Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft
File:                     PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft (raw, json)
Hash identifier:          uV1DlMfNZgAjNdo9j2pwJtlVg5u8Y4QKepHeZcxUSRE=
Subject key identifier:   BA:F5:1F:A0:BA:1F:42:86:DC:A0:81:B7:FD:58:0C:EA:80:E5:4C:27
Authority key identifier: 3F:25:95:F2:66:59:FC:74:DB:88:32:D5:DA:23:B0:E9:E3:67:FC:B3
Certificate issuer:       /CN=3f2595f26659fc74db8832d5da23b0e9e367fcb3
Certificate serial:       0197488C4928AD299F90A2C07DBE25ECF3A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft
Manifest number:          04EB
Signing time:             Sat 07 Jun 2025 04:00:42 +0000
Manifest this update:     Sat 07 Jun 2025 04:00:42 +0000
Manifest next update:     Sun 08 Jun 2025 04:00:42 +0000
Files and hashes:         1: PyWV8mZZ_HTbiDLV2iOw6eNn_LM.crl (hash: p7rfrGggrTbQGEFdjuTVte4bpn2d1wgVHYwJzRjMY6s=)
                          2: fZ9isGtIlM4KCLTcv8R-iIf03v8.roa (hash: B9s0fxg99QLzPGHKR09eX4IAtgF+hQonUvqfnXhZlTc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:49:28:ad:29:9f:90:a2:c0:7d:be:25:ec:f3:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f2595f26659fc74db8832d5da23b0e9e367fcb3
        Validity
            Not Before: Jun  7 04:00:42 2025 GMT
            Not After : Jun  8 04:00:42 2025 GMT
        Subject: CN=baf51fa0ba1f4286dca081b7fd580cea80e54c27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f4:5f:96:b0:f9:d1:1f:47:68:bf:dc:44:2f:
                    dd:be:83:02:0d:32:e9:17:4b:90:ab:73:be:54:1d:
                    9f:d8:e7:a2:c2:6e:47:da:2a:62:7c:a3:15:2f:bd:
                    7a:2c:db:12:de:30:39:53:c2:49:22:e0:a3:2e:e1:
                    76:fd:41:92:7b:f0:8f:8f:ef:4f:5c:b4:8b:68:e5:
                    90:8b:57:68:3f:9f:d9:46:16:95:a0:d3:8f:bd:82:
                    a1:59:07:e5:dd:8e:ea:85:3e:95:54:bf:6c:1f:4c:
                    b7:04:38:5c:66:eb:d3:4f:36:b0:6e:1e:4b:f0:ae:
                    14:14:3d:54:39:93:7d:b6:43:9f:6c:c9:29:6a:d7:
                    aa:e8:9b:7f:d9:d2:a5:6d:c3:9b:be:0a:1e:31:0c:
                    c5:ab:58:3e:b8:a1:d0:d0:b0:91:86:83:c6:87:b0:
                    f8:f6:5c:46:ba:e6:d7:df:cc:3f:f7:81:6b:e4:ca:
                    a9:6e:ed:d7:ad:a5:18:e4:8e:47:dc:5b:13:aa:ea:
                    ef:2d:bc:08:cb:4f:26:dd:3b:1b:64:32:f8:d1:46:
                    7e:c9:28:b8:a7:a9:a1:02:6c:47:81:c4:c0:b6:47:
                    92:f9:36:df:76:44:2d:c5:f9:48:d9:76:7a:a8:34:
                    82:0c:1f:f1:56:d3:dc:ca:a9:fd:9f:9d:e1:51:74:
                    75:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F5:1F:A0:BA:1F:42:86:DC:A0:81:B7:FD:58:0C:EA:80:E5:4C:27
            X509v3 Authority Key Identifier:
                keyid:3F:25:95:F2:66:59:FC:74:DB:88:32:D5:DA:23:B0:E9:E3:67:FC:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:0e:1e:fa:31:66:36:64:87:45:33:65:0f:bd:1a:7c:06:41:
         8e:6c:73:a2:3f:f8:4c:55:5f:96:c2:a2:39:51:d3:ef:4b:43:
         b0:62:13:f7:a6:2c:c8:46:1b:52:89:94:e2:e3:76:16:96:91:
         0a:39:6c:e9:12:5e:f8:46:dc:ad:e9:98:43:e8:a8:f4:b9:95:
         8c:96:8a:64:f5:53:3d:f5:17:ec:af:70:44:52:ee:e8:29:ad:
         77:c4:15:f5:f4:64:d4:96:12:c3:cd:13:49:4e:63:fe:ae:97:
         10:fe:94:9f:4b:47:13:ac:10:94:11:da:54:1f:83:9e:8e:ad:
         29:57:cc:c1:4b:fd:1f:68:a7:fe:7c:12:af:96:dd:54:7d:ca:
         34:92:d9:a7:e3:bc:50:eb:ce:97:94:6c:be:b1:2b:fb:0d:fc:
         41:ee:a5:45:25:58:95:40:a4:04:f9:3c:ff:c8:69:47:86:fa:
         7c:2e:26:13:aa:8a:ac:14:a2:aa:7e:4d:b0:d8:b9:a6:17:4c:
         2d:5f:94:e0:d1:d0:e5:0a:19:25:94:01:45:63:50:03:84:1c:
         e0:aa:e6:f2:74:13:9c:5d:6e:c9:35:4e:08:77:88:d6:98:cf:
         e6:c6:b2:19:13:86:92:2f:b3:50:93:1e:50:4d:c3:7e:93:21:
         3e:f7:e0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:04:28 2025 by rpki-client