Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
File:                     PGvK_z6ArkGaFdG8s24xmN744ic.mft (raw, json)
Hash identifier:          YzPSslrbVyaxcj1JVAb/yqZ1JGEGq+1wSRfk2zqxCBk=
Subject key identifier:   24:05:A3:17:A7:73:47:3A:D9:03:5F:BC:04:1D:77:85:FB:87:C2:DD
Authority key identifier: 3C:6B:CA:FF:3E:80:AE:41:9A:15:D1:BC:B3:6E:31:98:DE:F8:E2:27
Certificate issuer:       /CN=3c6bcaff3e80ae419a15d1bcb36e3198def8e227
Certificate serial:       0197469D95C1B8E3C58C5F4896A36A0247A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
Manifest number:          0631
Signing time:             Fri 06 Jun 2025 19:00:21 +0000
Manifest this update:     Fri 06 Jun 2025 19:00:21 +0000
Manifest next update:     Sat 07 Jun 2025 19:00:21 +0000
Files and hashes:         1: BneHQ-af6etJYnzgVpFHJTLWtfI.roa (hash: SK4P5sVwHnq6qFE+d1xG/bjzaly1qgrqi3Y+RExkIAE=)
                          2: PGvK_z6ArkGaFdG8s24xmN744ic.crl (hash: Q0orcR1+4CoP9SvyfudNncoWZxLI0rTWdHIhwP9EWFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9d:95:c1:b8:e3:c5:8c:5f:48:96:a3:6a:02:47:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c6bcaff3e80ae419a15d1bcb36e3198def8e227
        Validity
            Not Before: Jun  6 19:00:21 2025 GMT
            Not After : Jun  7 19:00:21 2025 GMT
        Subject: CN=2405a317a773473ad9035fbc041d7785fb87c2dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f7:cc:76:95:c1:d3:e9:e4:79:84:69:af:bf:
                    7a:cd:74:96:b7:99:e5:ed:ad:b6:ea:6f:77:1e:52:
                    25:76:de:0b:3c:0a:b4:7e:b5:df:af:80:5c:61:fd:
                    0a:0f:41:9b:a1:52:25:85:63:2c:55:af:43:17:a8:
                    79:93:7a:59:bf:3d:e9:10:d0:bd:bb:ba:02:e7:4d:
                    1f:ba:a7:52:1c:13:46:54:49:48:72:86:86:6c:13:
                    ea:23:a9:4d:30:02:c8:1a:82:c9:f3:4f:d5:24:c0:
                    8e:c6:8e:24:6b:2d:b3:c4:1f:18:15:8e:d0:75:ce:
                    88:8f:f9:43:3e:bc:02:6c:a9:b2:c5:7e:5d:75:37:
                    44:32:63:34:cc:0b:3e:6a:c7:dd:3b:9a:f8:02:b8:
                    88:de:a2:50:56:1d:5c:53:6b:8f:e2:6d:1c:db:45:
                    df:0f:e8:94:ba:48:41:01:24:b6:be:2f:15:ff:03:
                    95:3d:e0:b6:08:f9:87:d1:f0:26:3b:88:cf:33:c4:
                    2c:a1:84:ba:17:82:59:77:e7:6c:fa:64:a6:b0:34:
                    2a:b3:f7:b3:fd:f5:76:cc:d8:27:92:52:a0:47:e3:
                    77:53:69:30:58:ef:37:f4:94:3f:9b:11:4d:e7:f6:
                    77:52:60:58:4f:85:c4:8c:0c:49:34:27:87:c4:c3:
                    69:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:05:A3:17:A7:73:47:3A:D9:03:5F:BC:04:1D:77:85:FB:87:C2:DD
            X509v3 Authority Key Identifier:
                keyid:3C:6B:CA:FF:3E:80:AE:41:9A:15:D1:BC:B3:6E:31:98:DE:F8:E2:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:eb:25:60:4f:1d:8e:b4:b3:6f:02:ac:0c:5c:dc:30:f2:75:
         09:72:e3:83:e9:1d:9b:dc:36:38:47:22:0d:80:48:f8:9d:60:
         73:ba:29:38:dc:0e:21:4d:c4:dd:66:29:ec:b4:43:b9:99:66:
         3b:42:ba:75:9e:a3:bd:95:7d:06:ed:ef:3e:df:10:92:48:7b:
         09:00:23:78:52:cb:d0:99:1d:a8:0d:0f:1a:8a:dd:39:e8:6b:
         9f:4d:9f:a6:f4:6e:2f:33:d0:76:66:64:1b:20:36:45:c2:0f:
         1d:e2:9c:04:45:37:6a:ae:cf:70:93:2a:fa:f3:42:e7:33:66:
         38:8b:3f:87:70:f1:c4:fb:65:45:56:ad:0f:8b:6a:75:86:60:
         57:f2:92:24:21:5c:4d:da:93:85:26:56:bf:4a:28:ee:6f:81:
         ae:6a:f3:3d:e9:e6:fc:93:9d:4b:4c:50:31:4e:fe:c5:63:be:
         90:33:bd:b5:42:32:7d:4d:68:ac:a9:75:ce:d8:dd:fe:87:16:
         86:04:3a:26:0e:a4:3c:89:bd:aa:78:cd:66:c7:a8:4b:4e:72:
         26:65:4f:62:5a:95:f7:1f:1d:18:ae:9e:68:b7:ee:cd:c0:ed:
         a3:dd:a9:4f:25:b4:1e:27:f7:a4:f3:b0:23:72:51:d8:de:98:
         0a:8a:fb:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:58:57 2025 by rpki-client