Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2746ae-9dc2-41c1-90ab-e5f12b68a878/1/Pc6p140_H8L7NcKeWD2ytrYqvDk.mft
File:                     Pc6p140_H8L7NcKeWD2ytrYqvDk.mft (raw, json)
Hash identifier:          mIlryVrC7G68UuTGlmImLLtMeeqomchEKTvVPKNKFwI=
Subject key identifier:   06:3B:7D:BC:BD:79:B3:10:05:42:43:41:E9:05:20:C1:98:1E:D6:2C
Authority key identifier: 3D:CE:A9:D7:8D:3F:1F:C2:FB:35:C2:9E:58:3D:B2:B6:B6:2A:BC:39
Certificate issuer:       /CN=3dcea9d78d3f1fc2fb35c29e583db2b6b62abc39
Certificate serial:       01974A7AE552E8F15F1409AAFC6319C63C76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pc6p140_H8L7NcKeWD2ytrYqvDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/2746ae-9dc2-41c1-90ab-e5f12b68a878/1/Pc6p140_H8L7NcKeWD2ytrYqvDk.mft
Manifest number:          0F5E
Signing time:             Sat 07 Jun 2025 13:00:57 +0000
Manifest this update:     Sat 07 Jun 2025 13:00:57 +0000
Manifest next update:     Sun 08 Jun 2025 13:00:57 +0000
Files and hashes:         1: Pc6p140_H8L7NcKeWD2ytrYqvDk.crl (hash: DPhBw/uzOFqWXbfgLD4hEkZ2D7qYA1hrJfPGEKlTGQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/2746ae-9dc2-41c1-90ab-e5f12b68a878/1/Pc6p140_H8L7NcKeWD2ytrYqvDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/2746ae-9dc2-41c1-90ab-e5f12b68a878/1/Pc6p140_H8L7NcKeWD2ytrYqvDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pc6p140_H8L7NcKeWD2ytrYqvDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:e5:52:e8:f1:5f:14:09:aa:fc:63:19:c6:3c:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3dcea9d78d3f1fc2fb35c29e583db2b6b62abc39
        Validity
            Not Before: Jun  7 13:00:57 2025 GMT
            Not After : Jun  8 13:00:57 2025 GMT
        Subject: CN=063b7dbcbd79b31005424341e90520c1981ed62c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2d:1f:ff:b9:42:19:b8:81:03:57:38:71:0b:
                    87:d3:3e:d9:11:6e:bb:8d:14:c9:94:03:d9:73:63:
                    c4:fa:6e:68:31:af:8c:99:20:88:aa:ee:98:0c:77:
                    1e:62:b5:b8:0a:57:f7:88:a8:14:f0:c1:8b:26:ab:
                    be:22:99:bf:24:e8:dc:12:3b:87:ce:77:17:2c:be:
                    fa:07:17:72:ea:78:37:1e:a2:9e:bd:e5:5f:85:cf:
                    77:d9:4b:47:6a:2f:4c:3f:dc:46:c5:3f:b4:ef:7d:
                    dc:9e:74:2a:12:12:02:33:6f:46:c9:70:75:b5:18:
                    62:7f:f0:7b:ab:04:e7:6b:67:38:5a:50:38:41:cd:
                    49:f9:52:4f:1e:03:4d:93:73:d4:1f:1e:31:c3:17:
                    c2:f5:10:d9:8c:ab:03:aa:e1:48:e7:75:fd:be:74:
                    00:0c:ba:14:38:7b:9a:8b:d0:b7:1b:1c:22:a8:c0:
                    75:05:a3:1d:0e:81:fc:3f:97:8c:82:06:bc:39:36:
                    dc:c5:96:2a:6a:04:a3:fc:c7:de:40:c0:27:b2:85:
                    40:81:8c:e9:f6:2d:b3:36:66:ac:bf:35:a5:82:1a:
                    d4:bf:2b:90:bd:0c:72:2a:69:d5:aa:37:ba:18:01:
                    61:52:05:c1:fa:66:b4:6e:89:9d:74:fa:a7:af:4d:
                    c9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:3B:7D:BC:BD:79:B3:10:05:42:43:41:E9:05:20:C1:98:1E:D6:2C
            X509v3 Authority Key Identifier:
                keyid:3D:CE:A9:D7:8D:3F:1F:C2:FB:35:C2:9E:58:3D:B2:B6:B6:2A:BC:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pc6p140_H8L7NcKeWD2ytrYqvDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2746ae-9dc2-41c1-90ab-e5f12b68a878/1/Pc6p140_H8L7NcKeWD2ytrYqvDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2746ae-9dc2-41c1-90ab-e5f12b68a878/1/Pc6p140_H8L7NcKeWD2ytrYqvDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:13:ef:f9:53:14:00:5d:41:d1:5e:d2:d2:d2:89:82:ec:d7:
         69:a2:89:b3:ec:c6:a2:b7:8f:09:f9:63:5d:07:50:ce:bd:a7:
         0e:56:bb:54:99:80:cb:47:75:7c:fd:e2:9c:99:16:7b:59:59:
         10:81:41:f1:1d:cd:53:53:e2:0e:83:4e:c1:6f:05:61:b5:09:
         5e:08:f1:d6:71:91:67:59:bc:9d:af:53:4d:69:5c:2c:a8:eb:
         17:9f:35:53:59:99:25:c4:4f:0f:32:84:bc:96:19:88:02:d1:
         22:2a:ef:de:7b:2a:e4:bc:5b:5d:ae:41:91:ed:35:bc:32:a7:
         c4:75:f9:f8:96:11:cb:98:8f:88:1c:cb:a4:d3:63:81:8b:99:
         30:5d:48:75:98:8a:85:b4:5d:32:71:10:a2:cd:e4:a7:6f:ea:
         09:d7:6a:33:17:7e:ff:5d:01:39:74:f2:bf:d5:04:8a:99:61:
         2e:c3:e2:84:ef:b2:23:36:e9:a5:5c:a4:d8:46:3f:27:79:66:
         51:22:39:8d:ea:17:14:3e:24:5f:37:fd:1c:59:35:f5:84:35:
         64:38:a3:38:68:ce:8f:77:6f:28:1d:6a:08:2e:d1:f0:05:5f:
         c6:cd:89:0b:6c:dd:f9:c8:3b:0d:7f:77:15:2f:e6:dd:d7:97:
         7c:29:b9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:13:27 2025 by rpki-client