Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft
File:                     P1amMzFVLvkdigAFozjsmC3zfIs.mft (raw, json)
Hash identifier:          ON1521WF4bX9uaKgcDvHscOeAijhZazGGnhNftybnJE=
Subject key identifier:   CE:E3:EB:4E:8B:94:97:4B:45:9C:BF:8F:89:43:83:27:34:3E:10:07
Authority key identifier: 3F:56:A6:33:31:55:2E:F9:1D:8A:00:05:A3:38:EC:98:2D:F3:7C:8B
Certificate issuer:       /CN=3f56a63331552ef91d8a0005a338ec982df37c8b
Certificate serial:       0197481E45DB3FB869767434EBCF184D1B4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P1amMzFVLvkdigAFozjsmC3zfIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft
Manifest number:          0F86
Signing time:             Sat 07 Jun 2025 02:00:32 +0000
Manifest this update:     Sat 07 Jun 2025 02:00:32 +0000
Manifest next update:     Sun 08 Jun 2025 02:00:32 +0000
Files and hashes:         1: P1amMzFVLvkdigAFozjsmC3zfIs.crl (hash: LktZROLamEfRJfL7LTOopQGIXDfAYPmsAGmNcPpeOyQ=)
                          2: i_E14tU_jnnkTSG9INpa9JShg9E.roa (hash: ZqQOvQcYLRY+mr+wSPe0ltP607X6tGik7hBPTVxfXqk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P1amMzFVLvkdigAFozjsmC3zfIs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:1e:45:db:3f:b8:69:76:74:34:eb:cf:18:4d:1b:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f56a63331552ef91d8a0005a338ec982df37c8b
        Validity
            Not Before: Jun  7 02:00:32 2025 GMT
            Not After : Jun  8 02:00:32 2025 GMT
        Subject: CN=cee3eb4e8b94974b459cbf8f89438327343e1007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:05:c9:96:c0:07:a8:4a:21:9f:ba:97:10:71:
                    6d:5c:32:09:f4:fc:45:40:8f:87:3a:16:2a:37:cf:
                    06:bb:a2:27:eb:da:2e:27:46:cc:09:60:2e:8f:85:
                    c7:d6:43:52:cf:c1:35:47:99:3a:10:12:57:1e:9f:
                    9f:9c:ee:80:01:ad:8d:6b:f6:1b:cf:bb:0f:2c:7f:
                    6b:b5:1d:fc:a1:a9:a4:ea:f6:de:a4:a0:9e:bd:c2:
                    91:0d:f3:d3:c7:5d:57:54:19:23:de:a7:83:66:15:
                    4f:79:4c:4d:ce:bb:0d:b4:55:61:c8:22:54:d2:3f:
                    41:1c:d3:fa:c9:38:23:52:d1:1b:ae:ec:b8:c0:45:
                    9e:3c:f9:6d:17:80:c6:95:e4:e3:65:f1:0b:08:43:
                    0e:b0:49:e9:bc:39:0d:9e:6e:01:43:90:4e:7c:58:
                    cc:77:5b:bd:d1:39:cf:94:8c:c6:41:48:7a:e5:c0:
                    de:68:b3:93:13:45:fa:9e:6a:e5:41:96:fe:94:6a:
                    6b:d0:89:b7:66:e2:75:7d:81:ba:7b:91:d1:6d:fb:
                    24:e5:9c:1e:f9:67:0a:f8:45:72:a4:03:24:01:6c:
                    55:4a:31:a4:85:a0:41:35:85:37:ea:e9:c5:f0:b7:
                    aa:4c:ab:d1:b5:c8:8a:09:fb:b1:97:b1:d8:40:3d:
                    3a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E3:EB:4E:8B:94:97:4B:45:9C:BF:8F:89:43:83:27:34:3E:10:07
            X509v3 Authority Key Identifier:
                keyid:3F:56:A6:33:31:55:2E:F9:1D:8A:00:05:A3:38:EC:98:2D:F3:7C:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1amMzFVLvkdigAFozjsmC3zfIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:c8:ac:ae:3f:ee:10:56:f5:62:d2:f7:4b:bf:c3:fa:8c:c2:
         81:77:58:45:32:05:ad:99:2a:aa:e3:38:77:63:f1:d1:95:43:
         bc:72:e8:c2:82:d0:f0:97:6e:05:e6:e2:d1:a5:ee:30:ff:88:
         ea:c8:12:a9:53:8a:0a:3e:ef:8c:57:1c:99:62:22:4d:78:c3:
         80:3f:d5:81:ea:3a:96:81:18:15:79:26:fa:0b:7f:7f:33:5e:
         f5:45:ad:ba:74:08:3b:5c:2c:8e:04:e0:5e:f4:48:89:94:02:
         c0:a4:52:fb:a6:eb:66:9c:41:43:07:0b:30:80:b4:8e:58:19:
         a0:ef:96:50:c8:20:bd:14:0c:b8:53:be:94:d6:e9:f8:dc:6d:
         00:7c:60:11:93:ae:8f:59:89:de:28:15:5f:26:68:81:4f:a1:
         1a:a2:d5:b0:22:d2:f2:54:95:d4:7f:49:93:05:81:9b:ce:ae:
         39:93:e2:e4:a1:fc:a6:eb:3d:d6:6c:55:f3:ef:de:89:5c:43:
         a2:87:3b:b9:11:9f:0a:5a:a4:c3:a1:6e:10:cc:cd:1c:5e:37:
         52:bc:07:b7:45:fa:c2:d5:27:11:51:81:de:65:89:c4:bb:44:
         68:37:e3:52:07:7a:b4:34:73:17:f8:ae:a0:93:13:8f:bb:0c:
         19:82:cd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:04:32 2025 by rpki-client