Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
File:                     PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft (raw, json)
Hash identifier:          KdvU2cOOjFx1jl/5JYly89SBjWD7hNgW9HiZp+9n8Ig=
Subject key identifier:   93:7C:E4:21:5E:C3:CE:EF:52:F4:78:63:D6:4D:B5:79:70:D7:72:AA
Authority key identifier: 3C:17:7B:52:80:43:A8:59:53:FC:25:0F:99:1D:9D:80:20:E2:81:0D
Certificate issuer:       /CN=3c177b528043a85953fc250f991d9d8020e2810d
Certificate serial:       01984965486ABFC7F6F37EBD95116F011BAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
Manifest number:          160B
Signing time:             Sun 27 Jul 2025 01:00:31 +0000
Manifest this update:     Sun 27 Jul 2025 01:00:31 +0000
Manifest next update:     Mon 28 Jul 2025 01:00:31 +0000
Files and hashes:         1: 97b_DOZexsMsbNq0jd1_KnrCkGw.roa (hash: Zsql+k4AO5wopmLFKXiIANICmsUjbHpn09FeXgUdFls=)
                          2: PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl (hash: HHp+bnBwwY1+mevdbCd6Tyn2a28FsloWT4mdpgjes3E=)
                          3: vFJBXwiLiT0SV6hpYm9T1KH_3Sw.roa (hash: iZ/rALDyZJ1JAyWAtw5uSLsZV8Z+UzVJnNgd7eGfu2E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:48:6a:bf:c7:f6:f3:7e:bd:95:11:6f:01:1b:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c177b528043a85953fc250f991d9d8020e2810d
        Validity
            Not Before: Jul 27 01:00:31 2025 GMT
            Not After : Jul 28 01:00:31 2025 GMT
        Subject: CN=937ce4215ec3ceef52f47863d64db57970d772aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:3c:ad:c3:10:85:26:6a:78:63:59:53:01:c2:
                    7c:ce:90:ec:73:7c:2a:2e:ae:67:66:9b:a3:f1:8b:
                    d9:d4:b7:fc:53:88:fb:47:c3:0b:4e:95:37:60:e4:
                    90:ba:69:75:e1:d6:54:32:12:81:6f:5f:d6:48:98:
                    41:4f:6c:d2:09:d6:bd:c7:53:56:3b:ce:d6:2c:76:
                    c5:e6:51:cb:95:c1:86:b0:58:89:da:81:f2:4c:dd:
                    60:44:ca:bb:71:2b:08:23:f8:74:ff:63:11:c5:1b:
                    8f:67:63:65:3b:a5:6f:92:0d:ff:cc:3e:c0:03:ae:
                    37:75:1d:47:9e:5d:28:65:29:bf:e1:ec:20:5c:59:
                    fb:87:f8:5c:ce:2f:11:92:ce:0a:51:3e:6d:0a:70:
                    61:ed:02:9d:24:6f:ed:50:da:87:f9:73:e7:2a:a3:
                    c7:e3:30:63:ee:8f:c9:e5:5a:b3:03:30:c2:17:cc:
                    1c:7e:e5:81:52:83:42:11:6b:bb:b6:36:62:4e:b4:
                    5b:37:e6:ff:34:7d:4a:0c:43:fe:52:81:30:61:10:
                    fa:47:63:9f:93:02:21:d3:79:37:f3:67:d3:08:09:
                    bc:15:61:f3:32:68:06:f9:1b:7b:22:46:ec:13:ee:
                    e2:c6:f6:56:79:65:b8:a6:be:6e:f3:ab:a8:14:d4:
                    4b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:7C:E4:21:5E:C3:CE:EF:52:F4:78:63:D6:4D:B5:79:70:D7:72:AA
            X509v3 Authority Key Identifier:
                keyid:3C:17:7B:52:80:43:A8:59:53:FC:25:0F:99:1D:9D:80:20:E2:81:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:b4:41:b4:4b:f7:c7:77:bb:c3:41:6e:7c:c6:9d:ad:15:dd:
         a1:7c:78:0f:ca:de:f5:5b:3b:a2:ac:95:af:5c:6a:58:57:f1:
         f1:d0:19:16:24:3f:65:c0:cb:e6:e6:8a:0c:6d:ed:fa:17:e9:
         b8:89:51:72:db:33:a7:bc:25:2e:8b:e4:d0:47:f4:3c:f1:ac:
         22:be:61:0c:7d:2a:d1:39:0b:05:7a:88:fc:29:32:86:c3:40:
         f1:e7:81:07:eb:95:ec:81:ae:55:3b:12:00:fc:fd:32:87:7b:
         00:b0:e5:dd:e8:0e:fe:de:1d:a8:f3:3c:dc:b6:ba:2d:d1:ff:
         ed:2e:37:9e:13:10:a0:d1:96:70:77:b8:a6:1e:8b:28:96:f3:
         dc:eb:fa:ac:bd:72:f7:3a:79:7e:00:6f:37:d0:31:b2:8e:e6:
         73:d6:03:67:60:ef:49:c2:7c:a3:3c:39:2a:67:08:c4:c3:42:
         05:7d:87:37:19:52:cb:dd:a3:d8:c7:ff:07:69:cd:9f:fd:99:
         87:d9:52:2a:02:6f:de:94:06:b8:85:7f:a1:00:5b:08:5e:05:
         6c:a3:56:85:0c:7f:98:1f:4a:1c:69:02:b8:3f:f9:15:55:7e:
         c3:06:5b:e1:5e:18:59:8c:13:4e:f4:0e:eb:9e:58:76:03:a6:
         fc:6e:11:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:28:53 2025 by rpki-client