Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
File:                     PesQRGPpILRVQravGifVlQ6G6aA.mft (raw, json)
Hash identifier:          bo+BK9kTpa8gP0fSwFDlkPLd55LiI8sfdLuN9qc41K4=
Subject key identifier:   08:FB:D8:2F:0E:C7:F1:0F:DC:87:FF:BA:3B:F7:64:D3:2C:52:82:0A
Authority key identifier: 3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0
Certificate issuer:       /CN=3deb104463e920b45542b6af1a27d5950e86e9a0
Certificate serial:       019773ADDAF0DBD1C830E9E26E894F5B8CC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
Manifest number:          1363
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
Manifest this update:     Sun 15 Jun 2025 13:01:02 +0000
Manifest next update:     Mon 16 Jun 2025 13:01:02 +0000
Files and hashes:         1: 1-gBlmRElwFozsXlk-zODgtGpAuA.roa (hash: xVfyWKViH35Kce9xfyzBsAu8tiyl2DKuvLolO3h9f4s=)
                          2: 3X_OCsm4wSXVQQmIGXvbWiOwwPk.roa (hash: uAifQhxv7JsH18zEmjWnpWg6H+QdTkCHwp4ioEB51v8=)
                          3: CGYCoXePbFBrriJrNgrZF9Uefow.roa (hash: KPb5usKgdYQ3JpgKFKA1WlcbtVkuv48+f5lB1B8M9IA=)
                          4: PesQRGPpILRVQravGifVlQ6G6aA.crl (hash: ENR8i3oA1nIECApj1a1MObhC5o32QxFjZki1KN3z8Uw=)
                          5: PyMiLV0wnNJXQTQMDEPMVXWx9ZQ.roa (hash: gY7gqfT3zhDP3uAkWWCqVVxfWQ7GvCSgS8lQh0U5EGA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 13:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:73:ad:da:f0:db:d1:c8:30:e9:e2:6e:89:4f:5b:8c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3deb104463e920b45542b6af1a27d5950e86e9a0
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Jun 16 13:01:02 2025 GMT
        Subject: CN=08fbd82f0ec7f10fdc87ffba3bf764d32c52820a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:af:55:4b:b5:d2:ad:3c:92:46:34:4c:ca:6c:
                    96:97:e0:db:c1:76:66:47:0c:42:9b:79:87:34:1a:
                    66:9f:ed:74:21:b5:10:e5:6e:63:5b:8e:e7:d1:43:
                    f9:cd:0a:f8:34:22:92:ef:7b:94:05:e5:7e:64:02:
                    00:1b:90:0e:67:97:f6:42:2c:6d:f6:20:90:1b:22:
                    81:9a:3a:8a:b8:98:40:00:f5:e1:2e:34:c9:4c:2d:
                    e2:95:68:5b:c3:b6:74:c4:d6:c0:d9:31:28:1a:49:
                    89:bd:64:93:72:36:7e:c4:8e:f6:a6:7d:06:b9:29:
                    04:7e:e0:11:d2:10:0c:b2:8e:6a:d4:69:df:7d:41:
                    12:7d:13:26:4a:aa:eb:35:24:25:0d:c1:c9:72:df:
                    27:6e:03:a2:67:8c:c2:87:5d:b6:5b:8b:a2:d5:c0:
                    f0:1a:bb:22:f6:d7:56:33:bd:f1:77:90:27:a7:01:
                    a7:1f:8c:93:03:c5:26:d2:ed:ae:04:1c:d8:c1:eb:
                    15:82:82:f8:f7:ed:ee:ce:35:0b:b4:2e:8b:1f:0e:
                    b7:62:10:c5:9f:0c:f0:ca:b2:f1:e5:95:0a:3e:84:
                    66:24:f1:cb:d9:8f:ae:35:26:4f:d1:81:7d:57:cc:
                    d7:7a:da:96:68:42:2b:5a:a9:72:ad:c3:5f:7f:15:
                    81:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:FB:D8:2F:0E:C7:F1:0F:DC:87:FF:BA:3B:F7:64:D3:2C:52:82:0A
            X509v3 Authority Key Identifier:
                keyid:3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:1f:53:0f:67:7c:cc:74:09:1d:91:4b:d0:e4:ea:23:8e:1d:
         c4:b7:94:4b:a7:4c:2d:aa:48:b1:13:d3:74:a7:73:44:e4:c7:
         b4:00:0f:73:2b:05:3d:7b:00:65:9c:e1:74:80:0c:90:4d:b8:
         66:8f:ed:02:d2:18:37:3d:06:ac:00:c4:19:15:65:34:49:45:
         90:be:f2:37:4e:b2:3a:1a:4a:5d:75:06:d0:b1:d1:78:cd:ce:
         ae:b4:67:a9:08:5f:4e:48:2d:08:f4:93:0a:f3:ae:0e:65:54:
         9b:7b:99:21:ef:b2:85:1c:bd:81:08:ce:cc:e2:37:d2:f1:4a:
         0e:e4:3b:3b:6f:85:bc:2c:d3:70:d1:06:c2:a4:af:ab:ed:99:
         5a:6f:b6:01:81:d0:fc:1c:01:5f:b2:af:02:3e:6e:e6:7e:a7:
         11:f9:f8:c1:15:9b:71:4c:66:e4:b8:83:48:03:19:db:61:ba:
         ca:f1:16:bc:7a:73:0a:2c:50:5f:77:1e:ae:d8:86:e1:8f:d9:
         96:5d:1f:0e:fb:f3:60:46:45:88:dc:41:22:18:b0:ef:8b:65:
         7b:b6:c3:e9:0e:a8:b3:a0:aa:e1:55:84:8f:cb:30:31:a0:88:
         a0:f3:b7:fa:da:a0:11:f2:ea:e3:20:3d:57:31:93:41:1f:8c:
         0b:97:6c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:38:55 2025 by rpki-client