Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
File:                     pjxtuvK89S8n5YwticbBxVuV3yY.mft (raw, json)
Hash identifier:          Pn3Hq5lThRRQQFgWtTBZ/ZkP1xcWJf0U8HjKckQETlo=
Subject key identifier:   93:5C:73:03:3A:4F:03:12:CA:3E:CC:81:1D:69:D8:94:6C:BA:11:30
Authority key identifier: A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26
Certificate issuer:       /CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
Certificate serial:       0196BCDB73C5B8AA74FF2AC70AA00059F233
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
Manifest number:          07AB
Signing time:             Sun 11 May 2025 01:00:20 +0000
Manifest this update:     Sun 11 May 2025 01:00:20 +0000
Manifest next update:     Mon 12 May 2025 01:00:20 +0000
Files and hashes:         1: NANvvd_V7iIUj7mJYMTOqque3Po.roa (hash: z7IZKlxruCsipOwPt42pcffU0s1l9uB/ojQdv9l2AxM=)
                          2: pjxtuvK89S8n5YwticbBxVuV3yY.crl (hash: sOwih33JFuxAaJperaJtsoM3swG8ZUgnpdzEHy3flyg=)
                          3: yG3GRDnYBo69OMDgoi6l30IqdQQ.roa (hash: s36xnlN956H1thb9LXHw6o5GvT+TFLxm0zFqGU00y/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 01:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:db:73:c5:b8:aa:74:ff:2a:c7:0a:a0:00:59:f2:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
        Validity
            Not Before: May 11 01:00:20 2025 GMT
            Not After : May 12 01:00:20 2025 GMT
        Subject: CN=935c73033a4f0312ca3ecc811d69d8946cba1130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9a:a6:56:f2:0d:8b:6d:cd:2e:88:c9:49:26:
                    77:73:6f:29:82:7f:74:cf:38:38:47:19:35:8a:af:
                    ac:3a:3a:98:bc:9a:d3:b8:5c:36:73:18:3b:9c:43:
                    16:37:be:42:71:2a:ae:76:89:98:f1:10:9e:df:67:
                    6a:61:1f:ed:16:87:55:de:9d:b3:f8:95:65:3a:0d:
                    9d:b1:e4:68:92:90:fe:eb:b7:49:38:9c:01:76:3d:
                    5c:08:ac:2e:df:8a:3a:89:4b:22:c6:3d:aa:f3:c4:
                    10:4a:c7:7b:39:26:cf:b8:6f:fa:e3:67:53:da:4c:
                    5d:53:16:5b:5e:3d:b3:1a:f2:b8:c8:6f:83:eb:b8:
                    5d:41:89:2a:f9:54:ce:d1:73:ee:73:d8:31:f8:77:
                    44:f7:d8:28:32:6d:6a:95:f5:b6:5c:b2:39:81:ab:
                    ba:fb:25:11:13:cc:b3:87:9f:66:96:d5:77:db:98:
                    1e:63:e8:c2:f9:2c:4c:98:17:36:e4:ed:f5:b4:99:
                    cc:7f:63:0e:ca:bd:44:79:cb:50:1f:10:0f:ce:f0:
                    df:e4:3a:45:12:96:cd:3d:2e:f7:bb:d6:1d:25:b6:
                    9f:0f:cf:49:11:97:ac:eb:9b:57:3c:f7:6d:3c:aa:
                    35:1f:59:99:3e:ac:e2:3a:b5:34:ec:5f:8a:97:72:
                    ff:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5C:73:03:3A:4F:03:12:CA:3E:CC:81:1D:69:D8:94:6C:BA:11:30
            X509v3 Authority Key Identifier:
                keyid:A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:bf:cb:c2:76:cf:43:e8:4c:e4:5a:56:9f:8b:59:b4:c6:87:
         b1:12:e8:fe:b6:c1:eb:e6:e0:2f:70:b6:f0:28:4a:77:80:c5:
         1c:b0:c2:cc:22:9f:d6:c3:93:c5:a7:ae:e6:c4:8a:96:b4:78:
         e4:4f:10:7e:18:7a:83:1e:18:01:89:7a:33:5e:01:78:97:57:
         aa:76:64:9c:56:f8:26:f9:bc:f1:b4:39:db:c1:e8:8d:5d:72:
         b0:ff:22:1b:50:55:7d:89:85:0b:8e:97:59:ae:6e:25:fa:0e:
         1e:4e:19:16:ff:72:4d:f5:c0:ff:14:cb:3c:50:f2:62:72:42:
         56:ee:91:6a:f7:9e:7b:e8:df:7d:e9:69:36:6a:82:27:6c:c2:
         01:b0:6a:3e:de:72:40:6f:90:85:4d:8a:a0:4c:1f:ea:5a:f6:
         1d:bc:72:56:4c:cf:5d:75:d0:d9:f1:d1:45:06:f3:74:25:c0:
         db:1e:9a:ee:9e:6e:7c:9c:e3:2a:7a:5b:8d:44:45:43:b6:b8:
         ed:28:fd:d6:d4:4e:30:bc:77:3f:3c:3a:da:1c:b4:98:97:c3:
         28:ad:e8:01:be:57:a4:2f:02:fa:78:05:b7:b6:a6:85:3d:95:
         b8:bc:3c:6b:30:1a:9e:fb:bd:75:09:f5:e9:f3:57:b3:4d:04:
         76:69:18:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:59:22 2025 by rpki-client