Manifest

$ rpki-client -vvf chloe.sobornost.net/rpki/uplift/3J7LD7cQIEluO8IkDdKeQgjB6ig.mft
File:                     3J7LD7cQIEluO8IkDdKeQgjB6ig.mft (raw, json)
Hash identifier:          uXdE7eA1jvodo9reUTySSCTwsgHkwP7U8sJSZkuSVkE=
Subject key identifier:   C6:32:87:CD:F2:3A:D0:69:AB:94:EC:D4:06:DE:02:86:5B:B9:81:D0
Authority key identifier: DC:9E:CB:0F:B7:10:20:49:6E:3B:C2:24:0D:D2:9E:42:08:C1:EA:28
Certificate issuer:       /CN=dc9ecb0fb71020496e3bc2240dd29e4208c1ea28
Certificate serial:       0AE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3J7LD7cQIEluO8IkDdKeQgjB6ig.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/uplift/3J7LD7cQIEluO8IkDdKeQgjB6ig.mft
Manifest number:          0ADA
Signing time:             Thu 07 Aug 2025 00:15:12 +0000
Manifest this update:     Thu 07 Aug 2025 00:15:12 +0000
Manifest next update:     Thu 07 Aug 2025 06:15:12 +0000
Files and hashes:         1: 3J7LD7cQIEluO8IkDdKeQgjB6ig.crl (hash: hJqG9fJdbHlMV7DBel8RBwZgSZF8ydKiVidSNgf3qME=)
                          2: Uw8AystMXoSVYxl4YDX3LWDVRQU.roa (hash: kl4ALDSDxVMjmw6VvdXpJlvnocyw+1Zrhihnea/yv3E=)
                          3: j3OXhalFi3CwIfuIU57yW6G8a3M.roa (hash: uioABHKSmnQC91rLGSR3m3Dqwm1iJYGnLo8Cnh3zCLc=)
Validation:               OK
Signature path:           rsync://chloe.sobornost.net/rpki/uplift/3J7LD7cQIEluO8IkDdKeQgjB6ig.crl
                          rsync://chloe.sobornost.net/rpki/uplift/3J7LD7cQIEluO8IkDdKeQgjB6ig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3J7LD7cQIEluO8IkDdKeQgjB6ig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 06:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2791 (0xae7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc9ecb0fb71020496e3bc2240dd29e4208c1ea28
        Validity
            Not Before: Aug  7 00:15:12 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=C63287CDF23AD069AB94ECD406DE02865BB981D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ee:6c:10:e3:ed:cd:2e:2a:28:8c:66:e3:aa:
                    b9:4e:45:2b:44:3c:87:c0:8f:3a:15:f9:16:82:5f:
                    18:ae:ad:a9:fb:35:02:41:0a:02:d7:35:10:ae:8d:
                    36:e7:a2:09:72:ba:af:e8:19:27:c0:1b:7d:62:84:
                    50:ea:c9:c2:8c:08:58:69:cd:fe:b1:44:ac:74:f7:
                    4a:d8:1f:1e:4d:e5:eb:68:36:ad:f4:b6:ac:44:14:
                    1f:2d:c0:ad:33:a2:c2:7d:72:da:92:44:f7:8d:e1:
                    a3:27:48:e4:92:47:89:6f:51:07:6e:01:98:95:99:
                    4b:51:dd:78:db:e6:95:66:a7:e3:82:5d:b5:7f:c6:
                    68:ea:d2:35:24:cf:50:23:23:1d:66:0e:3c:bc:dd:
                    81:6d:05:6e:70:0f:9f:e2:f9:9d:bd:8d:12:24:dd:
                    ae:20:1f:66:cc:41:16:0e:fa:2c:7b:98:69:0d:ef:
                    ab:62:8b:cc:23:d1:26:12:20:d4:ec:48:d9:6f:06:
                    ef:05:70:bd:16:5c:65:81:16:94:51:b4:24:b1:c4:
                    1b:a8:04:1d:ed:41:5a:5b:c9:12:da:32:c2:b3:a9:
                    99:3c:ae:b2:f7:7e:e4:2a:c2:4e:0b:5a:e6:61:51:
                    ea:50:0b:95:3c:86:85:81:aa:b4:af:a4:3e:2a:ab:
                    d1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:32:87:CD:F2:3A:D0:69:AB:94:EC:D4:06:DE:02:86:5B:B9:81:D0
            X509v3 Authority Key Identifier:
                keyid:DC:9E:CB:0F:B7:10:20:49:6E:3B:C2:24:0D:D2:9E:42:08:C1:EA:28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/uplift/3J7LD7cQIEluO8IkDdKeQgjB6ig.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3J7LD7cQIEluO8IkDdKeQgjB6ig.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/uplift/3J7LD7cQIEluO8IkDdKeQgjB6ig.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:4e:cb:84:b3:7a:9d:af:b0:d4:a9:a1:63:72:ce:80:43:55:
         a1:ed:43:48:58:0f:a5:db:c7:dc:67:42:6c:39:58:da:0c:3d:
         38:6d:c5:7e:19:fe:57:c4:98:9d:df:ac:41:e2:4f:c1:63:92:
         7e:7e:6a:e1:6e:1c:b4:0d:ed:e6:e5:d7:91:67:1e:84:10:f5:
         07:87:b4:18:6c:4d:25:33:5b:ee:22:7d:60:db:9b:15:82:00:
         29:dc:13:4f:2f:42:91:3a:41:4e:35:30:31:c9:b2:94:d8:2b:
         51:fc:73:8d:86:6f:56:2d:80:de:1a:e8:bb:86:9a:59:19:3a:
         5c:96:07:f0:24:46:16:69:10:cf:ee:7e:98:2f:be:31:02:6d:
         71:9e:df:11:12:2a:5a:ae:27:14:28:4c:76:d7:e9:b5:48:42:
         95:35:16:2d:1d:35:0e:8e:c6:ad:b8:17:b7:04:8b:8a:b8:7d:
         a6:e6:62:0f:a4:e4:82:9c:cd:bb:2f:16:ff:c3:a5:bb:b2:da:
         87:a3:e9:04:c0:c6:d7:1a:fe:5b:ec:0f:2d:51:b8:44:a9:f6:
         ae:0b:30:65:04:af:29:d3:9e:87:08:98:36:c2:4b:61:65:b9:
         02:f9:b9:59:73:bb:d6:0d:48:f8:1b:fc:61:80:55:6e:ab:88:
         93:d1:b9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:27:35 2025 by rpki-client