Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
File:                     0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft (raw, json)
Hash identifier:          sCO3d89dyC4XhmsLkUohc9ZtJVRsmTh11yoaNjPlfKw=
Subject key identifier:   08:E5:A6:94:A8:6D:C1:12:96:6F:61:25:68:5E:21:5E:1B:4D:18:CF
Authority key identifier: D0:F6:B8:43:6F:66:34:CD:31:D7:09:7C:E2:42:A5:49:93:5B:18:D7
Certificate issuer:       /CN=d0f6b8436f6634cd31d7097ce242a549935b18d7
Certificate serial:       0197B77C4AC206617AC7D3C309A90E23FC00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
Manifest number:          158A
Signing time:             Sat 28 Jun 2025 17:01:05 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:05 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:05 +0000
Files and hashes:         1: 0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl (hash: /zl7i5XXelimsgBRjF/nUCNvMOtDKCx4raKEd7Hh3ao=)
                          2: PRL7sgUPxAooAgpR2OCFKktRv4I.roa (hash: 7EnjkpMFrtIGkSxH/V71N/Yi8O1F+vC6f4Et13UAYFE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:4a:c2:06:61:7a:c7:d3:c3:09:a9:0e:23:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f6b8436f6634cd31d7097ce242a549935b18d7
        Validity
            Not Before: Jun 28 17:01:05 2025 GMT
            Not After : Jun 29 17:01:05 2025 GMT
        Subject: CN=08e5a694a86dc112966f6125685e215e1b4d18cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b3:3d:06:3f:85:93:af:01:b0:03:15:99:51:
                    be:fa:68:d2:f5:81:57:ce:35:00:03:5c:b8:c3:f9:
                    8f:ce:1b:7a:21:6f:61:9c:a1:cb:a7:1e:82:8a:f2:
                    df:d6:5a:6d:b4:f1:a0:25:45:25:3f:4e:a2:61:30:
                    d5:06:6a:8a:10:b7:19:e3:ed:80:2d:87:d9:11:30:
                    f1:ce:13:ce:bd:24:95:6c:6d:04:8c:c8:8a:58:a3:
                    07:27:80:cf:04:1b:9e:94:30:9f:0e:cc:90:aa:76:
                    fb:aa:97:40:6a:25:51:a9:77:4d:05:b2:ac:9c:d7:
                    5f:b1:6f:ac:b8:48:65:6a:37:fd:01:0f:b5:fd:79:
                    63:7c:04:3f:62:da:dd:85:1c:0e:0c:2e:1d:06:0d:
                    5e:9b:c8:16:7f:98:84:45:c9:06:1d:b4:59:e4:b8:
                    55:6b:e6:41:75:da:bb:08:05:bb:e3:81:40:e9:8b:
                    d9:e9:33:37:19:e2:4f:29:8d:7f:af:3a:c5:09:ea:
                    87:be:79:60:54:b2:bc:57:69:71:f4:24:f2:ce:1f:
                    e6:9b:b4:5f:a0:f3:4b:da:0c:7c:e4:9b:05:b5:20:
                    a6:b3:e4:6f:80:e2:75:60:ed:8e:f3:41:8d:8d:54:
                    c7:40:de:15:59:af:85:00:a3:9d:19:ca:e0:fe:99:
                    78:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E5:A6:94:A8:6D:C1:12:96:6F:61:25:68:5E:21:5E:1B:4D:18:CF
            X509v3 Authority Key Identifier:
                keyid:D0:F6:B8:43:6F:66:34:CD:31:D7:09:7C:E2:42:A5:49:93:5B:18:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:b7:19:15:05:d3:8b:14:1f:db:43:12:6d:2f:a1:ea:11:0f:
         df:1f:f6:a6:e5:16:94:66:77:38:ab:2b:37:f8:c8:f8:34:39:
         d2:b6:f2:34:9b:0b:a5:e1:2d:ff:63:e3:ba:48:1b:64:9a:8c:
         05:57:61:8c:3f:f7:49:20:97:fa:83:5e:9e:e1:00:da:32:33:
         e6:ad:2a:e3:71:54:04:f7:aa:bc:3e:75:60:04:dc:07:4e:62:
         d7:33:f6:a6:fb:84:bd:a1:d4:90:42:28:1e:84:0a:88:7c:91:
         dc:4b:f0:6b:a8:8e:35:1e:ac:09:34:d4:9e:e1:62:89:98:db:
         5b:b9:cf:cf:70:bf:4a:a3:20:ba:87:fd:36:91:bc:de:41:bd:
         37:ca:ff:70:d9:d7:50:d2:2b:0b:76:f9:20:f5:d9:7c:e3:66:
         b3:b4:ca:61:a1:83:64:d9:aa:59:07:57:6a:b0:a6:62:27:71:
         29:72:28:06:99:b2:0b:07:6d:2d:0f:eb:a5:2f:39:13:6d:23:
         eb:c0:9f:e0:f1:39:a9:d7:b0:b9:91:c9:85:46:1e:70:20:75:
         0d:a8:62:37:16:46:cb:62:d4:cf:f1:e0:67:21:4c:70:cb:ff:
         bf:05:7e:cf:24:dc:29:d2:8b:f0:da:2f:0f:e1:58:a2:93:60:
         5b:12:cb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:37:30 2025 by rpki-client