Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
File:                     MduEfR2x4LLCwlUCIQ_1pxmWehk.mft (raw, json)
Hash identifier:          O/mSENXkt5Q8a1F/QbaowqIUmrVNA/bjxhXUZhXVUW8=
Subject key identifier:   30:1B:2A:55:B4:83:32:57:07:7F:D4:C7:07:25:2E:6C:C3:5B:57:76
Authority key identifier: 31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19
Certificate issuer:       /CN=31db847d1db1e0b2c2c25502210ff5a719967a19
Certificate serial:       0197B9D945D2C1C1C639F2BCB1D9A8E300F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
Manifest number:          0E3E
Signing time:             Sun 29 Jun 2025 04:01:53 +0000
Manifest this update:     Sun 29 Jun 2025 04:01:53 +0000
Manifest next update:     Mon 30 Jun 2025 04:01:53 +0000
Files and hashes:         1: 0IHmyTelW8zpO-_QdR9UfSEkXAI.roa (hash: UlYSOxczUbkdfKJ9miYaE+QEa9fb9mQhLOlffEgcsoY=)
                          2: MduEfR2x4LLCwlUCIQ_1pxmWehk.crl (hash: l4YEcK5YUEMyj6fHRZ1CjGGwO7CVYJ+ZNJ/gkC8Iulk=)
                          3: PQvHlqxPOZ5EcVf6KsUmqrHycoQ.roa (hash: 3ksFdFv/Fa3gpXmdL0Lg1ZLkcfv0kVJRQQQ2mO5ywLk=)
                          4: ahJNP8kQoasOGfOn59FuyopzzTg.roa (hash: 6vRaJqB5sPcJZ3/fvcKuSD1RiGeRJgHPqC0FIBy6qGg=)
                          5: al6s6WgAHfcCaxm7dnRoKhGccgc.roa (hash: dELh70vEBgRpyjJwV+u67ZFF6OWlxJRy1hJNSwq3TqA=)
                          6: cz_i6inXtcUIjcIN9oJWb2HinvM.roa (hash: PQ0BLB4sI2B91vehL/dzDGr3GUpFGQqMElA5h/dx7n8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:d9:45:d2:c1:c1:c6:39:f2:bc:b1:d9:a8:e3:00:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31db847d1db1e0b2c2c25502210ff5a719967a19
        Validity
            Not Before: Jun 29 04:01:53 2025 GMT
            Not After : Jun 30 04:01:53 2025 GMT
        Subject: CN=301b2a55b4833257077fd4c707252e6cc35b5776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4a:86:ac:4c:3d:38:60:b2:4b:06:8a:94:1e:
                    f4:37:f3:10:f7:0a:61:eb:02:69:10:bb:40:d4:b3:
                    52:bb:48:b1:c0:d7:d1:d1:c4:ed:95:b1:d3:12:54:
                    2f:dc:0d:99:e8:fd:49:f2:e5:d6:6d:e2:06:78:e9:
                    43:11:71:9c:3c:95:a1:69:87:be:ca:42:63:1d:be:
                    05:ff:a5:f9:a8:05:2c:bd:71:5b:a3:48:ca:75:40:
                    87:04:0d:08:bf:2f:77:d0:b5:a4:52:8f:f6:1d:d2:
                    ca:79:66:32:a4:9e:8b:71:ea:bc:d2:cb:15:c1:a0:
                    e2:2d:50:91:6e:b7:ef:2c:25:a4:e7:9f:a2:38:72:
                    80:4d:7c:26:02:a2:da:6a:d4:53:78:68:33:7e:3f:
                    3c:f6:63:0e:9d:95:99:37:e2:ce:dc:81:2b:c1:41:
                    a3:a9:56:7d:0b:10:b5:f9:be:5f:b6:8e:9b:a3:08:
                    6e:10:2b:4c:f1:49:91:74:f5:fc:f5:70:8a:73:5f:
                    75:82:08:f9:66:f6:01:f8:d1:53:dd:db:0e:2f:57:
                    76:38:4b:36:14:3f:e4:78:aa:03:3f:45:1e:80:a9:
                    0c:57:d6:9c:4f:72:36:1a:ca:6f:3f:9e:ec:97:6a:
                    b2:08:1c:e8:80:d3:25:8a:f2:6d:29:75:4a:68:bd:
                    bd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:1B:2A:55:B4:83:32:57:07:7F:D4:C7:07:25:2E:6C:C3:5B:57:76
            X509v3 Authority Key Identifier:
                keyid:31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:e5:6f:76:db:71:09:27:e8:55:5d:a9:b9:10:a1:44:28:5b:
         ef:39:b9:18:8d:f9:f6:ca:ac:ef:25:65:90:28:3a:df:e9:64:
         5f:e3:6e:76:92:2f:2c:2e:0f:eb:ff:c2:7d:68:26:fb:3c:c2:
         ef:2c:df:21:ff:3a:26:1e:c2:df:81:92:5f:7c:7c:80:4c:10:
         fc:65:38:81:3a:c1:b7:5d:67:8b:68:50:19:81:68:be:01:2f:
         89:51:16:c1:42:f4:4c:c8:9d:24:54:46:ee:79:7e:b0:9a:ae:
         e3:d4:14:41:2b:ea:f6:19:0b:85:09:36:89:52:90:b7:e9:ea:
         90:3f:ec:79:bc:7c:63:a4:76:4c:05:24:c6:ee:c2:9c:8f:25:
         53:41:48:5d:42:2a:e6:86:c0:bb:ca:eb:66:1b:bd:89:33:82:
         fa:cf:09:41:7f:83:87:45:38:2d:94:4a:d3:6e:38:6c:66:ed:
         71:df:45:36:db:e5:83:7c:d7:80:62:de:c6:9f:5b:c8:92:fb:
         c5:ab:10:9f:3d:cc:6d:12:ec:95:c8:41:47:88:5f:f7:8a:ca:
         2b:1f:02:43:ab:75:00:42:e1:ab:ab:4d:4a:ac:80:2d:6f:97:
         8e:19:76:cc:5a:d1:47:f6:97:e5:63:9d:81:78:d3:30:0e:18:
         31:d2:a8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:01:00 2025 by rpki-client