Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
File:                     PDULqC8_61ruKJOPvxsJweL9GbQ.mft (raw, json)
Hash identifier:          g+hGpSpspwqH9FOj9qFv0ig4l/1fD/X0nQ90uD+/V2U=
Subject key identifier:   8A:B5:3B:62:83:48:A6:3C:D3:57:26:B6:18:17:33:6E:57:08:EC:F2
Authority key identifier: 3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4
Certificate issuer:       /CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
Certificate serial:       0197440AE9FFE471B5D6BDA4B613A1BDD8EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
Manifest number:          157A
Signing time:             Fri 06 Jun 2025 07:00:55 +0000
Manifest this update:     Fri 06 Jun 2025 07:00:55 +0000
Manifest next update:     Sat 07 Jun 2025 07:00:55 +0000
Files and hashes:         1: 1-Csr3W7RFkTtbpc5vegpM0x3SJg.roa (hash: OEps/3ayuoO5bERjIwyI74TPDpt1ijmiHI+Ru4dOW1I=)
                          2: PDULqC8_61ruKJOPvxsJweL9GbQ.crl (hash: urUJ6Ke4/1XuceOcmCoeEfpKAe2AsZUIDFKuEXs7ZUk=)
                          3: aI9PtDrL1wGCUURcBpHMKfTf4hE.roa (hash: 4oSaxJpQHFX+hBtLYICwFPgrE4wCzYMHUMuoAxfYBXE=)
                          4: j6dQ2cjzXA3192uDTyOAiZGLE8Q.roa (hash: b9/CxQNUb4cLntaVBU/KEYsxwEObm97HgDwZmznQiH0=)
                          5: jyPlSfMwE97ShJiNEree4W-YnKc.roa (hash: RPRkI69AUdx22PSRgMKu/d39p+trzoeOCprFB1jyo6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 06:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:44:0a:e9:ff:e4:71:b5:d6:bd:a4:b6:13:a1:bd:d8:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
        Validity
            Not Before: Jun  6 07:00:55 2025 GMT
            Not After : Jun  7 07:00:55 2025 GMT
        Subject: CN=8ab53b628348a63cd35726b61817336e5708ecf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:48:7d:e5:c8:6c:a8:be:11:1d:bd:76:ba:1c:
                    d7:16:be:04:73:45:78:7c:a8:ce:e5:43:bb:e0:37:
                    55:14:80:a0:e1:73:43:8d:49:1a:bf:9c:7b:b5:04:
                    26:f9:77:26:ec:de:bc:0c:16:74:43:08:46:17:9f:
                    d9:79:ea:26:45:d9:76:70:39:a8:c4:0f:d1:0d:01:
                    5c:75:ed:85:3a:5c:54:df:c7:52:a9:92:4a:0a:94:
                    80:cb:59:9f:f7:d2:d6:c9:5b:08:a8:10:15:9b:ed:
                    33:74:f6:b3:12:39:c0:12:96:59:97:fb:62:d8:e2:
                    67:ab:8d:78:f1:ee:e0:50:16:46:45:b4:a5:62:26:
                    f4:1b:93:b8:53:fd:7d:aa:4a:57:8d:1f:0f:7d:32:
                    78:56:27:6e:61:71:ff:3c:32:06:0b:58:23:4f:b3:
                    7b:53:ba:25:5c:6b:06:ad:bb:3e:6a:92:0a:52:af:
                    87:78:4b:c4:16:e6:cb:71:01:76:12:22:39:58:25:
                    c3:5d:8b:2d:a3:ba:b1:ee:f8:9d:95:07:37:76:76:
                    b8:cb:58:5d:ba:d9:58:75:9e:f5:50:f4:da:02:49:
                    29:4b:b5:bf:e1:b7:b6:47:3e:a1:67:19:92:89:a7:
                    02:dc:a5:8f:90:59:8f:4a:86:98:c1:8c:e5:f9:f8:
                    30:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B5:3B:62:83:48:A6:3C:D3:57:26:B6:18:17:33:6E:57:08:EC:F2
            X509v3 Authority Key Identifier:
                keyid:3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:8e:26:8a:72:b0:a0:2b:63:2f:2f:59:58:dd:a9:88:cf:0f:
         3e:bd:75:92:4e:33:1a:de:fb:f4:0f:53:94:10:91:ae:f9:c8:
         0b:c4:f4:7a:2f:f9:07:db:a1:3f:a3:9a:e8:79:57:42:cf:01:
         ba:50:9b:03:a0:32:d8:32:e5:9a:3d:dc:22:0e:1e:cc:f5:69:
         4f:bd:42:fd:58:29:7d:6a:8a:ec:ae:f3:61:90:86:87:af:cf:
         40:ca:8c:4b:1d:75:fd:15:19:eb:6c:f1:39:43:c6:ee:5b:f9:
         dd:2d:7d:eb:23:6e:54:94:96:4f:cd:79:fe:4f:fb:c9:23:bc:
         af:b9:aa:45:f0:5d:c7:0f:48:f6:ef:75:9b:bd:93:85:e6:4d:
         c7:8b:97:c6:e6:35:10:a6:dd:9f:f5:9e:a5:7e:bd:ab:35:f9:
         38:f2:56:72:c5:f1:08:59:55:cb:1a:15:ce:3a:db:d2:3e:27:
         5c:6f:ae:1b:15:a3:d0:b9:8f:05:3b:ed:23:12:de:f6:03:ae:
         0f:39:41:18:86:a0:2a:87:4c:fc:32:db:d0:30:84:9a:08:c2:
         b8:a9:ac:95:84:d3:0e:7a:98:74:c4:98:1c:ff:4f:e3:e8:49:
         8c:8c:d5:15:35:9b:1d:99:46:1f:26:21:91:94:fd:f3:03:23:
         7d:3f:3a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:33:41 2025 by rpki-client