Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft
File:                     P1YjHn71MYG2MCYPVzmpOZgLzg8.mft (raw, json)
Hash identifier:          /zwtBsCPgae9ARsbIVBQZR/Q87gSqUVdDzp88yMMXJs=
Subject key identifier:   04:57:E9:43:B2:36:56:3D:88:11:FE:D9:8D:48:C7:0A:6C:9B:01:0D
Authority key identifier: 3F:56:23:1E:7E:F5:31:81:B6:30:26:0F:57:39:A9:39:98:0B:CE:0F
Certificate issuer:       /CN=3f56231e7ef53181b630260f5739a939980bce0f
Certificate serial:       01974A43B79B7B6E47C3642B7ACEB579483E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P1YjHn71MYG2MCYPVzmpOZgLzg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft
Manifest number:          05C5
Signing time:             Sat 07 Jun 2025 12:00:41 +0000
Manifest this update:     Sat 07 Jun 2025 12:00:41 +0000
Manifest next update:     Sun 08 Jun 2025 12:00:41 +0000
Files and hashes:         1: HjgAjQeDaXZKdKIg65rJrSZ01bk.roa (hash: SKWIIQpiA+MIRyPfkYnv+UHlvY+ONfNHoHSQy81/bbk=)
                          2: P1YjHn71MYG2MCYPVzmpOZgLzg8.crl (hash: ttvGQtL6ouDKVLyyfPlk8qyOhZLga8bTGqhUuwTizuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P1YjHn71MYG2MCYPVzmpOZgLzg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:43:b7:9b:7b:6e:47:c3:64:2b:7a:ce:b5:79:48:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f56231e7ef53181b630260f5739a939980bce0f
        Validity
            Not Before: Jun  7 12:00:41 2025 GMT
            Not After : Jun  8 12:00:41 2025 GMT
        Subject: CN=0457e943b236563d8811fed98d48c70a6c9b010d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e2:22:89:d2:2c:d6:a8:26:4a:66:bc:6c:0d:
                    ca:33:c5:40:c5:96:a4:32:75:cd:b2:3a:9b:bd:cb:
                    30:3b:d4:f2:7f:ab:3c:4d:c0:91:cc:c1:5c:e5:38:
                    64:71:d9:5b:5f:e9:f4:30:e8:7a:79:4d:ff:1d:58:
                    ef:ee:dc:a5:d4:79:42:78:ed:49:10:6f:36:89:e9:
                    92:38:66:c8:45:a0:07:ba:77:bc:bb:ea:4c:5b:48:
                    fd:8e:61:b5:e7:8f:0f:6c:d1:27:45:29:45:2c:77:
                    8f:fd:0a:13:7f:28:5c:02:af:48:07:7d:cc:d4:5d:
                    c4:de:23:12:ea:73:77:41:1c:2f:20:fe:2e:27:17:
                    69:06:3f:87:5f:23:58:77:b5:f7:e6:f7:89:f6:7c:
                    ad:4a:9c:ef:a4:09:8d:c0:5b:1b:2d:ec:e6:0c:47:
                    0e:36:5b:30:ea:eb:62:79:fd:4d:72:ef:7d:e1:46:
                    d0:df:1f:0e:aa:1a:b2:5a:1c:df:2c:4b:c1:e6:d4:
                    36:9a:03:01:2b:8c:8b:d1:c0:66:06:65:c6:32:64:
                    15:68:7e:7c:c9:37:69:ac:4e:0d:35:fd:b1:cd:53:
                    33:ad:dd:f0:80:1b:31:1e:a0:bf:32:29:79:71:a6:
                    d8:f1:8d:11:d9:db:cb:47:fe:bc:d0:cf:68:ef:32:
                    35:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:57:E9:43:B2:36:56:3D:88:11:FE:D9:8D:48:C7:0A:6C:9B:01:0D
            X509v3 Authority Key Identifier:
                keyid:3F:56:23:1E:7E:F5:31:81:B6:30:26:0F:57:39:A9:39:98:0B:CE:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1YjHn71MYG2MCYPVzmpOZgLzg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:6d:13:12:2e:5c:30:f1:ad:77:9f:4d:4b:d3:95:3f:9d:1c:
         c9:74:25:82:af:21:a4:f8:36:f4:60:50:51:12:64:2d:de:5c:
         87:f3:71:d8:74:48:33:c6:6f:c7:7f:36:16:30:42:07:fc:45:
         8e:09:68:a9:8d:c8:6c:44:df:36:74:32:4d:06:c9:07:b6:58:
         8d:0b:a0:69:4d:70:f0:ef:2e:87:d2:a3:08:f6:28:0e:18:1c:
         09:a2:1f:8a:11:16:37:85:98:e4:84:d4:cf:15:23:2f:bb:94:
         1e:a0:8a:af:31:ee:01:9b:16:43:b3:5c:f3:99:93:8a:16:3c:
         dd:b1:a3:ea:05:49:9c:ef:1d:80:9e:e3:bd:29:5e:b2:aa:cf:
         b7:07:b1:83:c3:de:f5:8b:a7:e2:ea:05:ad:cc:b2:82:33:08:
         fe:35:fa:b8:af:43:dd:a2:23:9b:d5:e8:6f:33:cd:11:14:a7:
         92:6b:40:91:4b:ff:a5:50:f0:17:58:f5:6c:b0:1b:6d:ad:38:
         08:48:5f:aa:a8:92:74:6a:79:7e:ec:e2:f8:5d:d9:e9:99:62:
         62:f2:72:47:c4:e8:f8:10:9e:d1:03:a9:42:8d:95:43:92:67:
         6c:66:b3:f6:ed:19:38:50:7c:74:9b:6e:28:9d:ae:ba:b9:c6:
         24:1e:bf:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:53:30 2025 by rpki-client