Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft
File:                     D-v7_W-TfFrjnj446KuDhBB0IaY.mft (raw, json)
Hash identifier:          ZRK+rZ32XzJNDUTdiOinZRhKvkGt+Q4MyG+9NyjwvJo=
Subject key identifier:   CC:84:F1:73:A6:22:8A:D5:6A:FD:87:D8:85:F1:59:C0:4E:29:D2:68
Authority key identifier: 0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
Certificate issuer:       /CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Certificate serial:       01976C622CC40813AD36C328982DA1034486
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft
Manifest number:          0CB2
Signing time:             Sat 14 Jun 2025 03:01:02 +0000
Manifest this update:     Sat 14 Jun 2025 03:01:02 +0000
Manifest next update:     Sun 15 Jun 2025 03:01:02 +0000
Files and hashes:         1: 1JEMNjhiS5VBAL1xd4gysijw3gs.roa (hash: qCF/O3HuRXFUKsJdCbxIv45bvCSutjHqIw1CozlbNjE=)
                          2: AIvDmhuj2ZpytkvOeVyoUY_STpw.roa (hash: 3QHwujw/c7ulg8cAPCbEFjBitp9OHT3bIbRqwJYJDPk=)
                          3: BOD3dcxTc2yY6D5t1Z9HjEwK_rU.roa (hash: GaifOabvqdT7+yzCu9A/2BB5BkajLIn0jWyTPBEgmVc=)
                          4: D-v7_W-TfFrjnj446KuDhBB0IaY.crl (hash: qqEKzLwOpQ86cXn6vpU5atoe30m3ZjzgUdpxqWus+nI=)
                          5: evez1FLTQMGsXZwjHy5MZpX9Bto.roa (hash: O3jcqLGYofqRuZG7p6t5YvjvZHWcAdVOGjXDA+dpDpo=)
                          6: kp7dmjFBonBXqg5SUhwfgrpcPrk.roa (hash: 7Dsn4Eren5gH31G2BucmhdAuoTx/so0d2IUZRWLJoQI=)
                          7: xzhHaw1u4vyWJOy8wzv_GA0Hy8w.roa (hash: CWKK/bGUgV9l6R4l2jDK6+bx3tv6jjiAzLSyy1GKphs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:62:2c:c4:08:13:ad:36:c3:28:98:2d:a1:03:44:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
        Validity
            Not Before: Jun 14 03:01:02 2025 GMT
            Not After : Jun 15 03:01:02 2025 GMT
        Subject: CN=cc84f173a6228ad56afd87d885f159c04e29d268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:93:f6:25:aa:e8:05:6f:a2:51:5e:1f:db:bd:
                    b4:d4:69:0b:b2:5f:00:1a:a7:c6:52:5d:37:9b:fe:
                    34:3a:52:29:77:ca:fe:28:52:46:65:70:3b:a1:ad:
                    93:b8:91:49:79:a6:af:63:d2:74:24:40:46:ca:ed:
                    35:2a:92:59:db:2e:da:2b:41:46:78:0b:aa:40:8e:
                    0a:0d:d1:04:15:de:6e:72:8b:6d:46:58:57:a4:07:
                    24:ff:7f:cc:50:9d:79:56:e7:54:f0:c8:aa:cb:6d:
                    75:10:08:67:36:8b:26:fb:c4:86:59:d2:2a:a2:71:
                    82:43:c6:ea:7a:e2:ac:10:76:46:6b:06:fe:31:e4:
                    5d:9d:70:39:49:1e:1b:e2:0f:18:75:33:1e:c7:63:
                    ee:bb:e7:08:9f:d5:64:d0:4f:d2:c5:ef:14:9e:bc:
                    32:b9:f5:f7:d1:d2:79:79:93:cb:8e:8e:b4:a9:bb:
                    ac:43:25:f3:c2:9a:94:0a:36:49:2f:ef:9f:d6:0a:
                    f8:77:3b:a5:55:1e:86:f3:0c:ea:a9:af:26:af:82:
                    f4:e9:50:3e:c3:3f:fe:b6:f9:fb:6e:17:2f:db:f7:
                    ee:4e:4f:bc:2d:fb:a6:13:5c:7e:92:b8:b3:bf:2c:
                    6f:a3:50:88:09:1e:3d:c9:d9:2f:60:ec:8d:28:fe:
                    69:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:84:F1:73:A6:22:8A:D5:6A:FD:87:D8:85:F1:59:C0:4E:29:D2:68
            X509v3 Authority Key Identifier:
                keyid:0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:6c:db:15:ef:23:0f:68:da:46:72:be:e7:fe:2d:e6:b2:f6:
         f5:68:92:fc:c1:82:77:36:27:a5:b2:14:56:91:38:d6:a0:74:
         72:aa:56:2c:06:98:a4:8d:14:0a:5a:67:96:39:66:a5:3a:80:
         bd:db:58:70:46:1a:93:5e:17:f9:a7:ad:b9:87:ad:2e:e4:bb:
         b8:97:20:50:9d:90:7c:9c:de:6f:df:ac:3e:ce:e7:8a:6e:d7:
         89:b8:40:01:67:80:f8:f8:bb:77:77:f1:b9:8d:e6:57:6d:36:
         a2:8b:60:1e:23:5b:b1:53:04:45:42:76:0b:ee:a1:fe:3d:3a:
         85:c8:66:53:1d:dc:b6:90:c7:62:70:55:d9:cf:da:af:29:34:
         cc:21:c9:83:18:8d:74:2c:13:77:e9:d8:f6:f2:b8:b3:63:ca:
         ea:f4:7f:65:f9:52:98:9b:3f:29:bd:89:98:3c:07:4e:58:87:
         71:27:90:51:e7:34:fe:c1:7d:d1:69:1d:36:0a:9f:bb:ef:da:
         40:4a:68:26:7e:0d:5b:7d:98:87:b9:53:91:be:59:92:9d:41:
         74:1a:94:1c:f3:cd:6d:77:8c:19:60:45:1f:d7:73:29:a9:4b:
         d6:4e:d8:53:32:1d:35:f2:6d:1c:80:74:70:a4:13:c4:11:46:
         32:b2:e2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:43:05 2025 by rpki-client