Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft
File:                     PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft (raw, json)
Hash identifier:          Li3K+UpfXerRknyEWL0ODwA+mbCv9N8C2Qf08CQy5wE=
Subject key identifier:   32:DD:4A:C2:6B:EC:64:0D:06:BE:59:B7:33:9A:97:7C:7F:16:2D:B8
Authority key identifier: 3D:C4:10:E3:F0:9B:EA:6A:BC:9D:D8:C6:FF:41:85:65:1B:0A:B8:67
Certificate issuer:       /CN=3dc410e3f09bea6abc9dd8c6ff4185651b0ab867
Certificate serial:       019748C36D5EC0E64266FF129BB1C6A8FC0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft
Manifest number:          150E
Signing time:             Sat 07 Jun 2025 05:00:56 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:56 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:56 +0000
Files and hashes:         1: PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.crl (hash: SEXsxzp72vV2duf2Bku7DJC6SH4UM//t4UQcqPqxfJw=)
                          2: itPEMbOZFFR8e5L5AvpBnlFEedQ.roa (hash: pIQ9iWRr1eE7BBGNob9EZxPiOkZPJVC3FeL7vrrHIjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c3:6d:5e:c0:e6:42:66:ff:12:9b:b1:c6:a8:fc:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3dc410e3f09bea6abc9dd8c6ff4185651b0ab867
        Validity
            Not Before: Jun  7 05:00:56 2025 GMT
            Not After : Jun  8 05:00:56 2025 GMT
        Subject: CN=32dd4ac26bec640d06be59b7339a977c7f162db8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4a:fe:9f:49:d9:b1:f8:0a:82:e2:eb:d1:7c:
                    2d:7e:12:a8:66:2c:bb:28:84:37:35:88:d7:85:79:
                    87:53:63:9c:32:f6:bc:bd:07:8c:e6:b4:e1:2f:83:
                    76:33:57:79:0e:28:23:cf:60:a1:e8:b9:c1:4a:89:
                    c1:3e:55:11:b4:b7:4f:3a:68:6d:21:bb:14:1a:13:
                    19:4a:fb:06:9d:1e:8c:f2:14:41:34:fb:aa:3e:a4:
                    2c:64:26:11:aa:ba:4b:01:68:1f:b9:c7:09:6c:b7:
                    a5:50:08:94:65:f0:e1:6a:9e:5a:53:64:f5:48:06:
                    31:93:44:48:bb:d7:0a:c5:05:6f:cd:71:ac:e1:10:
                    00:8f:f1:a5:ba:5b:c7:08:0b:46:2e:71:0a:43:3c:
                    e7:03:d5:67:1d:33:3f:b2:62:be:9d:53:14:42:a1:
                    63:cb:d8:22:9a:89:5f:5a:f8:95:3a:de:f7:fe:89:
                    55:66:42:1d:7e:dc:7a:98:53:15:7e:89:fe:93:df:
                    dc:f1:19:65:f1:9a:5d:18:e5:f2:a6:90:f2:87:75:
                    b4:26:76:8b:6c:50:a1:a1:57:67:6b:29:5b:b1:77:
                    f8:4a:ee:dc:60:ea:3b:69:7d:30:b0:d2:29:e9:1e:
                    10:78:4d:fd:0e:90:ba:e4:85:d6:b4:14:d4:af:1f:
                    92:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:DD:4A:C2:6B:EC:64:0D:06:BE:59:B7:33:9A:97:7C:7F:16:2D:B8
            X509v3 Authority Key Identifier:
                keyid:3D:C4:10:E3:F0:9B:EA:6A:BC:9D:D8:C6:FF:41:85:65:1B:0A:B8:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:f2:e8:3c:81:76:6d:04:2f:a7:ea:f8:44:51:8a:38:09:e2:
         24:4e:54:4d:b9:38:1c:37:98:a7:37:75:60:ec:73:10:9a:6c:
         5b:a2:f5:99:79:fc:41:36:05:e9:97:9f:bf:fb:fb:4d:46:f1:
         5c:47:0a:5c:99:d7:b7:e4:a2:fd:0d:5a:ef:db:3f:ac:0a:2f:
         d5:eb:2f:9b:a6:b4:00:ca:81:e6:45:27:56:94:03:b9:d1:64:
         12:97:55:a9:29:ce:fe:fb:39:be:8d:2b:4a:3a:96:a6:c3:50:
         01:d4:d5:2d:c0:fc:e8:76:02:a8:c2:03:96:02:51:05:2d:61:
         55:ed:9e:1e:b1:47:f8:f4:54:f2:32:49:af:81:c6:8b:66:d8:
         75:e3:e3:7a:11:bf:62:7d:88:78:96:c2:9c:ba:ee:68:7b:73:
         d1:cd:fb:d8:77:07:5d:ca:9b:89:eb:b6:18:66:35:55:84:c1:
         01:4a:11:a7:4a:e9:ad:b1:bd:28:f5:94:03:9b:ca:34:23:8e:
         15:03:57:04:59:ff:83:76:7e:28:4f:78:ae:b5:b2:8d:87:33:
         74:05:18:25:e6:3e:1e:6f:fc:83:98:62:17:de:63:4f:2e:b2:
         76:ee:3e:d6:df:22:1f:15:6b:56:78:e2:e3:47:d7:77:bd:b9:
         bc:75:ca:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:36:58 2025 by rpki-client