Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft
File:                     PH-snrclLdRq8BpNcoJsnZezJfQ.mft (raw, json)
Hash identifier:          hcv7fOCrAK84FT0ElR0uR0hMKgyP7Yx1B+D2E5mTjA8=
Subject key identifier:   53:9A:99:C8:F3:8F:7D:C0:ED:A2:CB:78:BC:07:09:A2:29:85:30:21
Authority key identifier: 3C:7F:AC:9E:B7:25:2D:D4:6A:F0:1A:4D:72:82:6C:9D:97:B3:25:F4
Certificate issuer:       /CN=3c7fac9eb7252dd46af01a4d72826c9d97b325f4
Certificate serial:       01976D3E7DF0F696BD20D3452A701AC77AF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PH-snrclLdRq8BpNcoJsnZezJfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft
Manifest number:          099B
Signing time:             Sat 14 Jun 2025 07:01:41 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:41 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:41 +0000
Files and hashes:         1: PH-snrclLdRq8BpNcoJsnZezJfQ.crl (hash: Wv1R3TWappqyo1kT0qh9mJfGXk24iXMCif3AJm4eCag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PH-snrclLdRq8BpNcoJsnZezJfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 07:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3e:7d:f0:f6:96:bd:20:d3:45:2a:70:1a:c7:7a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c7fac9eb7252dd46af01a4d72826c9d97b325f4
        Validity
            Not Before: Jun 14 07:01:41 2025 GMT
            Not After : Jun 15 07:01:41 2025 GMT
        Subject: CN=539a99c8f38f7dc0eda2cb78bc0709a229853021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:65:71:40:32:15:03:c0:e5:45:27:3e:24:eb:
                    a8:47:9b:25:c5:52:7e:23:9a:f9:c2:41:a9:33:ce:
                    99:8a:b5:5a:f6:1a:a4:ac:8e:1d:1a:82:75:11:f1:
                    7a:8d:5a:b8:e8:43:3b:f1:a3:5e:20:9f:4e:62:75:
                    46:f4:04:24:3f:0e:7d:77:6f:02:97:88:b9:77:0a:
                    f2:17:c0:3d:9a:f5:8b:12:8e:8e:3a:dc:79:1a:57:
                    06:32:37:60:24:e1:5e:e4:0d:5f:e9:b3:d5:ef:f3:
                    6a:ff:1a:1a:0f:3b:96:91:0c:ce:83:e4:5c:82:b6:
                    b9:f0:e4:fb:8b:64:ca:e9:f7:05:67:3c:87:8f:5f:
                    cd:75:8b:4c:bc:70:cc:47:df:4d:a4:45:09:88:a4:
                    9b:2c:66:56:9d:e1:fb:9d:02:b3:0d:6e:b9:af:f1:
                    52:64:2a:02:ed:d6:86:81:8f:8b:92:65:87:e2:7b:
                    25:06:b7:7a:ad:3a:94:08:f7:f5:17:8d:a4:ec:83:
                    2f:7b:89:59:7c:ec:12:a3:f8:20:86:3f:92:99:4f:
                    ec:a8:8f:9c:5a:7f:8d:65:78:4a:f6:a3:92:8d:8f:
                    5c:90:ee:76:b5:e4:5f:ea:97:97:0f:54:7d:0e:b6:
                    08:24:59:95:fd:60:ad:7f:9f:bb:71:4b:21:0a:fa:
                    40:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:9A:99:C8:F3:8F:7D:C0:ED:A2:CB:78:BC:07:09:A2:29:85:30:21
            X509v3 Authority Key Identifier:
                keyid:3C:7F:AC:9E:B7:25:2D:D4:6A:F0:1A:4D:72:82:6C:9D:97:B3:25:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PH-snrclLdRq8BpNcoJsnZezJfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:a2:a3:4a:b1:f8:aa:fa:36:2b:f2:54:e6:59:05:6c:38:28:
         7d:a5:75:e0:da:80:27:ee:a6:47:2c:b8:c4:c2:b5:f5:6e:63:
         fb:f6:35:92:83:96:3c:fd:49:7a:04:c1:77:32:66:95:b3:d9:
         87:38:ca:61:aa:a5:c6:ab:ac:0e:6c:cc:53:c8:d7:88:ba:80:
         21:83:fa:29:fe:88:8c:60:2f:18:ba:30:2f:dc:ea:42:bd:e8:
         85:25:2e:05:3c:7f:69:b4:1a:a2:1a:cb:46:e2:5d:e0:70:fd:
         27:8a:43:60:b7:5a:03:6c:26:73:b7:29:73:25:f3:fa:7d:90:
         0f:84:d9:de:7f:ab:3a:dc:4f:fc:1d:8b:99:24:af:9c:da:97:
         7a:ae:28:06:9a:d7:50:ee:bf:a3:bf:48:ff:8b:08:7e:46:1f:
         f0:4d:60:37:3e:7e:54:17:f8:67:29:8c:2c:82:0c:33:a3:19:
         a7:ce:8f:48:77:9d:45:97:45:b8:1c:6c:1f:7d:16:f6:bd:12:
         19:4f:ad:ac:c9:70:99:51:ba:40:33:04:f4:91:f3:70:35:53:
         6b:74:ae:c7:d0:eb:79:71:0d:4a:f6:06:6e:4a:6f:b8:ae:70:
         d2:7b:fe:cd:ea:85:09:86:a6:4b:5d:f4:61:89:8c:73:f6:b3:
         ab:1b:2f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 14:39:43 2025 by rpki-client