Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft
File:                     Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft (raw, json)
Hash identifier:          XFea59FVi9i0m8l14XWnLLaxBRQkIpNDy7NC6cF6hKA=
Subject key identifier:   A4:F5:D1:63:CD:7F:EB:C7:54:2C:15:88:5B:2E:66:7A:38:56:26:94
Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
Certificate issuer:       /CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Certificate serial:       01983B72C2BDC14C7DBEDA04E358A6ED05F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft
Manifest number:          1612
Signing time:             Thu 24 Jul 2025 08:00:33 +0000
Manifest this update:     Thu 24 Jul 2025 08:00:33 +0000
Manifest next update:     Fri 25 Jul 2025 08:00:33 +0000
Files and hashes:         1: 5GDtzDxQGf1ytzR86OdYdVfgY10.roa (hash: Y7XPkUc6nkXQ9pggu+D76scK3gfgjCpno0IF9isJJaU=)
                          2: 8_VofHRjLqpbexG_OvMfcAc1YnM.roa (hash: LU1FpEuXnyVe9W4sDVOna2qpuw6a/LcZ+SoooZ+qS1I=)
                          3: FLnErLvOpzZbsRT_gxw1xkGyG-k.roa (hash: hVcpYnUD1s1paKRtMc3s9Fba/ywgfiiofSMSn9fncl4=)
                          4: HIaBGvmxdnBLgd35agLSA4bkubM.roa (hash: i0iDI6axXMfE17qcVLg1zq6ssI2uwAR7lVjpfhI0sp0=)
                          5: IsflCESWPhjRHYjITbBIhqfYpPo.roa (hash: sT5tNZEaEL4o7glcBW9pWPzalexd/M/QWhbl7A9RAP8=)
                          6: Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl (hash: VH5ISKtSyBsUe0gum5kuo9Md+7ZCGt/oCFydO+isDss=)
                          7: TJ_T11Afazhf3X-XRb_MTGkgqHs.roa (hash: OJh2YQWVoUHD+3A+f2ze8IRJ0craejKYG/dno9c7vf8=)
                          8: WY6OCR49xjLWDGDrTxBKtibrV1g.roa (hash: /EmbrZRMYbTXiRc/+8GCsi3J47C1og/mSFwDOqHSu8U=)
                          9: bkHQOuqvDDjiWoZ_FWNlw3OoyWg.roa (hash: 4pB5ThjluE6IXLoMqZ2xaF+3UW/apUpBTyNJgyK3/o0=)
                          10: dpiwVyP36v1YV2afir9h5xUMcuE.roa (hash: YrE4G5icZyg4bgdRocIY+JMcSadk1tZR0cVr4Ds0EB0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 08:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3b:72:c2:bd:c1:4c:7d:be:da:04:e3:58:a6:ed:05:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b
        Validity
            Not Before: Jul 24 08:00:33 2025 GMT
            Not After : Jul 25 08:00:33 2025 GMT
        Subject: CN=a4f5d163cd7febc7542c15885b2e667a38562694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6a:3b:b4:05:5a:86:42:96:f6:aa:d1:73:8e:
                    e4:20:f8:74:0f:96:fd:24:f5:c0:7b:59:61:18:1f:
                    1b:7f:9b:8a:a3:b4:4b:ae:f5:e0:b6:9b:44:34:b9:
                    98:1a:49:73:8a:69:f4:e8:da:fd:5f:0a:71:0d:5f:
                    3b:5e:87:45:bb:21:fb:42:33:7a:b6:28:90:3d:65:
                    f6:91:18:15:f5:d2:46:f2:e2:55:e5:fe:ae:19:db:
                    78:9a:b8:81:f9:39:dc:12:b1:7e:bc:e5:dd:3e:53:
                    fc:fd:78:76:d0:5f:41:9b:9d:35:0b:b4:64:3c:dc:
                    d2:9c:cd:77:fe:43:36:47:81:df:8a:8d:af:b7:83:
                    6e:43:b2:e3:ea:f1:b4:e9:96:5d:d0:3e:c1:cc:d7:
                    b1:fc:6c:25:91:a7:cf:46:3d:29:0a:68:a6:62:25:
                    8b:fc:cc:36:f2:76:9f:bc:f9:c7:f3:2e:16:7c:01:
                    28:10:76:4f:54:8e:96:db:24:94:9c:56:4c:57:09:
                    37:22:21:93:52:eb:4d:a9:14:1c:ab:7e:84:e0:19:
                    08:39:e9:e1:ac:06:e2:ac:8f:8f:5d:d4:b0:ec:16:
                    20:d4:0f:b6:9e:5c:5e:a9:08:6c:ef:2b:ac:e5:46:
                    15:50:6a:56:5a:2e:f7:78:57:30:07:ed:16:85:2a:
                    06:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F5:D1:63:CD:7F:EB:C7:54:2C:15:88:5B:2E:66:7A:38:56:26:94
            X509v3 Authority Key Identifier:
                keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:47:b7:50:ed:47:07:b6:05:ac:a6:9f:dc:cb:10:d3:20:c7:
         0b:d7:f1:c8:d8:74:6c:50:19:58:fc:40:c0:ad:57:78:71:85:
         ae:d7:8e:98:7a:6f:b8:53:92:92:8f:89:28:54:15:be:7f:3c:
         90:d8:80:9f:ea:4b:95:c9:83:65:cc:81:bc:24:73:62:fa:3a:
         d8:2e:eb:b1:49:d6:6e:f0:b0:df:03:56:b4:48:04:cd:ba:ca:
         ec:2b:81:43:b2:8d:61:c5:d9:ce:a1:9c:cb:f5:d3:61:ed:63:
         96:cc:b8:79:c9:fb:dc:f9:c8:7d:27:82:ee:9f:bd:37:f2:08:
         60:8f:23:58:31:d5:07:10:1d:2b:8a:ea:bf:da:d8:7f:ec:d9:
         00:a2:e8:2c:c0:ef:25:b5:fd:e3:7c:f7:2f:34:2e:7e:b6:87:
         c1:82:bf:56:0a:7d:d5:e7:80:82:ef:cc:8a:15:a2:cb:01:67:
         36:9f:89:51:83:a7:89:54:2c:de:2c:b3:ff:2e:35:a1:3b:25:
         ed:c4:9f:5a:ce:ce:02:3c:8a:e7:82:85:2d:c2:64:16:53:d0:
         6f:99:35:8d:82:0b:14:1c:5e:91:2b:71:6e:84:31:ab:95:bc:
         c6:4d:10:49:2f:7c:d8:5e:2f:ff:2c:46:a0:79:f9:f8:5e:36:
         eb:33:e7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 12:14:30 2025 by rpki-client