:fc:9c:0b:2c:ee:fd:0e:0b:c8:fa:27:6c:a5:38:70:06:bf:
         b2:e2:4f:10:b9:ed:4c:c5:af:32:ef:51:73:0d:75:34:3f:51:
         00:3d:a1:36:88:85:60:0b:c6:7b:79:38:aa:31:0e:7b:c8:d6:
         99:8c:89:83:11:dc:cb:a6:e6:8d:08:a9:40:c2:c2:8f:e8:b5:
         e5:1f:54:9b:14:40:9e:6b:9f:c3:d2:1d:d6:a7:c3:a8:28:5c:
         8c:11:fd:4d:ec:ba:8b:6a:bc:6c:81:cf:14:a8:53:b5:5e:fe:
         bc:e5:53:e3:c3:4f:1f:37:de:d6:11:4d:03:af:5f:1a:67:41:
         e9:c8:59:df:cb:26:e4:58:34:86:bb:0e:16:ef:6e:92:8d:b8:
         df:29:aa:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:41:43 2025 by rpki-client