Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
File:                     PjMt0plMbuiUNhWKLqwfSCkizSo.mft (raw, json)
Hash identifier:          42BpqTB22YfqVk4BfhQdfOplxnoG4KihIFSJoNjdaxI=
Subject key identifier:   F6:6D:84:B4:9C:9D:DD:F4:7C:82:86:41:1A:67:96:E9:B7:A6:B1:AB
Authority key identifier: 3E:33:2D:D2:99:4C:6E:E8:94:36:15:8A:2E:AC:1F:48:29:22:CD:2A
Certificate issuer:       /CN=3e332dd2994c6ee89436158a2eac1f482922cd2a
Certificate serial:       01987374351D026097A1624D8BAC8D5BAD70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
Manifest number:          072E
Signing time:             Mon 04 Aug 2025 05:00:52 +0000
Manifest this update:     Mon 04 Aug 2025 05:00:52 +0000
Manifest next update:     Tue 05 Aug 2025 05:00:52 +0000
Files and hashes:         1: Eg6f3oV_tmh90tuvdcGS4z7md3o.roa (hash: +iCyWfpNRgku+keY+1TZvk0pjaW3ZowUvCSdJVvHiXs=)
                          2: PjMt0plMbuiUNhWKLqwfSCkizSo.crl (hash: lif7h0OFiuZFetjFGwd7w/YHHjC6b8DEMtcdtDJhD3U=)
                          3: hvAcV0p--qlqSvXjrIPln93SWWk.roa (hash: TjRxZCcsv470SMx3GoJIYlzXG8w9x5IPVw3HcGg4jOI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:74:35:1d:02:60:97:a1:62:4d:8b:ac:8d:5b:ad:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e332dd2994c6ee89436158a2eac1f482922cd2a
        Validity
            Not Before: Aug  4 05:00:52 2025 GMT
            Not After : Aug  5 05:00:52 2025 GMT
        Subject: CN=f66d84b49c9dddf47c8286411a6796e9b7a6b1ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1a:4f:c1:36:ee:09:42:8e:c7:71:9f:34:18:
                    5c:87:c9:df:18:de:26:fa:63:cb:c1:82:b6:7e:09:
                    17:9c:cc:5f:0b:17:eb:78:0d:89:f3:53:1e:b7:59:
                    c7:12:f0:14:b3:80:42:9a:7b:13:69:6c:a8:6b:29:
                    19:9c:79:2d:2b:eb:72:15:7c:d9:87:f9:37:92:6c:
                    c3:62:9e:ed:b2:83:2c:ee:9e:a8:0b:36:fa:12:58:
                    cd:9f:29:a8:ae:17:60:41:e4:3d:f1:b3:72:8f:77:
                    23:70:ba:7c:6d:f5:7e:c1:58:0f:13:f3:3f:5a:7e:
                    6f:fe:56:19:9d:c3:2c:b7:41:ea:38:62:b6:e1:8f:
                    55:ce:11:34:5f:af:0b:7c:5a:8c:94:01:85:cf:7a:
                    a9:5b:bf:85:3c:ca:51:24:7a:d5:7f:43:f9:19:c9:
                    af:bb:ce:34:5e:3e:09:0e:c8:c5:05:f5:62:b6:90:
                    d6:77:e1:3e:f7:0a:91:53:c6:6b:89:44:1a:c8:bd:
                    ca:e3:21:b6:e5:4c:f3:f7:3a:e3:62:2f:cd:03:3c:
                    75:60:d3:81:ab:9d:96:76:29:2d:cb:c4:8a:58:96:
                    91:a1:66:e9:1e:f3:4e:6c:07:f3:a3:e1:a2:2d:75:
                    5d:20:03:b9:f0:dd:3c:21:23:eb:bb:c1:32:3b:98:
                    38:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:6D:84:B4:9C:9D:DD:F4:7C:82:86:41:1A:67:96:E9:B7:A6:B1:AB
            X509v3 Authority Key Identifier:
                keyid:3E:33:2D:D2:99:4C:6E:E8:94:36:15:8A:2E:AC:1F:48:29:22:CD:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:46:80:da:bf:d9:db:5a:87:4c:92:fe:35:4e:8f:70:87:29:
         2b:b5:5e:9d:7c:e0:f6:44:f7:a6:47:fd:97:22:96:ba:c7:09:
         79:1a:b9:4b:dd:b9:e7:f1:3c:dc:00:42:12:bf:57:06:7d:63:
         11:81:fe:c4:de:12:9a:1b:4c:14:c0:21:15:8f:2f:f3:9d:cc:
         d2:66:4b:aa:0e:2d:ed:97:10:0d:60:a8:a3:89:80:53:db:aa:
         6b:6a:35:df:67:a0:d5:68:68:e8:6b:bd:a9:e9:ac:ee:ce:71:
         64:4d:8d:a6:97:53:03:41:41:4d:3b:ca:4a:04:11:4a:61:36:
         fd:fa:55:05:6e:66:07:5c:5a:ec:12:24:c3:20:26:9f:31:10:
         07:7b:68:37:a7:37:ae:45:29:99:1e:38:2a:0e:89:61:cb:b8:
         ae:a2:c2:a6:37:bd:c1:07:29:f0:b1:37:6e:6b:4f:76:62:36:
         8c:1d:b3:83:87:5e:04:2e:11:71:5d:9a:3c:32:9e:f5:e8:54:
         1a:f8:a4:69:9d:c3:37:d9:7c:f9:86:fe:7d:02:ad:6a:f1:50:
         b6:41:a7:63:80:35:41:f3:39:d7:bf:5e:85:6f:59:8e:00:59:
         42:c9:19:7e:ca:f8:d5:ed:43:13:62:98:14:af:b4:5c:31:c0:
         81:9e:b9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:07 2025 by rpki-client