Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
File:                     pyREUNHHhV34SPNDGOHwlIkA2NU.mft (raw, json)
Hash identifier:          itQ/ThuYRBogop5JLqIEjy92ptCEpN9LD6Sgx2FLE6M=
Subject key identifier:   8C:4A:00:BD:4B:41:C0:5A:CE:F3:90:3B:AF:79:02:92:2C:0D:1A:8E
Authority key identifier: A7:24:44:50:D1:C7:85:5D:F8:48:F3:43:18:E1:F0:94:89:00:D8:D5
Certificate issuer:       /CN=a7244450d1c7855df848f34318e1f0948900d8d5
Certificate serial:       0197470BEA855AEB237DA2FB29D4891F3347
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
Manifest number:          039A
Signing time:             Fri 06 Jun 2025 21:00:52 +0000
Manifest this update:     Fri 06 Jun 2025 21:00:52 +0000
Manifest next update:     Sat 07 Jun 2025 21:00:52 +0000
Files and hashes:         1: pyREUNHHhV34SPNDGOHwlIkA2NU.crl (hash: sTkmjilfAVjK06xsnDjvZNyKzIYBnjBctfSni47Xgdg=)
                          2: slYjYuIFo0w5rC10sA14jjDYTj4.roa (hash: vyn3c0KUGlBUpj99ofdIph6Rnk7SAht9bfr6EHYuHzE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 21:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0b:ea:85:5a:eb:23:7d:a2:fb:29:d4:89:1f:33:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7244450d1c7855df848f34318e1f0948900d8d5
        Validity
            Not Before: Jun  6 21:00:52 2025 GMT
            Not After : Jun  7 21:00:52 2025 GMT
        Subject: CN=8c4a00bd4b41c05acef3903baf7902922c0d1a8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3b:8f:11:62:6d:bc:e4:99:ea:c6:aa:28:11:
                    4d:92:34:74:86:32:03:37:3d:c5:14:a9:08:b1:d4:
                    58:9d:07:28:79:21:6f:8a:13:9d:f8:a7:93:33:53:
                    fe:b5:72:20:e5:d6:8a:7a:2e:fe:3b:08:98:4c:c3:
                    7f:c9:38:83:bf:cd:c9:a7:69:19:33:c9:1f:67:9e:
                    a8:be:4c:46:37:d5:cc:ea:a5:60:77:da:3d:02:56:
                    e4:ac:82:36:7e:26:ac:2a:35:ad:e4:de:85:f0:40:
                    5b:9b:75:c6:59:59:23:69:61:b2:cf:e3:09:a4:90:
                    41:55:85:b9:bd:2c:ec:15:6a:22:da:68:11:68:60:
                    71:51:87:7f:2e:11:42:8f:d8:06:c2:78:8e:fb:67:
                    1e:ba:3c:26:4e:17:bd:0d:de:26:92:d9:94:11:81:
                    74:c5:cb:e9:89:ed:a9:ad:87:5f:bf:3d:8f:17:7f:
                    37:78:3c:03:78:3d:55:8e:fd:b8:ff:9e:8e:a5:7c:
                    ea:01:0f:b7:76:15:ed:31:76:22:e7:aa:17:e4:f7:
                    bf:86:0a:c1:e4:9d:b6:f5:5d:f1:e6:58:48:70:b4:
                    39:4e:3d:31:65:60:6c:8f:37:d8:1d:31:0f:a3:b4:
                    42:d2:8c:1c:c9:6e:47:19:04:6b:88:70:87:b4:ec:
                    b7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:4A:00:BD:4B:41:C0:5A:CE:F3:90:3B:AF:79:02:92:2C:0D:1A:8E
            X509v3 Authority Key Identifier:
                keyid:A7:24:44:50:D1:C7:85:5D:F8:48:F3:43:18:E1:F0:94:89:00:D8:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:4f:8d:51:9a:d5:f8:09:00:3e:9e:18:a7:99:4e:da:da:28:
         f4:58:c1:c4:10:5d:6c:ac:fb:d9:03:03:55:8b:d9:82:0e:aa:
         06:05:24:25:e1:1e:70:e4:a0:f6:be:32:c4:0c:06:12:2b:81:
         34:49:78:82:03:c6:09:d8:1b:66:16:fb:e0:92:e9:fc:14:09:
         55:2b:72:44:6e:72:ec:28:2d:e5:3d:f4:43:24:4c:ea:41:7a:
         f8:1b:6a:47:1b:43:e7:7b:8e:b0:45:3a:9f:fc:63:79:0c:08:
         59:7d:99:04:f2:7a:81:e0:dc:31:e0:e1:88:94:e7:de:70:57:
         5a:c9:d9:77:94:83:eb:62:30:e8:ba:da:10:a1:57:6e:04:6a:
         5d:61:d8:36:69:3b:3b:8a:0a:4e:7b:67:00:35:8a:63:94:bc:
         a7:04:7d:61:59:d6:e6:0b:1c:20:28:6f:dd:91:47:40:74:b4:
         ae:7c:9c:85:96:95:9b:97:ac:8c:ba:74:d3:b3:3c:ef:26:2f:
         f9:58:f6:55:98:22:4b:ce:e4:f9:14:0b:30:3b:3c:1c:bd:d7:
         14:2c:e4:99:10:e0:28:29:d6:aa:e8:ab:45:38:28:0a:36:a9:
         78:a6:8d:15:fc:23:1a:9e:7c:01:26:d5:90:41:ee:0f:c4:65:
         bb:e6:77:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:30:48 2025 by rpki-client