Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
File:                     pDJ8VulBFx6jvrom67niP031vPM.mft (raw, json)
Hash identifier:          XPP05UvywLzQfnIktGnPi+Oe3tGD4tw13M15cUjlOQ8=
Subject key identifier:   38:75:77:14:A8:9F:D5:81:F7:4D:8F:E2:A3:83:69:79:42:4C:5D:50
Authority key identifier: A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
Certificate issuer:       /CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Certificate serial:       0197BCDA51D9D358614EEF9E89E09739C247
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
Manifest number:          067B
Signing time:             Sun 29 Jun 2025 18:01:53 +0000
Manifest this update:     Sun 29 Jun 2025 18:01:53 +0000
Manifest next update:     Mon 30 Jun 2025 18:01:53 +0000
Files and hashes:         1: 3vdSYlPhYCcKWdxmctUlZz3LRrA.roa (hash: JYH+c4M07iZOS3Xafi4xgQEUcEXeZVf7HAqO1Fudxb4=)
                          2: IKxoI34yNDqSYAVSbtJ6URAzHH8.roa (hash: /1RKNbwdvJvERdDo7l1kD+y03W4o9/o77qVS9bJMSGs=)
                          3: cLRpZsuHj1Ogs0ExPm-7o6d-jPI.roa (hash: TUBUIVHrB/n/iv6Q1YfM7h8U6VmMHs60X+y0rpIetb0=)
                          4: lbRMrKUagBNury-urjZX3f75_Qw.roa (hash: mq29IIHcb8ubsfXIgUD4LUU90hH0YRXl8dREvVbfEwI=)
                          5: pDJ8VulBFx6jvrom67niP031vPM.crl (hash: HQ2gEfzZ611/lSYKemM5cpKOEZ39EmMsakSHTItCYMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 13:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:bc:da:51:d9:d3:58:61:4e:ef:9e:89:e0:97:39:c2:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
        Validity
            Not Before: Jun 29 18:01:53 2025 GMT
            Not After : Jun 30 18:01:53 2025 GMT
        Subject: CN=38757714a89fd581f74d8fe2a3836979424c5d50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:80:98:c4:71:4e:7f:64:c2:a7:36:06:95:92:
                    39:d4:2a:cc:88:00:fe:9c:a1:41:bb:d3:b3:91:ec:
                    94:51:90:5c:bd:21:c2:e5:95:6a:4e:7e:b4:7f:e2:
                    ba:fd:83:79:77:ba:9a:f5:96:44:5c:fe:5f:c1:f9:
                    16:a5:3c:5e:16:30:e5:9c:1d:ec:69:d2:fb:0f:73:
                    30:21:ec:03:49:99:bb:ea:95:f1:00:a1:c6:0c:51:
                    50:83:51:d8:be:ce:6e:14:bb:db:e7:50:e8:79:e7:
                    d2:81:27:79:05:6e:e2:56:68:ef:54:c3:8c:56:d5:
                    db:69:6f:e9:58:86:7b:38:37:92:c3:82:b9:ce:37:
                    4d:52:ed:cd:a9:c6:5c:5b:05:ee:84:07:9e:a1:af:
                    72:ff:2d:5c:ff:e6:0d:d9:48:ef:86:68:df:af:a7:
                    62:ea:81:d0:62:64:4d:b5:1c:a2:d2:98:82:d3:bf:
                    cd:58:90:47:b4:35:b3:ab:84:ef:e6:2a:41:c5:94:
                    f5:fd:75:5b:4a:14:27:5e:78:2c:71:e8:65:99:ed:
                    dd:fc:1d:9d:4b:31:04:40:9e:cf:c9:e9:7c:aa:a0:
                    ba:0d:08:40:ec:d9:e2:10:6a:13:94:fb:1d:c5:70:
                    59:6f:d7:7d:dc:47:2b:60:50:e5:63:54:cc:70:7a:
                    6a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:75:77:14:A8:9F:D5:81:F7:4D:8F:E2:A3:83:69:79:42:4C:5D:50
            X509v3 Authority Key Identifier:
                keyid:A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:e3:23:c6:eb:20:c9:63:55:a7:d3:b8:1e:0a:7b:82:3e:07:
         45:73:d7:34:5c:d7:c0:e7:82:50:a7:32:63:36:02:3a:15:0a:
         4f:98:e6:5e:f7:21:3b:68:33:be:ff:c9:22:0c:48:97:60:61:
         56:1c:20:4d:9e:d6:12:05:18:9f:90:88:8b:31:83:97:f0:8d:
         1f:7c:9f:1b:5b:b9:93:17:e4:b6:98:58:4b:c0:92:eb:5f:48:
         f8:b6:ae:ff:0c:56:a0:00:1a:06:e0:34:b4:be:08:92:98:48:
         a8:27:71:24:83:4d:d8:3c:2a:a3:58:0a:2d:ca:98:a2:d2:9a:
         e1:35:2d:88:b8:3a:2f:a1:82:84:56:10:7d:b0:91:b4:ff:42:
         11:d3:fb:fe:74:33:fe:56:f3:8d:84:e6:fc:a0:9f:fa:bd:a5:
         75:32:66:54:ad:2c:77:12:ec:a6:28:3a:6e:f6:35:33:3a:14:
         f5:50:da:61:32:2a:dc:db:d4:2c:91:3b:e9:92:4b:d1:96:68:
         b3:02:13:6d:97:78:d0:bf:fc:96:9f:5c:12:30:4e:1f:27:cf:
         e2:31:fa:80:6c:fc:46:d3:55:50:98:86:b7:fa:71:fb:39:33:
         ee:f8:8e:c3:ed:8c:d5:60:30:ae:41:ba:0b:07:e9:cc:f3:23:
         b7:54:42:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 21:07:00 2025 by rpki-client