Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
File:                     pPEx4-FQWNk__dtgrHCDvvidLoY.mft (raw, json)
Hash identifier:          h7hjraYOL1y6bJKRn91S48WykujCwTz811GyXT7PY9s=
Subject key identifier:   47:9E:BD:0F:6D:FC:0D:5C:E0:82:32:80:A8:3D:2A:6F:6F:5F:7F:4F
Authority key identifier: A4:F1:31:E3:E1:50:58:D9:3F:FD:DB:60:AC:70:83:BE:F8:9D:2E:86
Certificate issuer:       /CN=a4f131e3e15058d93ffddb60ac7083bef89d2e86
Certificate serial:       019873E1EC49F2BBC218DE93D743DEB47F30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
Manifest number:          08A0
Signing time:             Mon 04 Aug 2025 07:00:42 +0000
Manifest this update:     Mon 04 Aug 2025 07:00:42 +0000
Manifest next update:     Tue 05 Aug 2025 07:00:42 +0000
Files and hashes:         1: ie21omNrQcDm6s8rAnnCfP0t5RQ.roa (hash: mEaLFd1UOa9vUWrxCFXqOi9Y8DlDh7A8FeEm27sklyo=)
                          2: pPEx4-FQWNk__dtgrHCDvvidLoY.crl (hash: 6eGFVSFeMnhh5RoWWLF/D/F0PnZ5kgSCXaR25sblhSY=)
                          3: udLjQFDd9GrhrxwoxkbPJX3fBtU.roa (hash: 79a+ON6zCk0gJVeGJku3aPrCD80HhkzSEq7ZipqcJxk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e1:ec:49:f2:bb:c2:18:de:93:d7:43:de:b4:7f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f131e3e15058d93ffddb60ac7083bef89d2e86
        Validity
            Not Before: Aug  4 07:00:42 2025 GMT
            Not After : Aug  5 07:00:42 2025 GMT
        Subject: CN=479ebd0f6dfc0d5ce0823280a83d2a6f6f5f7f4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:96:3d:11:c2:eb:13:34:90:2e:63:a0:89:d3:
                    9d:77:54:af:a3:93:3b:e3:5c:bd:b0:10:de:6f:87:
                    21:2e:8d:53:9b:fa:76:55:03:a1:f9:da:b2:26:bb:
                    8d:53:9a:eb:7c:76:63:a9:2a:58:98:db:fe:45:ad:
                    45:24:0f:99:6b:4e:ae:40:a8:60:c4:96:54:e5:78:
                    92:35:ce:7b:c4:ee:ca:73:2e:71:92:b7:84:9a:a5:
                    ed:8e:7d:31:33:75:d8:2e:ae:48:c5:b5:00:0f:5c:
                    59:95:40:3a:17:b0:50:fa:b0:53:4f:0f:4b:3b:a4:
                    fe:48:44:ce:98:58:ae:9c:72:26:37:dc:5c:b2:e6:
                    e7:dd:69:52:d3:22:3c:d1:b6:21:c4:4a:28:11:97:
                    b0:f9:42:dd:bc:65:1e:86:85:32:c5:b4:8c:34:12:
                    64:d1:22:c3:3e:5e:94:16:a2:05:dc:42:01:97:26:
                    55:ef:94:c6:e1:d2:07:4d:ed:47:40:60:36:c7:df:
                    82:fe:37:ff:b4:32:42:8d:8f:76:81:96:66:e1:d2:
                    e4:73:07:d5:a1:df:c1:8a:92:ea:77:5e:73:a7:7c:
                    e7:18:f5:0d:52:e2:a7:c4:cd:c4:14:d9:1e:fc:be:
                    55:ea:7b:31:35:1e:9a:c5:ed:ed:94:f5:ad:48:6b:
                    ed:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:9E:BD:0F:6D:FC:0D:5C:E0:82:32:80:A8:3D:2A:6F:6F:5F:7F:4F
            X509v3 Authority Key Identifier:
                keyid:A4:F1:31:E3:E1:50:58:D9:3F:FD:DB:60:AC:70:83:BE:F8:9D:2E:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:ae:77:f3:8d:1f:6c:08:32:1f:e9:f6:22:02:48:cd:da:fd:
         b9:2a:b5:66:07:a6:b4:7d:8c:b0:77:af:43:31:21:fc:8b:08:
         8c:67:10:65:12:31:a4:26:d7:9b:af:e3:e3:45:98:f7:e6:96:
         26:64:b4:20:e3:90:f4:62:89:a1:de:6b:43:95:39:6e:5d:0e:
         c0:77:b0:9c:28:11:83:2b:76:a9:51:96:01:85:9a:c5:70:85:
         f2:16:1e:5f:89:8d:34:60:75:88:6a:6b:29:6e:a7:f2:9c:6e:
         6c:fb:c7:f4:50:3c:f7:c9:d8:f3:33:9d:e2:28:23:e8:9a:65:
         97:e7:6c:c3:9d:43:7a:7f:f6:9f:a2:d9:26:54:3f:e5:d6:b1:
         09:59:e4:c9:5e:db:62:9c:61:c3:4b:dd:96:1b:b3:f2:5e:5c:
         0c:be:53:f6:07:7e:05:1a:c4:1a:d8:86:37:a7:c1:cb:3d:c3:
         72:51:51:1e:bd:8a:12:cb:48:2e:25:7b:ea:93:60:22:f3:0f:
         f4:db:37:42:e9:22:b3:48:78:64:c9:56:d6:f6:19:b9:56:ba:
         34:07:fc:87:5d:7a:80:9e:1b:3d:6a:12:a5:2b:d2:23:c3:e7:
         13:2c:3c:e8:1f:24:d3:cf:dc:64:0e:28:51:f7:5e:a9:57:a0:
         6d:76:1f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:46 2025 by rpki-client