Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft
File:                     PabmnmXdClQFmXA-0MkkdMsg6Tk.mft (raw, json)
Hash identifier:          2jgxXZ4lwCCWpXvK+vLNjc6A5XhqTD+dn1Mrd4ohWWM=
Subject key identifier:   7D:0B:DE:B7:8D:C7:84:17:DE:A7:64:6A:F0:4D:98:0A:FA:9E:06:F8
Authority key identifier: 3D:A6:E6:9E:65:DD:0A:54:05:99:70:3E:D0:C9:24:74:CB:20:E9:39
Certificate issuer:       /CN=3da6e69e65dd0a540599703ed0c92474cb20e939
Certificate serial:       01974B1FBEAE9E6F45F843339C742004F2CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PabmnmXdClQFmXA-0MkkdMsg6Tk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft
Manifest number:          14DD
Signing time:             Sat 07 Jun 2025 16:01:00 +0000
Manifest this update:     Sat 07 Jun 2025 16:01:00 +0000
Manifest next update:     Sun 08 Jun 2025 16:01:00 +0000
Files and hashes:         1: PabmnmXdClQFmXA-0MkkdMsg6Tk.crl (hash: jr557isbT6nF5dBsTr3D/EOeLcQBA931yl5oaCdm/lE=)
                          2: wgfEWoteV0ugJhJFFY5StCpYga4.roa (hash: Bu0QgGIHWGxscJbgnF2zr/rd8qdTFWvwHrlBzc8O9aU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PabmnmXdClQFmXA-0MkkdMsg6Tk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:1f:be:ae:9e:6f:45:f8:43:33:9c:74:20:04:f2:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3da6e69e65dd0a540599703ed0c92474cb20e939
        Validity
            Not Before: Jun  7 16:01:00 2025 GMT
            Not After : Jun  8 16:01:00 2025 GMT
        Subject: CN=7d0bdeb78dc78417dea7646af04d980afa9e06f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fa:17:86:5d:b4:91:09:72:90:b6:1b:7d:89:
                    05:76:d0:09:d0:6c:3d:22:bd:9d:57:84:7a:d0:8e:
                    76:0c:1b:29:6b:04:b2:1a:35:1d:01:4b:ce:85:41:
                    d6:d3:c0:65:19:3c:00:d7:25:63:af:9d:96:7b:5e:
                    dd:04:38:ac:d6:88:46:ce:84:ea:b6:77:e2:6e:36:
                    52:00:5f:4f:8b:11:f8:1c:11:30:fa:e3:6b:f6:54:
                    b1:9d:83:ae:c7:1e:a2:32:25:0f:71:4c:08:b7:ba:
                    e5:72:92:9e:51:b1:48:3a:ee:8d:df:b5:46:37:d1:
                    11:21:02:80:10:c0:c5:25:ae:9c:a9:14:6e:41:55:
                    a2:4d:77:86:70:35:1e:d3:27:34:36:51:0a:48:80:
                    6b:1d:16:69:54:67:eb:25:5b:c6:53:c4:2b:a1:6e:
                    3c:51:2c:4c:f1:47:73:df:c7:03:96:c3:c4:3c:fa:
                    86:41:66:2a:77:99:e3:cb:f0:38:fa:98:87:99:ee:
                    e2:0e:c3:38:ad:7b:d4:82:ca:a2:2a:25:a5:06:ff:
                    b1:52:d1:2a:58:71:be:63:49:c1:d1:22:64:ca:04:
                    73:f1:68:a6:be:d3:b1:47:0b:ab:5a:16:3d:a1:67:
                    8c:b8:19:31:51:df:c9:fe:6a:2d:ff:95:84:52:de:
                    cd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:0B:DE:B7:8D:C7:84:17:DE:A7:64:6A:F0:4D:98:0A:FA:9E:06:F8
            X509v3 Authority Key Identifier:
                keyid:3D:A6:E6:9E:65:DD:0A:54:05:99:70:3E:D0:C9:24:74:CB:20:E9:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PabmnmXdClQFmXA-0MkkdMsg6Tk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:4a:23:6d:54:18:d8:6a:33:80:33:77:e2:7c:81:a5:7c:47:
         ec:11:68:22:80:b4:9b:0f:35:db:a2:eb:70:f1:8e:d4:ea:ba:
         f7:f6:4c:d1:ac:b0:55:fd:39:d1:7d:60:b5:ff:ac:98:84:b4:
         49:ca:7c:b2:03:78:7d:28:fb:94:a3:73:c1:17:54:df:83:fa:
         1d:de:70:16:1c:4e:ca:77:0d:04:a3:c9:d6:19:c7:fb:b0:f3:
         2b:e6:1b:57:b3:03:cb:73:c2:da:9a:50:db:d6:52:8c:49:83:
         c4:39:0f:01:2b:b9:b7:cf:5a:2c:24:9b:a5:ed:52:7c:cb:d0:
         d9:9e:c8:0c:f5:3d:f1:0f:63:54:c2:0c:af:ae:66:c5:e7:1f:
         d2:0b:91:e2:16:13:49:96:e5:1e:e4:0f:f3:0b:b9:10:02:18:
         ca:21:c5:1b:0a:7d:b9:5b:5c:11:54:4d:65:29:d5:79:cd:a0:
         b7:59:64:6c:93:02:c7:a7:c7:24:86:e9:50:4e:86:99:d3:91:
         fa:8f:bb:83:4a:79:b2:de:23:f5:c3:ce:8f:1b:43:99:f3:15:
         96:76:e6:b7:58:80:48:d2:1e:42:9f:02:c1:9d:3b:54:81:ef:
         dc:2c:60:65:0f:0f:09:d6:5d:36:1b:7e:75:d9:89:9b:37:2a:
         88:6e:85:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:21:33 2025 by rpki-client