Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
File:                     Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft (raw, json)
Hash identifier:          wURx7e/dkR+Eag2mAikRXu8v58UV7c9p9FxtYMEnECc=
Subject key identifier:   85:3B:6B:E7:C0:E8:C3:28:67:3E:58:2D:5B:BF:04:27:43:37:E9:AF
Authority key identifier: 3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
Certificate issuer:       /CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Certificate serial:       01976F62C58626C61F25D88D2E58EFC84EFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
Manifest number:          04BD
Signing time:             Sat 14 Jun 2025 17:00:33 +0000
Manifest this update:     Sat 14 Jun 2025 17:00:33 +0000
Manifest next update:     Sun 15 Jun 2025 17:00:33 +0000
Files and hashes:         1: 4j1kn9ZRNRslxMytu5eL1iX2ygw.roa (hash: RrIgP4kxCXaPwvdRe3NPsmeTo+G3ybJskr4dzXhR3EY=)
                          2: Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl (hash: sp+mx4cln2ibbVDkPSifeuG6/XBwAXoYF8QIRnlAl5k=)
                          3: wWkcOa8cqDGRhn8j-1x_z-ePvg0.roa (hash: gQMjNWFHknHqWjiClHplw+oae04KXbyQbF9fSFE9xPI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 17:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:62:c5:86:26:c6:1f:25:d8:8d:2e:58:ef:c8:4e:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
        Validity
            Not Before: Jun 14 17:00:33 2025 GMT
            Not After : Jun 15 17:00:33 2025 GMT
        Subject: CN=853b6be7c0e8c328673e582d5bbf04274337e9af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:75:a1:3d:0a:c5:db:16:5a:db:6b:27:32:6e:
                    4a:9f:0c:10:77:82:c1:f7:3a:6b:73:b0:76:7a:b4:
                    3b:e5:f3:be:f5:4c:fc:ce:d1:fb:03:45:28:24:45:
                    8f:1d:da:e1:37:98:a3:a6:98:90:ad:28:65:e2:21:
                    ce:df:e3:16:72:4c:c3:12:88:5f:05:02:ef:bc:15:
                    a2:2b:2c:1a:b3:86:7f:b8:84:64:be:8f:0b:07:62:
                    72:d1:a6:b9:c1:ac:17:4d:7d:60:8a:76:f1:df:92:
                    ce:95:0d:35:4b:c2:a8:81:cd:e4:51:68:fc:0f:96:
                    f5:28:84:e6:4e:0b:d5:40:e4:0a:c4:98:07:5c:8b:
                    30:fe:bd:6a:36:63:5e:c2:7e:9a:a0:4e:89:d4:e1:
                    9c:2d:ac:db:48:b6:9c:cd:0c:47:a0:b5:ab:01:46:
                    5a:1b:63:e8:01:e4:6d:49:c4:c5:b7:8d:d9:77:8c:
                    3f:d8:8a:4b:80:0d:68:66:88:93:90:24:bf:ba:26:
                    03:62:da:98:61:a4:2d:b6:89:f7:14:da:65:fb:df:
                    0b:54:fd:01:f0:55:dc:d6:7b:39:aa:53:38:46:a1:
                    37:cc:45:86:c5:73:53:b8:2c:2e:f6:a8:b7:1b:36:
                    28:4d:cd:f4:9d:a5:55:74:d3:b7:c2:3e:c9:89:78:
                    2e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:3B:6B:E7:C0:E8:C3:28:67:3E:58:2D:5B:BF:04:27:43:37:E9:AF
            X509v3 Authority Key Identifier:
                keyid:3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:1a:db:8e:b9:f7:01:83:7c:9a:37:47:12:6a:59:e7:c9:34:
         9d:ef:c3:80:7f:9b:30:8c:5b:ff:fb:0d:8a:51:b9:a2:af:e5:
         80:a0:9e:70:10:ed:0f:a6:dd:44:8b:e3:04:85:a6:e7:a4:31:
         ff:40:6d:d1:e8:65:d0:e1:b1:a3:78:db:4c:d7:d3:96:0a:83:
         19:5c:88:fe:fc:20:8f:a8:9f:c0:9a:ab:8a:f1:26:b1:c8:d4:
         e0:2b:ff:cf:13:32:12:a7:ee:c9:79:fe:49:b2:dd:0a:82:ca:
         06:1b:23:b9:f2:87:70:1f:e1:3f:0d:bc:57:03:36:27:c3:ca:
         87:a9:3d:b2:a5:03:d0:7c:20:60:02:90:aa:77:21:a9:d1:ff:
         98:9c:ac:8d:6c:d4:f4:67:c9:d5:32:7c:e5:5d:6b:29:35:e5:
         7e:ad:de:5f:49:22:25:b2:d4:9a:99:ed:f2:80:a0:58:9e:bc:
         d5:5b:a4:e2:78:0e:8f:0a:25:b9:8a:f3:91:5a:e9:95:45:ef:
         52:91:ac:80:e8:99:7b:56:a9:15:4a:11:4f:9c:3c:dc:96:1b:
         41:c2:a4:2a:54:aa:42:74:a1:62:af:22:a9:f5:83:30:4f:eb:
         2f:e7:24:60:ba:55:84:2e:0f:ee:54:13:ff:17:80:16:e2:84:
         ef:27:0c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:08:57 2025 by rpki-client