Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
File:                     SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft (raw, json)
Hash identifier:          dFVH2lCxe2ITIP3rfLzhzSDn5XQH9zCvt6evCKdlzWU=
Subject key identifier:   F0:4B:59:77:FD:3B:56:7B:3F:E3:09:93:41:2C:76:7E:B0:4E:EF:6E
Authority key identifier: 49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65
Certificate issuer:       /CN=4940cf778dd9817657cd8d4feedd423d46d1a965
Certificate serial:       0197B8907001E350BB5711EA4E888510873E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
Manifest number:          0F69
Signing time:             Sat 28 Jun 2025 22:02:42 +0000
Manifest this update:     Sat 28 Jun 2025 22:02:42 +0000
Manifest next update:     Sun 29 Jun 2025 22:02:42 +0000
Files and hashes:         1: SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl (hash: EBsrQ84gOrrKFpw7UVtW9nLA/jn6L6U5SQeKeRYfnzE=)
                          2: loSCgoJ4hKRK0jtudHBRcmTN9d4.roa (hash: URCezxxo5xLAhnqyK4BChNtSek6R2eu9KtpYGfArpvI=)
                          3: nggdnA4mAiKLiw6UHtzESJ0klE0.roa (hash: pHSsRZvm29dKmGcn5inpqu8Q9t703aQ9huVnyG7i37U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:90:70:01:e3:50:bb:57:11:ea:4e:88:85:10:87:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4940cf778dd9817657cd8d4feedd423d46d1a965
        Validity
            Not Before: Jun 28 22:02:42 2025 GMT
            Not After : Jun 29 22:02:42 2025 GMT
        Subject: CN=f04b5977fd3b567b3fe30993412c767eb04eef6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7b:60:9f:50:24:76:43:3c:d0:b4:32:dd:59:
                    20:d7:33:15:99:7c:94:7a:56:e2:1b:d3:de:1a:5d:
                    22:cd:e2:00:2c:83:1f:3d:6e:41:59:71:46:72:81:
                    ea:a8:ad:0f:f3:28:42:e5:0b:4a:81:25:a4:7f:0f:
                    ea:39:1d:04:59:18:77:db:54:e9:ce:ac:d4:b2:f7:
                    59:dc:cf:67:52:3b:d9:d1:2a:40:98:19:4a:39:54:
                    de:ee:63:33:ad:3e:3b:0f:db:9e:3e:0c:a1:80:60:
                    ad:32:a8:fe:33:d3:e6:7f:7a:df:e1:39:b7:fc:be:
                    5b:90:f0:c1:74:7e:b1:ca:40:ce:77:50:97:22:1d:
                    f5:07:76:50:48:64:ad:03:4e:23:69:05:9f:39:8b:
                    20:11:c9:2a:2a:c2:df:5c:03:5d:5c:99:bc:c4:ef:
                    14:1f:5a:18:23:92:64:36:bf:50:e0:c5:98:33:a8:
                    57:14:a4:55:d7:c4:35:4f:de:61:b8:41:91:41:92:
                    de:78:94:83:ac:d8:e7:96:20:0b:1f:d0:5e:90:91:
                    f7:de:83:d3:c9:d3:ab:ff:dc:cc:3d:e3:0a:cd:13:
                    1a:76:cb:78:8f:76:3a:4c:4e:86:6b:06:1c:6f:28:
                    7e:c4:79:49:1c:7b:95:f6:b3:be:b3:ca:ba:29:99:
                    84:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:4B:59:77:FD:3B:56:7B:3F:E3:09:93:41:2C:76:7E:B0:4E:EF:6E
            X509v3 Authority Key Identifier:
                keyid:49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:c8:af:0b:51:f5:d6:cc:eb:64:3f:0d:b2:40:f0:72:b8:ad:
         02:c1:86:2e:b1:43:5f:d4:a4:c3:e1:cf:5f:ff:6a:25:87:de:
         7e:fe:30:8a:3d:60:0f:b7:69:5d:5d:fb:18:0e:aa:0c:39:1b:
         19:2c:4d:7f:45:f9:7e:c6:c8:92:1a:63:f5:c8:8a:85:ed:a3:
         f8:8c:67:0a:20:06:22:d1:5f:0f:0b:7b:ca:62:bf:06:f4:4b:
         4b:9e:c5:4d:47:75:61:b2:05:59:b5:c0:ee:76:7b:a7:6f:13:
         2d:d0:a1:06:d8:27:0b:d4:17:67:b9:c0:46:ac:a7:d3:39:66:
         ba:0e:65:f5:61:83:40:f4:1a:23:18:85:16:a2:b5:da:ea:3a:
         18:5e:81:4a:24:06:e3:51:67:e7:3c:35:8d:ec:fb:36:60:2e:
         0f:85:ff:f0:9f:db:f5:d8:2d:b4:b0:87:10:73:58:b7:52:b1:
         19:19:c8:04:b0:56:7e:4a:66:68:e7:45:e7:66:41:1b:11:a8:
         98:e8:05:9e:44:93:f3:39:02:1a:1f:1a:e5:4e:c5:81:59:9c:
         3b:ca:90:88:46:91:65:5b:13:3c:f5:73:70:09:67:eb:3b:4f:
         73:e8:58:f9:c3:36:9d:b6:eb:eb:2d:f4:00:f0:62:fe:f7:a9:
         ec:67:47:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:02 2025 by rpki-client