Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.mft
File:                     pnQBXVCbXU85bqNjNp6ddP-tdZM.mft (raw, json)
Hash identifier:          bckvp2JC3yqkeufir+r6wvWU0Jln/FvUEGj9yJKVNU0=
Subject key identifier:   DC:19:F9:8E:3A:D0:E1:56:E8:63:DA:48:5D:31:79:E6:57:E7:A7:41
Authority key identifier: A6:74:01:5D:50:9B:5D:4F:39:6E:A3:63:36:9E:9D:74:FF:AD:75:93
Certificate issuer:       /CN=a674015d509b5d4f396ea363369e9d74ffad7593
Certificate serial:       019769CEB7683B6BDC0E13B87194659A92DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pnQBXVCbXU85bqNjNp6ddP-tdZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.mft
Manifest number:          1426
Signing time:             Fri 13 Jun 2025 15:00:44 +0000
Manifest this update:     Fri 13 Jun 2025 15:00:44 +0000
Manifest next update:     Sat 14 Jun 2025 15:00:44 +0000
Files and hashes:         1: pnQBXVCbXU85bqNjNp6ddP-tdZM.crl (hash: ey8lzocHgQEDFNGZSYmkGYBnL9h2LtqWWLTcjsizJGw=)
                          2: ytlPgasGVjygeToAnL_7qGL6niY.roa (hash: 4pWkNfB/a5sc8sNCH66lYgOc8aQwiUY9Cf8vuGjBpFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pnQBXVCbXU85bqNjNp6ddP-tdZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:ce:b7:68:3b:6b:dc:0e:13:b8:71:94:65:9a:92:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a674015d509b5d4f396ea363369e9d74ffad7593
        Validity
            Not Before: Jun 13 15:00:44 2025 GMT
            Not After : Jun 14 15:00:44 2025 GMT
        Subject: CN=dc19f98e3ad0e156e863da485d3179e657e7a741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2b:10:c8:04:7a:db:b3:26:3b:be:9d:8a:61:
                    da:90:c6:ee:72:9f:ec:99:6a:90:58:e4:63:dc:2f:
                    f7:eb:df:4d:c3:8f:53:3f:8a:b8:c8:96:0e:f9:a6:
                    7a:98:36:84:96:f1:d5:36:26:17:7c:a6:ff:09:80:
                    32:62:b0:f3:3b:35:83:52:32:77:e1:d8:89:af:73:
                    ff:c2:5a:f2:45:5d:c1:03:05:72:ce:bb:74:30:93:
                    35:10:f5:d9:31:28:c9:64:70:62:2a:e0:71:00:66:
                    d5:11:dd:30:59:2e:0e:05:46:b9:38:35:4a:94:d9:
                    be:82:0c:4c:ff:bd:0e:9a:c7:82:ec:5c:9a:1b:ab:
                    61:2f:f3:f9:bc:3a:0f:6a:9c:a4:5c:41:7f:50:9e:
                    91:3d:91:b0:14:c4:b8:3f:37:7c:f5:72:75:41:5f:
                    65:d5:92:f7:e9:94:9e:b5:1b:65:e2:d3:1b:88:b5:
                    d2:0d:78:17:d6:e5:2a:41:64:a7:79:32:74:45:6b:
                    a9:94:da:6f:68:0d:70:81:47:1d:38:a4:0e:cb:56:
                    75:90:c0:d0:99:bb:1a:72:cc:84:12:ad:0f:e4:df:
                    4a:bd:f2:5e:c9:db:dc:04:3d:dd:3c:be:ee:3f:ae:
                    8f:f1:ba:99:61:3a:70:d3:0c:12:5e:8c:b7:b7:39:
                    d1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:19:F9:8E:3A:D0:E1:56:E8:63:DA:48:5D:31:79:E6:57:E7:A7:41
            X509v3 Authority Key Identifier:
                keyid:A6:74:01:5D:50:9B:5D:4F:39:6E:A3:63:36:9E:9D:74:FF:AD:75:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnQBXVCbXU85bqNjNp6ddP-tdZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:99:71:9f:72:00:2d:38:a0:eb:de:56:5e:c4:47:e5:cc:10:
         08:eb:c5:af:e6:14:7c:69:a2:97:d9:6f:06:4a:fa:89:2e:af:
         4a:1a:57:b8:e9:d5:83:7b:87:4c:2e:ac:94:d3:11:04:7d:13:
         4a:5d:92:19:af:93:30:9e:e9:c6:88:30:0c:3b:fe:d7:90:91:
         13:3e:81:f4:37:31:c7:46:ae:03:57:6e:68:5b:30:4d:f8:ce:
         58:1f:05:01:c0:4a:c9:7e:60:57:0b:9e:51:12:45:0f:cd:0f:
         ff:64:a5:ed:77:6b:60:14:3d:a0:29:a9:5e:bc:30:d9:8f:4a:
         4f:09:65:8c:ab:4d:d5:df:50:a1:e6:2c:5e:4c:f0:f0:3d:14:
         d1:85:2a:93:32:cf:42:62:f5:e1:c7:88:29:1d:bf:63:ca:3d:
         af:5a:df:89:11:f9:e1:37:d0:19:be:fa:f4:9f:94:c2:fa:ae:
         9f:42:46:58:bc:d3:45:a7:d0:ee:b6:ca:77:2e:94:80:31:31:
         45:1a:e9:fb:23:86:b6:0f:55:44:f5:41:35:ee:aa:9c:f5:d9:
         3e:83:16:de:75:dc:80:93:09:4b:53:2e:e5:ec:6f:cb:ce:32:
         27:ce:21:91:65:cc:b1:b8:94:df:96:b4:1b:43:5d:6a:62:23:
         b5:96:42:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:24:40 2025 by rpki-client