Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft
File:                     PGFL8lfTr3cLvzxsLTW_pGVobOs.mft (raw, json)
Hash identifier:          JXbAsKYg4u9Z8+NC94KPrrDGIbztqDpze6GtI03bwLk=
Subject key identifier:   24:2B:28:79:C4:D0:6E:77:53:A5:2C:F4:C2:FE:30:1D:D3:AF:44:EA
Authority key identifier: 3C:61:4B:F2:57:D3:AF:77:0B:BF:3C:6C:2D:35:BF:A4:65:68:6C:EB
Certificate issuer:       /CN=3c614bf257d3af770bbf3c6c2d35bfa465686ceb
Certificate serial:       01974AB19D0C69FE58A63F28959A8A55E24D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft
Manifest number:          157D
Signing time:             Sat 07 Jun 2025 14:00:43 +0000
Manifest this update:     Sat 07 Jun 2025 14:00:43 +0000
Manifest next update:     Sun 08 Jun 2025 14:00:43 +0000
Files and hashes:         1: PGFL8lfTr3cLvzxsLTW_pGVobOs.crl (hash: DQ/IelRU4TS8ZqoCr54Xv2EGD1U+kPUdwrumUxyA1jY=)
                          2: idSC5Hw5WkkMOAbfku6Dkz9XO6I.roa (hash: UXJcLdtFjpO9Edbh8qYFBpHmdjidm11out2Ag90FqaE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:b1:9d:0c:69:fe:58:a6:3f:28:95:9a:8a:55:e2:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c614bf257d3af770bbf3c6c2d35bfa465686ceb
        Validity
            Not Before: Jun  7 14:00:43 2025 GMT
            Not After : Jun  8 14:00:43 2025 GMT
        Subject: CN=242b2879c4d06e7753a52cf4c2fe301dd3af44ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:de:14:c8:80:b9:e3:30:36:20:a0:83:e7:93:
                    30:9e:0a:e9:c1:9a:dc:e5:06:dd:ef:52:13:8b:c6:
                    a0:e2:5c:61:92:f0:9c:f7:b8:7c:8b:86:2c:be:d7:
                    a9:2f:22:ae:ae:4f:7b:30:62:ce:23:ed:e6:36:47:
                    72:ba:a3:1c:f1:59:08:fa:f2:2b:ae:a7:30:2e:83:
                    e1:43:ae:51:60:8f:45:b5:b6:bd:c3:28:f4:f4:23:
                    e4:5b:7a:6a:1c:3d:b6:c9:72:4a:b3:80:d7:6f:34:
                    ef:b7:73:ca:66:6a:50:79:85:f5:91:0e:d3:2d:08:
                    a6:34:70:62:36:3b:43:1a:7c:cb:f9:5e:f4:1b:2a:
                    d3:a8:0d:74:b3:b2:2c:2e:05:2a:c6:8d:cc:41:8d:
                    40:f5:19:ba:bc:7e:17:45:21:30:18:dc:58:2a:c4:
                    24:0c:3e:2a:a8:9f:77:64:e4:3b:a3:31:9b:e2:e3:
                    5c:6c:a1:72:cf:eb:8d:61:aa:7f:58:5c:b3:1f:21:
                    bc:69:14:45:29:1a:08:a5:34:b6:d2:06:91:11:6d:
                    cc:ad:1c:62:34:e5:0a:26:ec:b6:cd:c5:d7:45:08:
                    ce:a6:ab:8a:64:1d:7a:48:3f:70:ba:ee:3d:70:59:
                    14:65:6e:72:b4:d2:28:e2:c7:46:99:c9:35:01:6a:
                    7f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:2B:28:79:C4:D0:6E:77:53:A5:2C:F4:C2:FE:30:1D:D3:AF:44:EA
            X509v3 Authority Key Identifier:
                keyid:3C:61:4B:F2:57:D3:AF:77:0B:BF:3C:6C:2D:35:BF:A4:65:68:6C:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:94:0a:12:06:7a:c9:98:ac:32:2f:c6:ca:07:46:62:ee:88:
         30:1a:f0:6c:51:db:46:b4:2f:d2:44:11:80:c6:b5:34:24:24:
         94:e8:fe:b3:43:1c:64:63:c9:45:d4:da:f2:f7:d5:c5:d2:4c:
         a4:05:3f:3c:53:91:62:f4:ff:77:9c:64:94:06:58:96:ef:e5:
         e2:c5:62:0e:4f:67:3c:73:f6:fd:08:45:7c:6f:25:76:d5:e4:
         ba:d0:da:14:0d:76:55:d5:21:de:15:aa:3e:18:65:f6:e7:3f:
         dc:15:59:0c:9f:af:51:4a:33:d6:1a:34:7f:24:2b:10:c0:ef:
         61:8b:9b:1e:ae:43:1c:15:f6:28:e2:c4:10:5c:d4:e9:40:f0:
         c3:f8:63:8e:02:5d:98:a1:74:b4:1b:89:9e:f7:46:62:2f:01:
         55:b5:7b:70:3e:6a:02:d3:fb:4f:2c:e4:c3:fd:55:75:da:73:
         2e:15:27:cd:18:ad:61:13:83:66:82:7d:3a:b3:94:e5:0d:25:
         35:3b:d6:bf:58:5b:5d:67:d9:ee:5e:60:f4:27:51:ed:ab:e3:
         68:ae:20:7a:c8:38:8f:49:72:c4:ae:fa:b5:d1:d9:88:5d:ad:
         a1:98:99:ae:52:62:44:00:0a:2e:54:24:f0:32:5a:d0:79:66:
         69:b1:c8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:18:24 2025 by rpki-client