Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
File:                     PXud_6rjPsLPGbWtTknB6esdnWQ.mft (raw, json)
Hash identifier:          hmx246BW/+RYr7wcRrmGPgWBt8qTU9c68vbXoRY8HmI=
Subject key identifier:   F6:F8:39:2A:3E:F1:1A:CB:63:A4:88:61:A2:CE:E6:B6:19:47:A3:7F
Authority key identifier: 3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
Certificate issuer:       /CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Certificate serial:       01988A6A13D1227F7DE3D4B22A246E34303D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
Manifest number:          0268
Signing time:             Fri 08 Aug 2025 16:01:04 +0000
Manifest this update:     Fri 08 Aug 2025 16:01:04 +0000
Manifest next update:     Sat 09 Aug 2025 16:01:04 +0000
Files and hashes:         1: 7MAR8ldskj16F5kzBhniowMVmU4.roa (hash: mAbacv2iYcdMB2GMEDPPh1FDDClOu0PIdLu6x7Tl3MY=)
                          2: PXud_6rjPsLPGbWtTknB6esdnWQ.crl (hash: TReWdzhWD+axUG2ZiKnnU/6EidOpT+hK4kdepOA0Aps=)
                          3: k4yKqIR7cQItxrDu_gDWC-myYX0.roa (hash: xhdvsy13/3L8cbu2Dvi5ab7FoTe57YZRZZmouEau4sA=)
                          4: lThuEEXjbOk9kIBiQn4XNJSri60.roa (hash: saUcIO3Pzwx9suP3W1g5k4dgT0dO1lpuD0PTK3qh6JE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8a:6a:13:d1:22:7f:7d:e3:d4:b2:2a:24:6e:34:30:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
        Validity
            Not Before: Aug  8 16:01:04 2025 GMT
            Not After : Aug  9 16:01:04 2025 GMT
        Subject: CN=f6f8392a3ef11acb63a48861a2cee6b61947a37f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:94:63:bd:87:6b:28:37:3b:84:ef:03:03:0d:
                    3a:0f:8d:99:c5:f5:19:15:f8:55:1f:18:79:4d:ee:
                    20:17:18:97:1b:d7:57:5a:15:8a:e3:be:99:b2:c2:
                    a7:f4:97:bb:7f:fc:29:39:b5:3e:0a:33:8b:e4:c0:
                    ba:42:f8:e5:0f:72:4b:97:b7:e2:71:d1:c4:8f:04:
                    93:29:8f:a4:05:fb:52:02:a7:6b:43:c6:57:e1:8d:
                    e8:34:68:ad:20:31:f0:b2:99:4d:b0:46:98:97:db:
                    10:f7:f4:3f:c1:df:67:ff:3d:ae:1c:4c:a6:7e:24:
                    5f:71:3d:7a:11:90:c4:cf:03:68:e0:88:16:b2:d1:
                    ad:68:d2:00:59:50:b9:0a:f3:d8:53:74:88:fc:13:
                    ae:42:5b:c3:1b:25:89:3b:e8:da:85:01:82:74:67:
                    88:db:d7:dc:23:1a:dc:51:33:24:f1:e2:cf:22:2e:
                    81:e4:b2:70:08:8e:1b:ac:66:65:53:77:1f:24:ae:
                    17:b9:63:ec:ec:bf:49:cc:74:1c:8d:ff:44:2b:97:
                    f4:de:fb:ad:ca:4d:35:05:87:f3:d2:0c:55:c5:c6:
                    9d:f2:73:e0:e0:86:89:4f:fe:07:1d:0c:4a:95:36:
                    b4:67:7d:d1:de:c6:20:28:ea:cb:dd:b3:09:bc:2d:
                    92:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F8:39:2A:3E:F1:1A:CB:63:A4:88:61:A2:CE:E6:B6:19:47:A3:7F
            X509v3 Authority Key Identifier:
                keyid:3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:e6:2a:6c:40:0c:33:a9:c3:56:62:31:69:17:eb:63:d5:a8:
         06:ed:a2:60:f0:1d:b4:ef:35:6f:12:af:89:6c:6e:88:8f:35:
         9c:5d:e6:d3:39:e5:a3:9c:d8:57:a5:82:73:41:89:c2:ef:a1:
         f8:d1:65:90:14:e2:da:a1:62:b6:7d:90:d8:77:91:8d:f6:31:
         2d:11:91:c1:7d:bd:88:0b:b3:d9:bf:3f:2b:26:29:ed:a0:7a:
         ad:ff:4a:2b:2c:0e:e4:5a:0e:81:90:fd:0e:9f:12:09:e5:7b:
         e2:59:a1:c5:73:dd:fc:a8:77:3f:3c:dc:8a:32:74:72:24:bb:
         44:cb:d8:55:36:b6:11:1f:8a:5e:a5:7f:35:7b:31:2c:b6:d4:
         cb:43:4a:0b:29:1d:0a:3f:0e:3e:4f:40:69:37:39:73:a1:56:
         86:fe:17:6e:f3:06:ce:83:3b:c1:e7:27:1f:9e:76:ac:64:8c:
         84:92:c8:d6:f9:c5:37:35:fe:12:13:c6:fa:28:a6:f4:64:ed:
         79:0e:c1:dd:eb:4e:f7:a0:a2:73:e9:d2:85:10:35:53:89:09:
         fd:13:91:49:85:fc:fa:a5:ee:52:e2:48:0b:5a:21:b1:e3:7d:
         ff:2a:95:bd:77:e9:b7:fb:e1:02:61:dd:c9:f2:77:eb:16:ed:
         1b:fd:2a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:34:23 2025 by rpki-client