Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
File:                     PxnYdtwluWxdxZi-Lb9uywZal18.mft (raw, json)
Hash identifier:          4+V8yvXWyTJ24jTYMURiVKdSIaRx6OMl1/DX06xQT9g=
Subject key identifier:   91:02:5A:23:A4:B8:96:D5:63:7E:BC:67:58:83:BD:D6:1E:28:C4:07
Authority key identifier: 3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F
Certificate issuer:       /CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
Certificate serial:       019750B412B49CB2EFE85287AE8D13419543
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
Manifest number:          03AD
Signing time:             Sun 08 Jun 2025 18:01:07 +0000
Manifest this update:     Sun 08 Jun 2025 18:01:07 +0000
Manifest next update:     Mon 09 Jun 2025 18:01:07 +0000
Files and hashes:         1: PxnYdtwluWxdxZi-Lb9uywZal18.crl (hash: n3tDFTi+sESvk3hoKVfdxDfSwWKJkAySX55eG9h3G4k=)
                          2: x8ghvFiQy8y7__Pm7K2GUSehU3A.roa (hash: 97TGydFeZ3RUDp9TsIz5UQ8MNV819kJP2yTvYQ+TbKU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:b4:12:b4:9c:b2:ef:e8:52:87:ae:8d:13:41:95:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
        Validity
            Not Before: Jun  8 18:01:07 2025 GMT
            Not After : Jun  9 18:01:07 2025 GMT
        Subject: CN=91025a23a4b896d5637ebc675883bdd61e28c407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bb:5b:ff:6a:2e:a5:81:ec:1c:92:3f:93:66:
                    3e:e6:89:73:b7:1b:d0:73:36:cc:c2:86:37:0c:9a:
                    36:a4:e7:05:9c:15:15:f3:6c:19:45:dd:ea:7d:f7:
                    5e:5c:7f:ba:82:d4:fa:a5:60:71:1f:aa:e6:55:86:
                    99:1c:d6:41:10:17:a2:8a:06:24:4d:db:61:f5:37:
                    40:78:73:e1:d4:44:80:98:0c:da:35:69:bd:5a:cd:
                    e5:bc:eb:96:7a:af:8d:a7:b5:fd:cc:21:f4:ad:d0:
                    5b:53:3f:1a:23:4f:0f:7b:c2:98:5f:51:c1:42:92:
                    05:1e:50:53:3a:f3:00:59:3b:45:d6:aa:31:5f:9a:
                    ee:70:f3:b4:93:1f:1b:89:06:97:29:b2:6a:ea:d8:
                    f8:86:25:df:61:b0:d1:f2:35:18:d4:fe:bd:2e:75:
                    7c:09:a7:10:42:d4:30:66:90:f8:b5:1e:b5:aa:21:
                    51:75:c6:16:fb:a0:74:a8:d5:eb:5f:e2:28:19:6b:
                    3e:d8:6e:ce:a9:38:ba:f2:c0:14:60:cf:b7:0f:64:
                    de:17:f3:67:3f:10:10:0f:a1:0c:29:37:04:18:ec:
                    19:b2:42:91:92:36:b3:77:29:9f:16:c2:09:54:87:
                    eb:60:31:00:23:da:72:f6:79:72:1f:51:7c:f2:7e:
                    0d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:02:5A:23:A4:B8:96:D5:63:7E:BC:67:58:83:BD:D6:1E:28:C4:07
            X509v3 Authority Key Identifier:
                keyid:3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:4f:2f:e3:28:1e:db:3a:46:78:eb:cc:91:70:54:e6:e4:54:
         39:7f:7c:e0:e8:3c:ba:79:b0:3f:85:f5:26:91:38:da:cc:19:
         f1:e8:45:c2:6a:38:2a:79:0d:b1:32:37:1c:69:01:db:71:6f:
         73:48:15:7d:7f:b1:3a:ec:ec:57:fa:4c:00:1f:6e:85:f0:5f:
         a4:cd:8a:66:82:ee:8c:17:20:24:a5:a3:33:1a:1a:3d:c6:50:
         e8:24:7d:23:9b:f0:c1:35:d8:78:d2:4e:2f:5a:88:74:ff:ec:
         9d:d7:a2:71:44:bf:db:5d:bc:81:e2:c5:83:54:14:db:eb:cd:
         93:35:be:a6:1d:d3:34:e4:99:f8:1a:df:a4:57:f5:97:31:35:
         bf:9b:07:12:e7:84:2b:2a:92:a4:44:76:03:05:ec:2b:01:62:
         c4:1c:c5:46:5a:ba:11:79:07:35:8f:08:59:2d:8a:bf:c7:93:
         6e:3b:fb:d3:b1:63:2b:b1:c2:4c:33:de:c2:84:34:c9:47:63:
         85:3b:43:a0:2b:ef:4b:13:c3:90:79:59:b1:22:18:56:76:05:
         97:11:12:f4:c4:43:80:e4:bd:3e:89:a7:c2:f0:32:98:48:8e:
         03:87:52:96:1c:81:a0:ce:2c:f0:f5:70:87:89:46:8b:03:73:
         eb:2f:f0:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQtBK0nLLv6FKHro0TQZVDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMTlkODc2ZGMyNWI5NmM1ZGM1OThiZTJkYmY2ZWNiMDY1
YTk3NWYwHhcNMjUwNjA4MTgwMTA3WhcNMjUwNjA5MTgwMTA3WjAzMTEwLwYDVQQD
Eyg5MTAyNWEyM2E0Yjg5NmQ1NjM3ZWJjNjc1ODgzYmRkNjFlMjhjNDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7tb/2oupYHsHJI/k2Y+5olztxvQ
czbMwoY3DJo2pOcFnBUV82wZRd3qffdeXH+6gtT6pWBxH6rmVYaZHNZBEBeiigYk
Tdth9TdAeHPh1ESAmAzaNWm9Ws3lvOuWeq+Np7X9zCH0rdBbUz8aI08Pe8KYX1HB
QpIFHlBTOvMAWTtF1qoxX5rucPO0kx8biQaXKbJq6tj4hiXfYbDR8jUY1P69LnV8
CacQQtQwZpD4tR61qiFRdcYW+6B0qNXrX+IoGWs+2G7OqTi68sAUYM+3D2TeF/Nn
PxAQD6EMKTcEGOwZskKRkjazdymfFsIJVIfrYDEAI9py9nlyH1F88n4NLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJECWiOkuJbVY368Z1iDvdYeKMQHMB8GA1UdIwQY
MBaAFD8Z2HbcJblsXcWYvi2/bssGWpdfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHhuWWR0d2x1V3hkeFppLUxiOXV5d1phbDE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yMjY0NTUtMTdhMC00NjNjLTg5NTkt
MGZiMTM5MWI1NGViLzEvUHhuWWR0d2x1V3hkeFppLUxiOXV5d1phbDE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8yMjY0NTUtMTdhMC00NjNjLTg5NTktMGZiMTM5MWI1NGVi
LzEvUHhuWWR0d2x1V3hkeFppLUxiOXV5d1phbDE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQk8v4yge
2zpGeOvMkXBU5uRUOX984Og8unmwP4X1JpE42swZ8ehFwmo4KnkNsTI3HGkB23Fv
c0gVfX+xOuzsV/pMAB9uhfBfpM2KZoLujBcgJKWjMxoaPcZQ6CR9I5vwwTXYeNJO
L1qIdP/sndeicUS/2128geLFg1QU2+vNkzW+ph3TNOSZ+BrfpFf1lzE1v5sHEueE
KyqSpER2AwXsKwFixBzFRlq6EXkHNY8IWS2Kv8eTbjv707FjK7HCTDPewoQ0yUdj
hTtDoCvvSxPDkHlZsSIYVnYFlxES9MRDgOS9PomnwvAymEiOA4dSlhyBoM4s8PVw
h4lGiwNz6y/wHg==
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:56:12 2025 by rpki-client