Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.mft
File:                     fbwuyjJHd9dL8uc8FbDMf_PudaI.mft (raw, json)
Hash identifier:          x1gRhiHj+Y335ciu6/llpJPtD1MmUPLq5T3rjyusMKc=
Subject key identifier:   40:50:C7:20:49:73:A6:FC:F2:B6:86:26:69:CF:17:84:E8:F6:19:35
Authority key identifier: 7D:BC:2E:CA:32:47:77:D7:4B:F2:E7:3C:15:B0:CC:7F:F3:EE:75:A2
Certificate issuer:       /CN=7dbc2eca324777d74bf2e73c15b0cc7ff3ee75a2
Certificate serial:       0197B9D8FB3EF903F61F82C8BD4FA11F8AEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fbwuyjJHd9dL8uc8FbDMf_PudaI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.mft
Manifest number:          0CA2
Signing time:             Sun 29 Jun 2025 04:01:34 +0000
Manifest this update:     Sun 29 Jun 2025 04:01:34 +0000
Manifest next update:     Mon 30 Jun 2025 04:01:34 +0000
Files and hashes:         1: 1M64bp2D6OoninKtd2dTV1Hn7lI.roa (hash: gBHtNRumJYHeajotR/1OOcz7o/b7zA7upFunHXmsr5M=)
                          2: fbwuyjJHd9dL8uc8FbDMf_PudaI.crl (hash: rCf5CXTUrpbQH1Al2GyYKyO3T1xcDrf1oLPJhxaJSd4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fbwuyjJHd9dL8uc8FbDMf_PudaI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:d8:fb:3e:f9:03:f6:1f:82:c8:bd:4f:a1:1f:8a:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dbc2eca324777d74bf2e73c15b0cc7ff3ee75a2
        Validity
            Not Before: Jun 29 04:01:34 2025 GMT
            Not After : Jun 30 04:01:34 2025 GMT
        Subject: CN=4050c7204973a6fcf2b6862669cf1784e8f61935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:37:3a:8c:33:56:6f:a9:45:c2:6d:ac:fa:ab:
                    fa:25:50:88:72:60:65:b6:fc:bc:8c:b0:ce:70:19:
                    e8:40:ca:f1:0e:54:58:95:67:2b:c6:d3:7e:9d:e5:
                    1f:af:6b:7a:c9:c0:e0:7a:0f:ff:6d:bb:80:14:5a:
                    50:b0:77:25:bf:e9:db:fd:06:51:28:34:3c:4d:13:
                    a4:74:61:3d:dd:dc:48:80:8e:10:34:80:3c:cb:51:
                    74:4f:7b:44:05:1c:4b:1d:85:3d:7f:88:8a:da:66:
                    48:b4:25:07:f4:ab:c6:0c:cf:4d:41:78:94:3b:9d:
                    83:20:a6:e0:bd:9e:cb:e9:35:00:12:a0:e7:09:ff:
                    af:37:61:95:7b:a0:be:15:07:ef:53:4b:34:c1:2b:
                    db:df:45:f2:60:8c:b9:27:2b:23:c3:5f:a9:41:60:
                    af:c3:0f:19:f2:51:31:61:e3:fe:b1:74:17:52:ff:
                    34:54:1e:c6:13:21:04:85:96:5f:54:8b:59:eb:0c:
                    87:df:36:13:ac:a4:94:db:ba:85:c6:53:bd:dc:05:
                    ff:9f:55:b6:06:44:a5:4d:50:6a:98:90:61:3c:e7:
                    f0:b2:52:02:cf:66:73:92:f5:1a:3f:aa:99:34:4e:
                    90:c3:5c:cf:c3:63:18:6b:8c:0c:80:72:78:5d:e7:
                    43:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:50:C7:20:49:73:A6:FC:F2:B6:86:26:69:CF:17:84:E8:F6:19:35
            X509v3 Authority Key Identifier:
                keyid:7D:BC:2E:CA:32:47:77:D7:4B:F2:E7:3C:15:B0:CC:7F:F3:EE:75:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbwuyjJHd9dL8uc8FbDMf_PudaI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:a0:0f:49:0a:24:af:f9:38:89:80:08:04:7d:f2:c0:57:33:
         09:1b:8f:c2:cf:23:74:3c:13:01:c1:c2:67:c6:7d:8b:bb:b3:
         0e:db:d6:58:58:a9:03:13:44:44:7a:9b:f5:4b:af:04:b4:10:
         a1:f8:a1:c2:f2:ea:5c:bd:1f:f1:5e:8e:6a:8e:e0:6b:c9:0b:
         bb:36:ff:71:81:6d:ad:5c:b2:99:71:fb:98:d2:4f:dc:a3:fb:
         24:ca:bd:13:b7:3c:8a:e9:0e:bd:9b:a3:7a:f6:5b:0d:ca:20:
         27:f9:cd:eb:59:d3:fd:fe:60:7c:e4:cf:ba:28:5d:ef:7a:52:
         83:1c:c5:90:6b:ba:04:25:ae:0d:75:a5:ce:f4:34:fd:14:f1:
         9c:02:d1:7c:20:91:57:da:28:04:cc:fb:f7:70:27:83:7d:96:
         ae:e1:6a:7e:b2:ba:97:14:81:74:d5:62:e4:be:e0:2c:66:79:
         ea:c0:ec:0a:e1:33:f0:a0:ee:b9:53:cb:15:1c:94:c2:cb:15:
         1f:d0:1f:f6:7a:a7:df:08:33:92:0e:4b:e6:26:b2:f3:0c:d6:
         c5:8c:5c:a8:98:b1:6a:f2:62:5a:c0:22:54:0f:e1:9c:eb:6f:
         ad:ec:15:d6:aa:e9:46:47:64:ae:b8:49:59:2e:98:63:90:36:
         8a:38:ca:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:38:53 2025 by rpki-client