Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft
File:                     pTJy83vudp-iPqZUueOPsCNGjZI.mft (raw, json)
Hash identifier:          ek6O9r5cZKKhEqY3InteceBeFc8ngPk5dkE32iYkGc8=
Subject key identifier:   C8:20:17:CD:6A:9B:F5:29:2D:8C:38:63:A9:E5:FC:63:BD:29:AB:E3
Authority key identifier: A5:32:72:F3:7B:EE:76:9F:A2:3E:A6:54:B9:E3:8F:B0:23:46:8D:92
Certificate issuer:       /CN=a53272f37bee769fa23ea654b9e38fb023468d92
Certificate serial:       019747E78A658F97E10C513849D679381543
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pTJy83vudp-iPqZUueOPsCNGjZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft
Manifest number:          0131
Signing time:             Sat 07 Jun 2025 01:00:45 +0000
Manifest this update:     Sat 07 Jun 2025 01:00:45 +0000
Manifest next update:     Sun 08 Jun 2025 01:00:45 +0000
Files and hashes:         1: kl_zb47rnd8AaAP4vBoCuK61hPA.roa (hash: e2T6+pFfv8tCYwWL0QcrJLWjz1NsTR4Qy2fxVQvCN8Q=)
                          2: pTJy83vudp-iPqZUueOPsCNGjZI.crl (hash: ASRt0zACiVhgcH2CH9r+EGpLj3VwsI02La9g2Q0rlak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pTJy83vudp-iPqZUueOPsCNGjZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 01:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:e7:8a:65:8f:97:e1:0c:51:38:49:d6:79:38:15:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53272f37bee769fa23ea654b9e38fb023468d92
        Validity
            Not Before: Jun  7 01:00:45 2025 GMT
            Not After : Jun  8 01:00:45 2025 GMT
        Subject: CN=c82017cd6a9bf5292d8c3863a9e5fc63bd29abe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:ce:13:a1:b6:26:8b:99:eb:b9:a4:8a:fe:9d:
                    98:af:f8:af:59:ba:22:b4:94:5c:44:f7:0f:d5:58:
                    48:36:f0:a3:00:2b:91:e1:34:54:ab:a7:fe:ca:80:
                    28:04:fb:19:86:22:3a:82:eb:56:8a:e7:4f:5a:ef:
                    24:58:14:9d:c7:25:47:eb:55:78:04:87:0c:af:1f:
                    3d:1d:7a:79:d5:9c:26:13:1b:6c:46:75:05:3a:36:
                    f9:9d:45:f1:ff:17:6f:a0:64:19:f7:05:b8:b2:80:
                    9b:22:15:5c:70:b0:42:8f:61:95:83:1f:b2:ac:6c:
                    ea:34:68:9b:a5:0e:ae:94:be:94:c5:de:2f:9f:06:
                    0b:32:30:8f:bf:80:ba:40:1e:4b:de:f5:41:cf:20:
                    67:90:ca:96:74:e4:f4:18:cf:58:ee:44:8e:97:8a:
                    1f:c4:b7:2f:66:97:42:62:82:78:a1:57:57:c3:f9:
                    cd:04:77:6d:10:f9:93:e9:39:bd:50:7e:52:23:8c:
                    ed:13:5e:d5:14:0f:40:c4:be:02:a1:76:3b:10:80:
                    48:7e:26:de:19:13:66:5f:7b:0b:70:6a:84:2e:09:
                    a4:26:5b:15:a0:2e:35:bb:ad:f4:cd:3f:77:69:76:
                    f4:84:d6:b0:94:01:cb:78:16:b8:fe:44:9d:71:f4:
                    3d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:20:17:CD:6A:9B:F5:29:2D:8C:38:63:A9:E5:FC:63:BD:29:AB:E3
            X509v3 Authority Key Identifier:
                keyid:A5:32:72:F3:7B:EE:76:9F:A2:3E:A6:54:B9:E3:8F:B0:23:46:8D:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTJy83vudp-iPqZUueOPsCNGjZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:91:9d:72:67:4f:39:ee:a6:b4:01:09:e3:5c:90:85:1a:bd:
         03:59:20:e7:62:09:0f:52:41:6d:d2:ab:e5:53:69:a2:22:15:
         65:9d:83:98:fc:22:2a:51:a7:a5:ca:c0:cb:a4:21:c7:3d:e3:
         85:b7:b9:bd:f0:4e:eb:74:ff:2b:bc:41:80:af:a5:18:89:53:
         85:2b:a2:cf:4f:68:6f:43:f5:5f:6b:ce:0e:64:82:a9:4d:9f:
         bd:64:35:61:7e:f0:e2:b5:42:f9:5a:ac:73:92:d8:e7:01:82:
         03:58:9a:e4:78:0e:ca:03:62:7a:22:db:e5:1b:1a:03:c4:36:
         45:b8:04:1b:39:1d:52:2a:a8:69:0b:07:ab:ac:2a:2d:17:5d:
         f4:58:31:24:3f:63:0a:07:1b:5a:e7:df:79:dc:50:1e:88:9a:
         3d:99:88:5f:38:c7:cf:b6:c6:e6:21:d3:c5:54:0a:9f:5e:c3:
         82:43:ab:89:a4:67:65:e2:68:56:7d:63:0d:9b:dd:91:29:94:
         21:6b:24:99:70:e6:f9:f4:49:b4:14:c0:f9:b2:26:e7:78:62:
         da:50:72:8f:57:1d:44:86:2a:a7:3a:0d:0c:71:af:83:13:87:
         cd:81:5f:d0:8e:4a:82:c6:e8:59:61:c2:31:d1:48:fd:a3:09:
         88:8a:53:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:02:24 2025 by rpki-client