Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft
File:                     PiDHANmNdqnGQBc4ifk2faneiZc.mft (raw, json)
Hash identifier:          KY2kiiUYobLDyUTT/KXsvyA9M8+QDa3bkye20UCfkkw=
Subject key identifier:   AA:27:77:83:2D:64:D7:DF:D2:E6:3D:02:CE:DA:5D:32:5D:ED:81:B0
Authority key identifier: 3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97
Certificate issuer:       /CN=3e20c700d98d76a9c640173889f9367da9de8997
Certificate serial:       0197733FE40D89F4F2B4FB4228CA59AC0CCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft
Manifest number:          159C
Signing time:             Sun 15 Jun 2025 11:00:56 +0000
Manifest this update:     Sun 15 Jun 2025 11:00:56 +0000
Manifest next update:     Mon 16 Jun 2025 11:00:56 +0000
Files and hashes:         1: 8HB6gBMH1OXCC4HSHxjMBJPAXNM.roa (hash: 6HXyg8j0+e0B50uY00MrE32ixPRXRhbFhui9gW2K51g=)
                          2: Kc-64DdvpDRYpryEgWVmiZAxLb4.roa (hash: fJnE6S6w3zcsSEIUNp19rp72G3CDdr3kfBB8oEmZDtA=)
                          3: O10H_NXAAD1i_gphnWNg3Wq_zvU.roa (hash: S3bnGRkcKICV24Gqt4GllsXulmARfu6sriFJ2/wRC7Y=)
                          4: PiDHANmNdqnGQBc4ifk2faneiZc.crl (hash: nDNJsRUpbjjiz/pWAzxUScDb0wRHtlSxzyd49mZn1AY=)
                          5: cQXeCTJ_DMy-0IxgEi53vyjoG5Y.roa (hash: EAhkoKbmTNBh8iUu/nLDdEtJhvyuoftcxxuasAKUFqo=)
                          6: dqzUrFY323Ep8f9_EznYPf-FHbk.roa (hash: tHn5PdWDaptFE9kcckqjz78Qa974P1HY2yrHA0Adm4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:73:3f:e4:0d:89:f4:f2:b4:fb:42:28:ca:59:ac:0c:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e20c700d98d76a9c640173889f9367da9de8997
        Validity
            Not Before: Jun 15 11:00:56 2025 GMT
            Not After : Jun 16 11:00:56 2025 GMT
        Subject: CN=aa2777832d64d7dfd2e63d02ceda5d325ded81b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1c:ca:4d:43:2b:c1:95:57:c6:d2:cd:63:44:
                    10:d2:1e:80:8f:ba:9c:85:b1:fc:d9:6d:2c:5a:72:
                    d7:a1:92:57:5b:e3:f2:67:7e:be:dc:65:39:c9:6d:
                    a8:75:df:6d:5d:ba:2f:96:40:04:7a:24:92:5a:b8:
                    48:ea:7f:43:46:42:38:b3:2f:ee:a4:0f:77:9e:3d:
                    15:28:b9:35:50:09:0e:13:2e:b8:08:ee:ab:3f:c1:
                    27:cb:4f:aa:ae:e2:43:81:51:5f:47:e1:de:4c:14:
                    2d:f9:58:c4:8e:92:01:3e:73:06:56:93:30:8b:01:
                    81:48:c3:f6:25:f8:2e:62:ca:3d:24:0a:1e:f0:e0:
                    1c:40:08:0f:96:5f:e4:71:8b:04:b5:11:25:78:7d:
                    87:c9:f8:ba:a4:fa:6d:70:f4:64:cf:32:09:35:51:
                    4d:87:e2:f7:51:cb:dd:70:83:c0:75:8e:df:e8:c8:
                    9e:1b:79:14:87:ca:06:ba:14:53:b4:7d:f2:52:ab:
                    d0:49:c9:18:93:2a:3e:c3:b9:83:bd:07:4b:cf:84:
                    af:d0:95:5e:0f:cc:fa:cf:0e:aa:53:52:f4:05:7a:
                    ba:30:d6:6e:b5:ef:0c:29:38:fa:6e:60:6b:32:cc:
                    42:57:4c:31:35:c3:a0:71:74:ad:b5:fc:4b:b4:d6:
                    ca:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:27:77:83:2D:64:D7:DF:D2:E6:3D:02:CE:DA:5D:32:5D:ED:81:B0
            X509v3 Authority Key Identifier:
                keyid:3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:13:0d:c7:65:7c:88:23:e5:c9:00:86:7d:29:1a:9c:fd:de:
         c8:e8:4d:35:bd:f2:88:d0:5a:e5:80:e5:31:c1:9a:db:66:db:
         40:12:68:8c:60:b7:fc:61:1b:6c:f5:5a:fa:32:ea:34:82:21:
         90:e9:41:a4:8b:a6:a7:93:03:a3:d9:43:50:42:ab:43:fe:f5:
         2c:40:fb:d0:94:e1:15:23:ae:4b:25:14:b4:1b:8c:7f:45:9f:
         f9:2a:a0:67:ee:37:51:a6:26:6e:e0:ab:b2:f1:fe:b0:a9:3e:
         18:91:cb:d8:18:6b:82:e8:d3:b3:00:c8:95:d2:3d:db:f3:09:
         dc:0f:d4:47:cd:69:62:b1:7a:23:a3:f0:a7:36:e9:c2:a3:31:
         b2:0d:eb:1d:6a:d6:b7:5a:f3:28:de:d4:fc:fa:c9:73:fb:e0:
         16:ba:ca:6e:3b:53:a7:7b:cc:b0:26:e1:70:79:be:88:b8:2f:
         e9:0b:9b:f8:96:68:63:cf:a2:d3:76:a3:66:72:34:58:2b:0c:
         b0:83:a4:f1:f8:28:62:2f:2b:41:24:e8:ff:c1:65:d7:c8:b8:
         9e:ce:7c:bf:13:97:2a:39:4f:8d:f9:3c:db:c0:b1:e2:ab:74:
         1b:58:01:ed:4e:5a:7f:fc:64:07:fb:d0:80:17:c3:59:7c:78:
         ab:4f:26:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:51:46 2025 by rpki-client