Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
File:                     PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft (raw, json)
Hash identifier:          HAv/rekR3saINSvg6RGs/rJ92zojyTiI03V4FgFAlgk=
Subject key identifier:   39:11:EF:28:A3:E7:B8:88:E3:41:1E:BD:E1:EC:67:EB:9F:3C:BB:F0
Authority key identifier: 3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
Certificate issuer:       /CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Certificate serial:       019760CBB21602ED205E024394020C2166CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
Manifest number:          0F24
Signing time:             Wed 11 Jun 2025 21:00:51 +0000
Manifest this update:     Wed 11 Jun 2025 21:00:51 +0000
Manifest next update:     Thu 12 Jun 2025 21:00:51 +0000
Files and hashes:         1: 9fywOGNsk6OIfuzuy-reOW9V4kc.roa (hash: b/vhaQiKQhhebnkpqZc4spciDDH3KeMp+AUrKHHSWv4=)
                          2: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl (hash: F+AP/BBQ3ssVyNCnfdXF3lRz9vjkjdpLtqIjK2RmPcY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 21:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:60:cb:b2:16:02:ed:20:5e:02:43:94:02:0c:21:66:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
        Validity
            Not Before: Jun 11 21:00:51 2025 GMT
            Not After : Jun 12 21:00:51 2025 GMT
        Subject: CN=3911ef28a3e7b888e3411ebde1ec67eb9f3cbbf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:33:29:cc:e8:1e:ef:2e:40:7a:d4:85:ce:42:
                    ca:2e:03:f4:23:b2:48:6c:b7:81:81:40:23:1b:77:
                    ae:66:61:68:f3:ae:df:1d:37:50:ac:59:73:91:78:
                    f2:4d:69:98:88:1f:ac:d7:88:70:24:4d:29:46:7e:
                    3c:d4:b9:f8:43:b9:48:e9:f8:69:c0:11:7b:96:5a:
                    99:dd:38:3d:f6:00:fc:4b:16:21:bb:a2:a7:5d:d3:
                    74:d2:70:a2:65:cb:85:5b:63:9d:07:06:34:d6:a7:
                    89:47:e5:0c:be:dd:67:17:f2:b1:ce:0e:cb:38:76:
                    29:be:d4:85:54:dc:ea:6e:73:95:a9:69:a6:36:4a:
                    7b:68:0b:65:3d:80:0d:27:a8:f2:ed:1a:29:8b:90:
                    94:45:9b:70:fe:e7:34:f7:65:ef:d3:4a:59:0b:45:
                    a6:6f:08:96:6a:3f:bb:c3:d2:e3:88:67:b6:29:53:
                    2f:ef:08:58:f5:1a:f1:15:42:29:db:bb:56:56:ee:
                    da:27:e1:3e:52:56:6a:51:96:b1:18:f5:f3:8c:7a:
                    f5:fd:65:ff:2b:20:ec:9b:a7:33:3d:8a:38:22:5a:
                    9c:da:50:b7:45:4e:04:a8:2d:98:2a:99:64:b0:56:
                    ee:c7:68:3d:c0:31:2b:01:6a:de:7f:35:ef:c8:ff:
                    fd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:11:EF:28:A3:E7:B8:88:E3:41:1E:BD:E1:EC:67:EB:9F:3C:BB:F0
            X509v3 Authority Key Identifier:
                keyid:3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:22:9d:ff:c6:85:09:8c:74:ec:39:8b:46:5c:a5:60:88:49:
         2d:bb:d8:7b:fc:83:2a:88:76:ab:5e:11:c0:ce:0f:6c:45:d8:
         41:f1:35:64:66:87:ee:e3:9b:de:f2:09:3e:47:40:b9:77:c7:
         66:c0:30:80:99:90:7f:8f:d9:54:5b:ad:cb:ca:74:de:41:c6:
         a8:70:57:1e:ad:47:fc:f8:81:d8:09:25:6d:2d:24:ab:bf:ec:
         a7:59:3b:be:cc:d0:5e:94:91:79:5c:46:59:c3:cc:98:b7:06:
         31:72:50:19:7b:30:2c:d6:2e:81:b3:cf:cb:ee:e3:e6:d5:7d:
         e2:b7:d5:61:84:f4:ff:7a:c6:5e:a6:b1:32:19:a7:74:b8:86:
         92:1c:d6:95:9c:09:42:66:b9:37:b2:d5:aa:5a:a3:4f:77:31:
         27:42:a0:77:2a:86:6d:ec:ac:83:8d:37:f3:72:88:51:eb:66:
         08:eb:38:8d:c0:ca:78:0d:9d:7a:80:f0:c2:38:8c:b5:dc:ff:
         96:9b:5d:6d:62:c7:c1:16:7a:2d:40:a0:89:eb:ee:0c:94:66:
         f5:cf:2e:92:f7:f2:14:97:81:5f:2f:47:93:61:bf:99:db:4b:
         b4:74:1c:83:4e:30:6a:6d:5c:0f:52:60:85:4b:e6:4a:9d:4f:
         8b:c9:ab:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 06:27:17 2025 by rpki-client