Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
File:                     34CJqp4dXBKrrUOnAVEdocZfn6Y.mft (raw, json)
Hash identifier:          gB4dRhtQc0nTbvSzi1EOWH0te0GIsJZXKlOI5qzKIt8=
Subject key identifier:   BD:D3:05:A6:E7:A7:80:53:E0:CF:E4:2D:F3:85:6D:83:1A:81:F2:C6
Authority key identifier: DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6
Certificate issuer:       /CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6
Certificate serial:       0197B93393D2384B88B3A776366276C955C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
Manifest number:          0EC4
Signing time:             Sun 29 Jun 2025 01:00:54 +0000
Manifest this update:     Sun 29 Jun 2025 01:00:54 +0000
Manifest next update:     Mon 30 Jun 2025 01:00:54 +0000
Files and hashes:         1: 34CJqp4dXBKrrUOnAVEdocZfn6Y.crl (hash: 5OmXdVP0Oc3Ss35bBDSYznwWDnN/pkReKUYOtcdt8zM=)
                          2: b-VOh1iyKHVcDysv8XYced0xnLo.roa (hash: 0b/hMsK4rsISxKd+Kzt0DOFihl9RrwFHAkmEpylmN4I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:33:93:d2:38:4b:88:b3:a7:76:36:62:76:c9:55:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6
        Validity
            Not Before: Jun 29 01:00:54 2025 GMT
            Not After : Jun 30 01:00:54 2025 GMT
        Subject: CN=bdd305a6e7a78053e0cfe42df3856d831a81f2c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:01:3e:35:d1:25:2b:e8:24:37:79:de:d9:6a:
                    e5:fa:0a:fb:67:8d:fa:28:33:fc:81:64:4d:b3:75:
                    6b:e4:36:65:a6:bf:05:74:ad:e9:03:b0:d1:be:38:
                    9c:b0:4a:02:78:fd:e6:56:4c:b2:a6:ff:9a:17:d7:
                    ea:b6:74:bc:13:d5:d6:10:a1:98:95:27:07:ab:82:
                    1d:4e:b6:66:8c:e5:c1:c1:b3:3b:e6:96:b8:75:46:
                    80:4a:99:c9:7d:e0:2f:02:22:49:27:cc:78:ae:61:
                    28:9a:44:c0:42:57:87:eb:0b:91:d0:91:3d:1d:88:
                    6d:ab:70:bb:6b:de:2d:98:38:68:04:c7:f6:e5:9e:
                    3d:3a:63:46:98:b1:0e:2a:67:53:bb:7a:cd:d1:fb:
                    04:01:10:aa:35:b4:83:2b:e0:bb:7c:84:53:8a:4e:
                    9e:ec:ba:42:d2:e8:88:2a:22:8a:e6:db:43:20:95:
                    5f:74:e5:54:7d:16:c5:ec:19:c8:9f:26:ab:99:55:
                    6c:54:25:0a:6f:57:a1:9a:f2:8c:20:45:a1:c9:f6:
                    0f:97:a7:17:70:ed:9f:21:9d:76:88:cd:9e:7d:a8:
                    2a:01:59:62:cb:1b:fe:05:65:c5:35:62:96:f8:e1:
                    c0:42:e4:63:92:01:33:34:14:48:87:52:18:29:b3:
                    8c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D3:05:A6:E7:A7:80:53:E0:CF:E4:2D:F3:85:6D:83:1A:81:F2:C6
            X509v3 Authority Key Identifier:
                keyid:DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:0d:7f:3e:10:7f:17:e9:43:c4:55:34:1b:23:bd:28:63:fc:
         f8:b2:69:b4:2e:90:a9:85:e3:13:45:5c:c5:7a:cf:b0:a3:78:
         7e:bf:ea:46:81:b0:95:2a:ab:c7:a6:df:07:44:49:e2:4a:1d:
         9a:11:17:8b:a3:b8:d9:7b:e3:75:85:47:f1:da:26:8d:17:3d:
         2b:24:3c:c7:8f:c0:67:83:fa:fd:8d:89:4c:c8:25:9b:a4:01:
         e9:87:34:18:0e:61:65:16:d9:ac:58:e1:09:ba:8a:83:ca:a6:
         a2:46:17:da:c9:6c:24:54:e7:da:e6:6e:3c:35:bb:a5:01:09:
         4b:ee:05:2f:90:1f:12:16:7f:e2:c5:d3:06:76:5b:20:e6:34:
         34:27:e2:01:43:ae:43:6a:11:3f:e8:4f:5d:da:e6:b8:d5:60:
         f0:2f:3b:54:76:8f:ca:c6:c1:cc:35:fa:0c:c8:0a:39:0f:35:
         65:f4:ab:9e:be:86:3c:ec:66:c8:4f:65:22:45:31:56:68:1e:
         2c:de:80:cb:f5:5e:b8:87:cd:98:4d:95:ce:c0:00:06:f3:10:
         d3:37:fb:79:89:d2:b4:fa:5a:74:36:75:ea:19:64:c8:71:2e:
         39:71:7b:56:fa:7e:4d:e9:ae:64:98:d6:c9:6e:7e:b0:36:0a:
         58:7a:39:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:19:49 2025 by rpki-client