Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
File:                     PDULqC8_61ruKJOPvxsJweL9GbQ.mft (raw, json)
Hash identifier:          qG2TJJdXV6fIamMiU4hSSszaHwSz4tCWQn7k5xyCrr0=
Subject key identifier:   0B:57:54:80:95:59:B3:4D:8D:EE:8E:BF:02:DD:EF:22:54:97:B4:22
Authority key identifier: 3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4
Certificate issuer:       /CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
Certificate serial:       0199383985DF4F4C1A85B1437B230436B974
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
Manifest number:          167D
Signing time:             Thu 11 Sep 2025 10:01:57 +0000
Manifest this update:     Thu 11 Sep 2025 10:01:57 +0000
Manifest next update:     Fri 12 Sep 2025 10:01:57 +0000
Files and hashes:         1: 1-Csr3W7RFkTtbpc5vegpM0x3SJg.roa (hash: OEps/3ayuoO5bERjIwyI74TPDpt1ijmiHI+Ru4dOW1I=)
                          2: PDULqC8_61ruKJOPvxsJweL9GbQ.crl (hash: DDOGU0KQO7cSk2peXC3KwbQWVqh5bUVEpdg5Gyn+u0A=)
                          3: aI9PtDrL1wGCUURcBpHMKfTf4hE.roa (hash: 4oSaxJpQHFX+hBtLYICwFPgrE4wCzYMHUMuoAxfYBXE=)
                          4: j6dQ2cjzXA3192uDTyOAiZGLE8Q.roa (hash: b9/CxQNUb4cLntaVBU/KEYsxwEObm97HgDwZmznQiH0=)
                          5: jyPlSfMwE97ShJiNEree4W-YnKc.roa (hash: RPRkI69AUdx22PSRgMKu/d39p+trzoeOCprFB1jyo6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Sep 2025 10:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:38:39:85:df:4f:4c:1a:85:b1:43:7b:23:04:36:b9:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
        Validity
            Not Before: Sep 11 10:01:57 2025 GMT
            Not After : Sep 12 10:01:57 2025 GMT
        Subject: CN=0b5754809559b34d8dee8ebf02ddef225497b422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fb:37:84:fd:57:10:4c:e9:af:6d:2d:9f:67:
                    2e:66:ff:9a:ca:54:7d:67:15:fa:76:48:57:fe:25:
                    ab:db:fd:c5:df:62:1a:7a:2d:41:c4:df:c9:12:9b:
                    36:93:9f:69:96:e4:1c:20:e3:55:ca:5e:7a:ec:23:
                    e5:51:b4:1a:9a:69:79:8f:e9:1e:da:c3:d3:7d:be:
                    75:67:d4:bd:69:34:1a:8e:2b:dd:c9:41:c7:27:55:
                    8e:9a:ab:26:51:ae:23:d0:20:da:35:96:79:0f:a7:
                    43:15:42:f1:65:c0:37:66:54:3f:9c:a1:5f:d7:47:
                    d3:5d:cd:4c:cb:c0:6f:84:1e:97:1b:84:81:87:89:
                    a9:6f:59:22:c9:75:d0:d3:7d:af:a0:54:6a:0d:fa:
                    23:ab:7f:dd:70:be:f7:35:2d:f3:0e:40:ba:5d:fe:
                    a4:c8:5d:3d:c8:79:03:80:8f:f3:f9:ab:41:ba:38:
                    1c:00:5d:23:4d:dc:b6:97:de:9a:b2:59:d7:77:21:
                    32:43:e4:58:0c:11:91:f3:c9:fc:0c:51:fa:40:af:
                    46:d4:5b:26:a9:8f:32:47:19:d8:6c:64:8c:14:7e:
                    3e:a2:4f:ea:78:3c:3e:ca:2f:a2:6a:e5:99:ef:0a:
                    1d:bc:ca:95:b7:d0:c9:73:80:3d:aa:8c:c3:26:88:
                    9e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:57:54:80:95:59:B3:4D:8D:EE:8E:BF:02:DD:EF:22:54:97:B4:22
            X509v3 Authority Key Identifier:
                keyid:3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:a7:b8:53:d4:41:c6:1d:d1:6d:d1:63:cf:c5:92:24:4e:a7:
         0d:e5:ad:fa:b9:f6:45:16:1f:a4:87:ab:9e:8e:94:bb:31:e0:
         d5:b5:42:78:4c:51:b8:86:3d:65:b4:55:33:d7:22:67:46:2d:
         18:c7:c7:2a:39:19:29:e3:9f:b2:b8:2e:c2:d9:9f:74:bc:b7:
         8f:d4:02:50:14:70:5c:16:ec:18:30:9c:a5:7c:cf:a0:cc:f9:
         69:1e:7c:bd:8b:24:b4:8e:c9:40:47:fe:b1:55:e5:b7:db:7a:
         bd:8c:c1:c1:2b:d0:26:86:df:38:c2:25:37:76:3e:1e:b7:87:
         10:a6:5c:42:07:29:93:4f:c3:0c:29:38:60:2c:01:cd:b5:36:
         ca:cf:8d:6a:f8:bd:0f:95:5c:a2:63:7a:43:30:60:69:a0:6d:
         57:b3:65:34:11:84:67:fc:4e:5c:b4:1d:7d:88:07:43:47:13:
         d4:bd:fe:aa:7a:c5:57:5e:c5:68:64:52:61:f6:03:5c:5a:b7:
         51:27:ac:aa:02:37:90:3f:9d:3c:51:5c:bc:27:4e:a4:76:65:
         81:3c:61:f9:b2:06:be:f7:b7:a6:18:de:34:5c:f6:22:b0:a4:
         51:4f:73:16:74:00:bc:6c:5f:c8:d3:c4:19:91:d3:4c:e2:5e:
         e4:c0:45:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 17:23:39 2025 by rpki-client