Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
File:                     AzZPzt1pE1dzPNXM1wKduOYdHjo.mft (raw, json)
Hash identifier:          qqP7C3hFHfyPKOmAFhcDDNxbwp54rZQMGbBy+SPqAiQ=
Subject key identifier:   96:61:1A:32:77:E8:88:EA:01:B3:48:21:0E:DA:82:E1:32:6D:1B:E0
Authority key identifier: 03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
Certificate issuer:       /CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Certificate serial:       0197684E05441CD46B74D77EB728DC8101DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
Manifest number:          037A
Signing time:             Fri 13 Jun 2025 08:00:32 +0000
Manifest this update:     Fri 13 Jun 2025 08:00:32 +0000
Manifest next update:     Sat 14 Jun 2025 08:00:32 +0000
Files and hashes:         1: 0fTzrR0FgT99fPQppUr0MJauodA.roa (hash: vrJgtNANw3B/qMAsMw5g4uVNE+VfKXWhBzBneo91BaY=)
                          2: AzZPzt1pE1dzPNXM1wKduOYdHjo.crl (hash: 1D0UhvuOv1uKSK9xEdF7VggNh4n1KZgCjAprgZ/JPN4=)
                          3: _G4BPEj7ANS0vazxrz5vo4pF7D0.roa (hash: xO167vhfgz0I5ajGU1YeyzUid/SyKj87Sz3pu5PRJWo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:4e:05:44:1c:d4:6b:74:d7:7e:b7:28:dc:81:01:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
        Validity
            Not Before: Jun 13 08:00:32 2025 GMT
            Not After : Jun 14 08:00:32 2025 GMT
        Subject: CN=96611a3277e888ea01b348210eda82e1326d1be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:47:41:c3:cb:9e:ff:e4:c3:92:db:a0:84:80:
                    dc:76:fe:c4:71:03:0d:55:2e:8c:e4:2f:e6:20:ac:
                    37:4c:ac:20:68:2b:99:b0:c6:80:38:0b:fb:92:26:
                    23:82:4f:b3:d2:e1:21:5d:f0:9e:7d:c1:8b:69:d9:
                    cf:4e:77:41:32:82:b4:f8:65:ed:1d:be:6a:f9:fb:
                    87:de:df:9b:80:15:3f:f6:5e:c6:f7:7b:ba:5e:41:
                    ad:b1:13:0e:cd:51:82:83:20:dc:47:54:17:ad:86:
                    38:cd:b0:b2:20:a4:b1:96:88:bb:6e:b3:d6:fa:47:
                    f5:08:c3:84:04:13:6d:4d:36:15:73:69:67:3f:e4:
                    ed:b6:31:33:fe:54:e5:9a:d3:4b:05:83:43:e8:7c:
                    b1:03:35:97:bc:e9:80:9d:9b:b6:9d:11:16:71:3a:
                    8a:62:2b:0a:7b:40:fd:12:b2:4a:67:2f:3e:f1:e4:
                    45:b4:d0:cc:d3:28:76:8a:1e:db:2c:a2:a0:e8:40:
                    f6:74:f3:ae:fb:44:ce:26:65:9a:8b:7f:fe:88:d8:
                    7b:e4:8a:c0:0c:1b:72:a4:eb:f0:99:51:8b:07:68:
                    e8:f9:38:24:b1:65:46:07:35:34:d2:43:7b:c2:58:
                    e8:12:de:8d:76:2b:5b:f9:63:e5:25:6f:a0:94:23:
                    5a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:61:1A:32:77:E8:88:EA:01:B3:48:21:0E:DA:82:E1:32:6D:1B:E0
            X509v3 Authority Key Identifier:
                keyid:03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:e9:ad:0b:f9:67:32:21:cb:b2:59:23:38:30:a5:e5:1e:4c:
         c7:14:de:67:e6:a6:3f:86:f5:33:f5:e5:bb:a1:97:cd:72:46:
         4e:36:08:cb:42:97:d8:82:0d:0d:0f:34:83:2a:03:e0:fb:34:
         ce:5a:b8:94:c0:51:c2:69:1b:32:f0:0b:ad:fd:e1:36:ca:3d:
         ee:ac:37:86:01:99:79:65:08:d6:1d:9b:fc:d4:a0:d4:94:81:
         2d:e0:22:5e:21:58:71:3d:2d:06:5c:48:8f:74:49:8d:1a:4a:
         3e:03:c3:73:1e:8a:bd:91:4a:9d:c0:74:f2:04:28:9b:42:6e:
         af:e5:ee:46:94:06:2d:81:bd:e7:b0:bc:de:cf:e1:3c:09:7f:
         a3:32:49:02:46:f2:00:7c:71:6e:ba:86:dc:1c:94:04:0a:6f:
         f5:3b:05:6b:09:c3:43:4e:90:be:d4:1e:80:32:24:88:c8:d8:
         86:26:21:7c:93:40:17:31:05:5b:33:a0:85:98:bb:36:d2:cb:
         da:3d:42:d1:89:d5:a0:4d:8a:0a:ca:b8:ff:e1:2f:98:76:66:
         ff:f6:f2:6d:4c:da:a0:22:49:84:cf:20:af:f0:0d:74:26:ac:
         d2:09:45:15:5f:42:39:41:36:18:4e:1a:08:c0:6f:4e:69:f1:
         28:d7:57:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 15:00:20 2025 by rpki-client