Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
File:                     pDJ8VulBFx6jvrom67niP031vPM.mft (raw, json)
Hash identifier:          QsgTK2zN7xNhTHIuM9dNkcRVn7hspj/FaItEa/0Dwak=
Subject key identifier:   9D:08:04:4F:D7:0C:2A:5D:2C:0E:03:9E:A8:DD:ED:5E:A7:50:44:9D
Authority key identifier: A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
Certificate issuer:       /CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Certificate serial:       01987DF81536BEE02407E5BCF905D57578F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
Manifest number:          06DF
Signing time:             Wed 06 Aug 2025 06:01:07 +0000
Manifest this update:     Wed 06 Aug 2025 06:01:07 +0000
Manifest next update:     Thu 07 Aug 2025 06:01:07 +0000
Files and hashes:         1: 3vdSYlPhYCcKWdxmctUlZz3LRrA.roa (hash: JYH+c4M07iZOS3Xafi4xgQEUcEXeZVf7HAqO1Fudxb4=)
                          2: IKxoI34yNDqSYAVSbtJ6URAzHH8.roa (hash: /1RKNbwdvJvERdDo7l1kD+y03W4o9/o77qVS9bJMSGs=)
                          3: cLRpZsuHj1Ogs0ExPm-7o6d-jPI.roa (hash: TUBUIVHrB/n/iv6Q1YfM7h8U6VmMHs60X+y0rpIetb0=)
                          4: lbRMrKUagBNury-urjZX3f75_Qw.roa (hash: mq29IIHcb8ubsfXIgUD4LUU90hH0YRXl8dREvVbfEwI=)
                          5: pDJ8VulBFx6jvrom67niP031vPM.crl (hash: XR4Fq5QGL/hhf5Kuse6LTNE9MitKYOcRuJpd11n5cfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:f8:15:36:be:e0:24:07:e5:bc:f9:05:d5:75:78:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
        Validity
            Not Before: Aug  6 06:01:07 2025 GMT
            Not After : Aug  7 06:01:07 2025 GMT
        Subject: CN=9d08044fd70c2a5d2c0e039ea8dded5ea750449d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:eb:89:bc:a8:1a:47:80:41:b5:c5:8f:80:f1:
                    b4:0c:f2:c4:02:ed:54:d1:08:c4:02:c5:28:2f:2e:
                    ba:4b:49:b8:f1:51:f2:08:97:68:d9:b4:56:d0:9a:
                    a3:6e:26:77:84:ac:4b:37:34:ad:7b:fc:50:b3:e9:
                    e3:5b:ee:92:b4:3b:60:d9:75:cf:a2:71:c1:72:a1:
                    bf:76:26:fd:73:d5:3a:0f:f0:e5:b2:e8:30:83:5a:
                    57:cc:6d:45:ed:80:b1:59:95:8a:e5:15:cd:fd:ef:
                    bd:4c:02:eb:b8:19:e5:cb:5f:3a:76:34:d1:f5:19:
                    09:34:b4:1a:87:4b:17:e1:85:42:cf:e2:ff:0a:e1:
                    50:8b:26:46:40:82:e2:54:27:39:1d:17:96:72:a4:
                    58:a6:3f:f3:cf:52:a7:51:e3:8c:bd:23:76:0c:65:
                    dc:06:9f:99:f8:4b:13:a2:2e:38:9a:f0:f4:3e:54:
                    5d:cb:31:0a:df:05:8d:36:16:19:e6:48:e3:ff:be:
                    f2:59:e5:f6:f9:c3:c6:df:90:c9:34:cf:8b:f3:e6:
                    32:70:03:37:3f:6c:57:c7:3d:13:7e:5b:0b:81:7a:
                    55:53:ba:98:af:b1:ed:10:de:72:7f:b5:a1:8f:dd:
                    91:d6:15:dd:74:f4:c9:d8:2e:ce:37:a3:65:61:e2:
                    81:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:08:04:4F:D7:0C:2A:5D:2C:0E:03:9E:A8:DD:ED:5E:A7:50:44:9D
            X509v3 Authority Key Identifier:
                keyid:A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:cd:ae:06:e5:43:46:f4:cf:1c:3b:fc:f0:29:7a:39:9f:9e:
         ec:61:c1:d8:c6:3c:45:b7:10:63:a7:8a:bf:d1:9b:5c:19:0e:
         8c:32:6a:83:ba:a6:b7:0b:fd:f1:51:d5:65:7c:6a:65:64:ac:
         9e:ce:12:3f:4d:29:e0:a9:1e:88:df:19:a8:eb:1c:01:7c:67:
         6a:77:36:0d:6d:54:13:ef:60:3c:a7:de:7f:fb:90:06:cf:82:
         a4:0b:91:29:d9:0f:44:46:4a:00:d6:f9:40:51:4e:e1:38:70:
         5f:36:b0:a7:80:c3:1c:60:c7:db:00:14:a2:56:d5:bd:4f:5c:
         d5:f1:93:df:7c:1c:12:25:e2:76:f0:19:1e:61:d1:ce:92:57:
         43:b2:f4:98:4f:5e:28:25:2c:ee:67:07:1e:a9:53:0f:01:5d:
         13:09:7d:e1:3d:da:ef:21:ea:58:38:cf:ba:f3:d3:b9:c6:a2:
         5e:6a:cc:78:f0:a5:dc:4a:1f:d9:56:c2:f4:8e:26:91:f8:02:
         df:92:41:55:1d:4e:90:f0:22:95:1a:98:5a:9e:69:6f:39:dd:
         5e:fa:26:6c:32:c4:e7:05:99:b9:f4:16:8a:c1:30:09:12:ff:
         ed:fb:e6:30:3b:d6:84:dc:61:6b:95:39:10:f1:e7:b8:45:29:
         71:9b:8d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:34:31 2025 by rpki-client