Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft
File:                     7DpjPvLAglGlhgNWLlaqbvqT7CU.mft (raw, json)
Hash identifier:          LoQfrCdECqLzGhUEGS+vLbr+P0TcElyPbcYYes8Ms8c=
Subject key identifier:   13:D2:66:74:EB:C3:93:A9:EE:61:61:8A:9D:71:CC:FA:73:E7:31:FC
Authority key identifier: EC:3A:63:3E:F2:C0:82:51:A5:86:03:56:2E:56:AA:6E:FA:93:EC:25
Certificate issuer:       /CN=ec3a633ef2c08251a58603562e56aa6efa93ec25
Certificate serial:       0197488CB1F0D5717FEAA8F5FE2C75555B69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft
Manifest number:          0FDA
Signing time:             Sat 07 Jun 2025 04:01:09 +0000
Manifest this update:     Sat 07 Jun 2025 04:01:09 +0000
Manifest next update:     Sun 08 Jun 2025 04:01:09 +0000
Files and hashes:         1: 7DpjPvLAglGlhgNWLlaqbvqT7CU.crl (hash: BLntRczYfU/uwRmXxLz2UND6vrmU5/vaYvRxKxlLsd8=)
                          2: F1syaj2slElK5y18q2bJFyk_Xt4.roa (hash: 0cchVuYo1uzzUlT1evGpupW2C9gukJ9GqtBWuAJKa5E=)
                          3: S9qORFlVihRXgXPTMQZutfjwKHE.roa (hash: vsbhWoTnzrB7AOoQuujS+OxmDvP0R8xrr9NkNJFez7M=)
                          4: TpzFnk7W-OsBRIAAr3dm_mueJxU.roa (hash: nkfZhHTodmONOvq1O5TW8ZfGR4EOeCS+8IrKi31DjPQ=)
                          5: eh6k6EDW67F1BaMz22DQsW1dFis.roa (hash: IQTOzLLAJV1/nAGCPNSZ0w+xeltOMYm8kA0XXPxhjRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 04:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:b1:f0:d5:71:7f:ea:a8:f5:fe:2c:75:55:5b:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3a633ef2c08251a58603562e56aa6efa93ec25
        Validity
            Not Before: Jun  7 04:01:09 2025 GMT
            Not After : Jun  8 04:01:09 2025 GMT
        Subject: CN=13d26674ebc393a9ee61618a9d71ccfa73e731fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:86:93:12:8e:81:8a:7a:13:c5:d7:e0:6a:e8:
                    e0:6d:d5:f7:d1:46:0a:32:57:a8:15:7c:c5:4d:53:
                    a1:8f:cb:5b:42:99:ae:29:30:06:97:b3:1a:fc:8d:
                    45:25:33:15:a5:af:c7:c1:65:91:08:12:74:2f:a4:
                    2a:ac:02:30:25:02:e1:fc:7a:c4:5d:8c:e2:f6:65:
                    30:05:b7:64:54:d2:ac:5a:c1:20:fd:1e:d7:53:6f:
                    fb:d1:ae:2d:86:d8:9b:30:3f:d8:83:9d:56:6f:0e:
                    84:74:3b:32:ed:b3:f0:92:6e:b3:f2:b1:15:ba:15:
                    bd:71:06:c0:10:b7:92:5e:ba:a3:b2:e7:43:40:3f:
                    ab:71:c7:f7:2d:5c:33:f8:cb:17:93:ea:b6:8c:cf:
                    e1:50:04:40:aa:c3:78:19:3f:c0:a4:09:9e:c3:09:
                    0d:c8:68:b6:1f:e0:49:a9:d8:c3:3b:95:1c:cf:54:
                    2e:bb:e2:18:de:f8:98:7d:63:dd:ec:9f:bf:97:33:
                    33:6b:25:da:b7:55:31:5c:dd:d4:78:d0:d9:bd:af:
                    3f:54:d7:40:76:8c:f5:10:8e:f1:b3:eb:bd:02:de:
                    51:b9:f2:84:3e:69:a5:f2:21:97:58:e6:0f:ab:4e:
                    e4:b6:29:7d:5c:dc:a3:f6:ec:ae:ed:76:83:0a:62:
                    48:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D2:66:74:EB:C3:93:A9:EE:61:61:8A:9D:71:CC:FA:73:E7:31:FC
            X509v3 Authority Key Identifier:
                keyid:EC:3A:63:3E:F2:C0:82:51:A5:86:03:56:2E:56:AA:6E:FA:93:EC:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:1c:50:99:e7:ea:16:cf:84:8a:76:a8:84:73:a4:7e:2d:d0:
         6f:3e:09:42:00:50:68:d0:9e:03:db:b8:33:21:52:d6:5f:cc:
         f0:a8:28:7d:99:20:bf:75:50:f6:52:ab:3c:05:4d:37:db:c1:
         74:8c:d9:dc:a3:f0:6e:c9:a4:dd:5f:6c:e1:de:4b:94:44:cc:
         4d:a4:45:85:8e:c6:74:42:a6:0b:e4:0c:f9:4f:c6:bb:c3:02:
         e2:17:3f:73:40:e1:12:82:af:f3:f7:0f:8e:33:48:bd:87:ca:
         7d:da:00:03:e5:07:05:59:38:65:f6:fb:00:cc:67:7a:a3:3a:
         c0:6c:10:c6:52:27:03:b5:bf:d3:44:e6:ba:52:5e:6b:57:4c:
         83:4e:cd:64:24:00:b9:87:9e:46:b9:af:a3:4d:65:72:fb:24:
         98:dd:8d:8d:73:bd:65:e9:cb:9e:9b:ba:aa:e8:13:50:1b:4e:
         11:74:8e:e6:a9:d6:f8:55:d7:b3:80:b8:4b:d0:97:43:ac:7d:
         4c:6b:35:5b:92:82:e1:43:3a:57:b5:c5:a3:bc:ff:be:53:5c:
         0b:d5:d3:84:3a:d4:8f:44:73:fd:5f:39:e7:33:a0:7b:65:db:
         e3:c3:77:b8:5e:1b:ab:86:29:94:c8:71:67:09:44:88:7f:d5:
         ba:8a:57:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:32:25 2025 by rpki-client