Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.mft
File:                     DWutPz3QrFVvP3qA0cabn9lk3Ww.mft (raw, json)
Hash identifier:          RlxX94A7gStaJ8qCz4e/NEnQ4/YDtQL+gTfHXU5d9jI=
Subject key identifier:   FD:71:D3:9D:75:17:49:4B:EB:DD:8A:D6:90:D9:AD:6D:3D:80:43:56
Authority key identifier: 0D:6B:AD:3F:3D:D0:AC:55:6F:3F:7A:80:D1:C6:9B:9F:D9:64:DD:6C
Certificate issuer:       /CN=0d6bad3f3dd0ac556f3f7a80d1c69b9fd964dd6c
Certificate serial:       01975AC99BB371D7556BB79740BF13EEC512
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DWutPz3QrFVvP3qA0cabn9lk3Ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.mft
Manifest number:          0F81
Signing time:             Tue 10 Jun 2025 17:00:51 +0000
Manifest this update:     Tue 10 Jun 2025 17:00:51 +0000
Manifest next update:     Wed 11 Jun 2025 17:00:51 +0000
Files and hashes:         1: DWutPz3QrFVvP3qA0cabn9lk3Ww.crl (hash: K58D6LNsqIz54TPUKNtli94Uf2CtT/ymV4uQDOPU16c=)
                          2: clB1f_NiIoBJs06I1N2ua9KcprY.roa (hash: Hc2uBMDIF+2ALpimHYsk+DChTWTq8OrIlMci+ZWtnyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DWutPz3QrFVvP3qA0cabn9lk3Ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 14:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5a:c9:9b:b3:71:d7:55:6b:b7:97:40:bf:13:ee:c5:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d6bad3f3dd0ac556f3f7a80d1c69b9fd964dd6c
        Validity
            Not Before: Jun 10 17:00:51 2025 GMT
            Not After : Jun 11 17:00:51 2025 GMT
        Subject: CN=fd71d39d7517494bebdd8ad690d9ad6d3d804356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e5:4c:11:8a:f4:db:96:ba:a4:57:8c:ca:fc:
                    dd:7b:ad:f5:7c:69:68:38:8f:3d:84:d6:2e:ea:a3:
                    de:4e:8e:66:ed:39:2c:e6:d4:48:6e:5c:d7:85:d1:
                    3a:08:75:81:ec:d1:65:0c:a9:66:84:7e:f0:3b:9c:
                    f1:d4:79:a9:ae:f8:10:34:7e:e1:6e:f3:1e:81:7c:
                    3c:18:e1:94:31:7f:fc:6a:cc:17:c9:ab:8c:30:93:
                    41:f2:c4:23:e3:30:97:82:10:1a:06:7e:f2:4a:ee:
                    7c:4b:8f:34:1b:df:45:69:eb:97:75:ef:26:36:c3:
                    5b:4d:46:81:e8:7e:6a:f0:e6:3c:9a:fe:c6:8f:83:
                    02:8f:c2:bd:40:03:6b:ae:95:09:53:35:e0:18:67:
                    63:46:c7:10:77:43:30:f8:f6:3f:4a:78:fe:b4:04:
                    8c:2d:27:94:a9:c1:bf:ea:3f:4f:e7:39:ca:d7:4a:
                    37:87:f4:df:b1:bb:ad:6a:05:d7:71:d8:bb:a9:69:
                    e8:f9:48:24:55:8e:31:e7:ae:2e:5e:df:f0:95:21:
                    eb:86:02:92:a6:ab:13:7f:8f:e8:74:0a:1d:a2:3d:
                    5b:2c:62:f8:20:a0:3d:0a:45:f7:72:08:16:bf:db:
                    cd:45:3e:de:e0:f8:a2:08:b3:7f:45:90:77:f6:ff:
                    64:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:71:D3:9D:75:17:49:4B:EB:DD:8A:D6:90:D9:AD:6D:3D:80:43:56
            X509v3 Authority Key Identifier:
                keyid:0D:6B:AD:3F:3D:D0:AC:55:6F:3F:7A:80:D1:C6:9B:9F:D9:64:DD:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWutPz3QrFVvP3qA0cabn9lk3Ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:86:8e:4f:c9:f6:c9:93:ca:1a:cf:b5:99:ca:1a:7e:e2:05:
         00:1b:4a:95:18:1e:d5:ef:c3:88:da:aa:0c:24:ef:f4:6b:ce:
         43:7f:26:48:b6:89:d1:61:8c:96:a9:5f:1a:77:1c:f1:af:ad:
         76:76:a8:aa:77:3d:58:a6:4b:7c:d2:b9:e3:a4:a1:88:73:70:
         a1:ea:ef:7f:0e:3d:56:e5:d2:26:f8:d5:d8:57:1d:50:b2:a4:
         d9:c6:96:f7:75:fd:1d:8a:eb:1e:6d:ae:a7:f2:97:e5:98:45:
         d6:74:b5:57:01:60:d6:87:b3:8c:06:68:bd:fe:17:73:95:79:
         8b:2b:77:08:2c:ae:2b:98:95:19:61:a2:c7:dc:52:e1:ab:40:
         ec:f1:cd:a7:99:f9:0e:39:b4:2a:e3:82:2a:99:cb:43:f1:a3:
         2f:24:38:ae:20:c0:12:dc:81:0a:37:7c:97:f9:28:64:2a:c9:
         e0:1e:4f:45:ad:53:4b:7b:8f:57:34:ac:cf:69:12:f4:47:cc:
         d2:a4:66:4b:b9:14:bb:8c:8e:c0:ee:50:a3:66:7b:bf:74:05:
         64:76:58:20:e1:47:04:bd:ae:61:af:0a:1e:08:a7:e9:a6:b9:
         f9:ef:cc:95:8c:56:1a:ae:be:a6:c4:97:37:0c:c3:14:dd:b5:
         9a:e8:ca:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:34:48 2025 by rpki-client