Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
File:                     PseNgibLWq_xXGdSWvK4q8t7X5I.mft (raw, json)
Hash identifier:          51BdO/P5OsgE3f7C9av5PuxpEtbmlCZJmaD2Iu5Ec+o=
Subject key identifier:   F8:99:98:7F:B3:5C:7F:95:EC:71:76:77:09:D6:86:CB:54:4E:85:41
Authority key identifier: 3E:C7:8D:82:26:CB:5A:AF:F1:5C:67:52:5A:F2:B8:AB:CB:7B:5F:92
Certificate issuer:       /CN=3ec78d8226cb5aaff15c67525af2b8abcb7b5f92
Certificate serial:       01977AC31242F59A7FBB25266406154A2789
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
Manifest number:          1596
Signing time:             Mon 16 Jun 2025 22:01:33 +0000
Manifest this update:     Mon 16 Jun 2025 22:01:33 +0000
Manifest next update:     Tue 17 Jun 2025 22:01:33 +0000
Files and hashes:         1: PseNgibLWq_xXGdSWvK4q8t7X5I.crl (hash: 2mMlhSjHc3/fSCfxS0TMf+W1NqpOubQtmaTyHLEWqjQ=)
                          2: RGavrFD9QlH9mvEK00LE9vM0Ylo.roa (hash: in3DOj7fuK/tRP2Np73D85wEHXvdsqUOTjKtL4z+mG4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 21:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7a:c3:12:42:f5:9a:7f:bb:25:26:64:06:15:4a:27:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ec78d8226cb5aaff15c67525af2b8abcb7b5f92
        Validity
            Not Before: Jun 16 22:01:33 2025 GMT
            Not After : Jun 17 22:01:33 2025 GMT
        Subject: CN=f899987fb35c7f95ec71767709d686cb544e8541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:57:cc:7d:ae:7f:18:8d:bc:27:58:6c:da:95:
                    03:f3:01:86:a1:df:92:fa:f5:dc:2c:43:05:46:55:
                    12:71:93:a0:c6:3a:4e:d5:f3:5b:1a:f4:f1:a6:e7:
                    b6:2b:28:47:dd:36:96:08:89:fa:2e:1e:b4:c1:5b:
                    0d:ed:63:b9:4e:3f:06:76:01:fe:e7:c3:ba:59:bf:
                    d3:fd:56:6c:d6:84:b4:f2:8d:ed:9d:4a:4c:71:9c:
                    3b:e2:b9:3e:12:89:a6:d5:bb:3d:64:34:61:83:f6:
                    a7:a6:d1:ce:b6:35:49:51:46:01:64:fa:1a:11:60:
                    6a:2a:e5:6a:5e:18:8d:22:ff:c7:a7:48:69:2d:c1:
                    59:21:60:d9:41:be:d0:60:89:e3:50:a4:24:47:a8:
                    c0:7f:54:5a:1d:b1:5b:47:eb:8f:7e:56:e0:cd:d2:
                    38:be:4c:44:60:08:f5:4e:e3:ce:fb:23:2c:d4:ca:
                    37:ad:e9:8e:07:34:39:4a:f5:a8:af:90:47:96:3b:
                    06:4e:31:50:fd:cb:31:d4:4f:96:ba:93:8f:a3:d6:
                    ef:7d:02:3d:ac:a1:cd:de:8f:e6:38:f9:85:75:7f:
                    15:09:e5:10:e1:74:37:cd:ff:44:8d:11:97:07:e4:
                    d0:40:4a:92:d2:f7:7f:c7:d7:65:38:e7:25:39:15:
                    c4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:99:98:7F:B3:5C:7F:95:EC:71:76:77:09:D6:86:CB:54:4E:85:41
            X509v3 Authority Key Identifier:
                keyid:3E:C7:8D:82:26:CB:5A:AF:F1:5C:67:52:5A:F2:B8:AB:CB:7B:5F:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:26:e8:b8:af:db:81:ca:6f:2e:30:23:0e:65:54:b4:d4:2c:
         67:90:c5:ae:96:11:c5:08:6d:da:f5:e2:15:95:1d:3c:78:81:
         46:26:ca:5d:4f:fb:0f:2f:a9:bf:dd:93:e8:e4:28:0c:bb:64:
         7e:3e:b9:e3:a1:ad:dc:14:e6:97:c8:99:c3:a2:e6:26:1d:25:
         17:13:0c:02:e4:93:0e:bc:58:7b:fe:ca:9e:58:45:05:5e:3d:
         29:6b:6b:6c:b4:f3:71:b7:5b:10:66:30:d6:d9:1a:a2:3a:85:
         21:4e:90:bb:87:76:60:8a:87:54:b3:fe:58:ec:89:a5:6d:00:
         f1:5a:41:4a:b1:cc:47:da:db:da:1e:b0:13:c2:1a:2e:ff:42:
         31:1f:e2:7a:80:b6:4a:c0:99:ba:44:3f:39:6c:9d:fa:26:13:
         72:54:2d:52:d4:fa:83:38:ef:e3:b1:4a:21:1b:a3:ae:4b:f5:
         88:fa:ee:c0:ff:28:57:be:6c:bd:18:e9:c3:ca:d2:87:2d:8c:
         cb:4c:29:62:b4:73:f0:3c:d9:f1:42:b8:9b:2d:48:88:6c:b0:
         21:3a:89:bf:3c:91:c4:71:a4:b7:d2:ce:d8:9c:aa:f3:fd:57:
         a4:4a:c6:84:ad:a7:ad:c8:d7:35:1b:51:10:5f:89:5d:92:90:
         d0:6a:56:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 06:56:27 2025 by rpki-client