Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
File:                     PlDR3TG8dEm6zBhksBr5lMVH79M.mft (raw, json)
Hash identifier:          JaKI1PQtWMPruA0yUlfr6N/DdBSy1UZ9hO9R1D4MhCc=
Subject key identifier:   54:5B:88:0B:61:61:1C:CD:AD:78:2D:6E:C1:AE:E1:A5:EF:56:6C:60
Authority key identifier: 3E:50:D1:DD:31:BC:74:49:BA:CC:18:64:B0:1A:F9:94:C5:47:EF:D3
Certificate issuer:       /CN=3e50d1dd31bc7449bacc1864b01af994c547efd3
Certificate serial:       01974B562F79FFF93A98860F870999A238F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
Manifest number:          157B
Signing time:             Sat 07 Jun 2025 17:00:28 +0000
Manifest this update:     Sat 07 Jun 2025 17:00:28 +0000
Manifest next update:     Sun 08 Jun 2025 17:00:28 +0000
Files and hashes:         1: PlDR3TG8dEm6zBhksBr5lMVH79M.crl (hash: aTvq/GOeT5Dt9KPWSBpTSN5GqHFcQllon+8lO/DSidI=)
                          2: k0fv_0lBTVHhkgh3M6y4FfdKWug.roa (hash: NS6EWo/2W4cdxM4+yYUneBPcsKtB9dlJYih0Lk7s4iM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:56:2f:79:ff:f9:3a:98:86:0f:87:09:99:a2:38:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e50d1dd31bc7449bacc1864b01af994c547efd3
        Validity
            Not Before: Jun  7 17:00:28 2025 GMT
            Not After : Jun  8 17:00:28 2025 GMT
        Subject: CN=545b880b61611ccdad782d6ec1aee1a5ef566c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:55:de:f1:c5:39:7b:7b:1b:70:58:17:f3:c4:
                    65:2d:b6:37:7b:e8:38:65:61:a9:30:be:e4:cb:98:
                    dd:a5:88:fd:72:72:f1:a6:3f:a6:7d:61:89:64:ed:
                    a6:f6:91:f6:1c:25:c7:ec:ae:9d:9a:cf:59:67:ef:
                    c6:99:b1:3d:29:92:84:d6:58:d4:ba:31:e8:a5:ef:
                    0b:fa:0c:24:e5:e1:55:ba:7f:12:eb:5f:ed:f9:b2:
                    a6:22:64:e0:c1:1b:18:6d:cb:eb:a8:70:34:5d:f2:
                    76:14:fb:9c:85:f5:09:9a:6c:b9:92:78:70:29:f3:
                    55:22:aa:37:3d:59:46:69:ee:89:d5:ae:47:b2:d5:
                    5e:77:05:e8:36:e1:c6:c0:63:cb:eb:11:11:ee:1b:
                    9a:32:53:7b:51:3d:4d:76:6a:ed:dc:b4:f6:f7:ac:
                    51:7f:e5:74:d1:a9:95:11:1a:d6:11:60:53:50:69:
                    24:fb:e6:ca:cd:6c:c2:4e:02:fd:22:e2:10:82:a0:
                    bc:d3:8e:43:43:4b:50:65:f6:e1:42:95:58:34:33:
                    a2:60:d9:fc:1c:e8:d4:82:1e:16:94:02:8a:dc:de:
                    e0:92:a7:b4:ca:4c:44:8a:a1:d5:60:b0:be:94:a1:
                    20:69:ab:f1:d8:61:60:8f:e1:35:45:77:56:e9:bd:
                    9b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:5B:88:0B:61:61:1C:CD:AD:78:2D:6E:C1:AE:E1:A5:EF:56:6C:60
            X509v3 Authority Key Identifier:
                keyid:3E:50:D1:DD:31:BC:74:49:BA:CC:18:64:B0:1A:F9:94:C5:47:EF:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:f4:5d:d1:9f:97:a8:a4:53:03:f0:b4:46:87:97:f6:21:be:
         4a:4f:ff:39:6f:b2:f0:42:85:10:82:d0:13:69:5d:6e:e0:db:
         dc:bd:c2:3a:e3:79:bf:50:3c:3b:8f:ea:93:61:43:17:a1:5f:
         fc:9d:dc:8d:07:6a:20:08:c9:fe:1d:dc:cd:fd:8f:b2:f7:ac:
         b7:3e:43:c5:d9:fc:b5:0e:2d:78:2d:0b:c8:c6:9f:dd:93:fe:
         b5:b1:92:dd:4c:ca:2e:52:7b:9d:1d:42:63:f6:ac:09:ed:1e:
         21:50:de:6c:6e:6a:e6:58:4e:8f:5a:c4:70:ec:21:51:a4:36:
         d4:ad:95:2e:cc:bb:2d:79:11:38:ad:68:b4:45:91:4a:0e:f8:
         35:ad:d8:75:e6:e0:5f:8b:12:72:ee:2d:57:43:8f:07:3a:50:
         aa:0e:f6:a5:c5:26:ae:e3:bf:1e:81:df:77:53:a6:78:5d:db:
         b0:cf:b6:cb:f5:e2:35:f5:e7:68:20:79:36:28:ad:33:62:a9:
         49:0c:de:75:68:d3:58:26:64:bd:6e:bf:ef:8f:54:ad:0a:db:
         5b:51:db:0f:38:33:96:3a:e4:2e:4c:bf:34:73:57:85:54:dd:
         1f:4b:48:2f:d6:24:d3:0d:f4:f3:00:1e:46:60:1a:f5:36:a7:
         b9:46:ba:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:54:34 2025 by rpki-client