Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft
File:                     puiiWpN5KlizotgPsarZWeZa7d8.mft (raw, json)
Hash identifier:          5jIVNHC/rK9W9ja/eadCO6vuj+B+XJcPDlNVN7l6+60=
Subject key identifier:   22:A0:18:26:7E:1F:D2:26:42:68:E9:DB:88:CA:CE:C2:14:FD:33:DF
Authority key identifier: A6:E8:A2:5A:93:79:2A:58:B3:A2:D8:0F:B1:AA:D9:59:E6:5A:ED:DF
Certificate issuer:       /CN=a6e8a25a93792a58b3a2d80fb1aad959e65aeddf
Certificate serial:       01984966DEABBEA8388B96163BF80E573DB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/puiiWpN5KlizotgPsarZWeZa7d8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft
Manifest number:          155B
Signing time:             Sun 27 Jul 2025 01:02:15 +0000
Manifest this update:     Sun 27 Jul 2025 01:02:15 +0000
Manifest next update:     Mon 28 Jul 2025 01:02:15 +0000
Files and hashes:         1: puiiWpN5KlizotgPsarZWeZa7d8.crl (hash: WgV+8npVKeJdz1DAHJZzBMIPqtbvINshLo2TIXGsI8E=)
                          2: wEf0XFewVLDEH498_3ycA_iLwpA.roa (hash: jj8EG5dFJudLiKXib9hP+9XTMUS6HXp2GHHzc8cEo24=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/puiiWpN5KlizotgPsarZWeZa7d8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:de:ab:be:a8:38:8b:96:16:3b:f8:0e:57:3d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6e8a25a93792a58b3a2d80fb1aad959e65aeddf
        Validity
            Not Before: Jul 27 01:02:15 2025 GMT
            Not After : Jul 28 01:02:15 2025 GMT
        Subject: CN=22a018267e1fd2264268e9db88cacec214fd33df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bc:43:42:af:82:34:4a:62:44:a5:be:4d:fe:
                    01:ac:12:8d:39:5c:8a:c8:e4:ca:05:72:51:b2:cf:
                    3e:af:16:96:e1:d5:fb:65:7a:e7:01:f3:ad:58:5f:
                    1b:bc:1d:73:ed:57:41:ac:e9:1b:f2:dd:b6:86:df:
                    98:d8:08:13:09:7a:62:20:05:71:e3:9c:51:30:b3:
                    48:1a:37:be:51:6a:f2:c0:09:36:c1:94:38:21:a4:
                    e8:3c:ae:fe:e1:c0:50:27:9b:76:96:34:71:c6:bd:
                    5a:93:cf:34:25:7e:f9:fd:49:43:84:54:62:c2:10:
                    0c:90:60:42:7f:74:22:06:ef:e1:ef:23:5b:26:60:
                    ee:15:e2:71:40:af:98:2e:a1:b9:11:e3:e2:14:c6:
                    5e:15:9e:bc:8e:73:46:97:d3:aa:8a:a4:d5:29:38:
                    f6:f7:b0:bb:36:44:60:ac:d2:10:6a:fd:b4:1e:f3:
                    46:42:51:89:42:81:21:2c:a0:a0:8e:ad:04:c8:f2:
                    46:95:1a:f1:6d:24:f9:1f:c4:34:41:39:d1:c8:f6:
                    1e:44:c1:21:bb:d1:c3:6f:0e:08:72:8f:ca:c5:01:
                    d7:79:51:ed:17:49:54:05:9d:8a:fc:39:63:1f:4c:
                    65:9d:9a:cd:65:22:97:89:0e:e4:f9:c3:dc:d9:6d:
                    0b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A0:18:26:7E:1F:D2:26:42:68:E9:DB:88:CA:CE:C2:14:FD:33:DF
            X509v3 Authority Key Identifier:
                keyid:A6:E8:A2:5A:93:79:2A:58:B3:A2:D8:0F:B1:AA:D9:59:E6:5A:ED:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/puiiWpN5KlizotgPsarZWeZa7d8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:ca:e4:8e:48:7f:44:8b:c4:bb:67:a2:00:78:09:03:ae:9c:
         33:01:d8:e4:07:cb:2e:74:97:38:bf:ab:1b:0d:1b:af:cb:3d:
         4e:38:ec:ba:ab:58:d1:fa:71:d8:a6:fe:05:cf:41:ca:d8:00:
         9c:50:1a:83:0d:42:23:86:a4:7d:44:8b:32:aa:12:52:76:70:
         d0:72:47:fe:0f:f7:97:c2:3d:27:d4:42:18:48:a2:97:d9:d1:
         ce:11:64:e6:d9:be:fa:10:16:96:a0:17:04:19:b2:0b:0c:99:
         31:82:9a:57:c8:bd:75:f6:ce:a6:b1:57:50:54:88:7e:5d:23:
         37:0a:37:14:b6:c4:8f:fe:83:50:43:fa:20:42:db:91:03:21:
         4c:85:20:5c:be:26:30:50:6b:7c:77:6a:ab:2a:72:2b:95:56:
         d2:78:20:c7:d4:de:78:b2:bf:32:38:6e:47:f4:59:d4:53:26:
         72:77:40:12:4f:f2:7b:b6:f9:cc:1f:01:db:35:b5:08:57:c1:
         4c:69:ad:f8:0f:44:56:e5:1b:13:c3:ef:85:a9:f1:87:b8:b4:
         2a:7a:14:45:ca:00:b1:1f:a1:9e:ab:20:8c:56:31:02:3d:61:
         47:ec:61:65:93:ec:70:8a:66:fa:d7:3b:bd:7f:e4:66:56:d1:
         69:d7:5c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:12:02 2025 by rpki-client