Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
File:                     U4DNitL4ThTptbZCOJN7bUIH4iE.mft (raw, json)
Hash identifier:          GRc+4rSgJ7qcbd6xKNJZSC9fgrGlnBkxPiAZJi/11fY=
Subject key identifier:   3A:AA:19:32:92:5D:79:28:65:D5:AF:CD:B0:B1:D8:30:5E:32:0E:A9
Authority key identifier: 53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21
Certificate issuer:       /CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221
Certificate serial:       0197B6A04D969D0AAD113628E204AD6720D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
Manifest number:          0749
Signing time:             Sat 28 Jun 2025 13:00:48 +0000
Manifest this update:     Sat 28 Jun 2025 13:00:48 +0000
Manifest next update:     Sun 29 Jun 2025 13:00:48 +0000
Files and hashes:         1: PrynGxhd3fBYSysYytSLlNvgiPU.roa (hash: c1xBK/MstkcP/5fvaGRoD60yvfbDsZTSPuvQcmy7U14=)
                          2: Py8NBn2wKQtg0zHbcBysEwIXqks.roa (hash: NTVpJIiHXmRF3xsTXgz/x/FsM7sCsul7uRQRW+IaP6E=)
                          3: U4DNitL4ThTptbZCOJN7bUIH4iE.crl (hash: SaW8ZeffMHHNIcUvADA582MS8Zdz1XQ716ZAL/ngA2Y=)
                          4: WYEKXhWarkIaMX3EUO00ulkHiOE.roa (hash: U2QqWXZG6O8oPXfv5PztqHfihktp5N8jfu2uMFAxqk4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:4d:96:9d:0a:ad:11:36:28:e2:04:ad:67:20:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221
        Validity
            Not Before: Jun 28 13:00:48 2025 GMT
            Not After : Jun 29 13:00:48 2025 GMT
        Subject: CN=3aaa1932925d792865d5afcdb0b1d8305e320ea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:bd:82:66:cc:c6:a3:35:c5:80:26:8e:db:1c:
                    b3:33:3f:08:86:51:fe:0b:b2:88:5f:38:e2:c3:dd:
                    12:ad:d2:5f:7a:ba:94:fc:ac:e2:71:bd:ab:eb:46:
                    c7:39:8d:0b:f8:8f:f9:8a:5b:e8:9b:a5:dd:4d:32:
                    cb:80:9e:2e:36:a4:a8:0e:e1:2b:24:52:d9:1b:5c:
                    47:15:a7:76:fa:99:05:e7:73:62:6d:39:f6:82:a4:
                    9a:07:49:d0:20:0c:d0:55:b9:31:32:1e:d9:c2:ed:
                    29:a6:ff:c3:ce:41:63:d0:67:63:97:74:13:88:94:
                    61:9e:e2:95:9e:d8:f2:1a:26:a1:37:4a:a3:33:64:
                    cd:b3:42:7a:1b:c0:05:ad:9c:79:19:c4:d7:73:20:
                    f6:3c:94:75:a2:ac:c4:91:a6:46:79:4f:ed:25:30:
                    83:6e:95:cf:e1:da:3f:99:af:f9:9b:23:56:4e:ad:
                    f3:cd:c7:48:ee:55:a2:b6:a1:78:50:4d:bb:e2:66:
                    b7:8c:35:8c:7d:82:32:63:3e:d0:63:04:37:f7:46:
                    e6:04:f4:3e:cd:cd:fb:e2:a3:11:bf:e9:27:f2:58:
                    8a:4c:90:05:e9:a3:8d:8f:27:fd:14:e8:e7:0a:a8:
                    29:16:20:a4:a2:00:5d:80:94:68:dc:ad:80:1a:cf:
                    90:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:AA:19:32:92:5D:79:28:65:D5:AF:CD:B0:B1:D8:30:5E:32:0E:A9
            X509v3 Authority Key Identifier:
                keyid:53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:c1:03:cf:da:1d:2e:e2:ad:3e:f3:8e:f8:4f:42:67:60:33:
         48:1f:86:d0:75:4d:37:74:15:d5:58:8a:e6:a5:14:65:f8:39:
         18:af:88:25:6e:7d:7d:45:0a:12:0e:eb:33:6e:d6:b4:fe:52:
         23:dc:3e:35:f0:6b:9c:d2:b7:f9:a3:34:10:a1:b3:cd:84:ac:
         83:93:fd:2d:39:44:0a:70:55:ba:6b:49:0c:b1:d9:d6:1d:32:
         a8:3f:3b:68:54:ab:3f:48:9e:96:d6:2a:f2:63:67:d7:3e:33:
         34:f6:f2:3f:85:11:27:61:89:b5:0d:29:41:d1:12:e5:f2:d2:
         8b:88:99:73:f5:a2:37:84:ff:f1:72:05:92:95:86:46:48:f9:
         f9:55:95:94:e7:42:28:af:f2:d2:66:0b:4d:c0:30:32:c5:90:
         dd:48:29:f3:bd:f5:18:fd:1e:17:48:d9:2c:e6:97:af:ea:11:
         38:c6:06:51:04:cb:04:a6:6b:44:f1:db:94:67:41:9e:eb:f3:
         ff:90:b5:52:b9:36:6b:56:a9:fb:78:8e:d5:c7:68:82:56:93:
         a0:b5:c3:98:02:82:29:aa:17:b0:e7:0f:5d:7b:56:73:1a:b4:
         e0:ba:b8:84:20:ec:31:78:ab:c5:14:f0:8a:fe:97:73:5c:c8:
         48:63:f9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:55:40 2025 by rpki-client