Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft
File:                     pi8tPCadk1InaQsot_vdlT4entw.mft (raw, json)
Hash identifier:          uBfTshNfTIl/EaWNNerWyLUYunX4YIR61gz2/Bund/I=
Subject key identifier:   E1:C3:38:A5:A0:73:E9:B6:C8:AF:D0:28:7D:11:BA:AD:93:A8:2C:E2
Authority key identifier: A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC
Certificate issuer:       /CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc
Certificate serial:       01977D55D2CEE1F73FDE6F025773D820B7FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft
Manifest number:          0A54
Signing time:             Tue 17 Jun 2025 10:01:05 +0000
Manifest this update:     Tue 17 Jun 2025 10:01:05 +0000
Manifest next update:     Wed 18 Jun 2025 10:01:05 +0000
Files and hashes:         1: 2bwoacVhn9Ey8-WA6HPqgOWaS3w.roa (hash: +4RKvBlDgq1ptS9Kf/qX9i6nHjxZCbfdf3DtkVyJdE4=)
                          2: OFc0yBZFy4Wa20RcLrHQGW0n8Z0.roa (hash: TB30ZCImx4FabUXsP6FrJ/8xR1ebGEeWXJhQyL3afw0=)
                          3: gBycawi1ika7Vj_3TGa6n8ZyOcc.roa (hash: eGdxhHwT3weYIz4n0K5fQnn/ZNevVWIphIjoit3SpJE=)
                          4: pi8tPCadk1InaQsot_vdlT4entw.crl (hash: +qsi8zHpLbzxtfA7FkUYCiA5akQnQIsFXOYeTmdG+n8=)
                          5: thsewX5m5QEbqC1hk05OepLePSE.roa (hash: Qec8TVM/3O2FwTtHE6+SXRB/S0VWZFEK7seQA4WOq3A=)
                          6: uZ5GJPrp9SFd4Iq3FGcL7RdiaHc.roa (hash: qgD6SLmZc9P0p+V20mf5ZvuX3cLkvcDCzUTLrsNawj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 10:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7d:55:d2:ce:e1:f7:3f:de:6f:02:57:73:d8:20:b7:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc
        Validity
            Not Before: Jun 17 10:01:05 2025 GMT
            Not After : Jun 18 10:01:05 2025 GMT
        Subject: CN=e1c338a5a073e9b6c8afd0287d11baad93a82ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3e:46:07:98:ac:4d:fb:51:5e:ce:70:29:92:
                    a0:89:3b:4f:03:57:67:f1:52:22:cc:43:8b:db:b9:
                    95:5f:f9:4c:4b:d8:05:b8:39:3d:de:89:62:bb:8b:
                    1a:a3:a5:83:08:6e:14:0d:31:34:b9:f6:30:52:c1:
                    4b:30:16:ba:51:4a:58:90:55:72:5e:4b:8d:ad:36:
                    7d:63:49:15:6b:e4:96:64:d7:e9:a7:11:73:27:c6:
                    89:bf:93:b2:28:f8:dd:6b:f0:60:71:b8:3d:b9:17:
                    8a:3b:4b:ee:d0:c8:8e:b0:18:1e:db:2a:84:42:3d:
                    9a:d4:c4:60:3c:31:95:6f:95:8a:0e:bc:15:3e:74:
                    7d:a1:f9:9f:78:a8:61:7e:ae:8c:06:2c:ab:e3:36:
                    ce:51:da:f9:08:fb:0d:f5:af:bc:81:ce:50:db:06:
                    f3:98:b9:89:2e:d0:12:54:6c:fa:80:5e:1b:91:c2:
                    ca:41:60:36:eb:19:da:84:6a:9e:b7:14:e4:dd:44:
                    97:e0:70:08:47:dc:e6:fd:5b:d7:5d:7f:23:0f:a1:
                    8b:97:b0:1a:21:95:00:68:0f:17:d2:6e:a0:3c:65:
                    6e:6f:0d:29:57:c8:e2:d8:8a:8b:de:4b:25:17:fd:
                    73:5b:2b:5d:24:c6:98:1d:38:dc:ef:c1:da:d6:48:
                    9f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C3:38:A5:A0:73:E9:B6:C8:AF:D0:28:7D:11:BA:AD:93:A8:2C:E2
            X509v3 Authority Key Identifier:
                keyid:A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:c1:6d:23:d4:82:bb:fa:ed:99:f1:12:92:09:44:a0:e7:2a:
         2d:04:9c:08:3b:af:4d:fd:81:45:98:fe:d1:6c:c6:80:f5:4b:
         5c:51:37:9c:b5:ae:ce:83:bf:52:6f:6a:97:0e:b2:47:af:ca:
         95:e4:dc:0d:74:aa:5c:f4:47:cc:25:9e:c5:dc:87:8b:04:d9:
         fd:85:7e:4b:22:fd:ab:e0:f1:e7:13:54:78:c9:c9:ee:a5:93:
         09:a3:36:c0:21:6e:74:8d:2d:a8:15:a0:7b:6c:af:5b:46:e4:
         83:50:99:3d:32:d2:37:97:bf:71:9a:20:1b:50:5f:79:0f:68:
         72:34:7d:b7:33:05:6c:f8:87:6e:39:b3:94:c3:ae:54:55:e4:
         ff:1b:c4:4e:93:6a:95:46:96:c0:81:1d:60:b2:60:63:0e:f2:
         6d:9c:c8:ff:40:7b:53:6f:01:3c:e6:48:af:5f:ab:83:bb:52:
         90:ba:9e:e9:4c:68:50:21:43:97:76:ce:ea:c3:26:ec:3d:d6:
         4d:94:d5:54:d9:bd:69:36:31:d0:b5:46:e7:d0:2c:ff:27:20:
         e8:69:9f:31:1a:eb:5b:cd:65:44:d7:29:9a:7b:38:42:ab:4c:
         30:48:bd:26:64:b4:2b:3b:92:23:d7:f7:d4:bd:51:24:79:7e:
         d6:49:2b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:36:50 2025 by rpki-client