Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
File:                     PQSDU4c3RT4vV_-1dJnDki6DY20.mft (raw, json)
Hash identifier:          pSD1Jm3erg16l/s/FM4cjALrq6MPeVwuDkTEQK9KQDw=
Subject key identifier:   86:DF:DA:AF:92:26:2D:E6:2D:B3:A5:FA:8D:65:2D:80:C2:ED:77:84
Authority key identifier: 3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
Certificate issuer:       /CN=3d0483538737453e2f57ffb57499c3922e83636d
Certificate serial:       0197B6A084154FF16A8A6BAF3596B67561DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
Manifest number:          14E2
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:02 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:02 +0000
Files and hashes:         1: 2kjnNcqey0OLGfySAKowHBG5Guo.roa (hash: 9jemYzIQoMUwDIBYN/+zDuFoechTYsBGwQpOaXYxFKk=)
                          2: 8jdJFfwz0f1bOSecP72_M36iRRI.roa (hash: 82Bf1Auf8nRCamjssfldTKSxot7XSbfVdi0kTqeYaRU=)
                          3: C4Wnra33s7vzTKpZqkw-dbYY55M.roa (hash: hVOornvwVn2Bg/Fh05dDWBnBXCHA01Bg7itlOVetmo0=)
                          4: DYfn4v-d9LSJeRa5vvT-XfYyk70.roa (hash: 8mWNIGwTXO4I48gUsi1UHbc5uoPvj6DJfzAi/IGU5v8=)
                          5: PQSDU4c3RT4vV_-1dJnDki6DY20.crl (hash: 6GoHYQjVXd2ylQ1bREkG4mCKdR0Ff+jp2jzJtyjUCaM=)
                          6: lSP4K3mfoxcgowofKtKedL6Fcrk.roa (hash: ejPoRQTQJw87tbzyuSoPJnPZJPT0D2gWvsWUm5z3CsU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:84:15:4f:f1:6a:8a:6b:af:35:96:b6:75:61:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d0483538737453e2f57ffb57499c3922e83636d
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Jun 29 13:01:02 2025 GMT
        Subject: CN=86dfdaaf92262de62db3a5fa8d652d80c2ed7784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:28:6a:84:47:1d:25:d7:bc:10:81:f7:f2:3d:
                    dd:af:5b:2a:44:4c:c9:51:79:a0:c2:c3:0d:4b:c3:
                    19:6f:6f:04:c7:53:45:49:35:49:63:38:11:4a:5c:
                    83:8a:38:2b:20:bc:d1:59:22:ab:20:5d:c1:83:82:
                    76:c2:6d:54:05:28:c4:47:b8:a1:03:23:2e:16:dc:
                    5d:18:53:b5:51:87:28:f9:f4:33:1d:d2:42:bb:49:
                    52:e6:ad:d5:3d:da:4b:58:72:43:28:74:19:a6:62:
                    c0:84:1e:8f:90:57:2c:01:8f:56:96:d6:88:7c:b8:
                    90:15:0d:cc:f1:68:96:e4:2b:cb:7e:2a:96:cf:8b:
                    f0:5c:07:08:65:76:2e:be:be:1d:94:bd:66:cc:51:
                    de:05:b6:e1:50:43:bd:39:f4:8d:96:8c:de:43:df:
                    ef:c0:08:e1:3d:30:a2:64:ce:ea:88:e1:3c:b8:8e:
                    16:af:8a:b5:dd:d3:af:3f:e4:8e:09:db:a0:a8:18:
                    71:23:8b:f9:e0:48:1b:30:6b:af:f7:a3:04:db:79:
                    f5:c2:af:fe:b3:74:4e:68:c3:3c:93:02:47:59:f4:
                    fb:b7:1e:f5:b2:e6:17:dd:42:6a:3b:0a:6f:9f:eb:
                    4a:65:b0:f6:86:27:45:fa:4a:25:06:83:b8:3e:e9:
                    2c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:DF:DA:AF:92:26:2D:E6:2D:B3:A5:FA:8D:65:2D:80:C2:ED:77:84
            X509v3 Authority Key Identifier:
                keyid:3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:84:48:8c:0e:00:2e:d7:0b:a3:32:6d:89:fb:8d:53:e6:4b:
         d7:6b:11:ef:69:7c:0a:6c:80:44:2b:0d:da:23:9e:50:30:46:
         b5:2c:97:86:12:91:40:79:65:b3:e2:6f:93:2a:23:64:7d:3d:
         28:b9:20:0b:20:2e:c2:d3:c7:b8:12:9b:ca:e5:a2:c3:f2:eb:
         78:6c:2c:d4:70:0a:7b:0d:2f:16:dd:71:f8:cd:20:53:72:92:
         70:ed:46:55:c3:7c:ce:a2:75:33:37:5f:f8:a7:bd:46:6f:3a:
         81:e8:b0:5d:50:a1:28:7f:e5:bd:91:50:a6:cc:1b:a3:2f:d6:
         4f:28:88:fe:52:9b:c9:9f:3b:ab:f8:26:8f:00:fd:be:ff:68:
         c0:d4:1e:e6:f4:2c:2a:34:39:19:3d:7f:2b:7e:a7:c4:0a:6e:
         6b:c7:ad:7c:8b:9a:4f:09:ea:b0:7c:8d:89:f3:d9:8f:c1:5a:
         93:61:bc:2d:a2:1d:12:5c:90:b9:70:f2:fb:fd:4c:ec:f1:ad:
         35:f4:9f:70:ff:80:0d:69:17:fd:54:98:74:9b:ee:71:ee:e3:
         a3:7b:4f:0e:cf:d4:b3:06:e6:38:87:67:c5:88:86:a3:f5:7b:
         64:87:36:47:d4:6b:fb:e6:81:83:3a:e7:f7:14:a4:cc:91:2c:
         35:30:31:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:14:14 2025 by rpki-client