Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
File:                     pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft (raw, json)
Hash identifier:          ihQBjUuJJWcT0WVMckNlTNmr3x06mxnRugrcqc9gUbw=
Subject key identifier:   27:DD:43:7E:57:90:C2:B9:35:B8:07:F2:23:39:75:4D:7C:BD:68:CD
Authority key identifier: A6:0A:D4:B1:5E:5C:1C:FE:C0:AF:B1:F8:18:A7:6A:08:F1:86:38:6D
Certificate issuer:       /CN=a60ad4b15e5c1cfec0afb1f818a76a08f186386d
Certificate serial:       019880F8F94C01F4FEC46453697C7DDB7C69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
Manifest number:          066D
Signing time:             Wed 06 Aug 2025 20:00:56 +0000
Manifest this update:     Wed 06 Aug 2025 20:00:56 +0000
Manifest next update:     Thu 07 Aug 2025 20:00:56 +0000
Files and hashes:         1: 0LPzaTRGADRQ7NYT2u33MSGVUAc.roa (hash: z6+o9T+5otMMS/QAipfJXTyY4jZN2xR3W6lhfsxnRH0=)
                          2: pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl (hash: 808hIkTrbqddrOaPwix5Fd0vTmM2walJRXETr0Qu9vU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:f8:f9:4c:01:f4:fe:c4:64:53:69:7c:7d:db:7c:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a60ad4b15e5c1cfec0afb1f818a76a08f186386d
        Validity
            Not Before: Aug  6 20:00:56 2025 GMT
            Not After : Aug  7 20:00:56 2025 GMT
        Subject: CN=27dd437e5790c2b935b807f22339754d7cbd68cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5c:8c:82:6f:2a:f1:fe:ed:61:71:03:b5:f1:
                    37:4a:5f:d0:75:5d:e1:e0:02:79:eb:b7:4f:a6:b4:
                    9b:21:b8:6c:13:f6:f0:56:ab:bf:e9:aa:07:10:4f:
                    a7:d4:37:79:74:89:73:a9:4a:8e:8d:f9:71:66:a1:
                    1e:ac:4e:a4:5e:19:18:d4:6c:74:d6:90:6e:5a:77:
                    51:ad:24:e8:8d:d7:b4:c7:d7:85:91:fc:24:c0:97:
                    57:4f:1a:54:83:25:f0:78:b9:6f:4c:14:8c:74:48:
                    9c:14:d4:b0:01:49:e4:b7:04:ec:5e:7f:18:82:b9:
                    b1:3e:4f:67:76:75:bc:99:ce:33:fc:c5:43:a5:9d:
                    c5:ca:56:e4:6f:9e:d4:94:82:09:0b:d6:8d:fa:ca:
                    dd:f1:4b:c5:4d:44:d2:39:ae:8a:84:32:7b:f1:96:
                    5f:7e:82:b3:31:cf:36:63:ec:62:4a:92:c3:62:63:
                    47:6d:ae:fb:30:12:ef:7e:20:71:33:b5:d2:63:6a:
                    7a:fb:ab:9b:e6:aa:36:e1:b3:87:73:ab:dd:28:d9:
                    82:79:45:d3:28:c4:93:96:fe:86:a7:6c:72:fc:02:
                    fb:9b:0c:c7:8f:2a:0d:ae:56:0d:b6:96:a7:90:60:
                    ed:69:7a:78:de:b9:fb:f4:c7:8d:2a:de:11:b1:47:
                    81:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:DD:43:7E:57:90:C2:B9:35:B8:07:F2:23:39:75:4D:7C:BD:68:CD
            X509v3 Authority Key Identifier:
                keyid:A6:0A:D4:B1:5E:5C:1C:FE:C0:AF:B1:F8:18:A7:6A:08:F1:86:38:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:4e:dd:df:53:70:62:a1:20:fe:de:3e:f7:56:ff:29:29:0d:
         79:a2:48:40:68:08:7c:3f:d6:c3:26:b5:3a:c4:49:d1:ab:cd:
         53:a6:84:4b:2e:c4:f1:a9:97:34:66:bc:05:67:2b:fa:53:aa:
         74:04:33:83:05:b2:4c:92:e8:27:42:ce:e6:cb:fd:15:9f:39:
         3a:1b:6b:df:45:d0:95:cf:b8:56:11:27:bf:8c:a1:23:c1:c0:
         f3:05:10:10:95:ce:23:64:44:5c:95:3d:9c:bb:a2:fc:94:e2:
         93:6f:98:e4:2b:31:63:4d:3f:6a:b5:c9:fb:16:cc:86:bb:88:
         6b:2c:83:84:c9:2a:19:cf:ae:08:e8:a8:4b:70:5b:55:3b:51:
         94:14:f9:22:44:e5:80:2c:aa:9f:57:7c:ca:3f:dd:35:da:c8:
         14:1a:46:48:9a:df:03:36:1b:61:f6:15:28:6e:44:c6:dd:93:
         61:16:3b:13:9f:7d:4a:c8:97:26:b0:d2:88:02:22:af:49:4a:
         a1:96:92:bf:15:75:fa:f0:ec:0b:03:3d:a6:d4:e6:48:63:7f:
         8c:75:f5:b6:7f:92:c3:88:c7:b3:69:be:85:b6:0b:cd:e5:76:
         75:98:37:32:8e:24:00:3b:da:ae:a9:cf:d7:c7:1d:34:8d:6d:
         74:41:8c:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiA+PlMAfT+xGRTaXx923xpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MGFkNGIxNWU1YzFjZmVjMGFmYjFmODE4YTc2YTA4ZjE4
NjM4NmQwHhcNMjUwODA2MjAwMDU2WhcNMjUwODA3MjAwMDU2WjAzMTEwLwYDVQQD
EygyN2RkNDM3ZTU3OTBjMmI5MzViODA3ZjIyMzM5NzU0ZDdjYmQ2OGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31yMgm8q8f7tYXEDtfE3Sl/QdV3h
4AJ567dPprSbIbhsE/bwVqu/6aoHEE+n1Dd5dIlzqUqOjflxZqEerE6kXhkY1Gx0
1pBuWndRrSTojde0x9eFkfwkwJdXTxpUgyXweLlvTBSMdEicFNSwAUnktwTsXn8Y
grmxPk9ndnW8mc4z/MVDpZ3Fylbkb57UlIIJC9aN+srd8UvFTUTSOa6KhDJ78ZZf
foKzMc82Y+xiSpLDYmNHba77MBLvfiBxM7XSY2p6+6ub5qo24bOHc6vdKNmCeUXT
KMSTlv6Gp2xy/AL7mwzHjyoNrlYNtpankGDtaXp43rn79MeNKt4RsUeBtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfdQ35XkMK5NbgH8iM5dU18vWjNMB8GA1UdIwQY
MBaAFKYK1LFeXBz+wK+x+BinagjxhjhtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGdyVXNWNWNIUDdBcjdINEdLZHFDUEdHT0cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jY2JkNDQtNjNiMy00MTA1LWIzOWQt
MWE1NTU5ZmRkNGRmLzEvcGdyVXNWNWNIUDdBcjdINEdLZHFDUEdHT0cwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9jY2JkNDQtNjNiMy00MTA1LWIzOWQtMWE1NTU5ZmRkNGRm
LzEvcGdyVXNWNWNIUDdBcjdINEdLZHFDUEdHT0cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASE7d31Nw
YqEg/t4+91b/KSkNeaJIQGgIfD/Wwya1OsRJ0avNU6aESy7E8amXNGa8BWcr+lOq
dAQzgwWyTJLoJ0LO5sv9FZ85Ohtr30XQlc+4VhEnv4yhI8HA8wUQEJXOI2REXJU9
nLui/JTik2+Y5CsxY00/arXJ+xbMhruIayyDhMkqGc+uCOioS3BbVTtRlBT5IkTl
gCyqn1d8yj/dNdrIFBpGSJrfAzYbYfYVKG5Ext2TYRY7E599SsiXJrDSiAIir0lK
oZaSvxV1+vDsCwM9ptTmSGN/jHX1tn+Sw4jHs2m+hbYLzeV2dZg3Mo4kADvarqnP
18cdNI1tdEGMNQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 00:35:31 2025 by rpki-client