Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
File:                     pJMvpJVkpXamFD5F-BVmjyANdjc.mft (raw, json)
Hash identifier:          zc9PEnvoj/2ghs4vKshVMpGSgSLJkJrSa8l1TbG4JOE=
Subject key identifier:   00:FE:68:8D:4A:82:39:1F:F1:39:DA:DD:B0:F3:FA:F6:3E:5A:4D:EC
Authority key identifier: A4:93:2F:A4:95:64:A5:76:A6:14:3E:45:F8:15:66:8F:20:0D:76:37
Certificate issuer:       /CN=a4932fa49564a576a6143e45f815668f200d7637
Certificate serial:       0198530DD8366F78DEC5F2BFE215C9BD2BA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
Manifest number:          06B2
Signing time:             Mon 28 Jul 2025 22:01:12 +0000
Manifest this update:     Mon 28 Jul 2025 22:01:12 +0000
Manifest next update:     Tue 29 Jul 2025 22:01:12 +0000
Files and hashes:         1: nbFO3tETAKU90cGGwpaCKUOKTLY.roa (hash: cquJx46DtG8x6pISzm/UdeY5xz+jlo5riwT4Pb8N/jw=)
                          2: pJMvpJVkpXamFD5F-BVmjyANdjc.crl (hash: No0gBg8QLG/GDC5MVaFyYZtCxdrqrDMgD3o1zhh1B8I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 22:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:0d:d8:36:6f:78:de:c5:f2:bf:e2:15:c9:bd:2b:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4932fa49564a576a6143e45f815668f200d7637
        Validity
            Not Before: Jul 28 22:01:12 2025 GMT
            Not After : Jul 29 22:01:12 2025 GMT
        Subject: CN=00fe688d4a82391ff139daddb0f3faf63e5a4dec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fc:60:b4:37:0f:ac:67:57:e3:c1:da:09:d3:
                    7e:d9:6a:b8:42:7d:cb:35:3a:6b:85:31:f9:e4:99:
                    85:20:91:28:26:95:01:40:54:e3:d0:ec:10:7a:2f:
                    65:a9:35:ce:4b:44:37:3e:e6:9e:38:3a:ee:37:9d:
                    0e:1c:6a:22:ff:24:5f:e9:cf:0a:07:83:c0:3f:34:
                    7d:6d:27:af:e3:91:d6:c6:a8:97:f2:7d:c5:49:e0:
                    e2:a2:e4:f9:b4:d8:ba:b1:a8:bb:68:c4:0b:68:b1:
                    fe:33:e7:ed:68:55:18:2c:59:d7:ff:44:41:d2:d2:
                    5c:a4:b7:6a:7c:9f:88:16:2c:8e:c6:7c:11:ed:6c:
                    bc:e3:7f:bd:62:4b:e0:07:7d:e9:b2:0d:08:86:93:
                    d3:d0:2e:e1:6c:35:d9:6d:b9:7f:e0:69:a8:df:1a:
                    7b:d7:32:e3:9a:4e:1d:93:12:7a:9f:a7:fa:da:c4:
                    68:20:94:52:46:21:9e:40:a6:1e:bd:5c:4c:26:56:
                    be:be:2d:54:0f:fe:e1:a5:b9:f5:53:b4:e1:6e:e9:
                    c1:b0:6a:ef:dc:65:ea:57:7c:50:c6:18:2b:96:21:
                    20:45:4a:30:c0:b3:70:85:da:2d:00:5f:d7:d2:7c:
                    24:43:9c:85:37:fa:a5:e4:dd:95:7c:ae:59:5e:42:
                    4a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:FE:68:8D:4A:82:39:1F:F1:39:DA:DD:B0:F3:FA:F6:3E:5A:4D:EC
            X509v3 Authority Key Identifier:
                keyid:A4:93:2F:A4:95:64:A5:76:A6:14:3E:45:F8:15:66:8F:20:0D:76:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:ec:c5:aa:36:69:40:f6:1e:06:97:87:a3:80:1c:4f:97:ff:
         97:71:48:3f:da:38:56:8e:0f:eb:4d:a3:db:b4:dc:7d:62:e4:
         ab:9c:4f:db:1f:0b:30:ea:04:bb:f1:d9:ce:81:97:32:81:72:
         02:e7:16:bd:fd:e7:d2:ef:62:3b:7c:f3:4a:fa:d3:8f:78:d4:
         f0:68:e7:0a:b1:63:a4:41:25:73:e5:41:61:9d:77:c3:b2:2f:
         6e:74:a8:fd:2a:21:d5:1d:8b:50:4c:9e:e1:99:d2:ba:b6:af:
         27:7f:8b:d6:29:16:06:bd:dd:03:23:76:1c:d4:ca:25:ca:64:
         6a:a9:1e:8d:66:6b:3a:d4:90:44:81:68:da:9b:49:28:f6:a9:
         b1:c0:62:44:22:c7:e3:a1:f3:d2:51:d3:d5:2a:7d:e0:f8:19:
         1d:b3:22:3d:da:18:79:d8:94:6d:1b:a0:ec:b7:f4:21:65:a7:
         32:99:ba:c1:c4:cf:49:b5:6c:61:df:20:dc:19:23:76:0c:fa:
         65:27:7d:40:2b:b3:63:57:6f:44:42:6c:95:c5:db:5d:71:cd:
         bd:28:4a:e3:f0:90:5c:ec:96:ca:56:c7:99:52:8d:77:9f:f0:
         44:04:fc:a0:88:1f:0a:c8:25:54:f0:91:2a:4e:99:44:49:65:
         58:42:54:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTDdg2b3jexfK/4hXJvSulMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OTMyZmE0OTU2NGE1NzZhNjE0M2U0NWY4MTU2NjhmMjAw
ZDc2MzcwHhcNMjUwNzI4MjIwMTEyWhcNMjUwNzI5MjIwMTEyWjAzMTEwLwYDVQQD
EygwMGZlNjg4ZDRhODIzOTFmZjEzOWRhZGRiMGYzZmFmNjNlNWE0ZGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/xgtDcPrGdX48HaCdN+2Wq4Qn3L
NTprhTH55JmFIJEoJpUBQFTj0OwQei9lqTXOS0Q3PuaeODruN50OHGoi/yRf6c8K
B4PAPzR9bSev45HWxqiX8n3FSeDiouT5tNi6sai7aMQLaLH+M+ftaFUYLFnX/0RB
0tJcpLdqfJ+IFiyOxnwR7Wy843+9YkvgB33psg0IhpPT0C7hbDXZbbl/4Gmo3xp7
1zLjmk4dkxJ6n6f62sRoIJRSRiGeQKYevVxMJla+vi1UD/7hpbn1U7ThbunBsGrv
3GXqV3xQxhgrliEgRUowwLNwhdotAF/X0nwkQ5yFN/ql5N2VfK5ZXkJKuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAD+aI1Kgjkf8Tna3bDz+vY+Wk3sMB8GA1UdIwQY
MBaAFKSTL6SVZKV2phQ+RfgVZo8gDXY3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEpNdnBKVmtwWGFtRkQ1Ri1CVm1qeUFOZGpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8wNGFiNDYtODNmMy00MTViLTg4M2Et
YzdjMzI2ZDdhMzY0LzEvcEpNdnBKVmtwWGFtRkQ1Ri1CVm1qeUFOZGpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8wNGFiNDYtODNmMy00MTViLTg4M2EtYzdjMzI2ZDdhMzY0
LzEvcEpNdnBKVmtwWGFtRkQ1Ri1CVm1qeUFOZGpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOuzFqjZp
QPYeBpeHo4AcT5f/l3FIP9o4Vo4P602j27TcfWLkq5xP2x8LMOoEu/HZzoGXMoFy
AucWvf3n0u9iO3zzSvrTj3jU8GjnCrFjpEElc+VBYZ13w7IvbnSo/Soh1R2LUEye
4ZnSuravJ3+L1ikWBr3dAyN2HNTKJcpkaqkejWZrOtSQRIFo2ptJKPapscBiRCLH
46Hz0lHT1Sp94PgZHbMiPdoYediUbRug7Lf0IWWnMpm6wcTPSbVsYd8g3Bkjdgz6
ZSd9QCuzY1dvREJslcXbXXHNvShK4/CQXOyWylbHmVKNd5/wRAT8oIgfCsglVPCR
Kk6ZREllWEJUZQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 01:52:02 2025 by rpki-client