Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
File:                     PB8U03-9yHrnyce5FT6updTFVJs.mft (raw, json)
Hash identifier:          NRJhTBN14FrpsJA5ddwhahZ+foUkQiKQ18n6DLrWv1U=
Subject key identifier:   D6:4F:56:76:F2:8E:A7:FD:14:77:2D:DF:71:27:7D:70:26:52:B0:15
Authority key identifier: 3C:1F:14:D3:7F:BD:C8:7A:E7:C9:C7:B9:15:3E:AE:A5:D4:C5:54:9B
Certificate issuer:       /CN=3c1f14d37fbdc87ae7c9c7b9153eaea5d4c5549b
Certificate serial:       01974B565C40825535945BF976904DC28893
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
Manifest number:          024B
Signing time:             Sat 07 Jun 2025 17:00:40 +0000
Manifest this update:     Sat 07 Jun 2025 17:00:40 +0000
Manifest next update:     Sun 08 Jun 2025 17:00:40 +0000
Files and hashes:         1: Jv9ea6TjWXgvrL4UJOE0Y6J6Kzo.roa (hash: vQZS+xG2DvESCsjLOI3ZeRzubYmodylcXb11ZuJ/VmA=)
                          2: PB8U03-9yHrnyce5FT6updTFVJs.crl (hash: 59lclr/AfLP5IcmMHb3pisR1oqZxggnKm4wKNuRjBg4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:56:5c:40:82:55:35:94:5b:f9:76:90:4d:c2:88:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c1f14d37fbdc87ae7c9c7b9153eaea5d4c5549b
        Validity
            Not Before: Jun  7 17:00:40 2025 GMT
            Not After : Jun  8 17:00:40 2025 GMT
        Subject: CN=d64f5676f28ea7fd14772ddf71277d702652b015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ac:ec:a1:4a:d0:05:90:47:11:98:df:6b:5b:
                    57:c3:4d:c0:da:85:93:88:ee:18:07:0c:64:05:32:
                    c6:74:b1:e8:c8:a6:23:07:17:fc:06:a5:52:9e:75:
                    9c:fb:78:c9:80:5d:20:92:19:d0:16:e0:b6:7a:1f:
                    73:b7:50:ce:60:59:c1:ff:33:ae:a6:5d:54:cb:25:
                    98:bc:fd:77:28:d8:81:ff:24:48:f8:22:ca:b7:16:
                    26:c9:a1:03:ca:da:70:e0:3d:e3:1c:d2:9f:19:0a:
                    84:dd:cb:ad:d8:af:84:e8:9b:b7:54:e2:a0:16:2f:
                    b7:c4:82:cb:a2:bf:bb:52:5b:78:f1:c1:03:90:19:
                    0c:be:85:a2:f5:87:0f:fe:92:17:fd:c0:1a:4f:2f:
                    69:7b:c0:c9:8a:23:16:f9:92:bf:e6:72:f3:41:81:
                    91:69:15:ba:c7:88:9e:4f:0f:5b:3a:37:8d:21:da:
                    1f:d3:7f:2d:4d:37:9b:4c:3c:46:91:de:e4:c2:c1:
                    36:d2:4f:cb:6c:ac:75:2d:09:f8:72:e8:ce:37:60:
                    91:bd:73:4d:46:24:e1:f1:25:a1:56:3e:64:42:0b:
                    73:54:76:da:b9:a2:9f:c9:95:ef:5d:ea:51:f0:69:
                    d6:8f:3f:ad:9a:43:2e:91:fe:c2:d1:15:d4:55:c1:
                    8b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:4F:56:76:F2:8E:A7:FD:14:77:2D:DF:71:27:7D:70:26:52:B0:15
            X509v3 Authority Key Identifier:
                keyid:3C:1F:14:D3:7F:BD:C8:7A:E7:C9:C7:B9:15:3E:AE:A5:D4:C5:54:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:7b:d2:b1:10:99:2f:ae:f7:5f:ac:3e:cc:42:e3:b1:5a:ac:
         a5:1e:f7:08:5b:9b:ea:0f:e8:2c:02:7b:75:43:13:25:4a:e6:
         be:b4:87:c4:a7:6f:1b:18:7b:c9:55:49:4e:41:92:9d:b6:58:
         09:be:86:fb:b3:9d:c2:72:a6:25:97:a9:b1:3c:54:ce:95:f6:
         f0:4c:3c:b5:7c:f5:ad:62:17:33:31:a9:14:f6:3a:0f:02:6c:
         b3:6a:f6:9e:2d:ed:98:86:30:bb:89:58:43:66:44:5d:e2:41:
         71:28:09:8b:ce:d4:ea:bf:ed:56:36:c5:c3:ea:42:44:1a:b9:
         3e:20:d5:5a:b2:22:38:6f:e2:e8:5e:4d:15:51:a8:2d:41:dd:
         a0:8b:0c:99:a1:68:25:09:1d:f6:b3:34:b5:c9:56:97:72:a4:
         93:e6:83:5a:5e:e9:f4:c3:08:a1:9b:a2:1d:a9:c3:13:12:e7:
         57:c8:84:5b:d2:9b:c8:ac:d0:d3:44:12:cf:c9:14:af:48:f7:
         08:c9:39:60:9b:6d:d8:26:b8:2f:10:92:c0:c8:fc:2b:aa:cd:
         37:66:f9:80:52:1a:38:6a:92:98:02:4c:3f:14:24:89:83:da:
         a2:23:94:77:c4:b8:3a:ec:0c:ad:5e:b0:f9:80:60:90:4d:3c:
         6f:39:9f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:09:18 2025 by rpki-client