Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
File:                     pOuetVR8f18ar8CtoUCAVBlhhyY.mft (raw, json)
Hash identifier:          GWy37lpQHuyN9tkQviL8fYz8UONHzcf8SCM+MONu/w0=
Subject key identifier:   93:15:DC:7F:6A:56:91:28:31:EA:8E:59:FF:61:EF:55:30:68:08:66
Authority key identifier: A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26
Certificate issuer:       /CN=a4eb9eb5547c7f5f1aafc0ada140805419618726
Certificate serial:       01974D7B9DA40B3C08953A78C3513EFD7526
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
Manifest number:          096F
Signing time:             Sun 08 Jun 2025 03:00:36 +0000
Manifest this update:     Sun 08 Jun 2025 03:00:36 +0000
Manifest next update:     Mon 09 Jun 2025 03:00:36 +0000
Files and hashes:         1: J_w-klg8Fz7usxtg6f6kBplmW2Q.roa (hash: wSUiP/GQT3afkhYb4zAVk2weNrXx80BBBUvY2crSbB8=)
                          2: pOuetVR8f18ar8CtoUCAVBlhhyY.crl (hash: ETqMOgyM8P9wWlkUk1ilkhjZXm6wQI65yOmluh2a6cs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:7b:9d:a4:0b:3c:08:95:3a:78:c3:51:3e:fd:75:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4eb9eb5547c7f5f1aafc0ada140805419618726
        Validity
            Not Before: Jun  8 03:00:36 2025 GMT
            Not After : Jun  9 03:00:36 2025 GMT
        Subject: CN=9315dc7f6a56912831ea8e59ff61ef5530680866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c7:2d:5b:f1:32:05:84:a9:08:6c:a7:89:70:
                    93:82:a9:a9:4a:87:5f:e9:e5:84:2a:70:90:84:91:
                    49:7b:bc:4c:34:2f:24:39:72:33:e9:83:4a:dd:b1:
                    0f:77:fb:00:d2:b4:af:6a:83:bc:e7:fd:0b:1a:d3:
                    52:17:c3:1c:ac:62:53:de:86:d1:84:fc:22:17:4e:
                    b7:6b:eb:3e:7a:1d:ba:09:70:db:c9:b3:2c:88:84:
                    6b:73:b8:bb:d5:33:38:4b:22:c8:96:6e:80:1c:4a:
                    da:eb:0f:d2:a2:aa:65:d4:83:70:46:e1:94:5e:a5:
                    77:f6:12:10:7d:d9:2e:f5:85:b5:90:7a:36:40:28:
                    d3:70:bc:ec:a6:75:00:5e:b0:8b:d2:3a:8a:51:5c:
                    af:fd:88:bf:a9:a0:79:26:ec:c1:e1:97:a9:b4:0d:
                    a8:5a:63:e2:ad:4b:8a:05:52:ef:ae:22:a2:7f:79:
                    19:22:e6:35:45:67:c5:b5:63:dd:74:5a:0e:fe:c8:
                    93:7d:7e:b9:a9:a7:92:43:e0:3c:f9:7b:cc:a2:3b:
                    9f:10:e7:db:ca:ee:de:c3:7a:e5:4a:5b:98:c5:ba:
                    e2:28:40:a7:bf:87:79:96:85:12:66:39:da:a2:a6:
                    2f:4a:ea:1f:96:da:b3:15:0d:4c:1c:a5:32:36:4c:
                    a5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:15:DC:7F:6A:56:91:28:31:EA:8E:59:FF:61:EF:55:30:68:08:66
            X509v3 Authority Key Identifier:
                keyid:A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:14:19:31:4f:2f:ff:20:7a:78:de:82:33:76:b4:1c:71:88:
         a8:ea:73:77:00:a0:a5:36:fa:4b:86:d4:a8:f5:e0:b6:01:67:
         3f:68:fa:00:4d:99:3d:65:fe:b8:49:e3:88:e5:6e:2a:bc:c8:
         b7:c9:2f:c4:c3:ef:ed:14:4c:31:46:cd:7f:84:d3:f0:26:d9:
         35:63:f7:19:e9:f4:8d:cc:9a:44:f0:b5:b6:1a:0a:61:b0:41:
         f5:c4:62:7a:99:e7:4a:63:d8:2a:c4:16:31:ab:50:2b:1d:d6:
         a1:7c:21:a6:b8:1f:a8:d4:cd:1b:f8:09:4a:2b:f8:f6:7a:e0:
         c1:10:31:91:60:31:18:00:45:83:2d:32:b5:a3:7b:b8:30:d4:
         d7:f1:45:ff:9b:45:a5:11:25:b2:9d:5a:47:70:a3:2a:6d:95:
         1b:a8:46:39:91:a6:18:df:74:f9:78:f3:76:d3:4b:95:3a:5e:
         a9:21:41:d5:de:3e:99:c1:06:72:ba:41:24:ba:6e:47:03:66:
         5d:95:bf:5b:d0:27:eb:69:63:66:07:3f:fd:82:cc:c3:3e:27:
         15:65:d8:e7:0e:28:25:8f:c6:45:e4:b8:b6:bc:cd:d9:36:1d:
         10:be:e1:97:33:79:17:20:a6:5f:76:ca:0f:bd:f4:cc:71:41:
         4c:9a:62:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:19:56 2025 by rpki-client