Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.mft
File:                     xPLYuhsZIR-p-cDbVRVFEzECzLs.mft (raw, json)
Hash identifier:          1taZU90+P+xwfTG96TaAdo3iwMrs1/Tj0fPaCZL1hJc=
Subject key identifier:   1B:A9:0E:D8:02:3C:08:63:77:87:4D:66:9D:91:F7:2B:8F:25:DA:2C
Authority key identifier: C4:F2:D8:BA:1B:19:21:1F:A9:F9:C0:DB:55:15:45:13:31:02:CC:BB
Certificate issuer:       /CN=c4f2d8ba1b19211fa9f9c0db551545133102ccbb
Certificate serial:       0197B74503C3932D3DB4F9DCF058221AAD6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xPLYuhsZIR-p-cDbVRVFEzECzLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.mft
Manifest number:          143F
Signing time:             Sat 28 Jun 2025 16:00:42 +0000
Manifest this update:     Sat 28 Jun 2025 16:00:42 +0000
Manifest next update:     Sun 29 Jun 2025 16:00:42 +0000
Files and hashes:         1: 1-p8tFLtNjdsD9js8JfdcaeXLbes.roa (hash: SGKnAN0Wd2NDfYevBBpaQsdqn+ofJ6GFHE9Wy8o0+BA=)
                          2: xPLYuhsZIR-p-cDbVRVFEzECzLs.crl (hash: ithCufNrRRn+wHGwLTxEb5X3LHWLq8xKuyc82efLlnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xPLYuhsZIR-p-cDbVRVFEzECzLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:03:c3:93:2d:3d:b4:f9:dc:f0:58:22:1a:ad:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4f2d8ba1b19211fa9f9c0db551545133102ccbb
        Validity
            Not Before: Jun 28 16:00:42 2025 GMT
            Not After : Jun 29 16:00:42 2025 GMT
        Subject: CN=1ba90ed8023c086377874d669d91f72b8f25da2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:15:09:94:24:2d:01:00:fa:1a:97:60:d5:99:
                    cb:98:ca:7e:d0:cc:85:ce:3c:2a:b5:b3:32:95:9a:
                    a4:6d:5e:99:5b:d0:8d:41:a3:1c:72:8c:fd:8c:8f:
                    d7:ac:30:4d:48:54:47:15:79:6a:3f:61:14:fe:05:
                    4e:cf:a6:1c:55:eb:4a:41:39:0e:0d:9a:d5:b2:6c:
                    fa:4e:4b:ad:6e:71:3a:99:03:71:a4:23:d7:27:67:
                    2f:9b:3b:e5:7c:51:11:c0:2b:1a:e1:93:d7:9a:76:
                    a8:c9:77:4d:62:49:97:6c:47:72:d8:41:db:95:5e:
                    06:d1:36:cd:8c:28:18:18:6e:82:da:81:e3:1a:aa:
                    36:46:ce:7a:98:be:b0:8a:e1:ef:38:f8:b9:6a:94:
                    b5:6a:7e:7f:d8:19:45:eb:4d:f2:08:c7:c6:12:a1:
                    d7:b0:c2:c4:84:ce:12:81:e0:49:0c:e9:c2:a9:90:
                    db:85:34:08:e1:c9:fe:4b:70:95:9b:4e:ff:a8:a4:
                    49:50:ba:ee:09:23:2e:8c:f1:fb:12:43:d7:12:74:
                    af:cb:f6:3c:f2:83:7b:4c:56:e7:1b:97:b7:84:c3:
                    70:4b:35:55:e2:2c:b3:c5:01:10:8e:e8:24:97:03:
                    2f:fd:d5:3a:b8:42:d9:85:5e:bb:fc:e3:bf:d2:8a:
                    8a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A9:0E:D8:02:3C:08:63:77:87:4D:66:9D:91:F7:2B:8F:25:DA:2C
            X509v3 Authority Key Identifier:
                keyid:C4:F2:D8:BA:1B:19:21:1F:A9:F9:C0:DB:55:15:45:13:31:02:CC:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPLYuhsZIR-p-cDbVRVFEzECzLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:45:85:14:79:72:d3:52:7b:eb:22:4e:ad:31:97:d1:fc:68:
         96:74:65:15:a0:a5:9e:9e:40:76:33:f5:f8:ba:fc:cb:a7:12:
         69:b8:ee:b9:e0:3e:90:bb:b9:7e:04:ef:6d:85:31:22:05:ae:
         04:46:a8:be:9b:4b:9d:87:33:d4:42:e7:d4:65:8e:0c:32:84:
         80:58:b0:90:b1:87:ba:af:dc:f7:aa:ea:a4:7f:1f:c3:fa:95:
         b2:75:20:68:ed:6b:79:3b:6b:39:0c:30:c7:58:a2:28:e9:64:
         3d:f0:2e:91:fc:11:4c:1a:ec:e1:30:a5:6c:e5:5e:53:d4:85:
         6d:83:56:9a:b7:1c:5c:a4:6b:d6:3b:68:24:4b:eb:03:69:87:
         05:4e:92:d5:15:d3:ce:9c:8b:9f:1b:27:12:c6:80:12:c1:7f:
         94:f0:6c:95:01:64:db:d4:82:09:80:2c:56:43:ac:db:12:e7:
         33:ed:3b:7f:d7:56:af:8f:12:37:73:a0:06:92:8f:98:4e:e0:
         9a:d3:5e:a3:70:9b:9a:0a:5f:a7:93:8f:ae:5f:bf:a0:c3:74:
         8a:9b:4b:1c:de:d6:7c:36:77:c9:52:5c:7f:39:32:61:d2:3f:
         21:1f:b2:dd:dc:da:4a:b6:8f:5a:bb:b6:36:56:f2:21:fd:7e:
         78:a8:12:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:28:11 2025 by rpki-client