Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
File:                     d-PCkAtZl1QoPyfztOjX9sRRCXI.mft (raw, json)
Hash identifier:          H7gIVaW4XHC+2Q1nSuqdJt1A0nJQzNC5qtEQZzW4xF0=
Subject key identifier:   E3:1F:7A:42:AF:85:B9:19:E7:54:72:9E:B8:E5:D7:F8:90:D5:1A:6D
Authority key identifier: 77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72
Certificate issuer:       /CN=77e3c2900b599754283f27f3b4e8d7f6c4510972
Certificate serial:       01967ED8CC1DB98A406857E6259C0794D4CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
Manifest number:          0C65
Signing time:             Tue 29 Apr 2025 00:00:59 +0000
Manifest this update:     Tue 29 Apr 2025 00:00:59 +0000
Manifest next update:     Wed 30 Apr 2025 00:00:59 +0000
Files and hashes:         1: 6FBdm52HrIwxns50lJrMCqThYUM.roa (hash: Fb4owa3jjdnAYqjY2HP/KocZ2u55DXUdS4g1VNhxtCk=)
                          2: 8V29SLLHHHPak0CW_pb1i9F5mpI.roa (hash: hNuKjceR9DAU4JupE05WFNYQ/cRQ1qbfm397GXwMfeU=)
                          3: NuaYdI8PAUdP5rZIDe_aHIxvDG0.roa (hash: 9p6cAT0+JvuwI2Q0k7hF6wK1Ly//dC0ShsZ9CdG4PCA=)
                          4: Y51duMvjV_OQZmOCJBSIZCmhcrk.roa (hash: Q0RhIzzfhASN7KdMAgmx0KpJTYttwJFhhPb1OGIDnNA=)
                          5: d-PCkAtZl1QoPyfztOjX9sRRCXI.crl (hash: nD/BSKONUoi7PSaw9KPIj/e785Q7NMlw2Hp1tpzP1VM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7e:d8:cc:1d:b9:8a:40:68:57:e6:25:9c:07:94:d4:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77e3c2900b599754283f27f3b4e8d7f6c4510972
        Validity
            Not Before: Apr 29 00:00:59 2025 GMT
            Not After : Apr 30 00:00:59 2025 GMT
        Subject: CN=e31f7a42af85b919e754729eb8e5d7f890d51a6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:52:98:8b:b3:b8:11:41:a9:4b:8d:eb:2c:4f:
                    21:93:f0:36:60:d6:09:9c:9a:7e:de:61:30:d8:e8:
                    3f:39:dd:54:50:a8:1b:b8:5b:fb:41:f4:55:cb:ff:
                    ca:f7:09:e6:2f:bf:e4:41:4c:fc:74:d1:3c:3e:9f:
                    84:05:84:bc:c9:bd:2f:af:3a:96:e8:2c:39:ca:77:
                    a2:b4:64:57:48:28:20:0d:b5:dc:96:1d:77:e4:84:
                    f5:42:a9:42:5e:43:c4:42:b6:0b:03:2f:78:5a:cd:
                    71:4f:1f:31:d7:58:19:b6:fc:dc:b7:3d:ff:85:43:
                    24:8c:7e:6f:6e:bf:f3:f6:42:14:56:5a:ed:d2:62:
                    ec:86:80:92:b7:6d:49:6a:32:da:c5:ee:30:24:f1:
                    12:04:a3:93:8a:26:4b:21:ca:a2:7a:ec:a5:f0:b6:
                    07:21:ca:ce:92:21:55:d6:41:69:5b:23:af:1c:ef:
                    47:fb:68:02:72:27:ee:7d:7e:b8:af:1d:15:06:ab:
                    dd:2a:fe:f9:b7:6e:ad:e9:3d:8c:c0:73:75:42:e5:
                    6c:fc:9c:fe:e9:4a:fe:97:19:6f:9c:50:fa:6a:5b:
                    6c:76:ff:30:35:ea:9f:5f:08:49:f0:d7:a2:dd:9b:
                    0c:4f:c4:82:8a:4e:ef:51:ed:87:2f:24:a6:3b:43:
                    8f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:1F:7A:42:AF:85:B9:19:E7:54:72:9E:B8:E5:D7:F8:90:D5:1A:6D
            X509v3 Authority Key Identifier:
                keyid:77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:72:c3:bf:2e:6c:da:6b:e8:f8:e0:32:1d:86:1d:8d:ee:10:
         de:aa:cb:aa:e0:8e:b0:59:c6:e6:4d:63:4b:10:e8:20:89:ef:
         60:b2:92:58:5d:fe:8e:a9:3e:01:f5:c1:00:03:ed:8e:b2:44:
         d9:8c:47:03:b2:33:35:75:62:cb:49:54:94:ad:43:41:c7:31:
         51:a3:9e:fd:90:c2:2c:c3:28:5d:5b:7f:03:29:a8:64:c5:4d:
         23:2f:7f:a4:7c:ec:77:76:6d:d5:76:d1:62:6d:cd:3a:03:d8:
         c5:2f:19:a1:a7:05:d1:65:ad:ca:d2:56:80:42:6b:19:75:be:
         c2:c1:46:bc:56:5b:81:d9:93:f3:a7:3a:ec:11:3a:ba:c7:71:
         e3:b1:df:b0:be:04:42:58:a4:67:90:3f:7e:ae:96:b0:5e:91:
         66:64:e7:0d:61:1e:6a:57:74:30:cd:46:f4:49:a2:d4:27:5e:
         81:ee:03:d3:89:d1:9f:9e:8a:a8:c0:1f:49:e5:1d:29:83:25:
         e4:6d:04:15:2e:dc:47:fc:01:3c:39:3f:f5:0e:79:cd:88:ee:
         c9:fb:b9:7b:bb:2b:a5:a0:03:80:d1:dc:77:76:89:fb:5e:18:
         45:2d:e2:cb:d4:97:04:40:e3:2f:44:b7:6c:25:31:b5:c8:7b:
         4e:6d:7e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:29:10 2025 by rpki-client