Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
File:                     to-PMlFKGD6Xejx982Rz1WJgxKQ.mft (raw, json)
Hash identifier:          UIlOPnvikfptrIRhdgbRiLeGM7tbnfZ6DsKeVOcSxY0=
Subject key identifier:   06:3D:B9:4D:4A:37:5E:66:63:B2:87:26:DB:02:91:B6:2F:C9:06:25
Authority key identifier: B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4
Certificate issuer:       /CN=b68f8f32514a183e977a3c7df36473d56260c4a4
Certificate serial:       01976C990292B30D1CED7561C79A58C4D408
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
Manifest number:          09F0
Signing time:             Sat 14 Jun 2025 04:00:56 +0000
Manifest this update:     Sat 14 Jun 2025 04:00:56 +0000
Manifest next update:     Sun 15 Jun 2025 04:00:56 +0000
Files and hashes:         1: tQOCxRT0aCE_1_qk1kC7RdCFOSc.roa (hash: n1WxYWjnXTsr8gKXroY5cgEaMb8X/+3xuLpCg/Qcbnk=)
                          2: to-PMlFKGD6Xejx982Rz1WJgxKQ.crl (hash: wG7LRbO1TQuTK+YaLtMY7e5K/QkdHTupGdHxTQX1sXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:99:02:92:b3:0d:1c:ed:75:61:c7:9a:58:c4:d4:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b68f8f32514a183e977a3c7df36473d56260c4a4
        Validity
            Not Before: Jun 14 04:00:56 2025 GMT
            Not After : Jun 15 04:00:56 2025 GMT
        Subject: CN=063db94d4a375e6663b28726db0291b62fc90625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:09:f3:c5:e6:cd:21:86:6d:7c:1b:26:47:94:
                    3b:10:2f:b0:43:af:62:59:b0:24:11:b4:13:3a:26:
                    54:39:61:e0:64:35:d9:a7:94:bd:72:b2:24:a6:d3:
                    82:3f:7b:2f:83:d8:51:c6:9d:10:10:37:db:e0:ac:
                    69:56:08:33:c4:d6:c8:ca:88:b9:6b:92:2d:06:0e:
                    96:e0:38:b9:21:07:d8:2d:be:79:ad:8b:fd:a5:1c:
                    f8:fe:39:20:de:27:9c:41:15:b2:e1:06:c1:c8:82:
                    35:c1:1e:e4:0c:11:ba:e0:f1:eb:4f:db:51:96:7d:
                    e1:e6:d4:91:48:a2:c6:38:57:fe:a7:19:20:e2:26:
                    82:e1:43:ac:f1:e9:d0:cb:3a:b8:f7:da:57:29:fb:
                    f2:47:f6:d4:d2:30:a8:0c:fb:4a:f8:d2:e9:11:79:
                    c0:fa:52:39:0c:96:ac:8e:25:36:8d:9e:aa:25:69:
                    f3:b3:70:74:60:81:93:d0:7e:cf:b0:2f:71:58:b2:
                    71:3e:f6:11:76:74:21:d8:e0:84:de:e4:13:87:6c:
                    fc:78:47:c5:5e:7d:aa:49:11:0b:b4:86:18:cb:28:
                    1d:e9:0b:3c:1d:66:bb:51:c6:da:44:c3:03:2e:c1:
                    3b:a8:62:6c:1f:c9:a9:ee:3b:2e:8f:61:72:8a:44:
                    b7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:3D:B9:4D:4A:37:5E:66:63:B2:87:26:DB:02:91:B6:2F:C9:06:25
            X509v3 Authority Key Identifier:
                keyid:B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:77:21:f6:cd:9d:32:99:bb:d4:f0:d4:a8:3d:79:ce:4c:b8:
         48:5c:2b:5d:68:16:94:42:01:b3:b0:6b:81:25:1e:27:66:1c:
         68:23:08:8a:1a:82:8b:3d:3a:aa:c2:23:24:66:1b:46:3a:c9:
         76:9f:1c:c9:9f:76:9f:01:65:a5:04:e4:e9:97:f6:2e:ae:b0:
         4d:4f:7b:02:fd:02:44:27:1e:59:43:e9:43:d3:60:93:d6:8a:
         15:b2:f2:c5:96:a7:ac:6a:57:a4:f0:e4:da:35:f1:1a:a6:66:
         71:ba:8f:03:e5:4e:68:04:f2:67:7f:c5:15:b8:29:44:ea:4d:
         96:ad:f3:c1:02:b1:7a:fb:c4:04:3c:cd:23:ce:c5:e5:8a:7a:
         fb:54:c8:9a:fe:dc:eb:5b:7d:b1:7e:26:9b:45:4a:18:c7:08:
         74:a1:1c:81:3f:80:d2:9d:73:dd:fe:a4:70:95:4d:9b:f9:1b:
         58:0d:0f:02:0e:fb:41:fa:30:b2:e7:a4:74:e2:f2:fd:a3:61:
         df:9b:1d:b5:6a:c9:ab:89:03:1e:8c:50:cd:58:5b:85:6b:b0:
         70:98:43:20:fe:01:24:55:d8:2e:a7:f0:3e:79:9c:35:d5:ec:
         6d:6e:d4:3b:43:51:e9:3c:06:9f:97:20:3b:a8:39:e6:a7:6a:
         23:46:af:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:11:07 2025 by rpki-client