Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
File:                     PNJOCMV2B8rrzBnIVS6uLpNeguU.mft (raw, json)
Hash identifier:          JiDHHhiSeE7r7hWyMh/soUVQ1QxUz1a5/xSgrWI6wmE=
Subject key identifier:   5F:7A:04:27:B9:11:BD:D5:94:CA:A8:DB:AC:4B:E2:A7:24:7C:24:97
Authority key identifier: 3C:D2:4E:08:C5:76:07:CA:EB:CC:19:C8:55:2E:AE:2E:93:5E:82:E5
Certificate issuer:       /CN=3cd24e08c57607caebcc19c8552eae2e935e82e5
Certificate serial:       01976A05BD3EE5ECC7F51934B2676AAA3ACB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
Manifest number:          AE
Signing time:             Fri 13 Jun 2025 16:00:50 +0000
Manifest this update:     Fri 13 Jun 2025 16:00:50 +0000
Manifest next update:     Sat 14 Jun 2025 16:00:50 +0000
Files and hashes:         1: AYSLpwufRV-W_9lRsqnuQFR2IOQ.roa (hash: Q3fm8OZk/vOZ06gyMzMxpxsqxYSULclXWKZVcRfqEg0=)
                          2: PNJOCMV2B8rrzBnIVS6uLpNeguU.crl (hash: FQsiKWFvdwyQSJGX8jYC0kiTBjfc+lb6NYXFeZGy+iI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:05:bd:3e:e5:ec:c7:f5:19:34:b2:67:6a:aa:3a:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cd24e08c57607caebcc19c8552eae2e935e82e5
        Validity
            Not Before: Jun 13 16:00:50 2025 GMT
            Not After : Jun 14 16:00:50 2025 GMT
        Subject: CN=5f7a0427b911bdd594caa8dbac4be2a7247c2497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:23:46:fd:5a:ee:2d:14:05:66:d8:67:a3:15:
                    01:da:ad:ac:f3:cf:3c:d8:a5:fc:5a:f5:a2:4e:46:
                    47:73:03:c7:05:c5:38:42:7a:da:9a:9f:04:45:d0:
                    9f:f6:39:98:85:f2:5e:ca:b4:fb:3e:ce:f3:bf:89:
                    ac:61:30:c5:75:e7:a0:33:fd:70:40:be:20:e3:5c:
                    5d:9d:e1:3f:71:14:3d:d8:72:b1:d7:23:b0:f3:53:
                    62:31:a3:f7:8c:15:68:98:ec:4e:7f:7c:c5:35:73:
                    a7:43:6d:2b:ae:23:4e:f9:b4:55:46:c4:fa:1c:a3:
                    70:9c:ef:42:ac:c8:57:b4:f5:67:8b:ff:d4:61:8a:
                    2d:20:67:a4:b2:40:c6:07:28:f5:ce:ca:78:52:e4:
                    9a:fb:fe:45:c6:da:e8:51:2d:23:95:74:19:af:ce:
                    9a:f6:9d:6a:78:ab:4a:52:15:22:cc:9c:fc:b0:e0:
                    89:17:49:56:07:ad:8e:3c:4c:b2:2b:3e:90:83:09:
                    c5:63:3c:02:51:b6:57:8f:4c:cf:58:74:70:22:fb:
                    c3:5e:c0:f1:ce:25:11:40:c7:38:76:21:08:1a:a8:
                    10:d1:91:21:22:ed:f4:7a:22:df:ff:78:a7:80:b0:
                    c3:d6:e1:7b:a8:b0:9a:3e:e9:12:be:9f:57:d7:a3:
                    af:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:7A:04:27:B9:11:BD:D5:94:CA:A8:DB:AC:4B:E2:A7:24:7C:24:97
            X509v3 Authority Key Identifier:
                keyid:3C:D2:4E:08:C5:76:07:CA:EB:CC:19:C8:55:2E:AE:2E:93:5E:82:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:de:1a:4a:ea:24:20:79:5b:be:c3:74:87:23:ca:90:22:8c:
         e4:ad:6b:28:da:f5:4e:32:d7:93:25:99:eb:d9:3a:a5:df:23:
         69:d2:bb:90:2c:2d:ee:30:e6:07:14:04:5e:4c:f0:02:bf:46:
         bc:c5:e8:5d:0f:14:3a:84:93:41:11:ba:c7:be:60:23:59:96:
         20:5e:f6:3c:a3:e1:42:d7:ed:59:e1:57:fc:e9:20:ba:bb:4b:
         62:7d:07:6d:09:d9:89:6e:cf:33:49:ca:77:3a:49:5d:3e:75:
         ae:97:e7:80:1c:71:d0:78:e7:8e:f4:5e:cd:91:d7:b4:e5:c7:
         bd:4b:10:41:e3:de:4d:d4:11:86:35:69:eb:07:2a:4f:0e:47:
         43:60:67:66:4a:6c:ca:70:92:d5:83:3c:80:b2:e0:d3:89:95:
         7e:cf:86:44:81:52:d1:b5:88:97:55:fb:e3:e3:0a:11:d7:2e:
         46:e2:d1:82:5d:a6:e0:0e:29:74:86:91:dc:dc:3b:21:a5:14:
         11:fc:92:de:76:6b:1f:05:5d:50:96:e9:9a:62:2b:89:0a:b3:
         e4:56:d6:f2:c1:1f:08:13:88:31:dc:5d:6a:24:a9:12:f5:fe:
         95:bf:6a:d5:26:a1:f5:0d:02:31:3b:9d:bc:fd:a6:cc:aa:a1:
         0c:05:35:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:11:35 2025 by rpki-client