Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft
File:                     PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft (raw, json)
Hash identifier:          swkrHykNvCPwnDIb//SaVJfCJZAiBhI1EazYH9lghFg=
Subject key identifier:   3F:FF:B0:6F:34:9E:1D:D4:68:D8:C9:3D:82:E0:4C:8F:0A:7B:AD:E6
Authority key identifier: 3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E
Certificate issuer:       /CN=3de2681dda00702a7597a71257e14f7a725e890e
Certificate serial:       0196726617D4EAA4C19418B001574E08DDD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft
Manifest number:          09C3
Signing time:             Sat 26 Apr 2025 14:00:15 +0000
Manifest this update:     Sat 26 Apr 2025 14:00:15 +0000
Manifest next update:     Sun 27 Apr 2025 14:00:15 +0000
Files and hashes:         1: 4Mdmn6MaRoFLUycUXlZaFSGboEs.roa (hash: C9ut+tYKUryPFgIx2+ThOOLJz+YjKuj147RuRXfxtis=)
                          2: H7RDadMRjVcvma8PhFugcKUdoT0.roa (hash: 6sD2c8/NrghCekThtfpslB8AAW0einNgCY8Rjyouu9I=)
                          3: Oioxvop9FV5K4rtOSvh02jeAj-g.roa (hash: 1Oax9rdfDuKch357rIzJmOSBUOYvQbkuoDRF8in9c8A=)
                          4: PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl (hash: VM3/1s064wPsAO5FKuXINorDTuzElhHvudSkpbgI1Hs=)
                          5: _jMez6UKzbPOPelQcGjdJ8x6E6w.roa (hash: ZU7ujP/uBnbOS9GuRHg5V1uQ0qPQ1zH6qf1VkFt1340=)
                          6: ceFPC_Zj6p3cuB8qXQeMqvZfZa4.roa (hash: 01KlZ4a2kJZ4Ly4Y7K5EQ5UlAiINB2ZUF09ye0hG3lc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:66:17:d4:ea:a4:c1:94:18:b0:01:57:4e:08:dd:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3de2681dda00702a7597a71257e14f7a725e890e
        Validity
            Not Before: Apr 26 14:00:15 2025 GMT
            Not After : Apr 27 14:00:15 2025 GMT
        Subject: CN=3fffb06f349e1dd468d8c93d82e04c8f0a7bade6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b2:a6:e9:9a:45:33:e3:30:27:a1:98:6f:48:
                    15:85:51:ac:ec:97:85:65:3f:76:31:7e:ed:e6:e2:
                    59:40:2b:83:66:f8:af:e7:16:83:27:4c:cb:3f:86:
                    ea:b1:a7:81:cb:20:b3:4d:23:3e:ed:cd:ca:59:b2:
                    3a:95:59:5d:7f:62:6d:7f:0b:41:7b:6d:3e:cf:f4:
                    f5:71:06:7d:6b:92:d8:f2:7c:85:cc:fc:52:25:c6:
                    04:37:f2:3b:8e:41:d5:6e:fe:95:7b:86:e0:78:33:
                    6c:da:14:3b:25:12:1d:42:75:15:78:5c:e9:ee:7c:
                    3a:2e:e3:99:96:2f:c8:0c:4d:13:48:93:e2:6a:2d:
                    57:5d:f2:00:45:53:34:b7:ab:ce:e9:02:1c:55:4d:
                    98:66:48:95:5d:5e:36:98:48:57:43:e4:27:a7:ea:
                    15:9a:59:c3:84:a9:bc:33:ba:53:18:7f:5a:a6:c8:
                    ec:56:cc:1d:2d:e7:26:71:5c:61:12:50:a2:fa:f3:
                    a3:f8:c4:5f:94:d5:c8:c3:ef:2b:c6:42:ec:b1:7c:
                    73:33:3c:ba:77:29:aa:b0:32:6e:e2:12:2d:49:a6:
                    7e:eb:88:9d:f4:ac:59:ae:aa:bd:3b:9f:b9:f1:62:
                    63:7c:56:1d:65:6f:14:fb:ff:69:bd:65:28:63:ea:
                    b2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:FF:B0:6F:34:9E:1D:D4:68:D8:C9:3D:82:E0:4C:8F:0A:7B:AD:E6
            X509v3 Authority Key Identifier:
                keyid:3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:6f:c4:5a:b0:d2:61:45:31:e9:fe:95:79:1d:2c:92:e2:65:
         f7:43:05:06:59:24:d9:ac:53:98:12:61:f0:f3:3b:03:5f:56:
         85:32:f6:a7:20:c1:e1:c6:13:22:7b:12:03:be:d4:d0:83:09:
         de:aa:53:ec:27:b7:4b:f5:bb:df:df:7b:4d:5a:b0:11:ab:5c:
         3e:b8:c4:a5:4e:c0:de:06:8a:16:0c:29:95:e5:88:ad:c5:7a:
         e4:91:6e:a3:3b:cf:2e:e2:07:65:46:09:57:24:e6:ff:3b:b7:
         83:66:3d:3b:31:26:dd:8c:2d:a1:3e:47:b8:44:d2:8a:1b:0a:
         65:df:80:c6:58:07:c6:5d:19:64:86:a7:f9:41:cf:b3:f3:9e:
         09:cb:a3:03:6a:6b:fb:5e:06:dd:04:fe:b3:99:ab:8a:7c:fe:
         1d:ca:9d:4b:28:0f:a0:80:d2:d7:98:8d:77:a4:5e:e5:06:fa:
         92:75:00:f4:40:2d:fc:37:9b:87:32:00:95:46:fb:21:30:99:
         86:e4:d7:78:cf:87:20:11:e1:33:e3:82:f2:d8:f9:c0:72:08:
         67:69:ad:57:ff:a6:e2:ff:56:d1:ad:9e:fb:98:22:72:d1:77:
         12:f8:6c:4d:58:5c:d9:72:e8:48:10:c4:c2:5a:a4:6b:ae:69:
         7a:ee:55:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:53:55 2025 by rpki-client