Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.mft
File:                     PKE4ItxLDjEIGkhX_QQHDW2svgw.mft (raw, json)
Hash identifier:          hUFhht3CVk9LSHeEk+77DlzclBIXaNgxDZdd153dh5Y=
Subject key identifier:   0E:72:76:60:BD:1C:AE:D1:2C:8E:8D:AD:E9:F7:F8:B2:3D:1F:C3:DD
Authority key identifier: 3C:A1:38:22:DC:4B:0E:31:08:1A:48:57:FD:04:07:0D:6D:AC:BE:0C
Certificate issuer:       /CN=3ca13822dc4b0e31081a4857fd04070d6dacbe0c
Certificate serial:       01974BC3EEF0E97AFA4B42683C0DDBACDB53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PKE4ItxLDjEIGkhX_QQHDW2svgw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.mft
Manifest number:          157A
Signing time:             Sat 07 Jun 2025 19:00:21 +0000
Manifest this update:     Sat 07 Jun 2025 19:00:21 +0000
Manifest next update:     Sun 08 Jun 2025 19:00:21 +0000
Files and hashes:         1: PKE4ItxLDjEIGkhX_QQHDW2svgw.crl (hash: oaqPpyJ2XqiK+VHuFNxoSjoFMjkhfIPiDHA6n0Ugois=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PKE4ItxLDjEIGkhX_QQHDW2svgw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:c3:ee:f0:e9:7a:fa:4b:42:68:3c:0d:db:ac:db:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ca13822dc4b0e31081a4857fd04070d6dacbe0c
        Validity
            Not Before: Jun  7 19:00:21 2025 GMT
            Not After : Jun  8 19:00:21 2025 GMT
        Subject: CN=0e727660bd1caed12c8e8dade9f7f8b23d1fc3dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b6:a1:66:67:7a:af:39:7f:cd:bd:78:e1:38:
                    34:f3:df:94:cc:d2:60:5d:9d:bc:76:3c:82:1f:9b:
                    18:f1:46:f1:c3:fd:53:81:dc:14:65:e7:24:13:a7:
                    48:23:d3:45:ba:c9:4f:3c:31:39:59:52:c1:cb:0a:
                    f5:6b:ba:33:39:d8:76:40:ab:9b:d2:16:23:ce:b2:
                    1e:98:ad:51:5e:09:b5:bf:87:e2:73:5d:a7:7c:9a:
                    20:c7:74:47:77:2e:19:c1:8f:c3:00:d8:99:14:d4:
                    9b:44:bd:47:c1:34:19:d6:cf:87:e5:69:2f:15:43:
                    6b:3d:44:65:45:ad:50:9a:e1:0a:0f:92:60:b3:41:
                    bc:a0:0d:ee:bf:b0:90:0c:68:a8:c2:14:89:d7:51:
                    4c:95:27:04:1a:1a:f3:5c:53:9c:85:9d:42:4c:ea:
                    a6:79:94:ba:a8:eb:42:d7:ed:82:9f:fa:b9:87:fa:
                    18:89:91:62:be:e2:9c:89:5f:af:fe:29:59:d8:67:
                    10:c8:74:2a:29:97:06:b5:32:8e:a3:7e:62:c8:eb:
                    46:ec:96:14:a3:38:5c:9a:3a:f4:bc:c1:e6:43:79:
                    a3:14:ea:f5:b6:ed:9f:ec:a9:10:4b:cb:02:7f:0c:
                    b8:3a:b4:9c:4c:43:46:fc:49:fe:7f:ac:5d:4d:8a:
                    0c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:72:76:60:BD:1C:AE:D1:2C:8E:8D:AD:E9:F7:F8:B2:3D:1F:C3:DD
            X509v3 Authority Key Identifier:
                keyid:3C:A1:38:22:DC:4B:0E:31:08:1A:48:57:FD:04:07:0D:6D:AC:BE:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKE4ItxLDjEIGkhX_QQHDW2svgw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:5a:00:b7:7b:96:26:64:74:ec:32:24:68:0a:69:c0:57:f3:
         93:43:8e:2d:3f:80:cd:f4:2a:7a:44:06:8c:1f:33:5a:40:a6:
         74:8b:9c:a1:f3:a3:58:13:fd:20:3d:fa:05:98:95:8d:fe:6f:
         1f:7e:2a:98:7f:cc:fd:7d:f3:cc:13:55:f4:89:1c:74:a6:cc:
         d6:73:ff:07:c2:70:05:6b:b2:ad:6c:8a:99:fd:3d:9d:cf:70:
         5b:4f:9a:6c:9a:18:88:04:32:5b:5e:f5:98:37:09:1d:8d:36:
         90:66:0a:3e:f6:72:01:dc:60:24:7c:bc:33:68:da:09:80:ef:
         90:89:41:08:b5:e4:b2:74:0e:82:36:91:5a:90:e0:0d:0f:71:
         43:46:2e:3a:36:7a:6d:fc:b4:94:e9:2d:38:1f:f1:a0:d3:94:
         10:70:54:b6:2e:c6:f1:d1:db:aa:3f:55:35:c7:57:76:58:c8:
         1f:18:7b:f3:5f:a3:97:19:e8:d3:b6:38:bc:9c:30:20:70:fa:
         1f:88:a7:79:34:e2:8e:09:03:35:ac:e7:4f:6d:59:62:07:7d:
         e4:7d:fc:38:b4:b4:82:2e:26:03:f3:11:68:a4:ca:10:19:db:
         8f:03:9a:e0:ee:4b:45:df:89:cc:5d:28:78:80:66:98:ab:83:
         ce:b0:1e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:37:53 2025 by rpki-client