Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
File:                     P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft (raw, json)
Hash identifier:          GZny1q6ODjXKB1s7CHi3CL8IPEVLr91GP0+LKbK1ebg=
Subject key identifier:   E2:73:96:A0:A8:27:6C:87:3A:D7:52:97:FC:BB:D8:96:5E:8B:80:72
Authority key identifier: 3F:47:F7:57:57:41:3C:CC:17:2D:3D:1B:82:6F:AE:5A:E9:38:5A:1B
Certificate issuer:       /CN=3f47f75757413ccc172d3d1b826fae5ae9385a1b
Certificate serial:       0197481EA31DBE962655BC2EDFF351E388AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
Manifest number:          157E
Signing time:             Sat 07 Jun 2025 02:00:56 +0000
Manifest this update:     Sat 07 Jun 2025 02:00:56 +0000
Manifest next update:     Sun 08 Jun 2025 02:00:56 +0000
Files and hashes:         1: P0f3V1dBPMwXLT0bgm-uWuk4Whs.crl (hash: 5hhJOi7MaglVfUkhh/tXpR8WEY2KHSngFa6fmwLRAdE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:1e:a3:1d:be:96:26:55:bc:2e:df:f3:51:e3:88:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f47f75757413ccc172d3d1b826fae5ae9385a1b
        Validity
            Not Before: Jun  7 02:00:56 2025 GMT
            Not After : Jun  8 02:00:56 2025 GMT
        Subject: CN=e27396a0a8276c873ad75297fcbbd8965e8b8072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:92:55:95:19:26:ae:c6:aa:ab:e2:d2:fe:55:
                    d3:ed:8b:f5:b0:ef:e9:56:83:c2:84:76:4a:2a:e8:
                    cf:2e:68:d3:7e:96:53:89:7b:db:d3:5b:b2:40:0f:
                    31:0d:0f:f0:00:72:0b:e5:0f:9e:74:0d:1f:c8:21:
                    0f:1a:9e:e1:e8:57:fa:01:13:ad:e7:ba:dc:cf:13:
                    36:0f:63:b5:42:00:56:fb:5b:ad:55:21:f2:3c:ad:
                    18:95:d0:c0:76:9a:b4:ba:a8:9c:8e:92:36:c5:8e:
                    0b:74:23:45:cc:8b:e8:89:a6:9f:4f:e5:ee:ce:b1:
                    32:9d:d7:6f:bc:b6:37:59:f6:64:4e:5b:ed:31:1b:
                    ff:af:6d:48:af:b6:e9:55:04:9e:36:36:5c:c1:0c:
                    8f:6c:88:4c:0e:ac:24:cd:71:9c:94:42:69:bd:6d:
                    cd:26:31:b5:b3:de:38:c3:80:40:58:49:31:a8:6e:
                    24:3a:de:fb:fc:99:08:63:c0:73:4d:e2:ab:bc:11:
                    5c:52:80:cb:f3:28:d1:c8:51:4e:9c:98:d2:40:e6:
                    93:e8:08:2e:62:31:54:5c:2f:ec:70:76:bf:66:ae:
                    1e:6c:3d:71:be:2c:54:99:7a:88:17:db:44:a0:95:
                    26:36:94:f3:54:24:62:3c:d9:4e:d2:1b:e1:bd:4b:
                    03:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:73:96:A0:A8:27:6C:87:3A:D7:52:97:FC:BB:D8:96:5E:8B:80:72
            X509v3 Authority Key Identifier:
                keyid:3F:47:F7:57:57:41:3C:CC:17:2D:3D:1B:82:6F:AE:5A:E9:38:5A:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:80:3e:0c:36:3f:cd:ea:7a:5e:eb:2f:20:4c:d3:2c:d1:ae:
         a8:4f:c7:c1:7c:f0:b7:64:c5:46:3b:c7:38:9e:51:4b:06:9f:
         1f:40:5c:49:c2:70:64:8e:04:55:b7:7d:62:c2:19:f9:5c:e8:
         0d:b3:13:54:ba:14:e1:86:96:50:90:0a:f4:db:80:ab:1a:67:
         de:01:2d:bd:15:81:95:a0:4a:ea:f1:d9:c6:4f:e5:dc:a8:7a:
         9e:da:21:64:06:40:27:cd:1e:4a:35:b5:fe:12:80:25:47:4a:
         8e:3e:90:ec:a9:41:90:b9:14:85:3b:c9:88:b8:c7:45:fb:a2:
         2e:31:60:b9:b6:a8:88:8b:4f:c1:70:53:a7:c1:07:27:50:b0:
         f5:66:1f:94:8e:0c:51:74:ab:94:cf:66:f5:b0:2f:e7:3f:a1:
         8e:bc:d2:f0:d8:e6:ab:64:0b:dc:a0:b3:ba:86:1c:7d:22:03:
         f3:74:7f:21:d0:64:25:2a:ce:1e:9e:dd:59:cb:bc:0c:0f:44:
         13:95:59:00:2f:8a:a4:d2:97:ba:ee:91:69:f3:ef:a2:1c:2a:
         dc:d3:21:78:35:7e:0a:e3:36:05:fe:36:89:23:84:20:45:23:
         06:78:fc:d3:91:53:87:8f:13:86:24:be:e9:b1:42:4a:dc:f3:
         53:cf:84:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:23:07 2025 by rpki-client