Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
File:                     PXud_6rjPsLPGbWtTknB6esdnWQ.mft (raw, json)
Hash identifier:          pKuy7yx9y7qWoy2qDDs0GWcoZHIu0as2xI5H4ciT7eA=
Subject key identifier:   60:56:17:92:96:BA:83:7F:C7:C3:58:1E:BA:D2:08:B5:6A:74:32:DF
Authority key identifier: 3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
Certificate issuer:       /CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Certificate serial:       01975980172A7A5866C217B574719CBC899F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
Manifest number:          01C7
Signing time:             Tue 10 Jun 2025 11:00:56 +0000
Manifest this update:     Tue 10 Jun 2025 11:00:56 +0000
Manifest next update:     Wed 11 Jun 2025 11:00:56 +0000
Files and hashes:         1: 3FVtAmT4CuSQyPiethz-XgOvP58.roa (hash: IEGrgBrOkw8YlrSrNv8kZ3M0U4oFphY6duIZ/wFLP30=)
                          2: 7MAR8ldskj16F5kzBhniowMVmU4.roa (hash: mAbacv2iYcdMB2GMEDPPh1FDDClOu0PIdLu6x7Tl3MY=)
                          3: PXud_6rjPsLPGbWtTknB6esdnWQ.crl (hash: EamCCVDLLLISPu0k5vFefGS5jXzP5TSL2CMh9MYNo8Y=)
                          4: lThuEEXjbOk9kIBiQn4XNJSri60.roa (hash: saUcIO3Pzwx9suP3W1g5k4dgT0dO1lpuD0PTK3qh6JE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:59:80:17:2a:7a:58:66:c2:17:b5:74:71:9c:bc:89:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
        Validity
            Not Before: Jun 10 11:00:56 2025 GMT
            Not After : Jun 11 11:00:56 2025 GMT
        Subject: CN=6056179296ba837fc7c3581ebad208b56a7432df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:55:5e:9d:38:65:36:a0:f9:d1:b6:f5:a2:fb:
                    bb:55:ed:3f:e4:0b:05:10:6f:af:ca:61:21:1f:12:
                    45:05:8d:79:5d:f7:a9:9e:be:af:15:73:a7:38:f3:
                    ff:80:17:fd:a0:18:ad:b5:00:62:e4:26:9b:a9:09:
                    f1:32:b9:b5:f7:a9:8e:3a:bb:05:12:75:ba:09:32:
                    a2:6b:d7:12:fa:97:0b:01:58:9b:1f:c8:77:f2:9f:
                    98:f6:60:b6:ad:8e:9e:b8:4b:63:a6:b0:be:21:e2:
                    d7:90:92:04:c3:8a:f3:44:93:e3:78:a6:73:d9:f4:
                    5b:61:d0:7d:6c:da:b9:f9:3a:e4:22:7c:58:a0:38:
                    75:49:ed:98:d3:9d:0e:88:64:0b:d8:b1:88:80:57:
                    c3:7b:b0:1c:ef:63:d8:3e:ea:15:47:49:7f:b5:3b:
                    75:37:ef:c8:b1:30:25:94:27:55:7c:19:68:29:c5:
                    b5:f6:05:37:ca:43:9d:38:ed:d1:54:67:40:24:c4:
                    ee:28:a9:e7:4b:07:b2:f6:d9:ce:bb:87:d9:8e:aa:
                    95:e0:a0:01:72:f0:78:a5:06:06:b0:7c:c9:25:b8:
                    26:28:a0:d2:4a:3e:d4:7b:59:a6:fb:70:d3:2f:af:
                    83:89:a8:5c:dc:1e:38:7e:62:b3:ba:48:37:08:03:
                    7b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:56:17:92:96:BA:83:7F:C7:C3:58:1E:BA:D2:08:B5:6A:74:32:DF
            X509v3 Authority Key Identifier:
                keyid:3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:fc:2c:b2:ee:19:1d:41:34:da:f5:af:ea:2e:55:e8:98:76:
         3d:7b:88:f6:39:4f:f2:5e:f6:1a:9d:f6:a2:89:f2:d9:21:8c:
         4a:cd:d0:0a:c8:04:d9:56:37:3a:d7:fd:6a:72:91:86:d8:10:
         ba:61:6c:8b:92:3a:df:9e:c5:7e:cb:6f:11:68:df:be:ec:cd:
         86:b5:bc:a7:38:64:53:fe:44:34:89:a7:d3:45:8d:32:68:bb:
         da:45:66:50:75:c9:97:0f:ce:27:4c:06:50:67:d6:0e:b8:ca:
         98:9e:5f:82:cc:6b:a0:b3:2d:b7:95:81:53:4b:bf:00:23:9f:
         23:53:d3:2b:b6:77:30:bd:36:99:62:d6:52:60:c7:70:01:06:
         2e:55:0e:65:b7:26:f5:4c:a4:02:25:de:a4:48:92:5c:6c:26:
         c6:a5:e5:a6:2d:c0:36:98:17:b7:8d:e6:c1:a2:4e:05:f6:8b:
         b6:fa:fd:71:97:31:7f:bc:fc:3f:2a:ed:ea:51:0e:ba:b7:46:
         b3:b6:7e:8c:d9:2d:94:f0:03:3d:e4:5d:b4:37:47:6b:56:44:
         9e:92:c2:3f:a9:4d:97:ad:63:08:16:e9:57:0f:38:71:65:c2:
         5a:46:44:3b:5b:8c:5a:71:13:a3:52:6e:b4:d7:77:78:ab:19:
         04:37:d9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 14:23:05 2025 by rpki-client