Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft
File:                     PCyFQBEUChCUfae1O7s1DzxUsz4.mft (raw, json)
Hash identifier:          kwdbmVWx4tjEwjb25c0jylCU6QDfOQgnJ1b5uS/8fnE=
Subject key identifier:   8C:7A:05:3B:35:7F:62:26:24:C8:D0:87:7B:92:06:2A:F2:ED:0E:26
Authority key identifier: 3C:2C:85:40:11:14:0A:10:94:7D:A7:B5:3B:BB:35:0F:3C:54:B3:3E
Certificate issuer:       /CN=3c2c854011140a10947da7b53bbb350f3c54b33e
Certificate serial:       0197B6A101163033DA4F35AADF6EB0316443
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft
Manifest number:          05B5
Signing time:             Sat 28 Jun 2025 13:01:34 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:34 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:34 +0000
Files and hashes:         1: NtKyDgbGesEe8awF15SqP0_3q5E.roa (hash: 5/QwTKhvWnKsc5Bc5M0m9rQLZKRH4InU93sknSCwHzs=)
                          2: PCyFQBEUChCUfae1O7s1DzxUsz4.crl (hash: PPvyiughnBYXHXkpeQMB6H0pBy5xdq8DlrjLPT/mJFU=)
                          3: WNJuWEXBIip_f5G2ObX5HLas-6I.roa (hash: boUS884QFMK9V7SQvxUAnalpgEFhwVVzKbrcjkzFqDQ=)
                          4: hUje3HFTF6f1DLkrPmJro0BJv84.roa (hash: kR65nTDvmrqvVF+VEljMTGu7vMzX0EU8UFNtyZDk3w8=)
                          5: i63lT8gZ80ZQnoxkIIq3_XH-qGo.roa (hash: u7r5j40jao9jpdMvyg5KQYNAFcKXMkC3d+QE0v1EduY=)
                          6: ibMRX0UskUZ1fKV63OderSyFGp4.roa (hash: eA4MV5O6XQVzVYEe9jvmxnmU146aKwd4Gt1iGOJqAdY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:01:16:30:33:da:4f:35:aa:df:6e:b0:31:64:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c2c854011140a10947da7b53bbb350f3c54b33e
        Validity
            Not Before: Jun 28 13:01:34 2025 GMT
            Not After : Jun 29 13:01:34 2025 GMT
        Subject: CN=8c7a053b357f622624c8d0877b92062af2ed0e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9b:6b:a3:7b:12:e4:e0:84:f3:29:cb:42:e0:
                    e0:5a:b5:70:74:c9:1e:d6:4e:d2:cc:29:8a:24:17:
                    94:36:0b:ef:70:eb:3c:71:0b:99:1a:58:9e:00:3b:
                    2e:c3:67:48:c1:6a:80:4a:d3:94:a7:c8:1d:21:0a:
                    46:73:bc:31:03:b1:f9:1c:c6:77:79:ac:ec:56:1b:
                    17:69:d3:9c:f3:5f:1d:2f:a1:ef:83:8c:c2:4f:18:
                    d0:19:43:5e:2f:26:66:8b:75:77:ae:45:2d:28:3b:
                    39:2b:af:22:71:0a:90:db:f6:3c:be:25:54:a3:7e:
                    07:7e:3e:6e:1b:8e:2c:0a:68:a9:3b:12:cf:f0:4d:
                    8c:4a:d1:f3:81:5a:d4:4b:05:fb:1d:12:5f:4b:7b:
                    65:9c:96:4d:ad:7e:67:f7:85:75:cf:dc:25:4a:4e:
                    73:35:50:b6:c7:19:a8:c6:b9:93:69:0d:2e:9e:e5:
                    e4:30:78:1c:98:7a:ea:99:37:82:61:7a:e8:0e:45:
                    be:7e:04:ec:e3:eb:6c:ca:bf:c8:fa:61:e2:e1:59:
                    1b:71:e6:75:ba:e4:bc:42:64:b9:67:04:c2:77:f6:
                    d5:6f:60:1f:3f:1a:e6:f4:1c:78:d2:41:4a:ce:36:
                    b3:f9:58:c1:3b:aa:c7:4c:32:94:cd:21:35:64:2a:
                    c0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:7A:05:3B:35:7F:62:26:24:C8:D0:87:7B:92:06:2A:F2:ED:0E:26
            X509v3 Authority Key Identifier:
                keyid:3C:2C:85:40:11:14:0A:10:94:7D:A7:B5:3B:BB:35:0F:3C:54:B3:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:83:fb:1c:17:ee:44:6c:d5:7c:72:f6:c4:f2:5f:65:5d:31:
         29:df:90:36:34:bb:7b:f7:4d:33:f2:69:a2:4b:85:cd:62:8b:
         c9:9d:6c:58:37:df:f5:01:86:84:2f:ba:ae:74:5c:1c:fb:22:
         4f:6d:7c:d4:c8:e9:bd:7f:16:be:c6:13:54:ee:1d:f5:63:b2:
         60:a0:3c:72:d4:9d:cf:dc:76:52:19:4a:e9:de:14:b9:27:02:
         5c:d6:11:29:b4:f6:d7:19:0b:28:c7:7a:23:6d:30:b2:c7:a2:
         54:07:80:ce:3a:a8:7a:e0:fb:94:ae:8f:15:f8:c3:30:77:f9:
         d2:9a:28:39:55:46:87:4a:a4:7b:e4:04:4d:34:36:7a:48:17:
         44:b5:6f:b8:cd:02:d6:ea:cb:d0:98:24:0d:4b:b4:a3:bc:96:
         76:ae:e2:05:7a:b3:eb:4b:2a:6d:74:da:e8:11:f2:26:35:fe:
         b3:6c:93:71:07:76:24:8d:4f:36:03:20:7c:5e:4e:03:aa:49:
         dd:d7:62:6b:bc:41:a6:f2:55:f3:29:c0:30:3a:cc:20:6e:a3:
         4c:8e:16:ad:24:03:9f:25:ee:0c:68:1c:93:dc:60:52:f9:51:
         e3:e2:d6:5b:39:73:ad:b7:99:9a:b8:fa:91:e4:15:00:3c:4b:
         f3:63:e6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:20:21 2025 by rpki-client