Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
File:                     PJMfJlqEcdMs6ESdnhhvDccRSno.mft (raw, json)
Hash identifier:          KNvq3It9qduod7EnhwMLMkxycqr4fC8t0n5lfT8O/hg=
Subject key identifier:   16:2E:50:F4:EE:A9:92:15:61:9A:AB:E6:86:F6:2A:9E:F7:B8:A2:66
Authority key identifier: 3C:93:1F:26:5A:84:71:D3:2C:E8:44:9D:9E:18:6F:0D:C7:11:4A:7A
Certificate issuer:       /CN=3c931f265a8471d32ce8449d9e186f0dc7114a7a
Certificate serial:       01974742FDD151D42E7165E8831415951FB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
Manifest number:          1279
Signing time:             Fri 06 Jun 2025 22:01:02 +0000
Manifest this update:     Fri 06 Jun 2025 22:01:02 +0000
Manifest next update:     Sat 07 Jun 2025 22:01:02 +0000
Files and hashes:         1: PJMfJlqEcdMs6ESdnhhvDccRSno.crl (hash: UbRORR8dRz753MCu1AOvocCgzJ0m6TDdNnA8Y1LlOCI=)
                          2: PkJhyt9pT1uGvNEkXULDRnIoKM8.roa (hash: GnXTwsBZIxIhJPycvbpoXf49+cV9ppIdazG5Z3GlNBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:42:fd:d1:51:d4:2e:71:65:e8:83:14:15:95:1f:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c931f265a8471d32ce8449d9e186f0dc7114a7a
        Validity
            Not Before: Jun  6 22:01:02 2025 GMT
            Not After : Jun  7 22:01:02 2025 GMT
        Subject: CN=162e50f4eea99215619aabe686f62a9ef7b8a266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:70:db:16:68:ad:3f:63:57:d2:cd:21:dd:de:
                    b5:f0:9c:54:0a:6f:27:b9:c2:19:e1:52:63:9a:40:
                    1d:fe:35:5d:ad:2b:12:5a:d8:93:03:8b:12:12:d8:
                    44:b6:79:4e:cd:46:8f:55:9d:30:d8:fc:ef:cb:8d:
                    be:67:0f:ac:cd:02:52:88:10:a4:7f:e4:ac:e9:a2:
                    4d:5e:06:7c:13:58:15:ac:d0:b2:af:ed:a7:a0:64:
                    67:72:64:29:b7:e1:4e:e9:1b:90:b1:ca:2b:f1:85:
                    fc:e2:ff:db:88:c1:ce:89:6b:05:b4:d1:9b:cb:6e:
                    b2:a0:fc:54:a4:ab:b0:91:0d:f2:eb:ec:99:cb:82:
                    7c:69:d9:e5:2f:34:9d:09:68:3f:c7:44:17:68:1e:
                    9a:b9:b3:be:b6:f1:9f:5c:b3:52:c9:a9:85:5b:ce:
                    cf:0f:7f:e9:28:91:2e:87:54:2b:a5:e8:76:85:0f:
                    e6:e3:45:27:be:46:c2:2e:65:50:a0:d4:b0:9b:bf:
                    56:a4:af:28:c0:3e:92:83:85:f6:65:06:36:a0:a8:
                    8b:0d:b4:93:49:1f:40:28:8e:e9:a1:ae:26:1b:87:
                    8b:68:0e:c4:9f:e4:a7:a7:1a:a4:8a:0b:f9:58:e4:
                    d2:82:0c:78:a3:30:10:85:62:34:f7:05:31:95:0e:
                    fe:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2E:50:F4:EE:A9:92:15:61:9A:AB:E6:86:F6:2A:9E:F7:B8:A2:66
            X509v3 Authority Key Identifier:
                keyid:3C:93:1F:26:5A:84:71:D3:2C:E8:44:9D:9E:18:6F:0D:C7:11:4A:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:dd:4c:87:90:17:a2:65:e8:68:5e:22:40:a7:9c:88:c9:2c:
         46:76:03:70:e4:35:1f:79:6c:14:ae:79:26:58:e3:79:1c:02:
         05:b4:9c:ba:dd:b4:0f:09:74:08:3a:38:82:49:36:2e:ff:2c:
         c4:24:95:91:af:40:1b:c9:d6:3d:30:16:44:48:04:2e:7c:fe:
         7e:ca:c5:b8:7a:ca:9a:90:03:4c:ca:8e:c4:17:34:4b:a5:e8:
         1b:30:a0:4b:92:b2:a3:3d:fc:47:4c:8d:e1:cb:66:6b:f4:ef:
         c5:64:85:25:ee:04:06:8e:4b:51:36:54:04:de:45:b3:43:8d:
         48:01:59:88:6a:8a:47:45:f2:1b:e0:ec:30:65:22:1c:eb:a7:
         00:5d:82:7f:96:e0:11:0a:51:bc:61:4d:48:19:4a:18:bf:43:
         d6:a5:99:aa:83:cb:a6:62:1f:cc:a5:37:3b:11:9f:d4:29:28:
         c5:b8:ee:53:93:1d:51:90:01:b3:ec:09:63:d9:1e:43:2c:a7:
         8c:d5:17:87:76:35:59:d0:d1:88:8c:68:99:e9:52:e8:58:39:
         69:e3:ec:eb:6a:56:3e:26:d4:09:00:9f:1b:8e:f0:05:5c:fe:
         22:46:f3:c7:70:4e:76:e7:c3:8c:99:bc:d1:a4:94:bf:55:a0:
         a7:28:9a:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHQv3RUdQucWXogxQVlR+0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjOTMxZjI2NWE4NDcxZDMyY2U4NDQ5ZDllMTg2ZjBkYzcx
MTRhN2EwHhcNMjUwNjA2MjIwMTAyWhcNMjUwNjA3MjIwMTAyWjAzMTEwLwYDVQQD
EygxNjJlNTBmNGVlYTk5MjE1NjE5YWFiZTY4NmY2MmE5ZWY3YjhhMjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3DbFmitP2NX0s0h3d618JxUCm8n
ucIZ4VJjmkAd/jVdrSsSWtiTA4sSEthEtnlOzUaPVZ0w2Pzvy42+Zw+szQJSiBCk
f+Ss6aJNXgZ8E1gVrNCyr+2noGRncmQpt+FO6RuQscor8YX84v/biMHOiWsFtNGb
y26yoPxUpKuwkQ3y6+yZy4J8adnlLzSdCWg/x0QXaB6aubO+tvGfXLNSyamFW87P
D3/pKJEuh1Qrpeh2hQ/m40UnvkbCLmVQoNSwm79WpK8owD6Sg4X2ZQY2oKiLDbST
SR9AKI7poa4mG4eLaA7En+Snpxqkigv5WOTSggx4ozAQhWI09wUxlQ7+8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYuUPTuqZIVYZqr5ob2Kp73uKJmMB8GA1UdIwQY
MBaAFDyTHyZahHHTLOhEnZ4Ybw3HEUp6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEpNZkpscUVjZE1zNkVTZG5oaHZEY2NSU25vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9iNTBiZGEtNjg5OS00ZWVmLWEyMzEt
NWUwMDI2MzAzNjI5LzEvUEpNZkpscUVjZE1zNkVTZG5oaHZEY2NSU25vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9iNTBiZGEtNjg5OS00ZWVmLWEyMzEtNWUwMDI2MzAzNjI5
LzEvUEpNZkpscUVjZE1zNkVTZG5oaHZEY2NSU25vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA91Mh5AX
omXoaF4iQKeciMksRnYDcOQ1H3lsFK55JljjeRwCBbScut20Dwl0CDo4gkk2Lv8s
xCSVka9AG8nWPTAWREgELnz+fsrFuHrKmpADTMqOxBc0S6XoGzCgS5Kyoz38R0yN
4ctma/TvxWSFJe4EBo5LUTZUBN5Fs0ONSAFZiGqKR0XyG+DsMGUiHOunAF2Cf5bg
EQpRvGFNSBlKGL9D1qWZqoPLpmIfzKU3OxGf1CkoxbjuU5MdUZABs+wJY9keQyyn
jNUXh3Y1WdDRiIxomelS6Fg5aePs62pWPibUCQCfG47wBVz+Ikbzx3BOdufDjJm8
0aSUv1Wgpyia9w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:39:53 2025 by rpki-client