Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
File:                     DC-bLoowUI05GSr9WzTuVvd1l54.mft (raw, json)
Hash identifier:          IZkdiHozAk3Moj05hLwoagnmlU5hZKO51w20UwAEQek=
Subject key identifier:   F7:48:50:FB:96:B1:AC:8A:63:FD:30:DE:72:CB:CB:89:7B:0D:26:71
Authority key identifier: 0C:2F:9B:2E:8A:30:50:8D:39:19:2A:FD:5B:34:EE:56:F7:75:97:9E
Certificate issuer:       /CN=0c2f9b2e8a30508d39192afd5b34ee56f775979e
Certificate serial:       019745F96D9BAFA043E2F72429EA1536C413
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
Manifest number:          0D56
Signing time:             Fri 06 Jun 2025 16:01:03 +0000
Manifest this update:     Fri 06 Jun 2025 16:01:03 +0000
Manifest next update:     Sat 07 Jun 2025 16:01:03 +0000
Files and hashes:         1: DC-bLoowUI05GSr9WzTuVvd1l54.crl (hash: fDb9zNhIgemuf8BM5tqqZ8SmMRZ0hUAf4AlKOWg4XvE=)
                          2: NWAGhC2XbatfDitWodooC7bbFFI.roa (hash: FWUOW7wQ0G0TGl1V+k/KtSrSZ/FDNVfXj5gqfrNEtSc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:f9:6d:9b:af:a0:43:e2:f7:24:29:ea:15:36:c4:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c2f9b2e8a30508d39192afd5b34ee56f775979e
        Validity
            Not Before: Jun  6 16:01:03 2025 GMT
            Not After : Jun  7 16:01:03 2025 GMT
        Subject: CN=f74850fb96b1ac8a63fd30de72cbcb897b0d2671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:df:d3:15:d7:db:31:3a:c7:84:42:06:8a:6e:
                    2a:e2:43:8e:9a:de:f2:9d:8f:a9:b1:41:cf:58:56:
                    06:96:0a:f2:a2:14:77:ad:98:40:64:20:45:eb:d9:
                    83:69:ae:81:05:2d:fe:95:b1:59:ec:55:97:31:d3:
                    eb:18:13:5d:01:27:69:37:64:fe:6a:7b:37:4b:0b:
                    13:4a:9c:46:66:77:4b:4c:2d:56:ac:24:ee:0b:b2:
                    c6:dd:f7:12:eb:80:88:cf:68:d8:5b:7e:79:59:f3:
                    c7:8f:ee:44:1c:b8:69:1c:72:ad:38:57:2f:95:f1:
                    eb:81:a7:84:27:5f:6d:6e:03:39:c5:1a:1e:e3:5f:
                    f4:5d:0b:b5:f9:a4:c8:34:6e:36:2e:13:0c:f6:83:
                    44:b4:90:95:b3:4f:07:77:0a:51:b2:a5:d5:9a:ed:
                    34:6a:2d:17:10:88:8b:b0:ed:80:55:5e:cd:45:e8:
                    d8:80:07:c2:31:3e:fb:75:10:9e:31:29:45:c6:4c:
                    33:64:7f:07:6c:d0:1b:f6:8c:dc:58:05:26:27:fa:
                    6e:2e:20:2a:c3:44:56:6a:67:00:10:8f:ae:84:f5:
                    f4:85:5b:4e:a0:f6:0d:c3:e3:5f:e9:3a:85:38:ce:
                    b7:24:60:b2:59:07:e2:11:4d:11:b3:47:c1:a3:ec:
                    a5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:48:50:FB:96:B1:AC:8A:63:FD:30:DE:72:CB:CB:89:7B:0D:26:71
            X509v3 Authority Key Identifier:
                keyid:0C:2F:9B:2E:8A:30:50:8D:39:19:2A:FD:5B:34:EE:56:F7:75:97:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:61:f2:48:2a:c8:e9:4f:31:cd:83:0a:b9:a0:a5:b3:50:83:
         14:82:47:5a:c7:a1:5b:d9:31:e1:6d:e0:70:35:a4:f6:8b:81:
         28:7f:e8:cc:93:b8:8d:36:8d:f2:9b:00:70:f5:bc:1f:05:c2:
         30:fb:48:18:aa:72:b2:bc:f5:85:ba:9d:20:36:db:c4:fa:43:
         34:d9:25:2b:77:82:96:3c:c1:92:57:88:70:83:db:26:80:89:
         7a:02:71:5d:8a:96:da:51:4d:38:37:88:fb:81:29:cd:f2:e6:
         0b:34:b0:72:84:7b:7f:d7:ae:88:6b:01:bf:8c:17:10:b1:58:
         3d:dc:1d:a3:56:53:35:4e:3c:6b:89:72:10:d0:02:54:57:7b:
         c7:be:8f:ec:c9:3a:e9:1f:51:c1:bb:fd:f0:24:c8:1f:4c:3b:
         28:69:18:44:16:ee:c6:19:3f:6f:a0:8a:a2:60:4c:ec:97:37:
         2a:e6:98:d1:10:50:4e:5a:13:50:ee:e7:e5:67:5c:3d:59:99:
         68:c9:32:c2:83:3a:4a:57:ae:49:b8:3f:8f:e2:7a:f2:83:63:
         05:3b:a7:1b:e5:07:1c:6e:a9:aa:8c:74:01:c1:dc:3c:57:9b:
         49:70:9b:1d:55:44:0e:8b:1c:d3:2a:ce:b1:14:cf:99:ae:ef:
         20:58:eb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:14:55 2025 by rpki-client