Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
File:                     PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft (raw, json)
Hash identifier:          fDCh5XsOiErMD1XN285H1SxZvcrb2x5QvxYIS35ySus=
Subject key identifier:   17:E4:50:21:82:3B:99:17:8F:44:B6:F9:67:08:96:15:07:71:A7:DE
Authority key identifier: 3D:E4:59:8E:21:73:65:01:A7:39:44:C1:07:11:4C:85:0C:7D:8B:09
Certificate issuer:       /CN=3de4598e21736501a73944c107114c850c7d8b09
Certificate serial:       0196CB0605AF338ADB5ACEBBE65018E03500
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
Manifest number:          1262
Signing time:             Tue 13 May 2025 19:01:31 +0000
Manifest this update:     Tue 13 May 2025 19:01:31 +0000
Manifest next update:     Wed 14 May 2025 19:01:31 +0000
Files and hashes:         1: PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl (hash: kUImejx8pHhTliIdhnZn0uyR8H5mCnYB1BSYrx8lsP0=)
                          2: UMngkvwaRjIoN5eBBlFi84sCo3g.roa (hash: a8obNUaAoXy5QpQYwb8sCwj2NbkRTv7ZWZ/OkpJ4CGg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cb:06:05:af:33:8a:db:5a:ce:bb:e6:50:18:e0:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3de4598e21736501a73944c107114c850c7d8b09
        Validity
            Not Before: May 13 19:01:31 2025 GMT
            Not After : May 14 19:01:31 2025 GMT
        Subject: CN=17e45021823b99178f44b6f9670896150771a7de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f1:7b:39:9a:82:ab:f1:21:33:f1:63:de:23:
                    06:76:da:ca:06:33:8f:18:98:c5:84:84:d5:56:f9:
                    1e:44:12:12:d0:0b:75:16:89:6e:58:8c:0d:9f:5d:
                    3a:40:59:95:0a:4a:bb:e8:e4:cc:fe:14:a2:29:0c:
                    75:e4:46:63:98:86:2a:c7:aa:6c:f8:e7:71:ef:f9:
                    f1:1f:b3:e5:5c:24:56:04:12:6e:c9:8b:2b:c4:c4:
                    51:15:ec:e8:ec:e4:62:ed:49:d9:a1:a3:29:61:d4:
                    df:57:68:f4:f7:35:0b:33:db:9b:24:21:37:3c:a3:
                    5e:39:0b:53:7a:8b:18:e2:2e:62:55:90:7e:63:d7:
                    21:c3:92:ab:9d:6d:38:91:81:27:74:6c:df:1d:23:
                    67:16:ef:06:16:5d:11:ac:38:42:79:6b:9e:c6:d6:
                    b6:8b:19:61:94:69:51:86:40:ed:4d:47:ed:5f:ac:
                    7e:97:0d:76:59:00:ca:7c:2e:a8:0a:de:8c:42:a4:
                    21:49:c6:98:6a:b7:f5:d7:d4:0a:6d:65:06:db:41:
                    cc:d4:71:3d:22:16:32:ce:c1:4f:4b:65:37:df:30:
                    1b:b2:6c:7e:97:04:94:e9:f7:0d:91:ba:18:b2:fb:
                    5d:40:ae:69:1a:30:46:f1:5b:93:ac:a2:cd:7f:6c:
                    92:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E4:50:21:82:3B:99:17:8F:44:B6:F9:67:08:96:15:07:71:A7:DE
            X509v3 Authority Key Identifier:
                keyid:3D:E4:59:8E:21:73:65:01:A7:39:44:C1:07:11:4C:85:0C:7D:8B:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:bb:d8:4f:ca:69:25:08:94:22:5f:cb:10:fa:bc:dd:fd:1d:
         0b:27:84:c6:2a:08:8d:12:80:1f:7d:03:16:a8:0a:af:76:56:
         59:88:b0:00:2e:15:de:24:13:a7:e7:61:2a:79:bd:28:75:bb:
         8c:af:22:2a:8b:79:72:ef:3c:23:a9:6c:59:57:6a:55:9f:6f:
         29:d8:3a:5a:79:81:3f:9f:31:f2:bf:62:00:a7:9c:ef:84:d0:
         e1:bc:4f:57:ee:8a:59:ff:7d:7b:3e:c2:72:f0:fc:11:1b:e7:
         3f:8d:68:bc:83:84:9c:b7:f9:ef:99:bf:f0:f3:1d:b7:ab:e9:
         86:7d:8d:cc:7b:e8:aa:12:e0:c0:00:2d:51:37:35:fa:51:79:
         9d:90:e8:87:c2:f8:29:c1:2d:13:1b:43:95:ad:79:07:47:c9:
         ce:03:60:e9:fc:b2:63:37:29:3b:14:2c:d8:7b:57:df:47:16:
         5c:b2:e4:77:b0:30:8b:cb:e8:22:db:1e:d2:70:c5:2a:84:6f:
         e3:54:68:fd:2c:3f:10:fe:66:98:18:73:51:74:d8:23:02:1d:
         b3:9a:fa:41:b0:07:f3:72:6c:04:b4:b1:f8:fc:38:39:a4:ca:
         c8:b5:df:67:5e:a7:e0:2a:d6:4d:86:e0:94:12:32:ae:8e:e8:
         85:73:bb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 23:41:57 2025 by rpki-client