Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft
File:                     p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft (raw, json)
Hash identifier:          TFlRQlzwJwt3acSViH3+GggAh4+ui/O8Kox7m0+cKBo=
Subject key identifier:   7E:2F:1A:4D:3E:71:F8:F8:AB:78:5E:84:12:9E:AB:59:FB:61:E0:81
Authority key identifier: A7:77:20:C7:DC:1D:C3:ED:D1:D0:D4:7F:92:3B:CD:83:3F:06:AF:36
Certificate issuer:       /CN=a77720c7dc1dc3edd1d0d47f923bcd833f06af36
Certificate serial:       01977E30E2E4D65938DFB3C4352E36F1F2BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p3cgx9wdw-3R0NR_kjvNgz8GrzY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft
Manifest number:          059C
Signing time:             Tue 17 Jun 2025 14:00:22 +0000
Manifest this update:     Tue 17 Jun 2025 14:00:22 +0000
Manifest next update:     Wed 18 Jun 2025 14:00:22 +0000
Files and hashes:         1: oe0ViHcJehxm3wVuZHtIwUX00hU.roa (hash: RwLw3XJajb9LZZAlaGbGSJVNCQJewc1VgXJkyuKlD8Q=)
                          2: p3cgx9wdw-3R0NR_kjvNgz8GrzY.crl (hash: J8hcIj/zIfV1MSJgUjhoM+34fn9liZneg8kIc1CG1l8=)
                          3: rEm8DnSRjF-eOZ8W-19-W5YBOlI.roa (hash: oKxbV7NuBt8nP02xM3KhblNP7v+2Q4dV/sQu1W1Wh/I=)
                          4: wsmN0GUZsWjC_T-MselV4vkxQWc.roa (hash: yTPdTeVo9RosDc+EbxC7mvYcTFyk5tLkcD8SHn8y0Zk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p3cgx9wdw-3R0NR_kjvNgz8GrzY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 13:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7e:30:e2:e4:d6:59:38:df:b3:c4:35:2e:36:f1:f2:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a77720c7dc1dc3edd1d0d47f923bcd833f06af36
        Validity
            Not Before: Jun 17 14:00:22 2025 GMT
            Not After : Jun 18 14:00:22 2025 GMT
        Subject: CN=7e2f1a4d3e71f8f8ab785e84129eab59fb61e081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:89:b3:27:ef:15:ca:e7:2c:52:a7:e5:4d:9f:
                    6c:7b:f4:94:9f:2e:08:ff:5c:ee:82:a9:43:85:26:
                    30:96:50:12:08:c6:90:1d:40:60:68:f6:a9:b9:67:
                    42:f1:73:ab:36:d6:05:97:b7:8c:71:61:87:5c:92:
                    de:05:ba:84:b5:2e:34:19:6a:d6:72:72:11:43:cd:
                    f6:0b:f5:9e:d8:32:7a:e8:7f:74:b0:76:8c:d6:13:
                    61:87:9f:cd:f3:99:6d:dc:bc:ca:54:50:71:28:11:
                    9d:6c:f5:5a:ee:35:02:ef:cd:59:e5:43:99:0f:ab:
                    09:c6:79:12:fd:5d:1f:2e:59:e1:02:c3:a2:a2:aa:
                    a6:ea:9e:55:ac:cc:15:49:22:e3:39:1e:b3:b8:8e:
                    19:cc:5e:c7:9b:94:cc:f6:1a:c3:54:0d:ba:62:30:
                    1c:61:52:46:eb:73:e8:6c:a0:93:b0:86:ee:5b:e9:
                    0c:46:bb:6a:9a:f6:a5:b9:be:03:7c:7f:ca:53:37:
                    ba:96:c5:77:8d:10:cb:04:ec:5d:bf:d8:ca:8e:a6:
                    ec:e4:f9:0d:d6:b1:0e:c8:0e:54:c7:a3:b9:46:09:
                    df:53:16:6d:6e:74:e8:17:57:3c:ea:36:23:ff:25:
                    ad:21:a8:e5:10:ee:6c:e6:b5:c6:55:16:5f:74:3c:
                    97:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:2F:1A:4D:3E:71:F8:F8:AB:78:5E:84:12:9E:AB:59:FB:61:E0:81
            X509v3 Authority Key Identifier:
                keyid:A7:77:20:C7:DC:1D:C3:ED:D1:D0:D4:7F:92:3B:CD:83:3F:06:AF:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3cgx9wdw-3R0NR_kjvNgz8GrzY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:81:53:76:91:4c:85:12:df:b6:a6:57:fd:37:64:3a:6d:9f:
         92:aa:82:22:e9:35:6b:44:7f:22:fd:f0:ec:9e:a1:72:22:d0:
         2b:e0:69:1d:3a:a5:4c:02:b5:88:b3:74:6c:ad:c0:0d:0e:b1:
         64:49:42:91:ad:e7:62:a8:16:0b:bf:93:f9:62:53:86:1f:b0:
         2e:40:7a:4e:16:7c:2a:7a:48:f0:98:b6:05:97:23:44:60:d4:
         61:d1:c1:cd:80:0e:d7:9a:0f:4a:c5:b8:f6:28:0d:ee:3a:d7:
         55:c4:e7:f2:24:c3:c2:69:b4:28:c8:6e:79:3a:0a:dc:8e:91:
         11:44:a6:67:48:42:be:d1:8e:e0:5d:94:dd:b4:65:df:98:f9:
         42:9d:b9:69:d5:17:36:4d:f9:8e:d1:d5:f9:78:70:7c:fc:99:
         0a:56:ff:66:6a:4f:bf:32:59:f1:e8:cd:5e:8d:b7:da:75:b5:
         fc:9f:20:34:82:1e:9d:67:09:da:07:30:ef:11:3d:5f:af:79:
         73:24:4f:e0:c8:f9:43:47:91:cc:08:da:9e:b7:78:2d:eb:ca:
         0e:a7:52:7b:ce:fa:0e:5c:d1:6c:35:e9:d9:04:0e:09:6f:ab:
         54:dd:a6:3c:03:23:f1:62:69:30:91:2f:d1:09:c2:8b:0f:bc:
         9d:c4:83:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 23:46:05 2025 by rpki-client