Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
File:                     p2_PrZZq5-gXHPzibbP2V3bSb-g.mft (raw, json)
Hash identifier:          uhIaJJ7mCSlxTnnebP9qmzqTjV6IHslUvcXhPqzCTH0=
Subject key identifier:   3C:1C:4B:25:64:F6:B1:BC:3C:57:BA:B6:8D:BE:A9:C1:2F:0B:19:A0
Authority key identifier: A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8
Certificate issuer:       /CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8
Certificate serial:       019772647299D8EAE63182F69C115259210D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
Manifest number:          067F
Signing time:             Sun 15 Jun 2025 07:01:14 +0000
Manifest this update:     Sun 15 Jun 2025 07:01:14 +0000
Manifest next update:     Mon 16 Jun 2025 07:01:14 +0000
Files and hashes:         1: YH9rgvwa_c5tkfoIds2w3LcyxQU.roa (hash: O5b96K5UqDPwtmiTY4ipuOfWppIds6W4j/eFK50+Z/0=)
                          2: p2_PrZZq5-gXHPzibbP2V3bSb-g.crl (hash: p6I5ho6LBATTlHligzS106Df7z2y5uJIF4dplpcSDBo=)
                          3: uu0B_lRFC2FFj-k7cmY35eNucIA.roa (hash: 45P7jNAbs5p5AqN2mETxLIaycHEKNPfSa4PeOiqxcQ4=)
                          4: vi8z9iHTOaB2FWHQdJejTeAcw5Y.roa (hash: TDy4p0/0R2wjKaBRPb/eq3sprSVIkaJesmw7dyJ2VEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:72:64:72:99:d8:ea:e6:31:82:f6:9c:11:52:59:21:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8
        Validity
            Not Before: Jun 15 07:01:14 2025 GMT
            Not After : Jun 16 07:01:14 2025 GMT
        Subject: CN=3c1c4b2564f6b1bc3c57bab68dbea9c12f0b19a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2e:68:0b:a2:29:5c:e7:1d:b6:ea:68:e6:c6:
                    1f:fc:31:69:a0:07:60:06:e0:10:4f:0f:fe:34:e3:
                    20:8a:c3:c5:08:fa:70:11:86:45:bc:d6:eb:56:7b:
                    b2:93:ea:a1:99:94:50:3f:3e:ff:fc:91:c6:61:20:
                    0e:6c:ba:5c:f8:5a:c8:39:e0:f7:a0:31:3a:02:9c:
                    37:44:8c:7b:d6:59:31:69:c5:51:a2:9b:25:2d:81:
                    cd:88:d2:6a:4b:2f:18:27:f3:37:3e:a6:65:19:17:
                    87:04:49:78:e1:31:8a:ec:63:a6:7d:1f:88:1b:33:
                    cb:00:36:4c:a6:b0:1c:8b:a2:83:96:e6:11:0f:ac:
                    8b:6a:75:55:32:39:16:91:fe:d0:93:3e:28:82:96:
                    64:e1:b3:5a:f7:ac:d8:28:ae:87:c0:34:ff:48:18:
                    47:da:10:ea:14:f5:76:5a:99:41:7b:00:d4:03:e1:
                    34:7f:c9:30:87:18:93:a5:6e:33:2b:69:0a:7d:cc:
                    e1:ee:d5:d4:18:81:c3:ee:4c:4d:86:82:4b:7b:e5:
                    84:59:51:8f:27:76:1b:f2:bf:9c:0e:da:e4:83:8c:
                    fd:be:1f:a8:1e:5a:50:fa:d3:d6:6a:e8:fd:04:e1:
                    87:bd:9b:77:ee:bb:52:34:9b:9f:cb:0c:f2:87:19:
                    13:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:1C:4B:25:64:F6:B1:BC:3C:57:BA:B6:8D:BE:A9:C1:2F:0B:19:A0
            X509v3 Authority Key Identifier:
                keyid:A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:28:aa:a0:74:79:8e:47:2a:47:ac:3d:dd:f4:8a:c9:3a:e9:
         cd:ac:1b:aa:0d:ce:80:4a:05:d1:09:e5:08:bd:f3:1d:2b:3b:
         64:f9:89:a7:e1:44:6c:0d:3c:5d:be:b2:5b:e5:81:4a:60:49:
         a7:19:e5:1d:d2:e5:72:be:f0:85:f9:9c:14:dd:14:c4:24:d7:
         04:a2:7c:a5:82:10:56:94:b5:06:63:ed:b9:7e:ca:b6:b1:8c:
         1c:fe:b9:fa:28:24:73:c0:30:94:f5:99:ca:2e:55:67:6a:ca:
         f1:3c:a3:21:09:c6:8e:67:77:39:77:04:50:23:05:96:b7:61:
         be:23:0b:b7:93:e3:6d:47:84:d5:cf:42:bd:5c:f6:47:24:64:
         42:5f:97:ce:7c:f5:92:3c:7b:3a:00:6d:71:3b:27:f3:3d:54:
         5a:4f:3b:ed:48:3a:ed:36:94:0a:dc:0b:65:c6:0c:f0:7a:51:
         93:fa:6e:33:c2:a6:40:8a:84:d1:a3:83:31:90:88:42:d6:c6:
         13:55:3c:00:ee:82:09:16:56:23:25:6c:5d:6b:2a:76:bf:1a:
         5b:53:3a:34:cf:82:9e:89:6c:8b:2f:84:d1:76:a3:28:bd:6d:
         19:4b:cd:ea:cc:f6:cc:38:cb:87:f1:2b:33:6f:7d:f1:37:bc:
         33:ae:5d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:34:59 2025 by rpki-client