Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
File:                     PlDR3TG8dEm6zBhksBr5lMVH79M.mft (raw, json)
Hash identifier:          5ABhPVbFaZw6LPyNoTgyH1RpNQduneSQw86kzko+7x0=
Subject key identifier:   3D:C6:D9:ED:E5:0C:40:2F:2C:95:80:7E:06:0B:E1:71:39:B4:A1:BB
Authority key identifier: 3E:50:D1:DD:31:BC:74:49:BA:CC:18:64:B0:1A:F9:94:C5:47:EF:D3
Certificate issuer:       /CN=3e50d1dd31bc7449bacc1864b01af994c547efd3
Certificate serial:       019777C1547AFA8CB1AC8CEEC4F42ABAEF73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
Manifest number:          1592
Signing time:             Mon 16 Jun 2025 08:00:47 +0000
Manifest this update:     Mon 16 Jun 2025 08:00:47 +0000
Manifest next update:     Tue 17 Jun 2025 08:00:47 +0000
Files and hashes:         1: PlDR3TG8dEm6zBhksBr5lMVH79M.crl (hash: l5XwEOoy+N2E9qXPaMXDQAWcHxbmhj2gQIXnmGAs+wo=)
                          2: k0fv_0lBTVHhkgh3M6y4FfdKWug.roa (hash: NS6EWo/2W4cdxM4+yYUneBPcsKtB9dlJYih0Lk7s4iM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:77:c1:54:7a:fa:8c:b1:ac:8c:ee:c4:f4:2a:ba:ef:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e50d1dd31bc7449bacc1864b01af994c547efd3
        Validity
            Not Before: Jun 16 08:00:47 2025 GMT
            Not After : Jun 17 08:00:47 2025 GMT
        Subject: CN=3dc6d9ede50c402f2c95807e060be17139b4a1bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3f:4c:7a:d4:51:2b:22:ab:42:4f:e5:ee:39:
                    3f:29:57:fa:5e:77:4e:34:ad:23:e1:cb:f8:01:98:
                    fc:ba:df:24:c9:ad:10:09:22:6b:ba:e2:09:1b:f0:
                    2e:1c:a0:1b:a8:30:85:f8:a2:66:25:b4:9e:bf:6d:
                    21:3b:11:7c:ab:ba:d0:e8:92:2b:b6:48:13:84:8e:
                    a1:cc:f8:3e:a1:d4:11:41:54:96:37:d0:1b:8d:d6:
                    c6:85:a8:27:03:9b:63:dc:91:46:d6:f6:d5:3b:b9:
                    26:2a:d0:f6:16:f1:26:81:67:24:4a:a6:18:fd:92:
                    e2:d5:ce:4b:0e:d6:bd:63:40:fe:c9:2d:1d:ac:8f:
                    1b:db:a0:59:cf:50:ee:98:de:f7:2f:8c:aa:4b:d8:
                    ea:91:f7:6f:1d:45:39:43:33:12:e8:12:9d:77:a1:
                    30:d5:22:1e:27:c8:a3:01:af:b9:0b:25:b5:23:fe:
                    68:48:61:52:75:a0:a1:a7:32:10:d1:6b:7a:a7:12:
                    8b:01:94:c5:ed:2a:61:0c:4b:e7:97:3e:fe:57:d4:
                    d4:d7:75:b8:71:93:1a:b5:13:57:1e:94:6f:d5:d8:
                    1b:86:f3:f0:2c:0a:44:01:a2:ee:6e:21:ea:67:7f:
                    79:bb:36:a8:4a:95:fd:8f:1a:92:a7:76:09:ae:87:
                    b7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C6:D9:ED:E5:0C:40:2F:2C:95:80:7E:06:0B:E1:71:39:B4:A1:BB
            X509v3 Authority Key Identifier:
                keyid:3E:50:D1:DD:31:BC:74:49:BA:CC:18:64:B0:1A:F9:94:C5:47:EF:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:75:bd:48:27:5b:44:e0:77:61:72:3c:e7:22:32:3b:30:4c:
         dd:4a:12:e1:9e:47:36:4f:dd:c5:7c:18:3e:04:1c:f5:8e:ff:
         1a:94:5c:1c:3e:cb:c9:48:cf:37:fb:e5:96:24:5d:b1:31:d9:
         c2:bc:3f:ff:fb:ac:24:3e:bf:de:61:b5:f3:2a:64:40:16:28:
         f1:e0:4c:b0:f2:ce:73:55:46:83:41:86:de:39:47:fa:ad:5e:
         d3:b5:ad:9f:9a:f6:a2:66:17:6f:9d:40:ca:b0:fd:ce:cd:f4:
         ca:02:a6:57:c2:5b:89:61:43:4d:ef:fa:5d:55:45:5e:49:39:
         33:46:27:14:c9:15:3f:58:81:5c:f1:08:f8:10:b1:dd:06:f9:
         a6:f9:a4:c1:33:72:d1:6e:82:ed:90:14:53:00:68:5f:bc:cc:
         d1:83:9a:cc:1f:37:36:5e:b5:af:08:ba:99:c8:ca:e8:bd:61:
         0a:cf:6d:5b:c7:72:8e:25:93:84:2b:31:84:4f:c1:31:9a:4f:
         47:28:ad:bd:ce:e5:65:80:74:65:f6:14:72:a2:87:37:b3:a8:
         27:25:bc:8d:99:fe:f1:8d:5e:81:1e:db:30:68:53:dc:43:21:
         e1:d5:9e:ff:33:aa:de:c7:e4:22:29:e0:04:d1:f6:bb:f0:aa:
         36:eb:bb:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:31:04 2025 by rpki-client