Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft
File:                     PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft (raw, json)
Hash identifier:          OnaK8nFJSg0q4cIkoM6QhSAMyIPwmqtv8X13tgbSphg=
Subject key identifier:   86:11:55:71:DF:E3:AC:C2:15:D4:F3:C7:9D:C4:8A:1D:06:8D:EB:E5
Authority key identifier: 3C:9F:40:0F:88:4F:70:30:31:8E:B6:BE:74:C5:28:48:5A:BE:44:60
Certificate issuer:       /CN=3c9f400f884f7030318eb6be74c528485abe4460
Certificate serial:       01974DB266D892A12AE3F110D1BA55E87A24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PJ9AD4hPcDAxjra-dMUoSFq-RGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft
Manifest number:          0212
Signing time:             Sun 08 Jun 2025 04:00:26 +0000
Manifest this update:     Sun 08 Jun 2025 04:00:26 +0000
Manifest next update:     Mon 09 Jun 2025 04:00:26 +0000
Files and hashes:         1: 5CyBpeLyifB2AFAXOFh8yVUvCwE.roa (hash: JsDCYkyYiFX4qZJz2FVAXDqsZF5P1tX4kX3+rULf7lU=)
                          2: PJ9AD4hPcDAxjra-dMUoSFq-RGA.crl (hash: RkrkpVJ3M/qOqKem8BCbrPkZAqtqhWuIHWc9HSdQZb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PJ9AD4hPcDAxjra-dMUoSFq-RGA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 04:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:b2:66:d8:92:a1:2a:e3:f1:10:d1:ba:55:e8:7a:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c9f400f884f7030318eb6be74c528485abe4460
        Validity
            Not Before: Jun  8 04:00:26 2025 GMT
            Not After : Jun  9 04:00:26 2025 GMT
        Subject: CN=86115571dfe3acc215d4f3c79dc48a1d068debe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:29:4d:10:a5:82:72:7c:0b:b3:26:ac:35:39:
                    e3:40:ce:39:5d:fc:07:e4:c8:77:a8:cd:87:5e:8f:
                    13:9e:58:37:84:bb:43:d5:35:e5:69:9e:1d:6e:36:
                    d6:2f:a3:ab:cc:94:9a:c5:1b:67:1c:1c:7e:43:65:
                    e6:4d:dc:08:e9:96:c3:09:0b:44:31:85:b8:99:3d:
                    f9:d8:60:0a:3b:71:94:0d:0a:e1:a2:9f:ae:3e:88:
                    4d:a4:cf:f3:e8:27:d3:2a:b2:07:a0:04:80:90:f4:
                    52:0e:15:a7:49:38:b2:2c:db:d1:d9:14:b2:42:a3:
                    1f:05:12:66:6a:19:68:83:25:34:f6:9c:30:83:e8:
                    8e:70:5c:a7:2e:18:d4:f4:c9:8b:61:c1:8f:58:77:
                    10:85:ce:ce:13:aa:f9:56:5d:7d:00:be:ca:ea:50:
                    22:86:7f:bd:a9:8a:76:8b:06:23:5b:5b:26:13:2b:
                    f9:4f:b1:4b:09:55:5b:31:bb:fd:24:66:62:d7:e8:
                    1e:22:d1:b3:83:0a:59:46:76:b8:76:e4:2c:3d:91:
                    44:42:76:51:be:11:86:f0:9c:af:4f:a3:b0:27:4a:
                    dd:b7:f7:36:8b:fd:5c:4c:e5:09:99:1d:a3:05:f7:
                    f5:8d:0b:86:8f:57:ea:0e:a5:c4:92:25:44:70:24:
                    62:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:11:55:71:DF:E3:AC:C2:15:D4:F3:C7:9D:C4:8A:1D:06:8D:EB:E5
            X509v3 Authority Key Identifier:
                keyid:3C:9F:40:0F:88:4F:70:30:31:8E:B6:BE:74:C5:28:48:5A:BE:44:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJ9AD4hPcDAxjra-dMUoSFq-RGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:8a:5d:07:cc:59:f0:e3:b1:ef:c6:26:04:d7:ef:1a:bb:dd:
         81:ff:d6:d9:b5:0a:1f:9f:17:66:1a:02:1f:1d:07:41:e0:cd:
         54:2b:8e:b1:b6:8a:ff:be:d8:4b:8f:4d:48:b6:0f:ff:d6:8a:
         53:0c:4e:61:e8:6f:21:56:77:8b:bf:a5:71:6f:66:bc:3d:f9:
         bd:ff:ea:11:2b:5b:46:e1:49:de:69:fe:20:8e:a7:c5:b8:c0:
         7e:a6:11:b9:c0:25:2f:c5:d9:1e:9d:e8:1e:67:0f:ca:dc:50:
         47:3b:40:b8:f4:9f:4a:2c:30:4f:1d:6f:45:25:8e:7c:cf:a3:
         a8:ae:18:49:54:fd:6f:4f:63:50:f7:bd:d8:24:30:d0:2a:55:
         92:df:3b:88:ac:b0:33:92:c7:05:78:7f:a8:c1:4e:5c:5b:e5:
         b7:b0:04:89:76:c9:f0:4f:ed:f3:a0:b5:4c:f7:30:e4:ee:63:
         8e:bd:4c:7d:d3:7c:65:6b:37:90:d9:a0:26:d0:63:ee:2a:e4:
         c4:5c:c7:69:bd:55:90:5e:49:59:3d:5f:f8:d6:10:f8:bf:4d:
         ca:2e:76:79:63:a9:86:70:50:ec:e2:8a:61:41:cf:93:73:54:
         aa:55:c2:a4:76:26:7e:c9:a1:ec:f6:f5:ce:54:a7:a2:01:2f:
         ff:ba:2e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:02:21 2025 by rpki-client