Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
File:                     pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft (raw, json)
Hash identifier:          hF5tFZ/kmtmGwyDsGpX2WDlOAOqT7oDJW7oygZc0kkU=
Subject key identifier:   B7:99:DC:85:98:68:65:A0:3F:4C:99:03:93:D5:E1:34:BC:B8:66:B0
Authority key identifier: A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F
Certificate issuer:       /CN=a634878281144a46a856003d622f6141ea4e006f
Certificate serial:       0197CBDF3B85CA9C6587B50C30C649A1719A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
Manifest number:          15C3
Signing time:             Wed 02 Jul 2025 16:01:33 +0000
Manifest this update:     Wed 02 Jul 2025 16:01:33 +0000
Manifest next update:     Thu 03 Jul 2025 16:01:33 +0000
Files and hashes:         1: BC9YAXepVvBWb0SpmFLnGsiu_0U.roa (hash: aM6wNA8MxfdfUppHaLmRAdGV0kYIIUvP9jpBwEyPjpo=)
                          2: _XoxeAXZ_0NOSgriyXyYImr8sp4.roa (hash: 95zz7gDtzubb5S5SZ2yFR8QhWyDigdhIQZqm7xDPB7s=)
                          3: pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl (hash: flobPE+G6gZ6cS7qaO7HA7W0znVuDH1lQYIyvIf1kWU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 11:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cb:df:3b:85:ca:9c:65:87:b5:0c:30:c6:49:a1:71:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a634878281144a46a856003d622f6141ea4e006f
        Validity
            Not Before: Jul  2 16:01:33 2025 GMT
            Not After : Jul  3 16:01:33 2025 GMT
        Subject: CN=b799dc85986865a03f4c990393d5e134bcb866b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:91:09:c5:8f:92:4a:aa:cf:ff:b1:ba:4f:60:
                    d1:ba:86:9d:ea:e0:16:da:2a:c8:12:2f:f6:71:d5:
                    23:6d:72:90:48:0e:e9:ab:32:f7:95:92:2f:72:01:
                    5e:ad:6b:82:40:48:d4:6a:d8:b2:15:fc:fd:4e:4f:
                    ab:bd:63:30:84:05:72:cd:79:49:33:bf:71:e3:16:
                    14:42:2d:44:21:76:81:ad:65:2f:bc:b5:f7:83:f9:
                    4e:25:da:c1:e3:bb:a4:b0:65:7f:e6:e0:12:32:f8:
                    85:fd:87:e5:bf:1b:b2:d0:6d:9f:3d:ae:ab:5b:17:
                    e6:4a:40:3d:e7:40:94:a9:72:83:fc:80:e5:be:02:
                    eb:67:78:32:59:d5:cd:be:25:fb:0d:9b:0e:06:79:
                    e6:7b:34:ff:89:05:4e:51:52:86:3e:d1:b3:00:bf:
                    f9:2e:66:de:e0:a8:7b:53:f4:a5:7f:5f:5a:ec:4a:
                    6b:bb:f4:75:60:c1:b1:f5:20:e3:6c:f0:f6:95:5e:
                    c9:4d:7c:a6:e9:f3:b5:77:76:36:d1:80:d1:a1:bf:
                    e7:55:d9:d9:04:e4:f8:3b:ec:fe:7a:e6:5b:27:bf:
                    fb:95:85:99:4f:60:0b:9b:63:da:56:a2:b1:48:7e:
                    4a:ec:ba:38:d0:0c:e6:0c:12:6d:d0:dd:4e:fa:fd:
                    6f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:99:DC:85:98:68:65:A0:3F:4C:99:03:93:D5:E1:34:BC:B8:66:B0
            X509v3 Authority Key Identifier:
                keyid:A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:75:17:c7:ba:4f:c1:06:8f:c1:24:8a:40:b4:15:4d:19:0b:
         e6:ed:8a:79:64:b2:6e:39:9e:f3:a8:47:7b:a8:71:31:12:59:
         8f:f3:cf:a5:68:04:5d:57:f2:a6:15:e7:e4:cb:f6:10:a3:c9:
         e9:4b:1e:9d:42:83:96:77:ad:87:11:03:07:ab:ac:74:0a:3e:
         81:54:17:42:3c:58:01:10:21:8b:a5:1e:4a:1a:c3:fa:12:da:
         55:ab:33:6d:f8:d3:2a:03:5b:19:20:37:50:c6:a4:fc:18:0e:
         be:02:8e:ce:1b:23:10:cc:e5:f5:92:e6:58:7f:15:cb:25:30:
         e4:2c:fd:74:75:f4:2a:92:da:29:c2:5e:c4:58:99:21:0a:86:
         ac:c9:f9:f0:96:e2:36:8e:95:29:52:35:02:c5:5f:4f:fd:6d:
         10:8c:58:e7:95:b6:0d:32:48:3d:15:50:ea:79:15:47:6f:dd:
         ea:dc:d7:59:8b:74:82:35:31:6b:13:21:1e:38:4c:70:27:51:
         a9:8a:ec:d8:97:f3:ea:06:97:cb:3b:f9:1e:1f:c7:88:64:88:
         ce:c3:fd:a9:35:26:d3:03:d2:20:01:e5:4c:dc:a9:97:4d:b5:
         ae:c1:73:27:16:c6:b8:cb:f0:9b:d8:f0:f3:b7:07:a0:ad:7e:
         41:7b:96:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:57:56 2025 by rpki-client