Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft
File:                     dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft (raw, json)
Hash identifier:          Nxl+xswuRSSr5nT65kLlKRvcw/i3Q7qc7BnyrNwO+P0=
Subject key identifier:   86:0B:46:CF:23:31:76:11:F2:46:99:B8:73:D0:74:5D:8E:58:DA:90
Authority key identifier: 74:5D:BA:56:CF:1F:FC:2C:FC:1D:05:F4:FA:83:31:17:EF:D7:C7:8A
Certificate issuer:       /CN=745dba56cf1ffc2cfc1d05f4fa833117efd7c78a
Certificate serial:       019743D3E3AE340C32BD20A1EE85D297DC42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft
Manifest number:          050E
Signing time:             Fri 06 Jun 2025 06:00:49 +0000
Manifest this update:     Fri 06 Jun 2025 06:00:49 +0000
Manifest next update:     Sat 07 Jun 2025 06:00:49 +0000
Files and hashes:         1: dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.crl (hash: bUYO+B3ePTTAARrekH/brR1uOU8dYFW+SqhA/4joLBY=)
                          2: f7NzzdifL8oVbmQEX_FaWaX9d8Y.roa (hash: f6fUQrnWj0Ply8n/xjNr8BkToE1SYVL6yBIWZoWRSsQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 06:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:43:d3:e3:ae:34:0c:32:bd:20:a1:ee:85:d2:97:dc:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=745dba56cf1ffc2cfc1d05f4fa833117efd7c78a
        Validity
            Not Before: Jun  6 06:00:49 2025 GMT
            Not After : Jun  7 06:00:49 2025 GMT
        Subject: CN=860b46cf23317611f24699b873d0745d8e58da90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:4a:5a:e2:31:c9:ae:f4:12:8a:f7:a4:de:cd:
                    d5:3d:60:03:99:9e:27:2f:b1:7a:35:2c:63:ef:26:
                    4f:a7:65:36:1c:ca:97:98:aa:c7:a5:77:e6:fd:53:
                    0d:27:97:39:5e:91:58:a6:ee:89:eb:d3:32:4f:27:
                    35:87:63:a8:4a:ab:ef:62:6a:bb:22:76:af:1a:1b:
                    49:6c:67:b6:d6:81:80:23:b7:12:ff:18:4a:4a:56:
                    85:dd:70:26:d6:05:b0:89:62:f4:34:98:2d:95:41:
                    d2:76:2d:9a:72:76:73:60:08:af:db:d0:71:3e:08:
                    c2:d7:fe:be:ad:35:e8:41:2c:a1:3d:8d:df:d3:04:
                    4c:cc:66:af:74:ef:22:6e:20:f5:46:87:2b:12:4a:
                    91:cf:cc:dc:bb:49:c8:57:92:51:aa:29:4d:0f:a0:
                    61:fb:3a:f9:a1:74:b9:bd:5c:f3:50:a8:63:7e:67:
                    f0:fa:02:f0:2f:0f:a6:f3:18:25:95:9e:40:02:d9:
                    4d:3b:4a:02:20:60:3c:61:f1:65:e1:de:77:64:a0:
                    72:66:ef:e2:fe:1d:45:38:16:42:cb:60:ca:31:ac:
                    51:fa:da:59:0d:2a:20:55:e7:67:b8:c4:58:82:8e:
                    55:ca:e9:58:34:f8:8b:89:2a:bb:d2:3a:bd:f2:04:
                    06:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:0B:46:CF:23:31:76:11:F2:46:99:B8:73:D0:74:5D:8E:58:DA:90
            X509v3 Authority Key Identifier:
                keyid:74:5D:BA:56:CF:1F:FC:2C:FC:1D:05:F4:FA:83:31:17:EF:D7:C7:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:56:57:53:ae:20:d3:5d:ce:e4:29:dc:ec:8a:df:6c:06:6d:
         3a:7c:43:f4:ba:bc:c3:82:9c:20:e7:6d:c4:81:88:39:90:fb:
         c0:81:fd:0d:af:9b:9c:d2:cd:5c:40:01:71:6b:d2:48:76:19:
         5d:53:a6:37:49:d1:9c:4a:60:ab:b2:68:f5:b4:b2:d0:88:ca:
         4b:3a:a5:1c:db:cd:da:f9:2a:74:52:75:8f:ef:ca:86:d4:e1:
         ee:04:b3:9f:68:43:19:8e:d8:97:9c:73:d2:98:39:9b:2c:02:
         df:72:16:a5:0f:3e:92:c9:de:57:4c:d0:8b:e1:f5:4f:e0:01:
         6c:7a:07:65:79:1c:de:02:ff:35:56:26:fa:5e:a7:f6:a0:59:
         e7:9b:3f:40:74:59:de:59:e9:95:cd:d3:e3:c0:0d:85:e2:26:
         92:44:a2:f0:4c:f8:37:c9:aa:09:86:eb:3a:64:08:e9:ca:ff:
         00:7e:30:5a:d9:aa:0c:ed:96:a4:d3:6a:c9:d5:05:12:63:6c:
         30:6a:ae:f5:78:32:94:bd:22:31:8d:c7:4c:29:92:fe:2a:38:
         b4:ea:43:d7:7d:0f:20:0d:fa:9a:1b:99:4f:46:6d:0e:ef:0f:
         a2:05:96:09:ac:45:76:9b:8e:40:5f:c7:09:7b:8b:51:98:08:
         6e:73:02:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 11:13:26 2025 by rpki-client