Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
File:                     PlDR3TG8dEm6zBhksBr5lMVH79M.mft (raw, json)
Hash identifier:          OxLeVMsx1pDpGar6Qrd9LGtD5iWJ9bXnxjjJixdqMQA=
Subject key identifier:   01:19:08:5F:05:87:1B:A6:7B:7D:CA:3B:1E:4F:91:FA:CB:71:00:2C
Authority key identifier: 3E:50:D1:DD:31:BC:74:49:BA:CC:18:64:B0:1A:F9:94:C5:47:EF:D3
Certificate issuer:       /CN=3e50d1dd31bc7449bacc1864b01af994c547efd3
Certificate serial:       01984852A0B063053D3B4B595E83D250558A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
Manifest number:          15FE
Signing time:             Sat 26 Jul 2025 20:00:31 +0000
Manifest this update:     Sat 26 Jul 2025 20:00:31 +0000
Manifest next update:     Sun 27 Jul 2025 20:00:31 +0000
Files and hashes:         1: PlDR3TG8dEm6zBhksBr5lMVH79M.crl (hash: WyNmLwYLxCBTjz9cpH7EEE2XA/hwt9IT4BF83ilOZBk=)
                          2: k0fv_0lBTVHhkgh3M6y4FfdKWug.roa (hash: NS6EWo/2W4cdxM4+yYUneBPcsKtB9dlJYih0Lk7s4iM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:52:a0:b0:63:05:3d:3b:4b:59:5e:83:d2:50:55:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e50d1dd31bc7449bacc1864b01af994c547efd3
        Validity
            Not Before: Jul 26 20:00:31 2025 GMT
            Not After : Jul 27 20:00:31 2025 GMT
        Subject: CN=0119085f05871ba67b7dca3b1e4f91facb71002c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fe:d0:eb:7b:98:7f:92:5a:c7:c7:75:18:fa:
                    45:f1:49:1d:07:38:1e:78:32:b9:40:b5:9b:08:fb:
                    97:bc:e5:31:9b:1e:3c:b4:9e:b0:68:50:36:f3:d5:
                    0d:75:af:91:9c:e4:f8:ce:87:1f:75:e6:19:ff:08:
                    24:71:f9:77:a3:86:22:7e:e5:e3:15:16:b4:e0:ef:
                    32:19:56:3c:52:d0:36:2e:26:18:c4:32:6f:be:f9:
                    2e:34:5c:3d:02:60:b5:6b:75:30:f0:81:19:e7:68:
                    3b:6f:5e:e7:2c:ee:6f:79:0c:f7:60:7c:5b:07:f1:
                    8e:de:de:48:68:a2:79:a1:9d:1a:04:45:53:52:21:
                    f2:f0:9e:1a:11:16:4e:3d:db:82:75:25:ef:8d:6d:
                    f4:d8:c4:30:6e:80:8f:53:f8:f2:96:4b:c2:98:97:
                    4d:b4:08:3f:cc:48:ab:f7:cb:1c:eb:05:c5:d4:f4:
                    e1:3a:54:6e:13:3a:45:ea:ea:bc:ff:7c:0d:97:75:
                    e6:cd:b2:e0:0a:60:cf:40:d0:d5:8d:63:7b:16:0d:
                    62:1d:21:5c:05:f0:3a:04:44:e5:c9:87:e4:cc:b6:
                    76:cf:48:aa:f6:d7:7a:77:40:15:60:5e:b6:f4:9e:
                    30:15:73:ee:dc:f1:7f:27:1f:61:37:57:c2:1a:02:
                    39:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:19:08:5F:05:87:1B:A6:7B:7D:CA:3B:1E:4F:91:FA:CB:71:00:2C
            X509v3 Authority Key Identifier:
                keyid:3E:50:D1:DD:31:BC:74:49:BA:CC:18:64:B0:1A:F9:94:C5:47:EF:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:ee:03:59:eb:17:67:dd:a0:7d:ef:25:37:fe:95:c3:de:5e:
         18:84:61:c2:0e:52:03:86:b4:b3:ae:a7:5e:36:88:12:aa:75:
         ba:02:92:24:c1:10:f1:82:29:fc:b8:e4:6f:e5:b7:1a:af:52:
         4e:34:73:80:09:e4:9d:68:22:16:7b:bf:43:1e:da:35:05:26:
         7f:aa:0a:c6:22:b7:68:d5:c2:95:2e:c1:ef:e8:92:1c:51:6a:
         61:8e:12:26:c1:49:1a:d4:e4:56:97:5f:7e:af:bc:f7:61:86:
         ea:10:7b:2e:f4:a5:bc:9a:58:8f:98:c0:6c:ca:ba:61:f2:8c:
         52:b3:7f:01:3b:b8:a8:74:87:f6:4a:b1:ea:14:18:04:32:bc:
         cc:0f:bc:a6:43:10:bd:1b:b8:97:67:3d:45:c1:07:af:28:15:
         c8:5e:72:f4:3f:53:5b:10:c3:40:04:ad:d2:67:37:ac:f4:90:
         75:85:4d:18:ac:97:56:eb:74:ca:03:cb:65:37:2e:e9:b1:15:
         8f:e1:ca:67:ff:d3:61:09:c0:89:7c:3a:57:d1:b9:2a:4b:6a:
         fb:9f:54:f4:41:6b:3c:a6:25:f7:5e:d0:13:91:4d:aa:25:b5:
         92:ac:d3:f2:d5:ba:36:33:48:eb:3d:5d:a1:3e:11:fe:91:e1:
         86:c5:e9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:18:32 2025 by rpki-client