Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.mft
File:                     Ph_ROPEC19yxWDtElBAvD-WH5F0.mft (raw, json)
Hash identifier:          HDvZTFtU7NlQJV0waOfi7b03yck67k+DhaR2G7TRY2E=
Subject key identifier:   C5:3E:F7:D1:03:5B:FE:83:0B:C6:81:2E:33:02:2D:38:4E:91:B0:C9
Authority key identifier: 3E:1F:D1:38:F1:02:D7:DC:B1:58:3B:44:94:10:2F:0F:E5:87:E4:5D
Certificate issuer:       /CN=3e1fd138f102d7dcb1583b4494102f0fe587e45d
Certificate serial:       01974967F105310A9B80BD00C601735A03DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ph_ROPEC19yxWDtElBAvD-WH5F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.mft
Manifest number:          157F
Signing time:             Sat 07 Jun 2025 08:00:37 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:37 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:37 +0000
Files and hashes:         1: Ph_ROPEC19yxWDtElBAvD-WH5F0.crl (hash: QwOk9l5en7+gKL8FxakxgFLPLv+dKZrGKyXxkwC/mZ4=)
                          2: wBeey_3DAfmS3bVpXKczcJjM4cE.roa (hash: 0BXIC9Ywwqhs3eAEJFqVmWCSiRTOnC7ial/YIuKbIQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ph_ROPEC19yxWDtElBAvD-WH5F0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:67:f1:05:31:0a:9b:80:bd:00:c6:01:73:5a:03:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e1fd138f102d7dcb1583b4494102f0fe587e45d
        Validity
            Not Before: Jun  7 08:00:37 2025 GMT
            Not After : Jun  8 08:00:37 2025 GMT
        Subject: CN=c53ef7d1035bfe830bc6812e33022d384e91b0c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:86:77:93:7c:f1:be:65:26:e8:da:7f:11:d6:
                    2f:ff:c9:70:6c:b4:55:fc:07:95:e9:a4:ed:65:e0:
                    b3:37:c1:00:ea:cf:57:1e:03:1f:b3:64:70:73:f5:
                    a6:70:66:c4:f2:36:74:c0:fc:b5:15:fa:0e:cc:15:
                    b1:39:dc:d9:75:1c:cc:4b:10:aa:07:db:7d:75:37:
                    b8:3a:f8:ce:1c:c6:f3:4e:72:9e:b9:b0:04:f5:f5:
                    5d:4e:1c:03:49:c6:5a:e6:cd:df:d9:8b:3d:05:cf:
                    1a:a9:1b:84:c0:a2:9a:af:48:2c:c1:a2:0f:2e:df:
                    2f:b1:22:97:b9:01:29:40:50:44:3e:8c:6a:c7:d2:
                    92:a3:0b:20:cb:0f:0f:fa:09:c2:73:ae:9e:54:62:
                    b7:eb:98:b3:60:4f:2b:4d:f4:99:84:91:88:03:ba:
                    34:bf:cf:85:69:9a:61:f0:8a:6f:1c:a0:16:b8:99:
                    61:a2:8e:a9:7c:01:9e:d7:b4:4a:b1:c2:22:bb:39:
                    2b:b4:fa:79:a4:97:50:67:a2:30:78:9e:a2:b9:4b:
                    35:66:b7:3b:2a:a9:a2:d3:70:f3:b8:59:e4:90:15:
                    a4:d1:30:70:c7:1d:52:dd:5b:16:c3:58:2a:b0:df:
                    96:55:1a:34:0b:74:82:e7:3e:a5:49:d1:52:d8:bd:
                    93:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:3E:F7:D1:03:5B:FE:83:0B:C6:81:2E:33:02:2D:38:4E:91:B0:C9
            X509v3 Authority Key Identifier:
                keyid:3E:1F:D1:38:F1:02:D7:DC:B1:58:3B:44:94:10:2F:0F:E5:87:E4:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ph_ROPEC19yxWDtElBAvD-WH5F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:00:f7:c3:72:eb:2b:91:4a:af:f4:2d:f4:76:fd:3d:0b:1c:
         10:90:61:8e:51:d1:51:98:8a:02:20:a3:6c:40:4e:b9:e7:bd:
         8f:07:df:cc:e6:dc:88:2a:77:0a:e7:32:a0:6d:64:22:2e:73:
         23:6e:1e:5d:8e:91:95:d3:0b:90:48:9a:21:75:26:d7:0b:f6:
         19:a0:69:d5:72:95:c2:72:51:87:ac:6e:88:c6:5d:a6:20:e8:
         79:c3:5c:fb:8f:55:db:85:ab:8c:47:8e:54:7f:2a:6c:e3:d1:
         93:ca:6f:22:80:07:93:c8:2a:9b:dd:9a:58:8b:7e:fa:58:d9:
         82:90:5c:1d:64:fc:e6:a5:18:72:e8:bb:7b:81:c7:f8:57:99:
         d3:f2:0d:0c:db:1a:44:5a:bd:3b:fc:fe:1e:15:1b:bf:0e:8a:
         18:43:34:c2:f5:b0:dd:b8:ef:57:75:94:80:9f:05:5c:c9:a0:
         d7:85:8c:95:5b:d2:bc:6a:06:48:72:a1:2b:00:5b:f1:c4:68:
         1e:51:b2:59:ea:01:04:7c:99:a0:78:61:5e:ba:85:da:ff:64:
         3b:54:e0:5b:23:e2:f0:ae:d0:97:fd:81:f7:c7:35:32:ca:1c:
         2e:2d:18:1f:d7:42:4e:19:df:a7:90:5c:84:39:ae:c6:b8:36:
         6c:86:16:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:31:12 2025 by rpki-client